Website: https://hybo.app
1. CONTROLLER AND GENERAL INFORMATION
HYBO, HYBRID WORK SOLUTIONS, S.L., with Tax ID (NIF) B-44747301 and registered office at C/ Fontsanta, 46, 2nd Floor A, 08970 Sant Joan Despí (Barcelona) (hereinafter, “HYBO”), provides information about the use of cookies and similar technologies on the website https://hybo.app, its subdomains and its language versions (hereinafter, the “Website”).
This Cookie Policy complements the Website’s Privacy Policy and Legal Notice, permanently accessible from the footer.
2. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES
Cookies are files downloaded onto the user’s terminal equipment (computer, tablet or mobile phone) when accessing certain web pages, which allow information about browsing habits or the equipment itself to be stored and retrieved. Depending on the information they contain and how the equipment is used, they may be used to recognize the user.
Alongside cookies as such, the Website may use other technologies serving an equivalent purpose, such as tracking pixels, web beacons, local browser storage (local storage and session storage), device identifiers or fingerprinting techniques. All of these are subject to the same legal regime and to this Policy.
3. APPLICABLE REGULATIONS
The use of cookies is governed by Article 22.2 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), which requires the informed consent of the user for the storage and retrieval of data on their terminal equipment, unless it is strictly necessary for the provision of a service expressly requested by the user.
Where the use of cookies involves the processing of personal data, Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018, of 5 December (LOPDGDD), also apply. HYBO likewise applies the criteria set out in the Guide on the Use of Cookies of the Spanish Data Protection Agency and Guidelines 03/2022 of the European Data Protection Board on deceptive design patterns.
4. TYPES OF COOKIES
4.1. According to the entity that manages them
- Own (first-party) cookies: those sent to the user’s terminal equipment from a domain managed by HYBO and from which the requested service is provided.
- Third-party cookies: those sent to the user’s terminal equipment from a domain managed by an entity other than HYBO, which is the party that processes the data obtained.
4.2. According to how long they remain active
- Session cookies: these collect and store data only while the user is accessing the Website, and are deleted once the session ends.
- Persistent cookies: the data remains stored on the terminal equipment and may be processed for a period defined by the party responsible for the cookie.
4.3. According to their purpose
- Technical or strictly necessary cookies: these enable browsing and the use of the Website’s features, such as traffic control, session identification, access to restricted areas, security management or storing the user’s choice regarding the use of cookies. They do not require consent.
- Preference or personalization cookies: these allow information to be remembered so that the user can access the service with certain characteristics (language, regional settings or browser type). Where the choice is made by the user themselves, these are considered technical cookies and do not require consent.
- Analytics or measurement cookies: these allow the tracking and analysis of user behavior in order to measure the Website’s activity and introduce improvements. They require consent.
- Behavioral advertising and profiling cookies: these store information on user behavior obtained through continued observation of browsing habits, which makes it possible to develop a specific profile and tailor the content, commercial actions or advertising shown to users. They require consent.
5. LEGAL BASIS: USER CONSENT
With the sole exception of technical or strictly necessary cookies, the installation of cookies on the user’s terminal equipment requires their prior, free, specific, informed and unambiguous consent, expressed through a clear affirmative action.
On first accessing the Website, a consent notice or banner is displayed, managed through the Cookiebot platform, which provides information on the use of cookies and offers the user, at the same level and with equal ease of action, the following options:
- Accept all: gives consent for all categories of cookies.
- Reject all: denies consent for all categories other than those exempted, with only technical cookies being installed.
- Configure or customize: allows consent to be granted or denied on a granular basis for each category of cookies.
Browsing the Website, scrolling through the page or closing the notice does not, under any circumstances, amount to giving consent. Until the user expresses their choice, no cookies other than those that are strictly necessary will be installed.
