COOKIE POLICY — HAGIOTOPIA
Last updated: 12 August 2026
1. Purpose
This Policy explains the use of cookies and similar technologies on www.hagiotopia.com.
In Greece, cookie rules arise in particular from Greek Law 3471/2006, together with the GDPR and Greek Law 4624/2019.
2. What is a cookie?
A cookie is a small file or item of information stored on or read from a user’s device while browsing. Similar technologies may also remember a choice, provide functionality, measure Website use or enable third-party content.
3. Consent principle
Storing information or accessing information already stored on a user’s terminal equipment generally requires consent following clear information.
Consent is not required for operations strictly necessary to transmit a communication or provide an information society service expressly requested by the user.
Non-essential cookies must therefore not be placed before the user has made a choice.
4. Cookie categories
- Strictly necessary cookies
These enable essential functions such as security, navigation, consent management, sessions and booking/cart functions where applicable. They may be used without consent where statutory conditions are met.
- Preference/functionality cookies
These remember choices or improve experience. Their treatment depends on whether they are genuinely necessary; where not strictly necessary, consent must be obtained.
- Analytics/audience measurement
These help understand Website use. Unless their use falls within a recognised exemption, they are activated only after consent.
- Marketing/advertising
These may measure campaigns, personalise advertising or track browsing. They require consent where not strictly necessary.
- Third-party content and services
Maps, videos, social networks and other embedded services may place or read trackers. They must be blocked before consent where consent is required.
5. Cookie inventory — TO BE COMPLETED AFTER TECHNICAL AUDIT
The final table must be generated from technologies actually installed on Hagiotopia.
Name | Provider | Purpose | Category | Duration | Legal basis/consent
[TO BE COMPLETED]
[TO BE COMPLETED]
[TO BE COMPLETED]
Do not publish a generic list: the inventory must match cookies actually present on the Website.
6. Consent banner
On the first visit, where consent-based cookies are used, the User must be able to:
- accept non-essential cookies;
- refuse them with comparable ease;
- customise choices by category where appropriate;
- access sufficiently clear information before consenting.
No optional box or category should be pre-selected.
7. Withdrawal and modification of consent
Users must be able to change or withdraw consent as easily as they gave it, through a permanent link such as “Manage cookies” available on the Website.
Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
8. Duration of choices
Retention period for consent/refusal choice: [TO BE DETERMINED ACCORDING TO CONFIGURATION AND APPLICABLE GUIDANCE].
Individual cookie lifetimes are listed in the technical inventory.
9. Third-party cookies and transfers
Some providers may process data outside Greece or the EEA. Where personal data are transferred outside the EEA, Hagiotopia applies the GDPR rules on international transfers.
10. Browser settings
Browsers also allow users to delete or block cookies. Blocking strictly necessary cookies may impair or prevent Website functions. Browser settings do not replace the Website consent mechanism where consent is required.
11. Controller
[HAGIOTOPIA LEGAL NAME]
Address: [TO BE COMPLETED]
Privacy email: [TO BE COMPLETED]
12. Your rights
Where cookie-derived information constitutes personal data, the rights described in the Privacy Policy apply under the GDPR.
13. Updates
This Policy is updated when tools, purposes or legal requirements change. A new cookie audit should be carried out before launch and after any material change to the Website or marketing tools.
14. Contact
For questions: [PRIVACY EMAIL].
