1. What this policy covers
This policy explains the cookies and similar technologies used by edrink Private Company (Ι.Κ.Ε.), 11-13 Aristotelous St, Athens 104 32, Greece (support@edrink.gr, tel. +30 210 444 7831) on the edrink.gr website and in the edrink mobile app. It complements our Privacy Policy, which explains how we process personal data generally.
Cookies are small files a website stores on your device. Mobile apps generally do not use cookies; they use device identifiers and software development kits (SDKs), which the law treats similarly. Where consent is required under Greek Law 3471/2006, nothing runs until you give it.
On the website, your consent is collected and recorded through Cookiebot, a consent management platform provided by Usercentrics A/S, Copenhagen, Denmark, acting as our processor. Cookiebot shows you the consent banner, applies your choice, and keeps a record of it (Section 2.4).
2. Cookies on our website
edrink.gr uses three kinds of cookies: strictly necessary cookies, which run without consent because the site cannot work without them; statistics cookies (Google Analytics); and marketing cookies (Meta Pixel). Statistics and marketing cookies are set only if you accept them. No social media widget runs on our pages.
2.1 Strictly necessary
| Cookie | What it does | Set by | Duration |
|---|---|---|---|
| CookieConsent | Stores the choice you made in the consent banner so we do not ask again and so the site respects it on every page | Cookiebot, on the edrink.gr domain (first party) | 12 months |
| Security and load balancing | Protects the site against abuse and distributes traffic | Our hosting provider (first party) | Up to 24 hours |
| Form protection | Prevents automated abuse of forms (for example, the account-deletion form) | edrink (first party) | Session |
2.2 Statistics (only with your consent)
With your consent we use Google Analytics 4, provided by Google Ireland Ltd, to understand how the website is used: which pages are visited, where visitors come from, how long they stay, and, once the website offers reservations, how many visits lead to a booking. We use it in Google Consent Mode (basic mode): no Google script loads and no Google cookie is set until you accept. If you reject, nothing is sent to Google. We have configured Google Analytics not to store full IP addresses and not to share data with other Google services for advertising; analytics data is retained for 14 months.
| Cookie | What it does | Set by | Duration |
|---|---|---|---|
| _ga | Distinguishes visitors with a random identifier so that repeat visits are counted once | Google Analytics (third party) | 2 years |
| _ga_<container id> | Keeps the state of the current visit (session) for the same purpose | Google Analytics (third party) | 2 years |
2.3 Marketing (only with your consent)
With your consent we use the Meta Pixel, provided by Meta Platforms Ireland Ltd, to measure whether our ads on Facebook and Instagram led to a visit or a demo request, and to help Meta show our ads to people likely to be interested. It loads only after you accept "Marketing" in the consent banner; until then no Meta script runs and nothing is sent to Meta. If you send a demo request after accepting, our server also reports that request to Meta (Meta Conversions API), including your email address and phone number in hashed form, as described in our Privacy Policy (Sections 4 and 7).
When the Pixel loads, Meta can also read its own cookies on its own domains if you are logged in to Facebook or Instagram in the same browser, and link the visit to your Meta account. We and Meta are joint controllers for collecting this data on our website and sending it to Meta; Meta then uses it as an independent controller under its own Privacy Policy and Cookie Policy.
| Cookie | What it does | Set by | Duration |
|---|---|---|---|
| _fbp | Recognises your browser so Meta can measure visits and demo requests that follow our ads | Meta Pixel (third party) | 3 months |
| _fbc | Records the ad click that brought you to edrink.gr, when you arrived from one | Meta Pixel (third party) | 3 months |
The cookie declaration in Section 2.4 lists every cookie in use. Withdrawing your consent (Section 5) stops the Pixel and the reporting from our server from that point on.
2.4 The cookie declaration and your consent record
The consent banner's cookie declaration lists every cookie currently in use on edrink.gr, with its name, provider, purpose and duration. Cookiebot scans our website monthly and regenerates the declaration, so it is always current; if it ever differs from this policy, the declaration is the more recent and the more precise list, and we update this policy to match.
When you make a choice in the banner, Cookiebot records it so that we can demonstrate your consent as the law requires: a random consent ID, the date and time, which categories you accepted or rejected, your browser type, and your IP address with the last part removed. This record is kept for 12 months and then deleted. It is not linked to an edrink account.
Strictly necessary cookies do not require consent. Everything else is off until you accept it, and "Reject" is always as easy to find as "Accept".
2.5 Booking widget and edrink Manager
The edrink booking widget, including when a venue embeds it on its own website, loads Stripe's payment script, which sets cookies Stripe needs to prevent payment fraud (strictly necessary), and shows maps from Mapbox. In edrink Manager, the tool for venue staff, the Intercom support chat loads only when you open it.
3. App download links
The app download links on our website and in our campaigns are measured links provided by AppsFlyer. When you tap one, AppsFlyer's redirect records the click on its servers (the campaign the link belongs to, together with technical data such as your IP address and browser type) in order to route you to the correct app store and count clicks per campaign. Attributing a later app install to that click happens only inside the app, with the consent described in Section 4 and, on iOS, the App Tracking Transparency permission.
4. Identifiers in our app
The edrink app uses device identifiers and SDKs as follows:
| Technology | Purpose | Legal basis |
|---|---|---|
| Firebase (Google) | Core app infrastructure and delivering service messages you enabled (booking confirmations, reminders and similar transactional notifications). Marketing push notifications are sent only with the separate consent described in our Privacy Policy. | Necessary to provide the service you asked for |
| Google Analytics for Firebase | Understanding how the app is used (screens viewed, searches, session length) so we can improve it. | Your consent, given in the app's consent screen |
| Firebase Crashlytics (Google) | Crash reports to find and fix app crashes, without your name or contact details | Your consent, given in the app's consent screen together with analytics |
| AppsFlyer | Measuring which app-install campaigns work, using the mobile advertising identifier | Your consent, given in the app's consent screen and, on iOS, the App Tracking Transparency prompt |
The analytics, crash-reporting and attribution SDKs do not activate until you consent. You can change your choices at any time in the app's privacy settings. Analytics data is retained for 14 months, as set out in the retention table of our Privacy Policy; crash reports are kept for 90 days.
5. Your choices
- On the website: the consent banner on your first visit, and the Cookie settings link in the footer at any time, which reopens the banner so you can change or withdraw your choice. Withdrawing consent stops the statistics and marketing cookies from being set, and our server from reporting demo requests to Meta, from that point on; you can delete the cookies already on your device in your browser settings. You can also block or delete cookies in your browser; blocking strictly necessary cookies may stop parts of the site from working.
- In the app: the consent screen when you first open the app, and the privacy settings afterwards.
- On iOS: Settings > Privacy & Security > Tracking controls App Tracking Transparency for all apps.
- On Android: you can delete or reset your advertising ID in Settings > Privacy > Ads.
6. Changes to this policy
If we introduce new cookies or SDKs in a category that requires consent, we will update this policy and ask for your consent through the banner or the app's consent screen before anything runs. The date at the top always shows the current version.
Language. This policy is published in English and in Greek. In case of any discrepancy between the two versions, the English version prevails.
7. Contact
Questions about cookies or your data: support@edrink.gr. Your rights (access, deletion, objection, consent withdrawal and the rest) are described in our Privacy Policy, together with how to complain to the Hellenic Data Protection Authority.