Cookie policy
VB MALLORCA CYCLING CENTER, S.L.U.
CIF B67889519
calle Goleta s/n, 07610 Palma de Mallorca, Balearic Islands, Spain
E-mail: info@mallorcacyclingcenter.com
Effective from 7 October 2026
We use cookies and similar technologies on www.mallorcacyclingcenter.com. This cookie policy (the “Policy”) explains which cookies we use, why we use them, who stores them and how you can restrict or disable them. The Policy applies to the whole website, including online booking, online check-in and the route planner, as well as the related pages for signing the contract and for payment. The controller is VB MALLORCA CYCLING CENTER, S.L.U. (“we” or “MCC”).
1. What are cookies?
Cookies are small text files that a website you visit, or the services of our partners, store in your browser. On your next visit the browser sends them back, so the website recognises your device and remembers, for example, your language or an unfinished booking. The browser storage areas localStorage and sessionStorage work in a similar way. The same rules apply to them as to cookies, so we list them together in this Policy and, for simplicity, refer to all of them as cookies.
2. Consent to the use of cookies
Strictly necessary and functional cookies (sections 4.1 and 4.2), which are used to run the website or to provide a service you are using yourself (for example an unfinished booking, logging in to online check-in, your chosen language or protecting forms against bots), are stored without your consent. This is permitted by Article 22(2) of Spanish Law 34/2002 on information society services and electronic commerce (LSSI).
Analytics and advertising cookies (sections 4.3 and 4.4) require your consent (Article 22(2) LSSI and Article 6(1)(a) of the General Data Protection Regulation, GDPR). Consent is voluntary. If you block or delete analytics and advertising cookies, booking a bike and all other functions of the website will continue to work.
You can withdraw your consent at any time. Simply delete the cookies and data of our website in your browser and block them from being stored again (see section 5). You can also switch off personalised advertising directly with Google and Meta; the links are also in section 5. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
3. What types of cookies are there?
By storage period
- Session (temporary) cookies are stored on your device only for the duration of the browser session and are deleted when you close the browser. sessionStorage behaves the same way.
- Persistent cookies remain on your device after you close the browser, for the period stated in section 4 or until you delete them. They allow the website to recognise your device when you visit it again. Data in localStorage has no fixed expiry and remains stored until you delete it.
By who stores them
- First-party cookies are stored directly by our website.
- Third-party cookies are stored by the services of our partners (for example Google or Meta) whose tools we use on the website.
By purpose
- Strictly necessary cookies ensure the basic operation and security of the website.
- Functional cookies remember your choices and unfinished entries so that the website is more convenient to use.
- Analytics cookies help us understand how visitors use the website and where they come from.
- Advertising (marketing) cookies measure how well our ads perform and allow us to show our ads to people who have visited our website.
4. Which cookies do we use and why?
Cookies make using the website more convenient. They also allow us to monitor and analyse how you use the website, so that we can improve its content and functions, target our advertising campaigns better and measure their performance.
For these purposes we use both our own cookies and third-party cookies. The use of third-party cookies and of the data obtained through them is governed by the privacy policies of these partners (section 6). Please note that our partners may combine this information with other information you have provided to them or that they have obtained from your use of their services.
Third-party analytics and advertising tools are loaded on the pages of the main website: the home page, the price list, the bikes, the booking form and the page shown after it is sent, online check-in, the routes section, the blog, bike sales and the Colnago page. They are not loaded in the route planner or on the pages for signing the contract and for payment.
