1. What this policy covers
This policy explains the cookies and similar technologies used by edrink Private Company (Ι.Κ.Ε.), 11-13 Aristotelous St, Athens 104 32, Greece (support@edrink.gr, tel. +30 210 444 7831) on the edrink.gr website and in the edrink mobile app. It complements our Privacy Policy, which explains how we process personal data generally.
Cookies are small files a website stores on your device. Mobile apps generally do not use cookies; they use device identifiers and software development kits (SDKs), which the law treats similarly. Where consent is required under Greek Law 3471/2006, nothing runs until you give it.
On the website, your consent is collected and recorded through Cookiebot, a consent management platform provided by Usercentrics A/S, Copenhagen, Denmark, acting as our processor. Cookiebot shows you the consent banner, applies your choice, and keeps a record of it (Section 2.4).
2. Cookies on our website
edrink.gr uses two kinds of cookies: strictly necessary cookies, which run without consent because the site cannot work without them, and statistics cookies (Google Analytics), which are set only if you accept them. We do not use advertising or social media cookies today, and no advertising pixel or social widget runs on our pages. Section 2.3 explains what happens if that changes.
2.1 Strictly necessary
| Cookie | What it does | Set by | Duration |
|---|---|---|---|
| CookieConsent | Stores the choice you made in the consent banner so we do not ask again and so the site respects it on every page | Cookiebot, on the edrink.gr domain (first party) | 12 months |
| Security and load balancing | Protects the site against abuse and distributes traffic | Our hosting provider (first party) | Up to 24 hours |
| Form protection | Prevents automated abuse of forms (for example, the account-deletion form) | edrink (first party) | Session |
2.2 Statistics (only with your consent)
With your consent we use Google Analytics 4, provided by Google Ireland Ltd, to understand how the website is used: which pages are visited, where visitors come from, how long they stay, and, once the website offers reservations, how many visits lead to a booking. We use it in Google Consent Mode (basic mode): no Google script loads and no Google cookie is set until you accept. If you reject, nothing is sent to Google. We have configured Google Analytics not to store full IP addresses and not to share data with other Google services for advertising; analytics data is retained for 14 months.
| Cookie | What it does | Set by | Duration |
|---|---|---|---|
| _ga | Distinguishes visitors with a random identifier so that repeat visits are counted once | Google Analytics (third party) | 2 years |
| _ga_<container id> | Keeps the state of the current visit (session) for the same purpose | Google Analytics (third party) | 2 years |
2.3 Marketing
None at present. If we add advertising technologies to the website in the future, for example to measure whether an advertising campaign led to a visit or a booking, they will be listed here and in the consent banner, they will be off by default, and the banner will ask for your consent before anything runs. Until you see them listed here, they are not in use.
2.4 The cookie declaration and your consent record
The consent banner's cookie declaration lists every cookie currently in use on edrink.gr, with its name, provider, purpose and duration. Cookiebot scans our website monthly and regenerates the declaration, so it is always current; if it ever differs from this policy, the declaration is the more recent and the more precise list, and we update this policy to match.
When you make a choice in the banner, Cookiebot records it so that we can demonstrate your consent as the law requires: a random consent ID, the date and time, which categories you accepted or rejected, your browser type, and your IP address with the last part removed. This record is kept for 12 months and then deleted. It is not linked to an edrink account.
Strictly necessary cookies do not require consent. Everything else is off until you accept it, and "Reject" is always as easy to find as "Accept".
2.5 Booking widget and edrink Manager
The edrink booking widget, including when a venue embeds it on its own website, loads Stripe's payment script, which sets cookies Stripe needs to prevent payment fraud (strictly necessary), and shows maps from Mapbox. In edrink Manager, the tool for venue staff, the Intercom support chat loads only when you open it.
3. App download links
The app download links on our website and in our campaigns are measured links provided by AppsFlyer. When you tap one, AppsFlyer's redirect records the click on its servers (the campaign the link belongs to, together with technical data such as your IP address and browser type) in order to route you to the correct app store and count clicks per campaign. Attributing a later app install to that click happens only inside the app, with the consent described in Section 4 and, on iOS, the App Tracking Transparency permission.
4. Identifiers in our app
The edrink app uses device identifiers and SDKs as follows:
| Technology | Purpose | Legal basis |
|---|---|---|
| Firebase (Google) | Core app infrastructure and delivering service messages you enabled (booking confirmations, reminders and similar transactional notifications). Marketing push notifications are sent only with the separate consent described in our Privacy Policy. | Necessary to provide the service you asked for |
| Google Analytics for Firebase | Understanding how the app is used (screens viewed, searches, session length) so we can improve it. | Your consent, given in the app's consent screen |
| Firebase Crashlytics (Google) | Crash reports to find and fix app crashes, without your name or contact details | Your consent, given in the app's consent screen together with analytics |
| AppsFlyer | Measuring which app-install campaigns work, using the mobile advertising identifier | Your consent, given in the app's consent screen and, on iOS, the App Tracking Transparency prompt |
The analytics, crash-reporting and attribution SDKs do not activate until you consent. You can change your choices at any time in the app's privacy settings. Analytics data is retained for 14 months, as set out in the retention table of our Privacy Policy; crash reports are kept for 90 days.
5. Your choices
- On the website: the consent banner on your first visit, and the Cookie settings link in the footer at any time, which reopens the banner so you can change or withdraw your choice. Withdrawing consent stops the statistics cookies from being set from that point on; you can delete the ones already on your device in your browser settings. You can also block or delete cookies in your browser; blocking strictly necessary cookies may stop parts of the site from working.
- In the app: the consent screen when you first open the app, and the privacy settings afterwards.
- On iOS: Settings > Privacy & Security > Tracking controls App Tracking Transparency for all apps.
- On Android: you can delete or reset your advertising ID in Settings > Privacy > Ads.
6. Changes to this policy
If we introduce new cookies or SDKs in a category that requires consent, we will update this policy and ask for your consent through the banner or the app's consent screen before anything runs. The date at the top always shows the current version.
Language. This policy is published in English and in Greek. In case of any discrepancy between the two versions, the English version prevails.
7. Contact
Questions about cookies or your data: support@edrink.gr. Your rights (access, deletion, objection, consent withdrawal and the rest) are described in our Privacy Policy, together with how to complain to the Hellenic Data Protection Authority.