Users who access the Vueling company’s website do not have the ability to configure the cookies that are installed on their computers.
What the company does not provide is a management system or cookie configuration panel that allows the user to delete them in a granular way. To facilitate this selection the panel would have to enable a mechanism or button to reject all cookies, another to enable all cookies or to be able to do it in a granular way in order to manage the preferences of each user. On this subject, it is considered that the information offered on the tools provided in the browsers of the computers to configure cookies would be complementary to the previous one, but insufficient for the intended purpose of allowing you to configure preferences in granular or selective form.
These facts constitute an infringement of Section 22.2 of the LSSI (Spanish Law on Information Society Services and Electronic Commerce), according to which: "Service providers may use of data storage and retrieval devices on recipients' terminal equipment, provided that they have given their consent after they have been provided with clear and complete information on their use, in particular , on the purposes of data processing".
Read the decision in Spanish here
For further information, please contact the Spanish DPA: firstname.lastname@example.org