This Cookie Policy aims to provide clear and precise information about the cookies used by the website shantaicoffee.com (hereinafter, "the Website"), owned by Granero Cataluña, S.L. (hereinafter, "Shantai Coffee").

This policy has been drafted in accordance with the provisions of Article 22.2 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), Regulation (EU) 2016/679 (GDPR) and the guide on the use of cookies issued by the Spanish Data Protection Agency (AEPD).

1. What are cookies?

Cookies are small text files that websites install on the user's device (computer, tablet or mobile phone) when they visit them. They allow information about browsing, the user's preferences or their device to be stored and retrieved.

Some cookies are essential for the operation of the Website; others are used to analyse usage, improve the experience or display personalised content.

2. Types of cookies we use

In accordance with the AEPD guide, cookies may be classified according to different criteria:

According to the entity that manages them:

• First-party cookies: sent to the user's device from a computer or domain managed by Shantai Coffee.

• Third-party cookies: sent to the user's device from a computer or domain managed by an entity other than Shantai Coffee (Google, Shopify, etc.).

According to their purpose:

• Technical or necessary cookies: essential for the operation of the Website (session, basket, security). They do not require consent.

• Analytical cookies: allow the use of the Website to be measured and analysed. They require prior consent.

• Personalisation cookies: allow the user's preferences (language, region) to be remembered. They require consent if they are not strictly necessary.

• Marketing or advertising cookies: allow personalised advertising to be shown. They require prior consent.

According to their duration:

• Session cookies: deleted when the browser is closed.

• Persistent cookies: remain on the device for a defined period.

3. Cookies used on this Website

The Website uses the following cookies. The public part of the site (content, landing page, blog) is built on Framer, while the online store operates on Shopify, which implies the use of cookies from both providers.

3.1. Technical or necessary cookies (do not require consent)

CookieProviderPurposeDurationframer-sessionFramer (first-party)Keep the user's session active while browsing the siteSession_shopify_yShopify (first-party)Identify the visitor in the store1 year_shopify_sShopify (first-party)Keep the user's session active in the store30 minutescartShopify (first-party)Store the products added to the basket14 dayscart_sigShopify (first-party)Verify the integrity of basket data14 dayscart_tsShopify (first-party)Basket timestampSessionsecure_customer_sigShopify (first-party)Keep the authenticated customer's session active20 years_secure_session_idShopify (first-party)Session security and fraud prevention24 hours_cmp_consentShantai Coffee (first-party)Store the user's cookie consent preferences6 months

3.2. Analytical cookies (require consent)

CookieProviderPurposeDuration_gaGoogle Analytics 4 (third-party)Distinguish unique users by assigning a random identifier2 years_ga_<ID>Google Analytics 4 (third-party)Maintain session state and collect usage statistics2 years

Information about the use of Google Analytics:

Google Analytics is a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes this data as a data processor.

The data collected by Google Analytics may be transferred to Google servers located in the United States. These international transfers are carried out under the EU-U.S. Data Privacy Framework, which Google LLC has joined, thereby ensuring an adequate level of protection in accordance with Article 45 of the GDPR.

For more information about Google's data processing, you can consult:

• Google Privacy Policy

• How Google uses information from sites that use its services

4. Legal basis for processing

• Technical or necessary cookies: based on the legitimate interest of the owner and the necessity for providing the service requested by the user (Article 6.1.b and 6.1.f of the GDPR, in relation to Article 22.2 of the LSSI-CE, which exempts them from the duty to obtain consent).

• Analytical cookies and any other non-essential cookies: based on the user's express consent (Article 6.1.a of the GDPR), given through the cookie settings banner.

5. Management and withdrawal of consent

5.1. Cookie banner

When accessing the Website for the first time, a cookie settings banner will be displayed, allowing the user to:

• Accept all cookies.

• Reject all non-essential cookies.

• Set their preferences by category.

Non-essential cookies will not be loaded until the user gives consent. Consent will be stored for a maximum of 6 months, after which it will be requested again.

5.2. Modification or withdrawal of consent

The user may modify or withdraw their consent at any time by accessing the cookie preferences panel, available via the "Set cookies" link located in the Website footer.

Withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal.

5.3. Browser settings

In addition, the user may configure their browser to block or delete cookies. Links to the main browsers are provided below:

• Google Chrome

• Mozilla Firefox

• Safari

• Microsoft Edge

The user is informed that disabling technical cookies may prevent the Website from functioning properly, especially during the checkout process.

6. International transfers

Some of the cookies used involve the transfer of personal data outside the European Economic Area, specifically:

• Google Ireland Limited / Google LLC (United States), under the EU-U.S. Data Privacy Framework.

• Shopify Inc. (Canada), a country considered by the European Commission to provide an adequate level of data protection in accordance with Adequacy Decision 2002/2/EC.

7. Changes to the policy

Shantai Coffee reserves the right to amend this Cookie Policy in order to adapt it to legislative developments, case-law criteria or changes in the cookies used.

Where significant changes occur, users will be notified by a visible notice on the Website. It is recommended to review this policy periodically.

8. Contact

For any queries relating to this Cookie Policy, you can contact:

• Owner: Granero Cataluña, S.L. — Tax ID B-96271135

• Email: fatima@shantaicoffee.com

• Address: C/ Longitudinal 2, Pabellón D 4056/61 Pl., Zona Franca – Mercabarna, 08040 Barcelona