Specifically, we use the following cookies:
4.1 Strictly necessary cookies
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| PHPSESSID | MCC | Technical session: selected language and currency, unfinished booking, login to online check-in and protection of the login against repeated attempts. The contract signing page and the payment redirect use their own cookie of the same name. | until the browser is closed |
| mcc_c | MCC | Stores the choice you saved in the cookie settings. It is created only once you save your choice. | 1 year |
| rn_sent (sessionStorage) | MCC | After a booking has been sent, prevents the old form from being restored and sent twice. | until the tab is closed; deleted once read |
| _grecaptcha (localStorage) | Google (reCAPTCHA v3) | Protects the booking form against bots. | until deleted |
| _GRECAPTCHA (google.com domain) | Google (reCAPTCHA v3) | Risk assessment when a booking is sent, i.e. telling humans and bots apart. | 6 months |
4.2 Functional cookies
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| mmc_lang | MCC | Remembers the language of the website. On your first visit it is set according to the country you are connecting from or the language version of the page you arrived on. | 60 days |
| rn_draft | MCC | Unfinished booking: dates, bikes, frame size, height, extras and promo code, without names or contact details. It lets you return to an unfinished booking via the “Complete booking” bar. It is deleted once the booking is sent. | 30 days |
| rn_draft_hide (sessionStorage) | MCC | Remembers that you have hidden the “Complete booking” bar. | until the tab is closed |
| mcc_tr_v (localStorage) | MCC | Selected training variant (Hobby or Profi) in the routes section. | until deleted |
| mcc_planner_email (localStorage) | MCC | The e-mail address you entered in the route planner when sending a route or an enquiry, so that you do not have to type it again. It is stored only after the form has been sent. | until deleted |
| mccKeypadOpen (localStorage) | MCC | Remembers whether the on-screen keypad is open when logging in to online check-in (tablet in our shop). | until deleted |
4.3 Analytics cookies
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| mcc_adw | MCC | Records, in encrypted form, the campaign source of the link through which you arrived (parameters utm_source, utm_medium and utm_campaign) and assigns it to the order when a booking is sent. It is created only when you arrive via such a link. | 60 days |
| _ga | Google (Google Analytics 4) | Distinguishes visitors by means of a randomly generated identifier. It is shared by all our Google Analytics measurement services. | 2 years |
| _ga_8TP6R5CJLQ, _ga_JLH3HCJGD0 | Google (Google Analytics 4) | Session state of two Google Analytics measurement services that measure page views and events on the website. One of them also automatically records scrolling, clicks on links leading away from the website, form interactions, video plays and file downloads. | 2 years |
| _ga_W7N8RQCL0N | Google (Google Analytics 4) | Session state of a third Google Analytics measurement service, which only receives completed bookings. It is created on the page shown after a booking is sent. | 2 years |
4.4 Advertising cookies
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| _gcl_au | Google Ads | Links a click on a Google ad with a conversion on the website: sending a booking or a form, opening the booking form, or clicking on a phone number or e-mail address. | 90 days |
| _gcl_aw, _gcl_gs, _gcl_dc, _gcl_gb, _gcl_ag | Google Ads | Identifier of a click on a Google ad. Created only when you arrive from an ad. | 90 days |
| _gcl_ls (localStorage) | Google Ads | Backup storage of ad click data. | until deleted |
| _gac_gb_* | Google (Google Analytics 4 linked to Google Ads) | Information about a click on a Google ad for Google Analytics. Created only when you arrive from an ad. | 90 days |
| IDE, test_cookie, ar_debug (doubleclick.net domain) | Google (DoubleClick) | IDE is used for remarketing, i.e. showing our ads to people who have visited our website, and for measuring conversions from ads. test_cookie only checks whether the browser accepts cookies. ar_debug may be stored for debugging conversion measurement. | IDE 13 months, test_cookie 15 minutes, ar_debug 90 days |
| _fbp | Meta (Meta Pixel) | Browser identifier for measuring and targeting ads on Facebook and Instagram. The pixel reports page views, the start of a booking, form submissions and completed bookings to us. | 90 days |
| _fbc | Meta | Identifier of a click on an ad or link on Facebook or Instagram. Created only when you arrive from these networks with the fbclid parameter. | 90 days |
| fr (facebook.com domain) | Meta | Meta advertising cookie. If it is stored in your browser (typically as a Facebook or Instagram user), it is sent together with the pixel data. | 90 days |
| lastExternalReferrer, lastExternalReferrerTime (localStorage) | Meta | The last external source of your visit and its time, used to attribute conversions. | until deleted (the pixel removes them after 90 days) |
| YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-ROLLOUT_TOKEN, PREF (youtube.com domain) | Google (YouTube) | Video embedded on the Colnago page. The cookies are used for the player session, for recommending and personalising content, for storing privacy settings, for measuring features and for player preferences. They are stored as soon as the page loads. | YSC until the browser is closed; VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA and __Secure-ROLLOUT_TOKEN 6 months; PREF 8 months |
| yt-remote-*, ytidb::* (browser storage, youtube-nocookie.com domain) | Google (YouTube) | Videos in blog articles (loaded with the page) and videos that open in a window after a click (home page, bike detail, bike sales) use YouTube’s privacy-enhanced mode. Until you start the video, they only store the player state; YouTube cookies are created only once the video is played. | until deleted or until the browser is closed |
The expiry periods stated are set by the providers. Some browsers shorten them; Chrome, for example, limits cookies to a maximum of 400 days. You can delete cookies and website data earlier at any time (section 5).
