Cookie Policy

1. What are cookies?

This website uses cookies and similar technologies that store and retrieve information when the user browses. Among other purposes, these technologies may be used to enable the technical operation of the site, remember certain preferences and obtain statistical information on how the website is used.

Cookies may be first-party cookies, when they are sent to the user’s device from a domain managed by ONA THERAPEUTICS, S.L., or third-party cookies, when they are managed by another entity. They may also be session cookies, if they are deleted when the browser is closed, or persistent cookies, if they remain for a set period of time.

2. What types of cookies does this website use?

According to the configuration currently published on www.ona-therapeutics.com, the website uses technical or strictly necessary cookies and declares the use of third-party cookies for analytics purposes, currently associated with Google Analytics.

Technical or necessary cookies

These are essential for the user to browse the website, use its basic functions and, where necessary, retain the privacy or settings preferences they have chosen. These cookies are exempt from the requirement to obtain consent when they are used solely to provide the service expressly requested by the user.

Analytics cookies

These allow us to count the number of users and to measure and statistically analyse how the website is used, in order to understand how it performs and to improve its content. These cookies will not be set until the user has given their consent.

3. Google Analytics and international transfers

If Google Analytics remains active, and always subject to the user’s prior consent, ONA THERAPEUTICS, S.L. may use this service to obtain browsing statistics. In the European Economic Area, Google Analytics is provided by Google Ireland Limited and may involve information being processed or accessed from the United States by Google group entities.

Google LLC states that it participates in the EU-U.S. Data Privacy Framework. Google also has standard contractual clauses and contractual data protection mechanisms in place for its services, where necessary.

Further information on Google’s privacy practices and transfer mechanisms is available at: https://policies.google.com/privacy and https://policies.google.com/privacy/frameworks

4. Legal basis and consent management

Strictly necessary technical cookies are used under the exemption provided for in Article 22.2 of Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI), where they are essential to enable communication or to provide a service expressly requested by the user.

Analytics cookies and any other non-exempt cookies will only be used on the basis of the user’s consent. Consent must be given by means of an affirmative action and may be granted, refused or configured by purpose.

Merely browsing the website does not constitute consent. The option to reject cookies must be available at the same time, at the same level and with similar visibility as the option to accept them.

5. How to change or withdraw your consent

The user may change or withdraw their consent at any time through the cookie settings panel, which is permanently accessible on the website. Withdrawing consent must be as easy as giving it.

Where the purposes of the cookies or the third parties using them change, this Cookie Policy will be updated and the user will be asked to make a new choice where necessary. As a matter of good practice, the user’s choice should not be kept for longer than 24 months without consent being renewed.

6. Browser settings

In addition, the user can allow, block or delete cookies through their browser settings. Browser-based management does not replace the consent mechanism that this website must provide, but it can be used as a complementary tool.

• Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Microsoft Edge: https://support.microsoft.com/en-us/edge/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use
• Safari: https://support.apple.com/en-us/safari

7. Updates to the Cookie Policy

ONA THERAPEUTICS, S.L. may update this Cookie Policy when there are changes to the cookies used, the providers, the purposes or the applicable legislation. Users are advised to review this information periodically.

Date of publication: 28 September 2026