At qamarero.com we use cookies and similar technologies to ensure the correct operation of the site, analyse its use and, with your consent, optimise the browsing experience and our marketing campaigns. This Policy develops article 22.2 of Spanish Law 34/2002 (LSSI-CE), Regulation (EU) 2016/679 (GDPR) and the Cookies Guide published by the Spanish Data Protection Agency (AEPD).
1. Data Controller
- Company name: QR PAYMENTS, S.L.
- Tax ID: B67982603
- Address: Calle Triana 4, Valencina de la Concepción (41907), Seville, Spain
- Email: info@qamarero.com
2. What are cookies?
Cookies are small text files that a website places in your browser when you visit it. They allow us to store and retrieve information about your browsing habits, your device or your preferences.
They are not viruses. They can be first-party (set by qamarero.com) or third-party (set by external services such as Google, Meta, Microsoft, TikTok or HubSpot).
In addition to cookies, we use similar technologies such as tracking pixels (web beacons), local storage and Google Tag Manager as a container that orchestrates the conditional loading of these technologies.
3. Legal basis
- Strictly necessary technical cookies: used based on Qamarero’s legitimate interest in ensuring basic site operation (art. 22.2 LSSI-CE, technical exemption). No consent required.
- Analytical and marketing cookies: require your prior, informed and unambiguous consent, requested via our cookie banner. You may withdraw your consent at any time.
4. Categories of cookies we use
We classify our cookies into three categories following the AEPD 2024 Guide:
4.1. Necessary
Indispensable for site operation and delivery of the requested service. Do not require consent and cannot be disabled from the panel.
4.2. Analytics
Let us measure and analyse site usage (most visited pages, traffic source, time on page, heatmaps, session behaviour, errors). Require consent.
4.3. Marketing
Used to measure the effectiveness of our advertising campaigns, attribute conversions from different platforms (Google Ads, Meta, TikTok) and offer you relevant content and ads via HubSpot and ad networks. Require consent.
5. Cookies we use
5.1. Necessary cookies
| Cookie | Controller | Purpose | Duration |
|---|---|---|---|
cc_cookie | Qamarero (first-party) | Stores your consent preferences. | 1 year |
5.2. Analytics cookies
Google Analytics 4 (loaded via Google Tag Manager, only after consent):
| Cookie | Controller | Purpose | Duration |
|---|---|---|---|
_ga | Google LLC | Unique identifier to distinguish users and generate aggregated statistics. | 2 years |
_ga_<container-id> | Google LLC | Maintains the Google Analytics 4 session state. | 2 years |
_gid | Google LLC | Daily unique identifier. | 24 hours |
Microsoft Clarity (behaviour analysis, heatmaps and session replay):
| Cookie | Controller | Purpose | Duration |
|---|---|---|---|
_clck | Microsoft Corporation | Persists Clarity unique user ID. | 1 year |
_clsk | Microsoft Corporation | Connects multiple page views into a single session. | 24 hours |
MUID | Microsoft Corporation | Microsoft user ID shared with Bing Ads and Clarity. | 1 year |
ANONCHK | Microsoft Corporation | Verifies MUID functionality and syncs session data. | 10 minutes |
SM | Microsoft Corporation | Clarity session management. | Session |
CLID | Microsoft Corporation | Clarity-specific identifier. | 1 year |
HubSpot tracking (analytics of form and content interactions):
| Cookie | Controller | Purpose | Duration |
|---|---|---|---|
hubspotutk | HubSpot, Inc. | Identifies unique visitors interacting with HubSpot forms and content. | 13 months |
__hstc | HubSpot, Inc. | Main HubSpot analytics cookie (first visit, last visit, cumulative sessions). | 13 months |
__hssc | HubSpot, Inc. | HubSpot session cookie. | 30 minutes |
__hssrc | HubSpot, Inc. | Detects if the browser has restarted during the session. | Session |
5.3. Marketing cookies
Google Ads (conversion tracking from campaigns):
| Cookie | Controller | Purpose | Duration |
|---|---|---|---|
_gcl_au | Google LLC | Stores and tracks conversions attributed to Google Ads. | 3 months |
_gcl_aw | Google LLC | Identifies conversions from Google Ads clicks. | 3 months |
Meta Pixel (advertising and remarketing on Facebook and Instagram):
| Cookie | Controller | Purpose | Duration |
|---|---|---|---|
_fbp | Meta Platforms, Inc. | Main Meta Pixel cookie to identify users and attribute conversions. | 3 months |
_fbc | Meta Platforms, Inc. | Stores the latest fbclid parameter for click attribution from Meta ads. | 2 years |
fr | Meta Platforms, Inc. | Targeted advertising and real-time auctions on Meta network. | 3 months |
tr | Meta Platforms, Inc. | Sends conversion events to Meta Pixel. | Session |
TikTok Pixel (advertising and conversion attribution on TikTok):
| Cookie | Controller | Purpose | Duration |
|---|---|---|---|
_ttp | TikTok Pte. Ltd. | Main TikTok Pixel cookie. | 13 months |
_ttckid | TikTok Pte. Ltd. | Conversion identifier for TikTok Ads campaigns. | 13 months |
This list is updated whenever we add or remove tools that install cookies. If you find a cookie not listed, please write to info@qamarero.com.
