Effective Date: 11 May 2026

Last Updated: 11 May 2026

Version 1.1 — Amendments shown in bold

This Cookie Policy explains how CELESTIAL BUSINESS, S.L., a private limited liability company (sociedad de responsabilidad limitada) incorporated under Spanish law (CIF: B56911621) (“Celestial Business”, “we”, “us”, “our”) uses cookies and similar technologies when you visit or interact with https://www.celestbe.com (the “Website”).

The Website presents Celestial Business as a provider of professional business intelligence, corporate data and SaaS solutions for business users. The Website displays a cookie consent banner with options such as Accept All, Reject All, and Manage Preferences.

This Cookie Policy should be read together with our Privacy Policy and Terms and Conditions.

1. Introduction

We use cookies and similar technologies to:

• operate the Website;

• remember user preferences;

• maintain security;

• understand Website usage;

• improve performance;

• support business communications;

• measure effectiveness of pages and campaigns;

• manage consent preferences.

Where required by applicable law, non-essential cookies are used only after your consent.

This Cookie Policy is published in accordance with our obligations under GDPR Article 13, Spanish Ley Orgánica 3/2018 (LOPDGDD), and the Spanish Ley 34/2002 de Servicios de la Sociedad de la Información y de Comercio Electrónico (LSSI-CE), which requires that users be informed about cookies prior to their placement.

2. What Are Cookies

Cookies are small text files placed on your device when you visit a website.

They can help websites:

• recognise your browser;

• remember settings;

• maintain sessions;

• improve functionality;

• analyse traffic;

• enhance security.

Cookies may be:

• First-party cookies – set by us.

• Third-party cookies – set by external providers.

• Session cookies – deleted when your browser closes.

• Persistent cookies – remain for a set period or until deleted.

3. Who Uses Cookies on This Website

Cookies on the Website may be placed by:

• Celestial Business;

• website hosting providers;

• security / CDN providers;

• analytics providers;

• tag management providers;

• embedded service providers;

• form handling tools;

• performance monitoring providers;

• marketing technology providers (if implemented).

Some third parties may process data independently under their own privacy notices.

Where third-party cookies involve the processing of personal data, we maintain Data Processing Agreements with the relevant providers in accordance with GDPR Article 28. Third-party providers acting as independent data controllers (rather than processors) are identified in the Cookie Categories Table in Clause 16, along with links to their own privacy and cookie notices.

4. Types of Cookies We Use

We may use the following categories:

• Strictly Necessary Cookies

• Preference / Functional Cookies

• Analytics Cookies

• Marketing Cookies (if used)

• Security Cookies

• Performance Cookies

Actual technologies may evolve over time.

5. Strictly Necessary Cookies

These cookies are essential for the operation of the Website and may be used without consent where legally permitted.

They may be used for:

• page navigation;

• load balancing;

• security controls;

• session continuity;

• consent preference storage;

• fraud prevention;

• form submission integrity.

Without these cookies, certain Website functions may not work properly.

Under Spanish LSSI-CE and the AEPD’s Cookie Usage Guide, strictly necessary cookies do not require prior consent. However, users must still be informed of their use and purpose through this Cookie Policy. We do not place any cookies that are not described in this Policy.

6. Preference / Functional Cookies

These cookies help remember choices such as:

• language selection (e.g. English / Español);

• region settings;

• cookie preferences;

• display choices;

• user interface settings.

They improve convenience and user experience.

Where these cookies are not strictly necessary for the provision of the service requested by the user, consent will be obtained before they are placed, in accordance with GDPR Article 6(1)(a) and LSSI-CE Article 22.

7. Analytics Cookies

Where enabled, analytics cookies help us understand how visitors use the Website, for example:

• pages viewed;

• visit duration;

• referral sources;

• navigation patterns;

• general device/browser trends;

• performance issues.

This may involve tools such as Google Analytics or similar services, where implemented.

Analytics cookies are non-essential in many jurisdictions and may require consent.

Where Google Analytics or equivalent services are used, we have configured such tools to: (i) anonymise IP addresses prior to storage; (ii) disable data sharing with Google for advertising purposes; and (iii) restrict data retention to the minimum period necessary. Where analytics processing involves transfers of data outside the EEA (for instance, to the United States), we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent transfer mechanisms.

8. Marketing Cookies (if used)

If implemented, marketing cookies may be used to:

• measure campaign performance;

• understand advertising effectiveness;

• personalise content;

• support remarketing;

• limit repeated ad displays.

We do not state that such cookies are currently active unless deployed.

Where legally required, these cookies will only be used after consent.

Marketing cookies will only be activated following affirmative, specific, informed and freely-given consent in accordance with GDPR Article 7 and LSSI-CE Article 22(2). Pre-ticked boxes, implied consent or consent inferred from continued browsing will not be treated as valid consent for marketing cookies. Consent may be withdrawn at any time without detriment.

9. Third-Party Cookies

Some Website functions may involve third-party services that can place cookies independently, such as:

• Google Analytics;

• Google Tag Manager;

• reCAPTCHA;

• Cloudflare or similar security/CDN services;

• embedded media providers;

• CRM or form tools;

• performance monitoring tools.

Third-party providers control their own technologies and may update them from time to time.

Please review their respective privacy and cookie notices where relevant.

