Cookie Policy
Last updated: October 6, 2026
1. What are cookies
Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They allow the site to remember your actions and preferences (login, language, display preferences) for a period of time, so you do not have to reconfigure them on each visit.
2. Party responsible for cookie usage
The party responsible for the use of cookies on this website is:
Herederos de José Aguilera Moreno S.L.
NIF: B53338844 — C/ Almansa 65, Nave 3 — 03206 Elche (Alicante)
Email: info@calzadosjam.es
3. Legal framework
This Cookie Policy complies with:
- Art. 22.2 of the LSSI-CE (Spanish Law 34/2002 on Information Society Services and Electronic Commerce).
- Regulation (EU) 2016/679 (GDPR) — regarding consent for data processing.
- Spanish Organic Law 3/2018 (LOPDGDD) — Personal Data Protection and guarantee of digital rights.
- Directive 2002/58/EC (ePrivacy) — on privacy in electronic communications.
- AEPD Cookie Usage Guide (May 2024).
4. Types of cookies we use
4.1. Technical or essential cookies (no consent required)
These are essential for the website to function:
- User session: Keep your session active while browsing.
- Authentication: Verify your identity after login.
- Security: Protection against CSRF and brute-force attacks.
- Cookie preferences: Store your cookie choices.
- Shopping cart: Retain selected products.
4.2. Preference cookies
We do not use preference cookies that require consent.
4.3. Analytical cookies (consent required)
Collect pseudonymised information (a random Google Analytics identifier, without your name or email) about how users use the website (pages visited, time spent, technical performance) to improve the service.
4.4. Advertising or marketing cookies (consent required)
They enable personalised advertising on external platforms (Google Ads) based on your interaction with our site and measure the effectiveness of our advertising campaigns. They include remarketing and conversion tracking cookies. In the consent banner they are grouped under the "Marketing & personalization" category.
4.5. Our own measurement and storage in your browser (no cookies)
Besides cookies, we use your browser's storage for these first-party features, without third parties and regardless of what you choose in the banner:
- Product and blog view counter: when you open a product (its page or its quick view in the catalogue) or a blog post, the page tells us so that we add one view to that product or post, and it stores a marker in the tab (sessionStorage), pv:* or blog-view-*, so the same visit is not counted twice; it is deleted when you close the tab. We only keep totals (per product and day, and per post): we do not store your IP address with the visit (we only use it, for at most one hour, to curb abuse) and we do not share this data with third parties. If you are signed in, the product view is also linked to your customer account; we explain this, and how to object, in our Privacy Policy.
- Recently viewed: when you open a product page, your browser stores (localStorage, calzadosjam_recently_viewed) the last 20 products you have viewed, to show them to you on other product pages and, if you are signed in, on the home page and in your account. This list never leaves your browser; you can delete it by clearing this site's data in your browser settings.
5. Specific cookies we use
All are first-party except those marked “third-party”, which Google processes even though _ga, _ga_*, _gac_gb_*, _gcl_* and _gcl_ls are stored under the calzadosjam.es domain.
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| sb-access-token | Technical | 8 hours (30 days for staff accounts) | User authentication token (httpOnly, Secure, SameSite=Lax) |
| sb-refresh-token | Technical | 30 days | Automatic session renewal (httpOnly, Secure, SameSite=Lax) |
| sb-session-id | Technical | 30 days | Identifies your signed-in session in our access log (start, last activity and duration) so it can be reviewed and closed |
| jam-csrf | Technical | 30 days | Security: protects actions taken while signed in against CSRF attacks |
| sb-pw-recovery | Technical | 15 minutes | Lets you set a new password after opening the recovery link |
| jam-oauth-pending | Technical | 30 minutes | Security: checks that the Google sign-in was started in this browser |
| jam-oauth-idioma | Technical | 30 minutes | Remembers the page language during Google sign-in (English, French or German only) |
| jam-oauth-destino | Technical | 30 minutes | Remembers the page to return to after Google sign-in |
| admin-theme | Technical | 1 year | Remembers the light or dark theme chosen in the panel (staff accounts only) |
| cjam_cookie_consent | Technical (localStorage) | Permanent | Stores the user's cookie preferences |
| cart | Technical (localStorage) | Permanent | Saves shopping cart products between sessions |
| cjam_consent_analytics | Technical | 1 year (renewed on each visit while you keep accepting them) | Only exists if you have accepted analytics cookies: it lets the server know this when you sign in, so that the fire_* cookies are only created with your consent |
| pv:*, blog-view-* | First-party measurement (sessionStorage) | Until you close the tab | Our own view counter for products and blog posts: avoids counting the same visit twice (see 4.5) |
| calzadosjam_recently_viewed | Functional (localStorage) | Until you clear the site's data | Last 20 products viewed, for “Recently viewed”; never leaves your browser (see 4.5) |
| fire_qualify_lead, fire_close_convert_lead | Analytics and advertising | 5 minutes | Only if you have accepted analytics cookies: created at sign-in so the page sends Google (Analytics and Ads), only once, the notice of an activated account or a first order, to measure the conversion of our campaigns; deleted once read |
| _ga | Analytics (third-party) | 2 years | Google Analytics — identifies unique users for traffic statistics |
| _ga_* | Analytics (third-party) | 2 years | Google Analytics 4 — maintains session state |
| _gcl_au | Advertising (third-party) | 90 days | Google Ads — stores click information for conversion attribution |
| _gcl_aw, _gcl_gb, _gcl_dc | Advertising (third-party) | 90 days | Google Ads — ad click identifier (gclid) for conversion tracking |
| _gac_gb_* | Advertising (third-party) | 90 days | Google Ads — information about the campaign you came from, to attribute conversions (with Google Analytics linked to Google Ads) |
| _gcl_ls | Advertising (third-party, localStorage) | 90 days | Google Ads — copy of the ad click information in local storage, to attribute conversions |
| IDE | Advertising (third-party, doubleclick.net) | 13 months (24 outside the EEA and the UK) | Google Ads — remarketing and ad personalisation across the Google Network |
| NID | Advertising (third-party, google.com) | 6 months | Google Ads — remarketing and ad personalisation across the Google Network |
This table will be updated if we add new cookies or third-party services.