Additional information on Google and Meta tools
- The Google Analytics and Google Ads tags have automatic collection of user-provided data switched on. If you enter your e-mail address, phone number or address into a form on the website (for example in the booking form or in online check-in), these tags may pass them to Google, which processes them in hashed (pseudonymised) form in order to match the visit or conversion to a Google account. Google Ads uses only the e-mail address in this way.
- Google signals is enabled for two Google Analytics measurement services. As a result, visit data may be linked to the Google accounts of signed-in users who have turned on ad personalisation.
- In addition to the events listed above, Meta Pixel also automatically records clicks on buttons on the website.
4.5 Services that do not store cookies on our website
The following services do not use cookies or similar storage on our pages. When they load, however, they process your IP address and technical information about your browser and device:
- Matomo (server piwik.pilotmedia.cz): visitor statistics for the website and the route planner, running without cookies.
- Google Tag Manager: the tool we use to load the measurement and advertising tags listed above. It does not store cookies itself.
- Google Fonts: fonts for the website, the route planner and the contract signing page.
- Cloudflare Turnstile: protects the form for sending a route in the route planner against bots. It loads only when the form is opened.
- Maps: map tiles from OpenFreeMap and, as a fallback, OpenStreetMap; the Leaflet and MapLibre map libraries from unpkg.com (routes section and route planner).
- Stripe: you pay in online check-in on Stripe’s secure payment page, to which we redirect you. Cookies stored there by Stripe are governed by its policies (section 6).
5. How to disable or delete cookies?
You can set your browser to prohibit or block the storage of cookies on your device, either all cookies, only third-party cookies, or only for selected websites. You can delete cookies and website data already stored on your device (including localStorage) at any time. Please note that if you block all cookies of our website, booking, online check-in and other functions may not work properly. You can find the procedure for the most commonly used browsers here:
You can also restrict personalised advertising and measurement directly with our partners:
6. Partners and data transfers
| Partner | Purpose | Privacy |
|---|---|---|
| Google Ireland Limited (Ireland) and Google LLC (USA) | Google Analytics 4 (three measurement services), Google Ads (conversion measurement and remarketing, including DoubleClick), Google Tag Manager, reCAPTCHA v3, YouTube and Google Fonts. |
Privacy Policy How Google uses information from sites that use its services How Google uses cookies Cookies in Google’s ad products Safeguarding your data in Google Analytics Google Fonts and privacy |
| Meta Platforms Ireland Limited (Ireland) | Meta Pixel: measuring and targeting ads on Facebook and Instagram. |
Privacy Policy Cookies Policy |
| Stripe Payments Europe, Limited (Ireland) | Card payment in online check-in on Stripe’s payment page. |
Privacy Policy Cookies Policy |
| Cloudflare, Inc. (USA) | Turnstile: protecting the route planner form against bots. |
Turnstile Privacy Policy Cloudflare Privacy Policy |
| Pilotmedia | Operates the cookieless Matomo visitor statistics for us. | Information available at info@mallorcacyclingcenter.com |
| OpenFreeMap | Map tiles. | Privacy Policy |
| OpenStreetMap Foundation | Fallback map tiles. | Privacy Policy |
| unpkg.com | Delivery of the libraries used to display maps. | The operator does not publish a privacy policy. |
Google LLC, Meta Platforms, Inc., Stripe, Inc. and Cloudflare, Inc. may also process data in the USA. Such transfers may be based on the European Commission’s adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) or on standard contractual clauses. Details are provided in the partners’ privacy policies.
7. Contact and changes to this Policy
More information about the processing of personal data and your rights (access, rectification, erasure, restriction of processing, objection and data portability) can be found in our Privacy policy. If you have any questions, please contact us at info@mallorcacyclingcenter.com. You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es).
We update this Policy whenever we change the cookies or tools we use. The current version, with its effective date, is always available on this page.
Ask for anything
Your requirement has been successfully sent.
We will do our best to reply promptly.
In case you have an urgent request please contact us on +34 669 410 039 or +420 777 871 045.
Team Mallorca Cycling Center
Our partners are
