Cookie Policy
DISCOVERLY P.C. (Private Company)
Effective Date: October 16, 2026 Version: 2.1 Last Updated: October 16, 2026
1. Introduction
This Cookie Policy explains how DISCOVERLY P.C. ("we", "us", "our") uses cookies and similar technologies when you visit discoverly.gr, including the member area, the partner and organizer areas and the DiscoverPass for Business area (the "Website"), and when you use our mobile app.
It is provided under the EU ePrivacy Directive 2002/58/EC (as amended by Directive 2009/136/EC), the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Greek Law 3471/2006 (as amended by Law 4070/2012), and Guidelines 1/2020 and Directive 1/2011 of the Hellenic Data Protection Authority.
This version replaces version 2.0 of 28 September 2026.
2. A Few Words First
- Cookie: a small text file a website stores in your browser.
- Session and persistent: a session item disappears when you close the tab or browser; a persistent item stays until it expires or you delete it.
- First party and third party: first party items are set by discoverly.gr; third party items are set by another company whose service the page uses, such as Google.
- Local storage and session storage: places in your browser where a website keeps small pieces of data. The law treats them like cookies, and so do we.
- Pixel: a tiny invisible image or script call that tells a provider a page was viewed. We do not use advertising pixels.
3. Legal Basis
Under Article 4 of Greek Law 3471/2006, strictly necessary items do not need your consent, because without them the service you asked for cannot work. Everything else needs your prior consent, and nothing beyond the strictly necessary category is placed until you give it.
Where personal data is involved, the GDPR legal basis is your consent (Article 6(1)(a)), or, for strictly necessary items, the performance of our contract with you (Article 6(1)(b)) or our legitimate interest in keeping the Website secure (Article 6(1)(f)).
4. Your Choices
On your first visit a notice offers Accept all, Reject all and Manage preferences, all equally easy to use. Accept all turns on every category below; Save choices in Manage preferences keeps only the categories you switched on. Nothing is pre-selected.
We record your choice, its date and the version of the notice, so we do not ask on every visit and can show that you consented. We ask again every 12 months. Your choice is also recorded on our servers, with a random device identifier and, when you are signed in, your account. You can change your choice at any time with Cookie settings in the footer of every page or with the switches at the end of this page, and the change applies immediately.
The notice is shown in the EU, the EEA, the United Kingdom and Switzerland, and whenever we cannot tell the country.
5. Categories and What We Store
We use three categories: Strictly necessary, Statistics and Personalisation.
5.1 Strictly Necessary (always on)
| Name | Purpose | Duration | Third party with access |
|---|---|---|---|
sb-umdanxxdtatmmxlhjtqy-auth-token (local storage) | Keeps you signed in and secures your session | Access token 1 hour, renewed until you sign out | None |
dp-remember (local storage) | Remembers whether you asked to stay signed in on this device | Until you sign out | None |
dp-session-open (session storage) | Signs you out when the browser closes, if you did not ask to stay signed in | Until you close the browser | None |
dp.auth.next, dp.auth.popup-state, dp.auth.opener-origin (session storage) | Brings you back to the right page after signing in and protects the sign-in flow | Until sign-in finishes or the tab closes | None |
dp-lang (local storage) | Remembers Greek or English | Until you clear browser data | None |
dp-theme (local storage) | Remembers light, dark or system appearance | Until you clear browser data | None |
dp-consent-v2 (local storage) | Stores your cookie choices, their date and the notice version | Until you change them or clear browser data | None |
dp.auth.signup-marketing (session storage) | Carries the offers-by-email box you ticked at sign-up until your account is created | Until sign-up finishes or the tab closes | None |
dp-phone-code-sent-at (session storage) | Remembers when a phone verification code was sent, for the resend countdown | Until you close the tab | None |
dp-chunk-reload (session storage) | Reloads the page once after we publish an update, so it does not break | 10 seconds, or until you close the tab | None |
dp-visit-prompted (local storage) | Remembers which visits we already asked you to review, so we ask only once | Until you clear browser data | None |
partner-dashboard-venue (local storage) | Partner area only: remembers which venue you were managing | Until you clear browser data | None |
| Google Sign-In cookies | Set by Google only during a Google sign-in you start | Removed when the sign-in finishes |
Error monitoring. We use Sentry to find and fix faults. It runs on our legitimate interest, sets no cookie and no browser storage, and does not record sessions. See the Privacy Policy.
