Cookie Policy
DISCOVERLY P.C. (Private Company)
Effective Date: September 28, 2026 Version: 2.0 Last Updated: September 28, 2026
1. Introduction
This Cookie Policy explains how DISCOVERLY P.C. ("we", "us", "our") uses cookies and similar technologies, including browser local storage, when you visit our website at discoverly.gr, including the member area, the partner and organizer areas, and the DiscoverPass for Business area (collectively, the "Website").
This policy is provided in accordance with the EU ePrivacy Directive 2002/58/EC (as amended by Directive 2009/136/EC), the General Data Protection Regulation (EU) 2016/679 ("GDPR"), Greek Law 3471/2006 on the protection of personal data in electronic communications (as amended by Law 4070/2012), and Guidelines 1/2020 and Directive 1/2011 of the Hellenic Data Protection Authority on the use of cookies and trackers.
This version replaces version 1.0 of 18 February 2026.
2. What Are Cookies and Similar Technologies?
Cookies are small text files stored on your device when you visit a website. Local storage and session storage are browser facilities that hold small amounts of data in the same way, and the law treats them the same way as cookies. We use both.
Cookies may be first-party (set by us) or third-party (set by a provider). They may be session items (removed when you close your browser) or persistent items (kept for a defined period or until you delete them).
Our mobile applications do not use cookies. They store the equivalent information on your device, and the choices described here apply to them in the same way.
3. Legal Basis for Cookie Use
Under Greek Law 3471/2006 (Article 4, as amended by Law 4070/2012):
- Strictly necessary cookies and storage are exempt from the consent requirement, because they are essential for a service you have explicitly requested.
- All other categories require your prior informed consent before anything is placed on your device.
Where cookies involve the processing of personal data, the GDPR legal basis is your consent (Article 6(1)(a)), unless the processing is strictly necessary for a service you requested, in which case it is the performance of our contract with you (Article 6(1)(b)) or our legitimate interest in the security of the Website (Article 6(1)(f)).
4. Our Consent Banner
When you first visit the Website, a consent notice appears with three equally prominent choices: Accept all, Reject all, and Manage preferences. Nothing beyond the strictly necessary category is placed until you make a choice. Rejecting is exactly as easy as accepting, and the notice is not pre-ticked.
We record your choice, the date you made it and the version of the notice you were shown, so that we do not ask again on every visit and so that we can evidence your consent. You can change or withdraw your choice at any time using the Cookie settings link in the footer of any page, and the change takes effect immediately.
The notice is shown to visitors in the EU, the EEA, the United Kingdom and Switzerland, and also whenever we cannot determine the country, which is the cautious choice.
5. Categories We Use
The consent banner offers three categories: strictly necessary, analytics and marketing. Today, no analytics or marketing script is loaded on the Website at all. The analytics toggle is reserved for Google Analytics 4, which is not yet active, and the marketing toggle is currently empty. When analytics is activated, we will update this policy and ask for your consent again before anything is placed.
5.1 Strictly Necessary (always active, no consent required)
These are required for the Website to work and cannot be switched off.
| Item | Provider | Purpose | Storage and duration |
|---|---|---|---|
| Sign-in session tokens | discoverly.gr (Supabase authentication) | Keep you, or your partner, organizer or business account, signed in, and secure the session. Includes the access token and the refresh token | Local storage and, where server-side rendering requires it, a first-party cookie. Access token about 1 hour, refresh token until you sign out or it expires |
| "Remember me" preference | discoverly.gr | Records whether you asked us to keep you signed in on this device after you close the browser. If you do not choose it, the session ends with the browser | Local storage, until you sign out or clear it |
| Language preference | discoverly.gr | Remembers whether you use Greek or English, so the Website loads in the right language | Local storage or a first-party cookie, up to 1 year |
| Consent record | discoverly.gr | Stores your cookie choice, its date and the version of the notice, so we do not ask again and can evidence your consent | Local storage or a first-party cookie, up to 12 months |
| Security and anti-abuse | discoverly.gr | Protects forms and requests against cross-site request forgery and automated abuse | Session |
| Google Sign-In transient cookies | Google LLC | Set by Google only during the sign-in flow you started, and removed when it finishes. Strictly necessary for the authentication service you requested | Transient, controlled by Google |
Error monitoring. We use Sentry to find and fix faults on the Website. This runs on our legitimate interest (Article 6(1)(f) GDPR), not on consent, sets no cookie and no browser storage item, and does not use session replay. See our Privacy Policy for what an error report contains and how long we keep it.
