Cookie Policy
Trenes.com | Version: September 18, 2026

1. Holder and purpose
This policy informs about the cookies and similar technologies used on www.trenes.com, owned by Online Travel Solutions, S.L., VAT number B-66144098, located at Calle Filipines, number 1, 08027 Barcelona, Spain. Contact for privacy: info@trenes.com.
You can accept, reject or configure non-necessary technologies from the preferences panel. You can also change your choice or withdraw consent through the permanent access "Configure cookies".

2. What are cookies and similar technologies
They are mechanisms that allow storing information on your device or accessing it when you use a website. They include browser cookies and local storage, among other technologies. They can be used to maintain a session, remember a choice, secure an operation, measure page usage, or display advertising.
Some identifiers and browsing data may allow the indirect identification of a person and, therefore, constitute personal data. Not all cookies are anonymous nor do they all have the same purpose.
Session cookies disappear at the end of the session; persistent cookies remain for the specified period or until they are deleted. In local storage, there may not be an automatic expiration by the browser: the period and effective deletion rule depend on the service using it and are specified in the inventory.

3. Categories and purposes

3.1. Technical or strictly necessary
They allow the operation of requested functionalities, session and reservation management, security, or the preservation of your privacy preferences when strictly necessary for them. They do not require consent if they meet the exemption requirements of article 22.2 of Law 34/2002.

3.2. Preferences or optional functionalities
They allow remembering choices or providing additional functions. A user-chosen preference, such as language, may be exempt when used exclusively to cater to that choice and legal requirements are met. Other uses of personalization and functions incorporating non-necessary tracking require the corresponding choice in the panel.

3.3. Analytics and measurement
They allow understanding site usage, visited pages, interactions, and the operation of processes to analyze and improve the service. The inventory identifies measurement services and, when applicable, session analysis services.
Technologies in this category subject to consent will remain disabled until accepted. Any exemption for audience measurement will only apply if the specific processing meets all legal requirements and is adequately informed; it is not presumed for any analytics tool.

3.4. Advertising and tracking
They allow measuring conversions and campaigns, linking advertising interactions, and displaying interest-based ads. They may involve shared identifiers between services and browsing profiles. They require prior consent in legally foreseen cases and are not necessary to purchase a ticket.
Choosing a category does not authorize purposes other than those explained nor does it replace any additional consents that may be required.

4. Inventory of technologies and providers
The inventory of technologies is part of this policy. For each technology used, the name, storage type, provider or controller, purpose, domain, effective duration, category, and, when applicable, international transfers and provider privacy information will be provided.
The CookieFirst declaration is published at https://www.trenes.com/cookies.php. The permanent access "Configure cookies" will allow you to check the purposes and modify your preferences.
The inventory will identify CookieFirst, Google, Microsoft, and Meta tools that are active and any other technology used, along with the legal identity and function of each provider.
The inventory date reflects its last verification. Introducing a new purpose or provider requiring consent will not be authorized by a previous acceptance unrelated to that use.

5. Acceptance, rejection, and configuration
On first access, options will be offered for "Accept all", "Reject non-necessary", and "Configure". The rejection option will be presented in the same layer and with accessibility and visibility equivalent to acceptance.
You can accept only the purposes you wish. Non-necessary options will not be pre-checked. Continuing to browse, closing the notice, creating an account, or making a purchase do not constitute consent to these technologies.
Cookies and device access subject to consent will not be activated before obtaining it for the corresponding purpose. The fact that a tool does not store a cookie alone does not exclude that other device accesses or data processing may require consent or other legal authorization.
Rejection will not prevent browsing or contracting through necessary functions. Some optional functions may not be available if they depend on rejected technologies; this will be informed when requesting their use.

6. Change and withdrawal of consent
You can modify your preferences or withdraw consent at any time through "Configure cookies", without greater difficulty than providing it. Withdrawal will stop future uses based on that consent, without affecting the legality of previous ones.
The panel will apply the new choice and necessary technical measures will be taken to prevent new unauthorized uses. Some third-party cookies or stored data may require deletion through browser settings or exercising rights against the corresponding controller; this does not allow continued use against the expressed choice.
Your preferences will be retained for the configured period in CookieFirst, which will be expressly indicated in the panel before saving the choice. A new choice will be requested when necessary by the configured period or by significant changes in purposes or third parties, without silence being interpreted as acceptance.

7. Consent management platform
Trenes.com uses CookieFirst, a service of Digital Data Solutions B.V., located at Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands, to collect and apply preferences and record your choice.
CookieFirst records the choice, its technical identifier, date, time, page, and browser and device data. According to information published by Trenes.com and CookieFirst, an anonymized version of the IP address and an approximate location are stored. The provider identifies Artia International S.R.L. (IP-API), in Romania, to determine country and region. This location does not involve requesting the precise GPS location of the device.
The data necessary to document and respect preferences are processed to comply with applicable obligations, in accordance with article 6.1.c) of the GDPR. The provider will act on behalf of Trenes.com in providing this service according to the respective processing agreement. Storage and evidence retention periods are indicated in the inventory and in the Privacy Policy.

8. Transfers, storage, and rights
Certain providers may process data outside the European Economic Area. The transfers actually made, recipients, countries, and guarantees are identified in the inventory and in the privacy policy's transfers section. Consent to install cookies alone does not constitute a valid guarantee for all international transfers.
The duration of each technology and the retention periods or criteria for associated data are indicated in those documents. To exercise your rights, you can contact info@trenes.com. You can lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority.

9. Browser settings and updates
You can also block or delete cookies and other local data through your browser's privacy options. If you delete consent preferences, a new choice may be requested. Blocking strictly necessary elements may prevent certain requested functions.
Browser settings complement the website's acceptance and rejection options. This policy and the inventory will be updated when the services used change, indicating the date of the current version.