What are cookies?

Cookies are small data files that websites store on the user’s device while they browse the internet. This data can be used to remember information about the user, such as preferences, browsing habits, or authentication.

What types of cookies are there? What information do they collect?

There are several types of cookies:

• Technical or essential cookies: necessary for the proper functioning of the website, such as shopping cart management or authentication.
• Personalization cookies: remember preferences such as language or location.
• Analytical cookies: collect data on user behavior, such as visit duration or pages visited, to improve the service.
• Advertising cookies: allow personalized ads to be displayed according to user interests.

Why are they important for websites?

Cookies are fundamental for improving the browsing experience, facilitating website use, and offering personalized content. They also allow companies to analyze website usage to optimize them.

Are they harmful to users?

Cookies are not harmful in themselves, but they can compromise privacy if used without proper consent or for malicious purposes, such as excessive tracking or misuse of personal data.

What do European cookie regulations say?

According to European regulations (General Data Protection Regulation – GDPR and the ePrivacy Directive), websites must obtain the user’s informed consent before storing cookies that are not strictly necessary for the page’s operation. This implies that websites must offer a clear option to accept or reject cookies.

Are companies obliged to offer only essential cookies?

Companies are obliged to ensure that users can browse the website without having to accept non-essential cookies. Essential cookies do not require prior consent, but any other cookies (analytical, advertising, etc.) do.

What are terms and conditions?

Terms and conditions are a legal contract between the user and the company that governs the use of a service or product. They detail the responsibilities, rights, and limitations of each party.

What does accepting them imply? Can anything be added, or are clauses regulated by law?

By accepting the terms and conditions, the user agrees to the rules established by the company, such as the use of their data or service conditions. However, these terms must comply with current legislation, such as data protection law, and cannot contain abusive clauses.

Is there a difference between “terms and conditions” and the privacy policy?

Yes. Terms and conditions establish the general rules for using a service, while the privacy policy details how user personal data is collected, used, stored, and protected.

Why are these agreements made between user and company? To inform the user? Is there an economic interest?

Agreements serve to inform the user and protect the company from potential legal conflicts. Additionally, there may be an economic interest if the company uses data for advertising or other commercial purposes.

In which cases should we definitely read the terms and conditions?

It is always advisable to read the terms and conditions, especially for services involving payments, the use of sensitive personal data, or long-term contracts.

How do companies use our personal data?

Companies can use personal data to improve their services, offer personalized content, develop marketing campaigns, or share it with third parties for commercial purposes.

What are companies obliged to do?

Companies are obliged to comply with data protection legislation, such as the GDPR, which includes obtaining user consent, ensuring data security, and offering mechanisms to access, modify, or delete collected data.

Lately, we’ve seen many news reports saying that tech companies use our photos or posts to train artificial intelligence. Is this legal? Can I refuse?

It depends on the terms and conditions you accepted when registering. If you gave permission to use your data, it could be legal. However, you have the right to revoke your consent and request that they stop doing so.

How long can they keep my data?

According to the law, companies can only retain personal data for the time necessary to fulfill the purpose for which it was collected. Once that purpose is fulfilled, it must be deleted or anonymized.

What can we do to protect ourselves? Beyond reading the terms and conditions…

Some measures include: using cookie-blocking tools, activating privacy settings in browsers, reviewing and adjusting privacy preferences on social media, and using strong passwords and two-factor authentication.

Last year, the Catalan Cybersecurity Agency managed over 5 BILLION cyberattacks. What is our level of security when browsing the internet? Or when we provide our bank details?

Although robust security protocols exist, such as SSL encryption and two-factor authentication, there are always risks associated with online browsing and data processing. It is important to take personal security measures, such as avoiding insecure public Wi-Fi networks or verifying the authenticity of websites.

Email remains the primary entry point for fraud attacks or attempts to compromise information systems. How can we distinguish normal emails from fraudulent ones?

Fraudulent emails often contain grammatical errors, suspicious email addresses, urgent requests, or links to untrustworthy websites. It is important to verify the sender before clicking on any links or downloading attachments.

What do we do once we have been scammed?

It is important to immediately contact the affected bank or service to block any suspicious transactions and change all passwords. The incident can also be reported to the competent authorities, such as the Catalan Cybersecurity Agency or the police.

There is a website that allows us to know if our email data may have been leaked. Is it reliable?

The website haveibeenpwned.com is recognized for its reliability and is recommended by many cybersecurity agencies. It is a tool that allows you to check if your data has been exposed in a mass breach.

And what about when we lose access to social media? Why does this happen?

This can happen for various reasons, such as forgetting your password, the use of phishing techniques to steal credentials, or being blocked for violating platform rules.

On social media, we also see a lot of identity impersonation. Why is it done? What are the consequences for the impersonated person?

Identity impersonation is done for fraudulent purposes, such as stealing data or deceiving other people. It can cause serious damage to the affected person’s reputation and lead to legal or financial problems.

To what extent are software updates important in terms of privacy?

Software updates are essential to correct vulnerabilities that could be exploited by cybercriminals. They can also include improvements in data privacy and security management.