Casa ZOL
Cookie Policy
Last updated: 17 October 2026
1. Website operator
Casa ZOL, S.L. operates www.zolvillas.com and is responsible for the processing of data used to analyse browsing of the website.
For questions about this policy or data protection, you can contact info@zolvillas.com. The company’s full identification details are available in this website’s Legal Notice.
2. What cookies are
Cookies are small files that a website stores in your browser. They allow information to be remembered between visits or a browser to be recognised while browsing.
Similar technologies, such as browser local storage, can also be used to retain your preferences. This policy covers both technologies.
3. Technologies we use and their purposes
Managing your preferences
We store your choice about analytics cookies so that it can be applied while browsing and on subsequent visits. This storage is used exclusively to manage your preferences and is not used to measure your activity.
Browsing analytics
Analytics cookies are activated only with your consent. If you reject them or make no choice, Google Analytics is not loaded and no analytics requests are sent.
Measurement may process browser identifiers and technical information about your device and the pages visited. These identifiers may constitute personal data even if they do not include your name.
The integration is configured to avoid sending names, email addresses, access credentials and sensitive URL parameters. Its purpose is not to display personalised advertising.
4. Details of storage used
Cookie preferences
• Name: zol.analytics-consent.v1 (browser local storage, localStorage).
• Managed by: Casa ZOL, S.L.
• Purpose: to remember and apply acceptance or rejection of analytics cookies.
• Duration: no automatic expiry is configured. Your choice remains until you change it, delete the website’s data or the browser removes this storage.
Analytics cookies
• Name: zol_ga4_ga.
• Service: Google Analytics, provided by Google.
• Purpose: to distinguish browsers when compiling visit statistics.
• Configured duration: Google’s default, 2 years (63,072,000 seconds), renewable with activity. This period has been checked against the service’s configuration and documentation, not measured in production. The browser may shorten it or delete the cookie sooner.
• Name: zol_ga4_ga_4NCP76P7Q9.
• Service: Google Analytics, provided by Google.
• Purpose: to maintain information about browsing sessions.
• Configured duration: Google’s default, 2 years (63,072,000 seconds), renewable with activity. Its effective expiry has not been measured in production. The browser may shorten it or delete the cookie sooner.
These cookies belong to the Google Analytics 4 integration with Measurement ID G-4NCP76P7Q9. They are installed and measurement requests are sent only with your consent. The default configuration renews cookie expiry with activity.
The lifetime of cookies in your browser differs from data retention in Analytics. In the corresponding property, event data retention is set to 2 months and user data retention to 14 months. Resetting the user data retention period on new activity is enabled. These controls do not determine retention for most aggregated reports.
Maps, videos and access functions
Mapbox: interactive maps may use local storage with names beginning with mapbox.eventData:, mapbox.eventData.uuid: and mapbox.eventData.uuidTimestamp:. The suffix varies with the service configuration. These store service usage information and technical identifiers. The website does not configure automatic expiry that deletes these entries. The identifier may be renewed after 24 hours when the map is used; this renewal period does not mean the storage is deleted.
Mapbox may also use a browser cache named mapbox-tiles for map resources. Retention depends on each response’s cache headers and the browser’s management of its cache; there is no single website-configured retention period.
YouTube — observed integration: the public Pedralbes property page contained no YouTube iframe in its initial photo view. After analytics cookies were rejected, opening “Video” loaded the youtube-nocookie.com player before pressing play. The player also allows playback without accepting analytics. The Reimagine code uses the same player when its video is selected. YouTube blocks in the Blog use the same domain with lazy loading, without a specific consent control.
The youtube-nocookie.com domain corresponds to YouTube’s documented privacy-enhanced mode. It must not be interpreted as a guarantee of no storage or provider requests. The website does not set its own names or expiry periods for the player’s internal storage.