The user may change or withdraw their consent at any time, as easily as it was given, through the cookie settings panel permanently accessible from the Website, without this affecting the lawfulness of the processing carried out prior to its withdrawal. Consent will, in any case, be requested again after twenty-four (24) months from when it was obtained, as well as when significant changes occur in the cookies used or in their purposes.
6. COOKIES USED AT HTTPS://HYBO.APP
The cookies used on the Website are identified below, grouped by purpose, indicating their ownership, description and retention period.
6.1. Technical or strictly necessary cookies (exempt from consent)
| Name | Owner / Provider | Description and purpose | Duration |
| CookieConsent | Own (Cookiebot) | Stores the status of the consent given by the user for each category of cookies and enables it to be evidenced pursuant to Article 7.1 of the GDPR. | 12 months |
| __cf_bm | Third party (Cloudflare) | Distinguishes between requests from humans and from automated systems (bots) in order to protect the Website and ensure the validity of usage measurements. | 30 minutes |
| _cfuvid | Third party (Cloudflare) | Enables the application of request rate limits per visitor for security and service stability purposes. | Session |
| pll_language | Own (Polylang) | Stores the language selected by the user (Spanish, English or Catalan) in order to display the Website in the chosen version. | 1 year |
| wordpress_logged_in_*, wp-settings-* | Own | Identify the session of the registered user and their display preferences within the Website’s private area. | Session / 1 year |
| __hs_opt_out, __hs_initial_opt_in, __hs_cookie_cat_pref | Third party (HubSpot Inc.) | Record the user’s choice regarding the use of cookies within the HubSpot system and prevent the notice from being shown again. | 6 / 13 months |
| intercom-device-id-*, intercom-session-*, intercom-id-* | Third party (Intercom R&D Unlimited Company) | Identify the device and the user’s conversation in the support chat widget, so that the conversation is maintained across pages and visits. | 1 week / 9 months |
6.2. Analytics or measurement cookies (require consent)
| Name | Owner / Provider | Description and purpose | Duration |
| _ga, _ga_* | Third party (Google Ireland Ltd.) | Record a unique user and session identifier in order to generate statistics on the use of the Website (Google Analytics 4). | 2 years |
| hubspotutk | Third party (HubSpot Inc.) | Persistently identifies the visitor and allows their browsing activity and form submissions to be linked to their contact record. | 6 months |
| __hstc | Third party (HubSpot Inc.) | HubSpot’s main tracking cookie. Records the domain, the timestamps of the first and most recent visit, and the number of visits made. | 6 months |
| __hssc | Third party (HubSpot Inc.) | Records sessions and the number of pages viewed within each session, for analytics purposes. | 30 minutes |
| __hssrc | Third party (HubSpot Inc.) | Determines whether the user has restarted their browser, in order to define the start of a new session. | Session |
| _hjSessionUser_*, _hjSession_*, _hjFirstSeen, _hjAbsoluteSessionInProgress | Third party (Hotjar Ltd.) | Record the user’s session and journey through the Website (heatmaps, session recordings and session counts) in order to analyze usability and introduce improvements. | 30 minutes / 1 year |
| _clck, _clsk, CLID | Third party (Microsoft Ireland Operations Ltd.) | Enable the analysis of browsing behavior through the Microsoft Clarity tool (heatmaps, session recordings and interaction metrics). | 1 day / 1 year |
6.3. Behavioral advertising and profiling cookies (require consent)
| Name | Owner / Provider | Description and purpose | Duration |
| dt_anon | Own (managed by Aidda as data processor) | Assigns a pseudonymized, persistent identifier to the visitor’s browser, which makes it possible to recognize them across visits and link the recorded browsing events (pages viewed, clicks on calls to action, scrolling and time spent). | 13 months |
| dt_aid | Own (managed by Aidda as data processor) | Stores the contact identifier in the customer relationship management system (HubSpot) when the visitor accesses the Website already identified, for example via a link in an electronic communication from HYBO. Enables browsing activity to be linked to the contact record in order to understand their interests and tailor commercial actions and communications. | 13 months |
