Cookie policy

Full text: Cookie policy (PDF, 11 pages)

Effective date: 2 September 2026

This Cookie Policy explains how LIGHTS OUT, S.L. uses cookies and similar technologies on its websites and online services. It supplements the privacy policy.

What this site uses today

At present this website sets no cookies at all. It uses one item of session storage to remember that the opening animation has played, so it does not repeat on every page view. That is cleared when you close the tab, never leaves your browser, and is strictly necessary for a function you asked for by loading the page.

The enquiry form is protected by Cloudflare Turnstile, an anti-abuse check that replaces a CAPTCHA. It is a security technology necessary to keep the form usable, and it does not track you across sites.

Analytics is in use: Google Analytics 4, deployed through Google Tag Manager. It is not loaded until you accept it in the consent notice, and nothing it sets is written before that. Declining, or ignoring the notice, leaves it switched off. You can change your mind at any time — see Changing or withdrawing your choices below.

Who is responsible for the website

The website operator is LIGHTS OUT, S.L., NIF B88998778, registered office at Av. Ernesto Sarti 10, 38660 Adeje, Santa Cruz de Tenerife, Spain. Contact: hello@lightsout.gp, +34 518 90 04 79.

What cookies and similar technologies are

Cookies are small data files stored on or read from a device when a website is visited. Similar technologies include local storage, pixels, tags, SDKs, device identifiers and other mechanisms that store or access information on a device. In this policy, "cookies" is used as a collective term unless the context requires otherwise.

Applicable rules

Our use of cookies is governed in particular by Article 22.2 of Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce ("LSSI-CE"), together with Regulation (EU) 2016/679 ("GDPR"), Organic Law 3/2018 ("LOPDGDD") where personal data are processed, and the criteria of the Spanish Data Protection Agency (AEPD).

When consent is required

Cookies that are strictly necessary to provide a service you expressly requested, or used solely to enable communication over an electronic communications network, may be exempt from the consent requirement. Other cookies — including non-exempt analytics, advertising and behavioural-personalisation technologies — are activated only after you have made the relevant consent choice.

Refusing non-essential cookies must not be more difficult than accepting them. Any cookie interface we use will therefore present accept, reject and configure options at the same decision layer, in line with AEPD guidance.

Categories we may use

None of the optional categories below are in use today. They are listed so this policy stays accurate if that changes.

• Strictly necessary / technical. Core website functions, security, fraud prevention, session management, authentication and consent preferences. Normally exempt from consent.
• Preferences / personalisation. Remembering optional preferences beyond what is strictly necessary. Consent, unless the specific use qualifies as exempt technical functionality.
• Analytics / measurement. Traffic, page performance, user journeys and errors. Consent, unless a specific audience-measurement configuration qualifies for an exemption.
• Advertising / marketing. Campaign measurement, frequency capping, conversion attribution and advertising audiences. Consent.
• Social / embedded third-party content. Optional embedded content that may let the third party recognise you. Consent, unless strictly necessary for a service you requested.
• Security / anti-abuse. Protecting forms and infrastructure against bots and abuse. Exempt where strictly necessary; otherwise consent.

First-party and third-party cookies

First-party cookies are set or read by us, or by a service acting on our behalf, under our own domain. Third-party cookies are set or accessed by another organisation, which may process information for its own purposes as an independent controller.

Technologies used on the website

A tag manager can be used to deploy analytics or marketing tags, but the tag manager itself does not determine whether a non-essential tag may run before consent. Where such technologies are deployed, this website will technically prevent non-exempt analytics, advertising or similar technologies from activating until the required consent has been obtained.

Payment gateways, airlines, hotels, event organisers and other suppliers may also use cookies on pages or interfaces they operate. Their own cookie policies apply once you leave this website or interact with an independently controlled interface.

Current cookie list

Because the website and its suppliers may change, the authoritative current list is the one set out in "What this site uses today" above. Before any non-essential cookie is deployed, this policy will be updated with the name, provider and domain, category and purpose, retention period, and whether consent is required for each technology in use.

How consent is obtained

No non-essential cookies are currently used, so no consent notice is shown. If that changes, a notice will appear before any non-exempt cookie is used, allowing you to accept all, reject all, or configure your choices by purpose.

Consent is never inferred from silence, inactivity, scrolling or continuing to browse, and pre-ticked boxes are not used.

Changing or withdrawing your choices

Where a consent mechanism is in use, you may change or withdraw consent at any time through the cookie settings control. Withdrawal takes effect for future processing and does not affect the lawfulness of processing carried out beforehand. Consent is not treated as indefinitely valid: it is renewed periodically, and reassessed whenever purposes, providers or relevant technologies materially change.

Browser and device controls

Most browsers let you view, block or delete cookies through their settings. Blocking all cookies may stop parts of a website from working. Browser controls operate separately from a website's consent mechanism and may not cover every similar technology.

International transfers

Some third-party providers may process information outside the European Economic Area. Where that involves a transfer of personal data for which we are responsible, it is handled in accordance with the GDPR, including adequacy decisions or appropriate safeguards such as the European Commission's Standard Contractual Clauses. See the privacy policy for more.

Cookie data and your rights

Where information collected through cookies is personal data, the rights described in the privacy policy apply — access, rectification, erasure, restriction, objection and withdrawal of consent, subject to the applicable legal conditions. Requests go to hello@lightsout.gp.

Changes to this policy

We may update this policy when technologies, providers, legal requirements or AEPD guidance change. The current version is published here with its effective date. If a change affects a purpose for which valid consent is required, a new consent will be requested where necessary.

Contact and supervisory authority

Questions about cookies go to hello@lightsout.gp, or to Av. Ernesto Sarti 10, 38660 Adeje, Santa Cruz de Tenerife, Spain. Where cookie processing involves personal data, you also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), www.aepd.es.