1. Purpose of this policy
This Cookie Policy explains how cookies and similar technologies are used on the website
fmit.io
(the "Website"), which is operated by FMIT Technologies S.L., a company of FMIT Group ("FMIT", "we", "us"). It describes
what these technologies are, which ones we use, what they are used for, how long they last, who has access to the
information they collect, and how you can accept, reject or withdraw your consent at any time.
This policy is issued in compliance with Article 22.2 of Spanish Law 34/2002 on Information Society Services
and Electronic Commerce (LSSI-CE), Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), and
the criteria of the Spanish Data Protection Agency (AEPD) set out in its Guide on the use of cookies and its
Guide on the use of cookies for audience measurement tools.
2. What are cookies and similar technologies?
A cookie is a small file that a website stores on your device (computer, tablet or mobile) when you visit it,
and which can later be retrieved to recognise your device or remember information about your visit.
Other technologies can achieve comparable results without storing a file on your device, for example scripts
that send information to a server, pixels, or local storage. Where such technologies involve storing or
accessing information on your device, they are subject to the same rules as cookies, and this policy covers
them on the same basis.
3. Cookies and technologies used on fmit.io
We group the technologies we use by the purpose they serve, because the purpose determines whether your
consent is required.
3.1 Strictly necessary (consent not required)
These are essential for the Website to function and to be delivered securely. They cannot be switched off
through our consent tool, because without them the Website cannot be provided.
| Name / provider | Purpose | Type | Duration |
__hs_opt_out (HubSpot, Inc.) | Records that you have made a choice in our cookie banner, so that we do not ask you again on every
page. | First-party cookie | 6 months |
__hs_cookie_cat_pref (HubSpot, Inc.) | Records which categories of cookies you consented to, so that we can apply your choice and evidence
it. | First-party cookie | 6 months |
__hs_initial_opt_in (HubSpot, Inc.) | Prevents the banner from being displayed repeatedly when you browse in strict mode. | First-party cookie | 7 days |
__hs_gpc_banner_dismiss (HubSpot, Inc.) | Records that the Global Privacy Control notice has been dismissed, so that it is not shown to you
again. | First-party cookie | 180 days |
__hs_do_not_track (HubSpot, Inc.) | Set when you refuse tracking, to stop the tracking code sending any information to HubSpot. | First-party cookie | 6 months |
__cf_bm, __cfruid, __cfuvid (Cloudflare, as CDN
provider to HubSpot) | Bot protection and rate limiting for the resources served through HubSpot's content delivery network. | Third-party cookie | 30 minutes (__cf_bm); the rest expire at the end of the session |
| Session and security cookies (first party, fmit.io / hosting
provider) | Maintaining the browsing session, load balancing and protecting the Website against abuse. | First-party cookie | Session, or up to 12 months |
| Google Tag Manager (Google Ireland Limited) |
Tag management tool used to load and control the tags described below. Google Tag Manager does not
itself store cookies on your device; it is listed here for transparency because it is loaded on every
page and enforces your consent choices.
| Script (no cookie) | Not applicable |
3.2 Audience measurement exempt from consent
We use Metricool to obtain anonymous, aggregated statistics on the number of visits and pages viewed.
According to its provider, the Metricool visit tracker does not store any information on your device, does not assign
unique identifiers, and accesses your IP address only for the duration of the connection without storing it.
We rely on this tool without requesting your consent because it meets the conditions set out by the AEPD in
its Guide on the use of cookies for audience measurement tools: its purpose is strictly limited to measuring
the audience of this Website, the processing is carried out solely on our behalf by the provider acting as
data processor, the resulting statistics are anonymous and aggregated, the data is not cross-referenced with
other processing operations or disclosed to third parties, and it does not allow you to be tracked across
other websites or applications. Statistical data is retained for no longer than 25 months.
| Name / provider | Purpose | Type | Duration |
| Metricool visit tracker (Metricool, established in Spain, data processor) | Anonymous and aggregated measurement of visits and pages viewed on fmit.io. | Script, cookieless: no storage on your device and no unique identifier | Aggregated statistics retained for a maximum of 25 months |
Even though your consent is not legally required for this tool, we inform you of its use here so that you have
complete information about how your visit is measured.
3.3 Analytics requiring your consent
We use Google Analytics 4 to understand how the Website is used, which pages are of most interest
and how visitors reach us, so that we can improve our content and structure. Google Analytics 4 assigns an identifier
to your browser and is therefore not covered by the audience-measurement exemption described above.
It is only activated if you accept analytics cookies in our banner, and it is deactivated if you reject them or
withdraw your consent.
| Cookie | Provider | Purpose | Duration |
_ga | Google Ireland Limited | Distinguishes browsers in order to count unique visitors. | 2 years |
_ga_<container-id> | Google Ireland Limited | Maintains the session state for Google Analytics 4. | 2 years |
_gid | Google Ireland Limited | Distinguishes browsers over a short period, where enabled. | 24 hours |
We have configured Google Analytics 4 so that user data is retained for a maximum of 14 months, Google signals
are disabled, and data is not shared with Google for its own purposes such as advertising personalisation. We
do not use Google Analytics for advertising, remarketing or profiling, and we do not combine analytics data
with any other information we hold about you.
3.4 HubSpot analytics and CRM requiring your consent
We use HubSpot (HubSpot, Inc.) as our customer relationship management and marketing platform.