A complete and up-to-date list of all third-party cookie providers operating on this Website is set out in the Cookie Categories Table in Clause 16. We review and update this list whenever third-party technologies are added, modified or removed. Where third-party providers act as independent data controllers, we are not responsible for their compliance with applicable data protection law, but we will only engage third parties whose privacy practices meet appropriate standards.

10. Cookie Consent Choices

The Website provides consent controls such as:

• Accept All

• Reject All

• Manage Preferences

These options are intended to help users manage non-essential cookies.

Where required by law:

• necessary cookies may operate without consent;

• non-essential cookies should only be activated after consent;

• you may refuse non-essential cookies.

Our consent management tool is configured to: (i) record a time-stamped log of each consent decision; (ii) prevent non-essential cookies from loading prior to consent; (iii) give equal prominence to the Accept All and Reject All options; and (iv) allow granular category-level consent. The consent interface has been designed in accordance with guidance issued by the AEPD and the European Data Protection Board (EDPB) on valid cookie consent.

11. How to Withdraw or Change Consent

You may withdraw or modify consent at any time by:

• reopening the cookie banner or settings tool (where available);

• selecting updated preferences;

• clearing cookies in your browser;

• blocking categories via browser controls.
  

Changes may not affect cookies already processed before withdrawal where lawfully permitted.

Withdrawal of consent will be processed promptly and will not affect the lawfulness of processing carried out prior to withdrawal. Withdrawing consent will not result in any detriment to the user’s access to the Website or Services, other than the loss of any functionality dependent on the relevant cookies.

12. Browser Controls

Most browsers allow you to:

• view stored cookies;

• block cookies;

• delete cookies;

• block third-party cookies;

• clear browsing data;

• configure site-by-site permissions.

Please note that blocking all cookies may affect Website functionality.

Useful browser support pages can usually be found from your browser provider.

13. Data Collected Through Cookies

Depending on category, cookies may collect or infer information such as:

• IP address;

• browser type;

• device identifiers;

• operating system;

• approximate location;

• language preference;

• timestamps;

• pages visited;

• referral URL;

• interaction events;

• consent status.
  

Where such data can identify an individual, it may be treated as personal data under applicable law.

Where cookie data constitutes personal data, it is processed in accordance with our Privacy Policy and the applicable legal bases described in Clause 14. The rights of data subjects, including rights of access, erasure, and objection, apply to such personal data as described in the Privacy Policy.

14. Lawful Basis for Cookie Processing

Where GDPR / Spanish data protection law applies, lawful bases are as follows:

Consent (Article 6(1)(a) GDPR)

For analytics, marketing or other non-essential cookies where required. Consent must be freely given, specific, informed and unambiguous. It is obtained through our consent management tool prior to placing non-essential cookies.

Legitimate Interests (Article 6(1)(f) GDPR)

For certain low-impact operational analytics or security uses where lawful and balanced. We conduct a Legitimate Interests Assessment (LIA) before relying on this basis and can provide details on request.

Legal Obligation / Compliance (Article 6(1)(c) GDPR)

Where required to demonstrate consent records or compliance controls.

Necessary for Requested Service (Article 6(1)(b) GDPR)

For cookies essential to provide core website functionality.

15. International Data Transfers

Some cookie-related data may be processed outside the EEA, UK or your jurisdiction, particularly where third-party providers operate internationally.

Where relevant, safeguards may include:

• adequacy decisions;

• Standard Contractual Clauses (SCCs) approved by the European Commission;

• UK transfer mechanisms;

• technical protections;

• contractual safeguards.

Where cookie data is transferred to the United States or other third countries, we verify that the recipient has implemented an appropriate transfer mechanism. For Google Analytics, we rely on the Standard Contractual Clauses entered into between Google Ireland Limited and Google LLC. Details of applicable transfer mechanisms are available on request.

16. Retention Periods / Cookie Duration

Cookie duration depends on type and provider.

Examples:

• session cookies: deleted when browser closes;

• consent cookies: may remain for months;

• analytics identifiers: may remain for limited recurring periods;

• preference cookies: may remain until expiry or deletion.

Exact durations may vary by implementation.

Cookie Categories Table:

This table is maintained and reviewed no less than annually and updated whenever cookie technologies are added, changed or removed. The most current version of this table is published on the Website.

17. Updates to This Cookie Policy

We may update this Cookie Policy periodically to reflect:

• legal developments;

• regulator guidance;

• technology changes;

• vendor changes;

• Website improvements;

• operational requirements.

The updated version will be posted on the Website with a revised “Last Updated” date.

Where changes are material, including changes that affect the categories of cookies used, the purposes of processing, or the identity of third-party providers, we will provide advance notice of not less than 30 days by prominent notice on the Website, and will re-obtain consent where required.

18. Language Versions

This Cookie Policy may also be made available in other languages for convenience, including Spanish.

In the event of conflict, inconsistency or ambiguity, the English version shall prevail, except where mandatory Spanish or EU law requires the Spanish-language version to govern, in which case the Spanish version shall apply to the extent required by law.

19. Contact Details

For questions about cookies, privacy or data rights:

CELESTIAL BUSINESS, S.L.

CIF: B56911621

Calle Juan de Mena 10, Madrid, 28014, Spain

Email: info@celestbe.com

Supervisory Authority (Spain): Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es

Cookie Policy