5.2 Analytics (optional, consent required, not yet active)
The analytics toggle in the consent banner is reserved for Google Analytics 4, which is not yet active. No analytics script is loaded and no analytics cookie is set today, regardless of the choice you make in the banner. The table below shows the cookies Google Analytics 4 would set once it is activated.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google (Google Analytics 4) | Distinguishes unique users with a randomly generated identifier, for visitor, session and campaign statistics | 2 years |
_ga_* | Google (Google Analytics 4) | Maintains session state across pages within a visit. The suffix varies per property | 2 years |
_gid | Google (Google Analytics 4) | Short-term distinction of users for aggregated statistics, where enabled | 24 hours |
When we activate Google Analytics 4, it will be off unless you allow it, and will be removed or stop being written when you withdraw consent. We will run it with IP addresses truncated, with Google Signals and advertising features switched off, and with data sharing for advertising purposes disabled, and we will not link analytics data to your account in order to advertise to you. Before it starts collecting data, we will update this Cookie Policy and ask for your consent again.
5.3 Advertising and Marketing
We do not use advertising, remarketing or social advertising cookies, and no such tools are present on the Website. Where the consent notice offers a separate marketing category, that category is currently empty: nothing is placed under it whether you allow it or not. If this changes, we will update this policy and ask for your consent before anything of that kind is placed.
6. Maps and Embedded Content
Venue pages and the explore map use Google Maps. When a map loads, your browser contacts Google, which receives your IP address and may set or read cookies on google.com under its own privacy policy. We load maps only on pages and views where a map is part of what you asked to see, and we do not use Google Maps to profile you. Place information and place photographs shown on venue pages come from the Google Places service and are governed by Google's terms.
See Google's Privacy Policy for how Google processes this data.
7. Managing Your Preferences
7.1 On the Website
Use the Cookie settings link in the footer of any page, in the member area and in the partner, organizer and business areas. Changes apply immediately, and withdrawing consent is as easy as giving it.
7.2 Withdrawing Consent
Withdrawal does not affect the lawfulness of processing carried out before it. You can withdraw by changing your preferences in the Cookie settings panel, by deleting cookies and site storage in your browser, or by contacting privacy@discoverly.gr. If you clear your browser storage, your consent record is cleared too and the notice will appear again.
7.3 Browser Controls
You can also block and delete cookies and site data in your browser. Blocking strictly necessary items will prevent you from signing in and may break the Website.
- Google Chrome: Clear, enable and manage cookies in Chrome
- Mozilla Firefox: Enhanced Tracking Protection in Firefox
- Apple Safari: Manage cookies and website data in Safari
- Microsoft Edge: Delete cookies in Microsoft Edge
7.4 Google Analytics Opt-Out
You can opt out of Google Analytics across all websites with the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
8. Data Collected Through Cookies
Cookies and similar storage on the Website may involve:
- IP address, truncated for analytics
- Browser type and version, and operating system
- Referring URL, pages visited and time spent on each page
- Language preference and consent choice
- Session and user identifiers
Where this is personal data under the GDPR, it is processed in accordance with our Privacy Policy.
9. Third-Party Services That May Set Cookies
| Service | Provider | Purpose | Privacy policy |
|---|---|---|---|
| Google Analytics 4 | Google LLC | Website usage statistics, with consent; not yet active | Link |
| Google Maps and Places | Google LLC | Maps, place search and place details | Link |
| Google Sign-In | Google LLC | Authentication you initiate | Link |
10. International Data Transfers
Some of the services above may transfer data outside the European Economic Area. Such transfers are made under Chapter V of the GDPR, relying on European Commission adequacy decisions where applicable, including the EU-U.S. Data Privacy Framework, on Standard Contractual Clauses, or on other appropriate safeguards under Article 46 GDPR.
11. Your Rights
In relation to personal data processed through cookies you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)). To exercise them, contact privacy@discoverly.gr.
12. Right to Lodge a Complaint
Hellenic Data Protection Authority Kifisias 1-3, 115 23 Athens, Greece Tel: +30 210 6475600 Website: www.dpa.gr Email: contact@dpa.gr
13. Changes to This Policy
We may update this Cookie Policy to reflect changes in our practices, technology or the law. Material changes will be announced on the Website and, where required, we will ask for your consent again. The Effective Date and version above show when it was last revised.
14. Contact Us
DISCOVERLY P.C. Privacy: privacy@discoverly.gr General enquiries: support@discoverly.gr Website: discoverly.gr