| dt_as | Own (managed by Aidda as data processor) | Technical signature that validates the integrity and authenticity of the contact identifier stored in the dt_aid cookie. | 13 months |
| _fbp, _fbc | Own, installed by the Meta Platforms Ireland Ltd. pixel | Identify the visitor and the originating advertisement in order to measure the effectiveness of advertising campaigns and display personalized advertising on Meta’s platforms. | 3 months |
| _gcl_au | Own, installed by Google (Conversion Linker) | Stores information on ad clicks in order to measure conversions and attribute results to Google advertising campaigns. | 3 months |
| bcookie, lidc, li_sugr, UserMatchHistory, AnalyticsSyncHistory | Third party (LinkedIn Ireland Unlimited Company) | Identify the visitor in order to measure campaign effectiveness and display personalized advertising on LinkedIn. | 1 day / 1 year |
| IDE, test_cookie | Third party (Google Ireland Ltd. – DoubleClick) | Identify the browser in order to display remarketing ads on Google’s display network and measure their effectiveness. | 15 minutes / 13 months |
| _uetsid, _uetvid | Third party (Microsoft Ireland Operations Ltd.) | Identify the session and the visitor for conversion measurement and remarketing of Microsoft Advertising campaigns (UET tag). | 1 day / 13 months |
| MUID, MR, SM, ANONCHK | Third party (Microsoft Ireland Operations Ltd.) | Microsoft advertising identifier, shared between Microsoft Advertising and Microsoft Clarity, used for browser recognition, cross-domain synchronization and ad measurement. | 1 day / 13 months |
| VISITOR_INFO1_LIVE, YSC, VISITOR_PRIVACY_METADATA | Third party (Google Ireland Ltd. – YouTube) | Installed on pages that embed YouTube videos and used to estimate bandwidth, remember playback settings and measure video audience. | Session / 6 months |
7. THIRD PARTIES AND INTERNATIONAL DATA TRANSFERS
The use of third-party cookies means that the providers indicated in the preceding section process the data obtained in accordance with their own privacy policies, which the user may consult on their respective websites. Some of these providers are established outside the European Economic Area or may access the data from third countries, mainly the United States.
In such cases, international transfers are carried out under the mechanisms provided for in Chapter V of the GDPR, in particular the adequacy decision relating to the EU-U.S. Data Privacy Framework and, failing that, the Standard Contractual Clauses approved by the European Commission, supplemented with any additional measures that may be necessary.
Browsing data collected through the proprietary measurement system (dt_anon, dt_aid and dt_as cookies) is stored on infrastructure located in the European Union.
8. HOW TO MANAGE, DISABLE OR DELETE COOKIES
The user may grant, deny, change or withdraw their consent at any time through the cookie settings panel accessible from the Website.
Additionally, the user may allow, block or delete the cookies installed on their equipment through their browser’s settings. The procedure varies depending on the browser used:
| Browser | Link to the provider’s instructions |
| Google Chrome | https://support.google.com/chrome/answer/95647 |
| Mozilla Firefox | https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox |
| Microsoft Edge | https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09 |
| Safari | https://support.apple.com/en-us/guide/safari/sfri11471/mac |
| Opera | https://help.opera.com/en/latest/web-preferences/ |
The user should bear in mind that deleting cookies through the browser will also delete the cookie that stores their consent preferences, meaning the notice will be shown again on their next visit.
9. CONSEQUENCES OF DISABLING COOKIES
Refusing consent or disabling cookies does not prevent access to the Website or its content. However, it may affect the operation of certain features, the personalization of the browsing experience and HYBO’s ability to measure and improve the Website’s performance.
10. UPDATES TO THIS COOKIE POLICY
HYBO may amend this Cookie Policy as a result of changes to the cookies used, their purposes, applicable regulations or the criteria of the supervisory authorities. Users are advised to review it periodically.
Last updated: August 2026.