Cookie policy
Last updated: October 2026
1. What cookies are
Cookies are small files that a website stores in your browser when you visit it and can read again later. They are used for very different things: making the website work and keeping it secure, remembering your preferences or finding out how it is used. In this policy, we also use the word cookies for other similar technologies that store or read information on your device.
Here we explain which cookies www.mitrasalud.es uses, what for, who manages them and how you can accept them, reject them or change your mind whenever you like. This policy applies to the website in Spanish, Catalan and English.
2. Controller
Controller: MIRIAM MARTÍ HERRERA (Mitra Salud)
Tax ID (NIF): 43519199W
Address: C/ La gacela 31 2º SEGUNDA – 08042 – BARCELONA – BARCELONA
Telephone: 684273470
Email: info@mitrasalud.com
3. Types of cookies we use
By who manages them. First-party: we manage them from www.mitrasalud.es. Third-party: another company manages them (Google, YouTube, Elfsight or Cloudflare), even though they are set when you visit our website.
By purpose. Technical: they make the website work, keep it secure and remember your cookie choice. Analytics: they tell us, statistically, how many people visit the website and how they use it. Third-party content: they are set by the services we include on the website, such as YouTube videos and the Google reviews widget. We don't use advertising cookies.
By duration. Session cookies: they are deleted when you close your browser. Persistent cookies: they stay on your device for the time shown in the tables.
4. Cookies used on this website
These are the cookies we found when we checked the website in October 2026. The duration is the one they have in the browser or, where stated, the one declared by the provider.
Technical cookies (they don't need your consent)
| Cookie | Managed by | What it is for | Duration |
|---|---|---|---|
| CookieScriptConsent | First-party (www.mitrasalud.es), through the CookieScript consent tool | Stores your cookie choice so that we don't ask you again on every page. | 30 days |
| __Host-authjs.csrf-token | First-party (www.mitrasalud.es) | Security: protects the website's forms and sign-in against forged requests. | Session |
| __Secure-authjs.callback-url | First-party (www.mitrasalud.es) | Operation of the website's sign-in system: stores the page to return to. | Session |
| _cfuvid | Third-party: Cloudflare, in the reviews widget (elfsight.com domain) | Security: tells apart visitors who share the same connection in order to stop abusive traffic. Cloudflare considers it strictly necessary. | Session |
Analytics cookies (they need your consent)
| Cookie | Managed by | What it is for | Duration |
|---|---|---|---|
| _ga | Third-party: Google (Google Analytics), on the .mitrasalud.es domain | Distinguishes one visitor from another to obtain statistics on how the website is used. | 2 years, according to Google (some browsers limit it to 400 days) |
| _ga_EVWHVYX2WH | Third-party: Google (Google Analytics), on the .mitrasalud.es domain | Keeps the session state for Google Analytics statistics. | 2 years, according to Google (some browsers limit it to 400 days) |
Third-party content cookies (they need your consent)
| Cookie | Managed by | What it is for | Duration |
|---|---|---|---|
| elfsight_viewed_recently | Third-party: Elfsight, provider of the Google reviews widget (core.service.elfsight.com domain) | According to Elfsight, it prevents the same view of the widget from being counted more than once. | A few seconds |
| YSC | Third-party: YouTube (Google), on pages with videos (.youtube.com domain) | According to Google, it checks that the requests made during your browsing session come from you and not from other sites. | Session |
| __Secure-YNID | Third-party: YouTube (Google), on pages with videos (.youtube.com domain) | According to Google, it remembers your preferences on YouTube and helps detect and fix problems with the service. | 6 months |
| VISITOR_INFO1_LIVE | Third-party: YouTube (Google), on pages with videos (.youtube.com domain) | Earlier version of __Secure-YNID, with the same purpose, according to Google. | 6 months |
| VISITOR_PRIVACY_METADATA | Third-party: YouTube (Google), on pages with videos (.youtube.com domain) | YouTube cookie; Google doesn't describe its purpose on its cookies page. | 6 months |
| __Secure-ROLLOUT_TOKEN | Third-party: YouTube (Google), on pages with videos (.youtube.com domain) | According to Google, it is used to roll out new YouTube features and measure their impact. | 6 months |
On the home page we also show a Google Maps map. When we checked, it didn't set any cookies, but when it loads, Google receives technical data about your connection, such as your IP address.
At the end of this page you will also find the consent tool panel, with the cookie declaration it generates automatically and checkboxes to change your choice.
5. Legal basis
Technical cookies are necessary for the website to work and to provide the service you request, so they don't need your consent (Article 22.2 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce, LSSI-CE).
For all the others, analytics and third-party content cookies, the legal basis is your consent (Article 22.2 of the LSSI-CE and Article 6(1)(a) of Regulation (EU) 2016/679, GDPR). If you don't accept them, you can still use the website as normal.
6. How to accept, reject or withdraw your consent
In the cookie notice. The notice is currently shown in Spanish. The first time you visit the website you will see a notice with two buttons, side by side and with the same appearance: “Aceptar todo” (Accept all) and “Rechazar todo” (Reject all). Under “Mostrar detalles” (Show details) you can choose by category and save your choice.
To change your mind. You can change or withdraw your consent at any time, as easily as you gave it: with the “Configuración de cookies” (Cookie settings) button, which always stays visible in the bottom left-hand corner of the website, or with the panel at the end of this page. We keep your choice for 30 days; after that, we will ask you again.
In your browser. You can also block or delete cookies in your browser settings:
If you block all cookies, some parts of the website may not work properly. And bear in mind that, if you accepted third-party cookies and want to delete them, you will have to do so from your browser options or from the system offered by the third party itself.
7. Third parties and international transfers
Some of the third parties that set cookies may process data outside the European Economic Area:
- Google (Google Analytics, YouTube and Google Maps). Google LLC, in the United States, participates in the EU-U.S. Data Privacy Framework, which the European Commission recognised as ensuring an adequate level of protection in Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 (Article 45 GDPR). More information: how Google uses cookies and Google Privacy Policy.
- Elfsight (Google reviews widget) and Cloudflare (security for that widget). You can check whether they make international transfers, and with what safeguards, in their policies: Elfsight and Cloudflare.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability as explained in our Data protection policy. You can also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).
9. Legislation and updates
This policy follows the LSSI-CE, the GDPR and the Spanish Data Protection Agency's Guía sobre el uso de las cookies (Guide on the use of cookies). We will review it whenever the website's cookies or the legislation change.
Last updated: October 2026.