Last updated: 17 May 2026 · Version: 2.1
This is a translation of our Spanish Cookie Policy provided for informational purposes. In the event of any discrepancy between the English and Spanish versions, the Spanish version prevails.
1. Introduction
This Cookie Policy governs the use of cookies and similar technologies on the website theoptimalflow.com and its subdomains, including, among others, call.theoptimalflow.com (jointly, the "Website"), owned by The Optimal Flow, S.L., with Spanish tax ID B26922724 and registered office at Calle de Núñez de Balboa, 120, 28006 Madrid (Spain).
This Policy has been drafted in accordance with Article 22.2 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce ("LSSI-CE"), the GDPR, Spanish Data Protection Law 3/2018 ("LOPDGDD"), the Guide on the use of cookies issued by the Spanish Data Protection Agency, and the applicable European criteria on consent and transparency.
Any processing of personal data arising from the use of cookies is further governed by The Optimal Flow's Privacy Policy.
2. What are cookies?
A cookie is a small file downloaded or stored in the user's browser or device when accessing a website. Cookies allow, among other things, to remember preferences, maintain sessions, improve security, analyse navigation, or personalise content.
For the purposes of this Policy, the term "cookies" also includes similar storage or access technologies on the user's device, such as local storage, session storage, tracking pixels, web beacons, tags, advertising identifiers, SDKs, measurement technologies, and fingerprinting techniques where applicable.
3. Types of cookies
3.1. By the entity managing them
- First-party cookies: managed by The Optimal Flow from the Website's own domain.
- Third-party cookies: managed by entities other than The Optimal Flow, such as analytics, CRM, advertising, infrastructure, video, mapping, forms, or embedded tool providers.
3.2. By duration
- Session cookies: deleted when the user closes the browser.
- Persistent cookies: remain on the device for a defined period, which may vary by purpose and provider.
3.3. By purpose
- Strictly necessary or technical cookies: enable navigation, security, page loading, session management, load balancing, fraud prevention, retention of privacy preferences, or basic Website functionality. They do not require consent when necessary to provide a service requested by the user.
- Preference or personalisation cookies: remember options selected by the user, such as language, region, visual configuration, or navigation preferences.
- Analytics or measurement cookies: measure Website activity, produce statistics, analyse aggregate user behaviour, and improve content, performance, and navigation experience.
- Advertising or marketing cookies: measure campaigns, build audiences, perform attribution, show personalised ads, or run retargeting on external platforms.
- Embedded third-party cookies: may be installed when the Website embeds external content, such as videos, forms, calendars, maps, widgets, or third-party tools.
4. Cookies used on the Website
The Optimal Flow uses a cookie management panel that allows users to consult the up-to-date list of cookies, providers, purposes, durations, and active categories at any time.
The table below summarises the main categories of cookies and technologies that may be used on the Website. The exact configuration may vary depending on active tools, pages visited, consent given, and integrated services.
4.1. Strictly necessary or technical cookies
These cookies enable basic Website functionality and do not require consent.
| Type / provider | Purpose | Approximate duration |
|---|---|---|
| Website first-party cookies | Technical functionality, navigation, security, session maintenance, and essential preferences. | Session or technically necessary period |
| Consent management platform | Remember whether the user has accepted, rejected, or configured cookies. | Up to 24 months, unless relevant changes or earlier withdrawal |
| Hosting and deployment infrastructure | Routing, load balancing, caching, security, deployment control, and Website availability. | Session or limited duration per provider |
| Anti-bot or traffic protection security | Detection of malicious traffic, attack prevention, abuse mitigation, and form protection. | Session or limited duration per provider |
4.2. Preference cookies
These cookies are used to remember user-selected options where not strictly necessary. They require consent unless essential to deliver a feature expressly requested.
| Type / provider | Purpose | Approximate duration |
|---|---|---|
| Website preferences | Remember settings such as language, region, visual adjustments, or navigation preferences. | Variable per configuration |
4.3. Analytics or measurement cookies
These cookies analyse Website use and help improve content, performance, and user experience. Unless they strictly meet the exemption conditions recognised by the competent authority, they require prior consent.