6. Google Tag Manager
We use Google Tag Manager (GTM) as a tag container to centrally manage the tracking scripts listed (Google Analytics 4, Google Ads, Microsoft Clarity, Meta Pixel, TikTok Pixel and HubSpot). GTM itself does not install tracking cookies; it only loads, after your consent, the scripts of the platforms that do.
The GTM integration is bound to Google Consent Mode v2: until you accept the corresponding categories, tags operate in denied mode and do not send personally identifying data.
7. International data transfers
Some cookies are set by providers located outside the European Economic Area (mainly United States):
- Google LLC (Google Analytics, Google Ads, Google Tag Manager): transfers covered by Google’s certification under the EU-US Data Privacy Framework (DPF) approved by the European Commission (Implementing Decision (EU) 2023/1795). Subsidiarily, Standard Contractual Clauses (SCCs) apply.
- Meta Platforms, Inc. (Meta Pixel / Facebook): transfers covered by DPF certification and, subsidiarily, SCCs.
- Microsoft Corporation (Microsoft Clarity): transfers covered by DPF certification and, subsidiarily, SCCs.
- HubSpot, Inc.: transfers covered by DPF certification and, subsidiarily, SCCs.
- TikTok Pte. Ltd. (TikTok Pixel): as a provider headquartered in Singapore with processing in the US and Ireland, the transfer is covered by Standard Contractual Clauses (SCCs) signed with TikTok and by additional safeguards declared by the provider under article 46 GDPR.
Third-party privacy policies:
- Google Privacy Policy
- Meta Privacy Policy
- Microsoft Privacy Statement
- HubSpot Privacy Policy
- TikTok Privacy Policy
8. Consent management
On first entry to qamarero.com we show a cookie banner with three options:
- Accept all: allows installation of cookies from all categories.
- Reject all: only necessary cookies are installed. No Google Analytics, Google Ads, Microsoft Clarity, Meta Pixel, TikTok Pixel or HubSpot tracking scripts are loaded.
- Configure: you choose category by category which cookies to allow.
Our banner complies with AEPD 2024 guidelines: reject is as accessible as accept, no dark patterns, explicit decision stored. We use Google Consent Mode v2: until you accept, Google scripts (and those orchestrated via GTM) operate in denied mode.
9. How to withdraw or change your consent
You can change your decision at any time:
- From the “Configure cookies” link in the qamarero.com footer — reopen the preferences panel. When consent is withdrawn, associated cookies are automatically cleared on the next load.
- From your browser, clearing stored cookies or configuring it to reject them:
You can also disable specific services directly:
- Google Analytics: install the GA opt-out browser add-on.
- Meta: adjust preferences at Facebook Ad Preferences.
- Microsoft: disable personalization at Microsoft Privacy Dashboard.
- TikTok: manage preferences at TikTok Ads Personalization.
If you reject all analytics cookies we cannot measure aggregated site use or replay sessions to diagnose issues; if you reject marketing cookies, campaign effectiveness decreases and you may see less relevant ads elsewhere.
10. Data subject rights
Under the GDPR you can exercise rights of access, rectification, erasure, objection, portability, restriction and withdrawal of consent by writing to info@qamarero.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
More information in our Privacy Policy.
11. Policy updates
We update this Cookie Policy whenever we add or remove services that install cookies. Significant changes will be prominently announced on the site and, where appropriate, consent will be requested again.
12. Contact
For any cookie-related question, write to info@qamarero.com.
© 2026 QR Payments, S.L. All rights reserved.