Google Maps — observed integration: the initial Pedralbes photo view contained no Google Maps iframe. After analytics was rejected, clicking “Location” loaded maps.google.com/maps with output=embed, displaying content from google.com/maps/embed. The map loaded before interaction with its controls. This is separate from the Mapbox map used in other locations.
Provider documentation, not an observed inventory on this website: Google describes YSC (security, session), PREF (playback preferences, 8 months), __Secure-YNID (preferences, diagnostics and other uses, 6 months), __Secure-YENID (preferences and abuse prevention, 13 months), __Secure-ROLLOUT_TOKEN (measurement of new features, 6 months), NID (preferences and other uses, 6 months) and SOCS (cookie choices, 13 months). These documented durations do not establish that these cookies are installed here.
Official sources: https://support.google.com/youtube/answer/171780?hl=en and https://policies.google.com/technologies/cookies?hl=en . Google’s general examples are not a specific list of cookies installed by Google Maps or this embedded player.
Opening “Video” loads the external provider YouTube, and opening “Location”, where a Google Maps map is offered, loads that provider. Rejecting analytics cookies does not prevent these external services from loading: the choice in Casa ZOL’s notice controls only Analytics. These providers may process information and use cookies or similar technologies in accordance with their own terms and the browser’s settings.
Scope of verification: loading of the players and maps described has been observed, but their third-party cookies and local storage, session storage or IndexedDB have not been inspected. The names, purposes and durations in the documentary reference above come from Google and do not establish which items have actually been installed in the browser when using this website.
Information still unconfirmed: the names actually installed by YouTube and Google Maps, their individual purposes, effective expiry periods and when they are written. This policy does not claim that no third-party tracking occurs or present the inventory as fully verified.
Private access and CMS: the payload-token cookie maintains the authenticated session. Its configured duration is up to 7 days from creation or renewal, and it is deleted on logout. It is HttpOnly and, in production, Secure, with SameSite=Strict. It is not an analytics cookie.
CMS preferences: payload-theme remembers administrators’ manual choice of a light or dark theme for 365 days. It is deleted when automatic mode is selected. It is not used to analyse visitors.
Editorial preview: __prerender_bypass enables authorised CMS previews. It is a session cookie, with no configured persistent expiry, and is deleted when leaving preview mode. It is not an analytics cookie.
5. How to accept, reject or change your choice
You can accept or reject analytics cookies using the notice displayed when visiting the website.
If you reject them or make no choice, this integration does not load analytics scripts or send measurement requests. You can continue browsing and viewing our properties.
You can change your choice or withdraw consent at any time under “Cookie preferences” in the footer.
Withdrawal stops measurement by this integration and, where possible, deletes its analytics cookies that are accessible from the website. It does not affect the lawfulness of processing carried out before withdrawal. You can also delete the website’s data through your browser.
If you clear your browser’s storage or use another browser or device, you may need to indicate your preferences again.
6. Analytics service provider
The analytics integration uses Google Analytics 4, a service provided by Google, only with your consent.
Providing this service may involve processing information outside the European Economic Area. You can consult the entities involved and the applicable processing terms and safeguards at:
https://business.safety.google/adsprocessorterms/
More information about how Google uses data when you use its partners’ websites:
https://policies.google.com/technologies/partner-sites?hl=en
7. Legal basis and your rights
The use of analytics cookies and associated processing is based on your consent. Storage used to remember your choice serves to manage and respect your preferences.
Where applicable, you can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to info@zolvillas.com.
When handling requests relating to browsing data, we may need additional information to locate the corresponding records.
You can also lodge a complaint with the Spanish Data Protection Agency:
Further information about the processing of personal data is available in our Privacy Policy.
8. Browser controls
You can view, block or delete cookies and other stored data through your browser’s settings.
Blocking or deleting necessary items may affect certain functions. Deleting the storage that remembers your preferences will cause the website to ask for your choice again.
9. Updates to this policy
We will update this policy when the technologies used, their purposes or their operating conditions change.
Where changes require it, we will request your consent again before activating the corresponding technologies.