Legal

Cookie policy.

The short version: two cookies keep the site online and safe, and two more count anonymous visits — and those last two only run if you say yes. We do not advertise to you, we do not sell anything about you, and there are no social media trackers anywhere on this site.

Last updated 3 August 2026

What a cookie is

A cookie is a small text file a website asks your browser to keep. Some are read back by the site itself (first-party), others by a company whose code the site includes (third-party). We also mention local storage below, which works much the same way from your point of view: a small value kept in your browser.

Cookies we cannot do without

This site is served through Cloudflare, which sits in front of it, filters malicious traffic and absorbs denial-of-service attacks. Those protections identify traffic using the cookies below. They carry no information about you as a person, they are not used for analytics or advertising, and they cannot be switched off while still reaching the site — which is why the law treats them as strictly necessary and does not require your consent for them.

In practice most visits set neither: they appear when Cloudflare’s protections actually need to act on a request.

Analytics — only if you agree

We use Google Analytics 4 to count visits and see which experiences people look at, so we know what to run more of. It is off until you accept, and if you decline, Google’s script is never even downloaded. IP addresses are anonymised by Google before any processing, and we have not enabled advertising features, remarketing or data sharing with Google’s advertising products.

Google Ireland Limited acts as our processor for this. Google may transfer data outside the EEA under the European Commission’s standard contractual clauses and the EU–US Data Privacy Framework. You can read Google’s own description of these cookies, and install their browser opt-out add-on if you would rather block Analytics everywhere at once.

If we later add a Google Business Profile or Google Ads tag — something we are considering so that enquiries from Google Maps can be attributed — it would introduce a further cookie (_gcl_au, up to 90 days). We will list it here and ask you again before it runs; that is what the version number on your saved choice is for.

What we keep in local storage

One value: konxa.cookie-consent, which records the choice you made above and when you made it, so we do not ask on every page. It stays on your device and is never sent to us or anyone else. Clearing your browser data removes it, and the notice will simply ask again.

Other services this site talks to

A few things load from other servers without setting any cookie. Your browser still reveals its IP address to them, in the same way it does to any site you visit, so they are worth naming:

• OpenFreeMap and Esri ArcGIS serve the map tiles on experience pages. No cookies, no accounts.
• Brevo delivers the two emails sent when you submit a booking request — one to us, one back to you. That happens on our server after you press send, so nothing is loaded into your browser and no cookie is involved.
• Typefaces are hosted on our own domain, so Google Fonts is never contacted, and there are no embedded videos, feeds, chat widgets or “like” buttons anywhere on the site.

Changing your mind

Use the buttons at the top of this page, or the Cookie settings link in the footer of every page, at any time. There is no penalty for saying no and no part of the site is withheld.

You can also manage or delete cookies in your browser directly — the settings usually sit under Privacy — including blocking them for konxa.gr specifically. Blocking the essential ones may mean Cloudflare asks you to complete a security check more often.

Your rights and who to ask

Konxa Experiences, based in Afytos, Halkidiki, is the controller for the data described here. Under the GDPR you can ask us what we hold, ask for it to be corrected or deleted, object to processing, or withdraw consent — withdrawal is the button above, and it takes effect immediately.

Write to us at [email protected]. If you are not satisfied with how we answer, you may complain to the Hellenic Data Protection Authority (dpa.gr) or the supervisory authority in your own country.