Cookies policy

Cookie Policy

This Cookie Policy (hereinafter, the "Cookie Policy") provides information about the possible use of data storage and retrieval devices (generically, "cookies") on the website located at https://shop.rfef.es/ (hereinafter, the "Website"), managed by the Royal Spanish Football Federation. For the purposes of this Cookie Policy, "User" shall be understood as any natural person who accesses the Website.

Identification

• Data Controller: Royal Spanish Football Federation (hereinafter, "RFEF")
• Registered Office: Plaza Luis Aragonés, s/n, 28232 Las Rozas de Madrid, Madrid
• Tax Identification Number (N.I.F.): Q-2878017-I
• Email: dpo@rfef.es

What is a cookie?

Cookies are files containing small amounts of information that are downloaded to the User's device when they visit a website. Their main purpose is to recognize the User each time they access the Website and also allow for improvement in the quality and usability of the Website. Cookies are essential for the functioning of the internet, as they offer technical solutions that allow the User to navigate through different websites; they cannot harm the User's computer or device and can be used to identify and resolve possible malfunctions of the Website. They can also be used for advertising or analytical purposes.

Use of cookies by the RFEF

By accepting the cookie banner that appears at the beginning of browsing on the Website, or through the cookie settings panel, the User expressly accepts the use of such cookies on their devices. If the User deactivates cookies, some of the Website's functionalities may not work correctly. Specifically, cookies are being used for the purposes set out below.

Technical cookies

These are cookies that allow the User to navigate through the Website and use the different options or services that exist on it, such as, for example, controlling traffic and data communication, identifying the session, accessing restricted access parts, controlling fraud linked to service security, making an application for registration or participation in an event, using security elements during navigation, storing content for broadcasting videos or sound, enabling dynamic content or sharing content through social networks. The RFEF does not need the User's consent to install on their device the cookies that are necessary to activate the functionalities of the Website, and their use is based on the need to provide the requested services. These cookies are necessary for the operation of the platform and, therefore, cannot be deactivated.

• _shopify_essential · Purpose: Manages the session, the purchase process, and protection against store manipulation · Provider: Shopify · Expiry: Session (up to 24 hours)
• _secure_session_id · Purpose: Identifies the User's secure session during browsing and the purchase process · Provider: Shopify · Expiry: 24 hours
• cart · Purpose: Stores the shopping cart identifier and content · Provider: Shopify · Expiry: 2 weeks
• cart_sig · Purpose: Verifies the integrity and validity of the shopping cart · Provider: Shopify · Expiry: 2 weeks
• secure_customer_sig · Purpose: Keeps the logged-in customer's session active · Provider: Shopify · Expiry: 1 year
• keep_alive · Purpose: Manages redirection between international domains and session maintenance · Provider: Shopify · Expiry: Session (up to 2 weeks)
• localization · Purpose: Remembers the country or region selected by the User · Provider: Shopify · Expiry: 1 year
• _tracking_consent · Purpose: Stores the User's cookie consent preferences · Provider: Shopify · Expiry: 1 year
• _cmp_a · Purpose: Manages customer privacy settings · Provider: Shopify · Expiry: 1 day

Advertising cookies

These cookies are used to display advertisements that are relevant to the User. They are also used to limit the number of times the User sees an advertisement, as well as to help measure the effectiveness of advertising campaigns. They remember that the User has visited a website and this information is shared with other organizations, such as advertisers. These cookies are only installed on the User's device when the User accepts them.

• _gcl_au · Purpose: Stores and tracks ad conversions (Google conversion linker) · Provider: Google · Expiry: 3 months
• _gcl_aw · Purpose: Records interaction with ads to attribute conversions after a click on a Google ad · Provider: Google · Expiry: 3 months

Analytical cookies

These cookies collect information about how visitors use the website, for example, which pages they visit most often, whether they receive error messages, which sections they access or which buttons they click on. Their function is to obtain statistics and reports that allow the website's operation to be improved. These cookies are only installed on the User's device when the User expressly accepts them. You can accept or reject the installation of these cookies.

• _ga · Purpose: Distinguishes unique users by assigning an identifier to generate usage statistics · Provider: Google Analytics · Expiry: 2 years
• _ga_<measurement-id> · Purpose: Maintains the session state and persists the property identifier in Google Analytics 4 · Provider: Google Analytics · Expiry: 2 years
• _gid · Purpose: Distinguishes users and records browsing activity for statistics · Provider: Google Analytics · Expiry: 24 hours
• _gat_gtag_<id> · Purpose: Limits the request rate to regulate data collection on high-traffic sites · Provider: Google Analytics · Expiry: 1 minute
• _shopify_y · Purpose: Identifies the unique visitor for Shopify's own statistics · Provider: Shopify · Expiry: 1 year
• _shopify_s · Purpose: Identifies the session for Shopify's own statistics · Provider: Shopify · Expiry: 30 minutes

International data transfers

Some of the personal data obtained through third-party cookies will be subject to international transfers, in which case we guarantee that the necessary safeguards will be adopted to protect their confidentiality, integrity, and availability. For more information on international transfers carried out by each third party, please access their privacy policies.

Retention periods

The cookies used by the RFEF will be stored on your device for the time necessary for the purpose for which they were installed and, at most, for 2 years, unless you decide to delete them through your browser's settings options, in accordance with the current criteria of the Spanish Data Protection Agency.

How to accept, reject, block, or delete cookies

You can accept or reject cookies at any time by re-accessing our preferences panel. With the cookie settings tool, the User has the possibility to reject or accept cookies that require their consent. You can also block and delete cookies by changing your browser settings. Most browsers allow you to reject or accept all cookies or only accept certain types. The process for managing and deleting cookies can be found in the help function integrated into your browser. If the User wishes to limit the use of cookies, they may not be able to use all the interactive functions of the Website.

• Microsoft Internet Explorer: Tools > Internet Options > Privacy > Settings. More information in Windows help.
• Firefox: Tools > Options > Privacy > Cookies. More information in Firefox help.
• Google Chrome: Options > Advanced options > Privacy. More information in Google help.
• Opera: Security and Privacy. More information in Opera help.
• Safari: Preferences > Privacy. More information in Apple help.

User rights and additional information

You can obtain more information about the processing of your data carried out by the RFEF, as well as how to exercise your rights, by writing to dpo@rfef.es. Last updated: April 2026.