5.2 Statistics (with your consent)
Google Analytics 4 counts visits and pages so we can see how the Website is used. Google receives page views by page type (never the venue or what you searched), sign-ups, bookings by venue category, interest in the membership, and the start of a membership checkout, a purchase or a free trial with the plan and its price (never payment details). Google Signals and advertising features are switched off.
| Name | Purpose | Duration | Third party with access |
|---|---|---|---|
_ga | Tells visitors apart with a random identifier | 13 months | |
_ga_GLSDY9Z4SX | Keeps the state of your visit across pages | 13 months |
We set these cookies to expire after 13 months, shorter than Google's default. When you turn Statistics off, we stop Google Analytics and delete these cookies. You can also use Google's opt-out add-on.
5.3 Personalisation (with your consent)
We record what you view, search, save and book on Discoverly to recommend places you will like. The records are kept by us, not by a third party. What we record and for how long is in Section 3.5 of the Privacy Policy.
| Name | Purpose | Duration | Third party with access |
|---|---|---|---|
dp-anon-id (local storage) | A random identifier for this browser, so your activity can shape recommendations | Until you turn Personalisation off or clear data | None |
dp-session (session storage) | Groups the activity of one visit; a new visit starts after 30 minutes idle | Until you close the tab | None |
dp-identified (local storage) | Remembers that this browser has already been linked to your account once | Until you turn Personalisation off or clear data | None |
dp-track-pending (session storage) | Keeps activity that could not be sent when you left a page, so it is sent on the next page instead of being lost | Until it is sent or the tab closes | None |
dp-venue-source (session storage) | Remembers how you reached a venue page (list, map, search) | Until the venue page opens or the tab closes | None |
When you turn Personalisation off, we stop recording, delete these items and start with a new identifier if you turn it on again. Withdrawing consent stops collection and deletes the activity already recorded: on all your devices if you are signed in, or on this device if you are not.
5.4 No Advertising
We use no advertising, remarketing or social media cookies or pixels, so there is no marketing category. If that changes, we will add one, update this policy and ask for your consent first. Whether we may send you offers by email, SMS or push notification is a separate choice in your account, in Profile > Communication choices, also linked from the cookie notice.
6. Maps and Embedded Content
Venue pages and the explore map use Google Maps. When a map loads, your browser contacts Google, which receives your IP address and may set or read its own cookies under Google's Privacy Policy. We load maps only where a map is part of what you asked to see.
7. Mobile App
The app does not use browser cookies. It keeps the equivalent information in your phone's storage: your sign-in, language and choices (strictly necessary). It uses no third-party analytics. With your consent it keeps our own activity records for Personalisation, with the same rules as the Website; this is the only way we measure how the app is used. You can change your choices at any time in Profile > Privacy settings.
8. Managing Your Choices
- On the Website: Cookie settings in the footer, or the switches at the end of this page.
- In the app: Profile > Privacy settings.
- In your browser: you can block or delete cookies and site data. Blocking strictly necessary items will stop you from signing in.
Withdrawing consent does not affect what was lawfully done before. If you clear your browser data, your choices are cleared too and the notice appears again.
9. International Data Transfers
Google may process data outside the European Economic Area. Such transfers rely on Chapter V of the GDPR, including the EU-U.S. Data Privacy Framework adequacy decision and Standard Contractual Clauses.
10. Your Rights
You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)). Contact privacy@discoverly.gr.
You can also complain to the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, Greece, tel. +30 210 6475600, www.dpa.gr, contact@dpa.gr.
11. Changes to This Policy
We update this policy when our practices, technology or the law change. Material changes are announced on the Website and, where required, we ask for your consent again. The date at the top shows the last update.
12. Contact Us
DISCOVERLY P.C. Privacy: privacy@discoverly.gr General enquiries: support@discoverly.gr Website: discoverly.gr
Your choices
Sign-in session, language and your saved consent choice. Required for the app to work.
Accept all turns on every category. Save choices keeps only the ones you switched on.