Its tracking code recognises returning visitors, measures how the Website is used and links a later form submission
to the visits that preceded it. These cookies are only activated if you accept them, and they are deactivated if
you reject them or withdraw your consent.
| Cookie | Provider | Purpose | Duration |
__hstc | HubSpot, Inc. |
Main visitor tracking cookie. Stores the domain, the visitor identifier, the timestamps of the first,
previous and current visit, and the session number.
| 6 months |
hubspotutk | HubSpot, Inc. |
Keeps track of your identity. It is sent to HubSpot when you submit a form and is used to avoid
creating duplicate records.
| 6 months |
__hssc | HubSpot, Inc. | Keeps track of sessions and of the number of pages viewed within each one. | 30 minutes |
__hssrc | HubSpot, Inc. | Determines whether you have restarted your browser, in order to establish whether a new session has
begun. | Session |
Where you send us an enquiry through a form managed by HubSpot, the data in that form is processed as
described in section 4.1 of our Privacy Policy. HubSpot acts as our data
processor under a data processing agreement that complies with Article 28 GDPR.
3.5 Third-party content that does not use cookies
The Website loads typefaces from Adobe Fonts (Typekit) so that it displays consistently across
devices. This service does not place cookies on your device, but requesting the font files necessarily transmits
your IP address and basic browser information to Adobe. This is required to render the Website and is therefore
treated as strictly necessary.
| Provider | Purpose | Type | Data involved |
| Adobe Fonts / Typekit (use.typekit.net, p.typekit.net) | Loading web fonts for correct visual rendering. | Third-party resource, no cookie | IP address and browser data during the connection |
The links to our profiles on LinkedIn, X and Instagram are ordinary hyperlinks. They do not embed content from
those platforms and do not set cookies on the Website. If you follow one of those links, the cookie policy of
the destination platform applies from that point onwards.
4. Legal basis
Strictly necessary technologies (section 3.1) and the loading of the resources described in section 3.5 are
used on the basis of the exception in Article 22.2 LSSI-CE, as they are required to provide the service you
have expressly requested. Audience measurement under section 3.2 relies on the same exception, under the
conditions established by the AEPD. The analytics described in sections 3.3 and 3.4 are used exclusively on
the basis of your consent (Article 6.1.a GDPR and Article 22.2 LSSI-CE), which you may withdraw
at any time.
5. How we obtain your consent
When you first visit the Website, a banner informs you about the use of cookies and allows you to decide. The
banner is provided by HubSpot, acting as our data processor. Our consent mechanism operates as follows:
-
No cookie or technology requiring consent is activated before you give it. Until you make a choice, only the
strictly necessary technologies described in section 3.1 are used.
-
The banner offers the options to accept, to reject and to
configure cookies. The accept and reject options are presented at the same level, with equivalent
visibility, size and prominence, so that refusing is no more difficult than agreeing.
-
Rejecting cookies does not restrict your access to any part of the Website. We do not operate cookie walls.
- The configuration panel lets you accept or reject cookies granularly, by purpose.
-
No option is pre-selected in your favour or ours. Continuing to browse, scrolling or closing the banner is
not treated as consent.
-
The configuration panel groups cookies into four categories: necessary, analytics, functionality and
advertising. We currently use cookies only in the first two. The remaining categories are shown for
completeness and are empty; if that changes, this policy will be updated before any such cookie is used.
-
We keep a record of the consent given so that we can demonstrate it, and we will ask you again at least
every 24 months.
We also honour the Global Privacy Control (GPC) signal. If your browser sends that signal, we treat
it as a refusal and no cookie requiring consent is activated, without you having to interact with the banner. You
will see a short notice informing you of this, and you may still change your choice at any time through "Cookie
settings" in the footer.
6. How to withdraw your consent or manage cookies
You can change or withdraw your decision at any time, as easily as you gave it, through the Cookie settings link available permanently in the footer of every page. Withdrawing consent does not affect the lawfulness of
processing carried out beforehand.
You can also block or delete cookies directly in your browser. Note that deleting cookies in your browser will
also delete the record of your preferences, so the banner will appear again on your next visit. Instructions
for the most common browsers:
Blocking strictly necessary cookies may affect the correct functioning of parts of the Website.
7. International data transfers
Where you consent to analytics, Google may process data outside the European Economic Area, including in the
United States. Google Ireland Limited acts as our data processor and such transfers are covered by the
European Commission's adequacy decision for the EU-US Data Privacy Framework and, as a complementary
safeguard, by the Standard Contractual Clauses approved by the European Commission. Adobe may likewise process
the connection data described in section 3.5 outside the EEA under equivalent safeguards. Metricool processes
data within the European Union. HubSpot, Inc. is established in the United States; transfers to
HubSpot are covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework and, as
a complementary safeguard, by the Standard Contractual Clauses approved by the European Commission.
You can consult the information provided by these third parties on their own processing at their respective
privacy policies.
8. Personal data collected through cookies
Where the technologies described above involve the processing of personal data, that processing is governed by
our Privacy Policy, which sets out the purposes, legal bases, retention periods,
recipients and the rights available to you. FMIT Technologies S.L. is the data controller.
You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and
withdraw your consent, by writing to info@fmit-solutions.com with the reference "Data Protection". You may also lodge a complaint with the Spanish Data Protection Agency (AEPD,
C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).
9. Changes to this policy
We will update this Cookie Policy whenever we add, remove or modify the technologies used on the Website, or
when changes in legislation or in the criteria of the supervisory authorities require it. Where an update
affects technologies that require consent, we will ask for your consent again. The date at the top of this
page always indicates the version in force.
10. Contact
If you have any questions about this Cookie Policy, please contact us at
info@fmit-solutions.com.
Company Information
- FMIT Technologies S.L. (FMIT Group)
- Tax ID (CIF): B93706968
- Registered office: Alameda Principal 32, 1, 29005 Málaga, Spain
- Additional office: Santa Rosalía 49, 1A, 38002 Santa Cruz de Tenerife, Spain
- Contact email: info@fmit-solutions.com
- Phone: +34 952 65 76 03
- Website: https://fmit.io