6. Legal basis and consent
Under Art. 22.2 of the LSSI-CE, non-essential cookies require your informed, explicit and verifiable consent. In the European Economic Area, the United Kingdom and Switzerland, no analytics or advertising cookies are stored until you accept; outside that area, Google may store them until you make a choice (see section 8).
When you access our website, a banner is displayed where you can:
- Accept all cookies.
- Reject non-essential cookies (only technical cookies will be used; sections 4.5 and 8 explain what keeps working without cookies).
- Configure your preferences by choosing which types you accept.
The accept and reject buttons have the same design and prominence, in accordance with the guidelines of the European Data Protection Board (EDPB) and the AEPD on dark patterns.
7. How to manage and delete cookies
7.1. Preferences panel
You can change your cookie preferences at any time by clicking "Cookie preferences" in the footer of our website. If you reject or withdraw your consent, we delete what that category stores under our domain: _ga, _ga_*, fire_* and cjam_consent_analytics for analytics, and _gcl_*, _gac_gb_* and _gcl_ls for marketing. Those on Google domains (IDE, NID) can only be deleted from your browser. The Google tag keeps working without cookies, as explained in section 8.
7.2. Browser settings
You can also manage cookies from your browser:
7.3. Consequences of rejecting cookies
If you reject non-essential cookies, the site works the same. No analytics or advertising cookies are stored, but the Google tag keeps sending cookieless pings (section 8) and our own counter keeps working (section 4.5). If you delete technical cookies, some features (such as staying logged in) may not be available.
8. Third-party cookies
Some external services may install cookies on your device. These cookies are subject to the privacy policies of those third parties:
- Google Analytics (web analytics): Google Privacy Policy. You can opt out of Google Analytics by installing the opt-out browser add-on.
- Google Ads (advertising and remarketing): Google Privacy Policy. You can manage your ad settings at Google Ad Settings.
- Google Maps (map on the “About us” page): it is only loaded if you click “Show the map”; from then on Google may read or store its own cookies on its domain. Google Privacy Policy.
International data transfers: Google LLC is based in the United States. Transfers of personal data outside the European Economic Area are covered by the EU-US Data Privacy Framework, certified by the European Commission via the adequacy decision of 10 July 2023 (C(2023) 4745).
Google Consent Mode v2 (advanced mode): the Google tag (Analytics and Ads) is loaded on every visit, including before you make a choice. Until you accept, or if you reject, it does not store or read cookies on your device, but for each page and each event it sends Google a cookieless ping with the page address, technical information about your browser and device, the referring page and the time (and, like any connection, your IP address). Google uses these pings in aggregate to measure and statistically model the conversions of our campaigns. Google Ads pings are sent without ad click identifiers (ads_data_redaction); if you arrive from an ad, that identifier is kept in the address of our pages while you browse (url_passthrough) so the conversion can be attributed without cookies. Outside the European Economic Area, the United Kingdom and Switzerland, until you make a choice the tag works as if you had accepted and Google may store its cookies; if you then reject, it stops doing so and we delete those stored under our domain. Once you accept, the tag uses the cookies of the categories you have accepted.
9. Updates to this policy
We reserve the right to modify this Cookie Policy to adapt it to legislative changes, new technologies or improvements to our services. Changes will take effect at the time of their publication on this page. We recommend reviewing it periodically.
10. More information
For more information about personal data processing, please see our Privacy Policy.
If you have questions about this Cookie Policy, contact us:
C/ Almansa 65, Nave 3 — 03206 Elche (Alicante), España