Last updated: 15 October 2026
What cookies are
Cookies and similar technologies (e.g. browser local storage) are small files or entries stored on your device when you visit roomrack.gr.
Controller
ROOMRACK HOSPITALITY AE, VAT 802593892. Contact: info@roomrack.gr, +30 210 3000 921.
Categories
- Necessary — needed for the website to work securely and to store your choice. No consent required.
- Analytics — Google Analytics 4 (Google Ireland Ltd), via Google Tag Manager, for statistical measurement of traffic. The related tags run only if you give Analytics consent.
- Marketing — recording the campaign source of your visit (
rr_attr), so we know where a request you submit came from. Third-party advertising services (e.g. Google Ads, Meta, LinkedIn) are not used at present; if enabled, they will run only with Marketing consent and this policy will be updated before they are enabled.
Cookies and storage currently in use
| Name | Type | Provider | Category | Purpose | Duration |
|---|---|---|---|---|---|
__cf_bm | Cookie (HttpOnly) | Cloudflare, Inc. (hosting infrastructure) | Necessary | Protects the website and its forms from automated (bot) traffic | 30 minutes |
rr_consent_v1 | Local storage | RoomRack | Necessary | Stores your cookie choice | The choice is valid for 6 months; you are then asked again |
tsr-scroll-restoration-v1_3 | Session storage | RoomRack (navigation feature) | Necessary | Restores your scroll position when you return to a page | Until the tab is closed |
rr_attr | Session storage | RoomRack | Marketing | Campaign source (UTM) and external referring link; stored only with Marketing consent and sent only with a form you submit | Until the tab is closed |
_ga | Cookie | Google Ireland Ltd | Analytics | Distinguishes visitors | 2 years |
_ga_<ID> | Cookie | Google Ireland Ltd | Analytics | Maintains session state | 2 years |
Google Tag Manager loads the website's tags and does not set cookies itself. Form spam protection (hidden field, per-IP request limit, duplicate check) runs on the server and uses no cookies or storage on your device. Google Analytics cookies are set only after you give Analytics consent.
Services that may be enabled in the future
The services below are not active. Durations are indicative, based on provider information, and will be confirmed before any activation.
| Service | Provider | Indicative cookies | Indicative duration |
|---|---|---|---|
| Google Ads | Google Ireland Ltd | _gcl_au, _gcl_aw | 90 days |
| Meta Pixel | Meta Platforms Ireland Ltd | _fbp, _fbc | 90 days |
| LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company | li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory | From 1 day to 1 year |
Transfers outside the EEA
- Active providers: Google (Google Analytics 4, Google Tag Manager) and Cloudflare (hosting infrastructure) may process data such as IP address and technical device information outside the European Economic Area, in particular in the United States. These providers state transfer mechanisms in their data processing terms, such as certification under the EU–US Data Privacy Framework or Standard Contractual Clauses. Further information is available on request at info@roomrack.gr.
- Future services: if Meta or LinkedIn services are enabled, this policy will be updated with the relevant transfer information before activation.
Managing and withdrawing consent
You can change or withdraw consent at any time via “Cookie settings” at the bottom of every page. When you withdraw:
- the website immediately tells Google Tag Manager that consent is no longer given, so the related tags no longer run;
- the website deletes the Analytics (
_ga,_ga_<ID>) and Marketing cookies set on its own domain (roomrack.gr), and therr_attrentry; - cookies that belong to third-party domains (e.g. google.com) cannot be deleted by the website; you can delete them in your browser settings.
Withdrawal does not affect processing carried out before it.
Your rights
For your data-protection rights see the Privacy Policy. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).