| Type / provider | Purpose | Approximate duration |
|---|---|---|
| Google Analytics / Google Tag Manager, when active | Traffic measurement, page views, events, performance, aggregate attribution, and statistical analysis. | Per provider configuration, typically up to 24 months |
| HubSpot Analytics, when active | Behavioural analysis, form attribution, commercial interaction tracking, and B2B content improvement. | Per provider configuration, typically up to 13 months |
| Hosting or performance analytics, when active | Technical performance, load, error, and aggregate experience measurement. | Variable per provider |
4.4. Advertising and marketing cookies
These cookies enable campaign measurement, audience creation, retargeting, conversion attribution, or personalised ads on external platforms. They require prior consent.
| Type / provider | Purpose | Approximate duration |
|---|---|---|
| Apollo Website Visitors (Apollo.io, Inc.), when active | Identification of visiting companies via reverse-IP and similar technologies, attribution of web traffic to B2B accounts, and support for commercial prospecting activities. | Per provider configuration, typically up to 12 months |
| LinkedIn Insight Tag, when active | B2B campaign measurement, attribution, audience creation, and retargeting on LinkedIn. | Per provider configuration, typically up to 12 months |
| Meta Pixel, when active | Campaign measurement, attribution, audiences, and personalised advertising on Meta platforms. | Per provider configuration, typically up to 90 days |
| Google Ads, when active | Conversion measurement, attribution, remarketing, and advertising personalisation. | Per provider configuration, typically up to 12 months |
4.5. Embedded third-party cookies
When the Website embeds third-party content or tools, such as forms, calendars, videos, maps, widgets, players, or meeting-booking tools, these third parties may install their own cookies in accordance with their policies.
The Optimal Flow will endeavour to load non-strictly-necessary content only after the user has granted the corresponding consent.
5. Legal basis
The legal basis for strictly necessary or technical cookies is the need to provide the service requested by the user and, where appropriate, The Optimal Flow's legitimate interest in maintaining a secure and functional Website.
The legal basis for non-necessary preference cookies, analytics, measurement, advertising, marketing, and non-essential third-party cookies is the user's consent, given through the cookie banner or configuration panel.
The user may withdraw consent at any time with the same ease with which it was granted.
6. International transfers
Some cookie and similar technology providers may be located outside the European Economic Area or may process data via sub-processors located in third countries, especially the United States.
When this occurs, The Optimal Flow will endeavour to ensure that transfers take place under valid mechanisms under the GDPR, such as adequacy decisions, the EU-U.S. Data Privacy Framework where the provider is certified, Standard Contractual Clauses approved by the European Commission, and additional measures where necessary.
Further information is available in the Privacy Policy.
7. Consent management
7.1. Banner and configuration panel
On first access to the Website, the user may accept all cookies, reject them, or configure them granularly by purpose through the cookie banner.
The Optimal Flow will not install non-technical cookies until the user has given consent. The user may modify or withdraw consent at any time through the "Cookie settings" link available in the Website footer.
7.2. Browser configuration
The user may also allow, block, or delete cookies via browser settings. Blocking cookies may affect Website functionality or prevent the use of certain features.
Help links for reference:
- Google Chrome: support.google.com/chrome
- Mozilla Firefox: support.mozilla.org
- Safari: support.apple.com
- Microsoft Edge: support.microsoft.com
- Opera: help.opera.com
7.3. Automated privacy signals
Some browsers or extensions emit automated privacy signals, such as Do Not Track (DNT) or Global Privacy Control (GPC). Where technically possible and the consent management platform allows it, The Optimal Flow will endeavour to respect these signals as an expression of opposition or privacy preference regarding non-technical cookies.
8. Consent retention
The Optimal Flow will keep a technical record of consents granted or rejected by users, in order to evidence compliance with its legal obligations.
Consent will have a maximum validity of 24 months, unless withdrawn earlier by the user, purposes change substantially, new third parties are added, or it becomes necessary to request consent again due to regulatory or technical changes.
The consent record may include technical identifiers, date and time, banner version, accepted or rejected purposes, and technical information necessary to evidence the user's choice. These records will be kept for the period needed to satisfy the principle of accountability and address potential liabilities.
9. Updates to this Cookie Policy
The Optimal Flow may modify this Policy to reflect regulatory changes, criteria of the Spanish Data Protection Agency, Website evolution, addition or removal of providers, changes to the consent panel, or new functionality.
Where changes affect non-technical purposes, third parties, or technologies, consent will be requested again where appropriate.
10. Contact
For any question about this Cookie Policy or the processing of personal data, please contact The Optimal Flow at info@theoptimalflow.com.
Document drafted in accordance with LSSI-CE, the GDPR, LOPDGDD, and applicable criteria on cookies and similar technologies.