This Policy explains how we use cookies and similar technologies on the Loopster website, the purposes they serve and how you can control your choices. It should be read together with the Privacy Notice available on our website.
1Who we are
The data controller is “Loopster Private Company”, whose registered office is at 71 Grammou Street, Marousi, Attica, 15124, Greece, VAT number 802658620. For questions about this Policy or the processing of your data, contact info@loopster.gr.
2What cookies and similar technologies are
Cookies are small files stored on your device when you visit a website. They allow, for example, your choices to be remembered or the same browser to be recognised when it returns to the website. Some are deleted when the session ends, while others remain until they expire or you delete them.
This Policy also covers browser local storage, tracking tags and tracking pixels when used for corresponding purposes. First-party cookies are stored on the Loopster domain, while third-party cookies are associated with another provider’s domain. A first-party cookie may also be used by a third-party service, such as Google Analytics.
3Categories and purposes
Strictly necessary
These support the operation and security of the website or services you expressly request. They include storage of your cookie choices. They are used only to the extent technically necessary and do not depend on consent. This exemption does not cover statistical analysis or advertising tracking.
Statistics and traffic analysis
With your consent, we use Google Analytics 4 to measure traffic and understand how the website is used. For example, we examine which pages are viewed, where visits originate and which actions take place, such as selecting links or buttons. This information helps us improve the website’s content and usability.
The relevant data may include cookie identifiers, session information, pages and visit times, traffic sources, device and browser types, and approximate geographical area. We do not send names, email addresses, telephone numbers, delivery addresses, payment details or message content to Google Analytics. Online identifiers may constitute personal data even if they do not include your name.
Advertising and campaign measurement
Where these services are offered on the website, we request separate consent to measure advertising effectiveness, associate visits with campaigns and, where specifically provided for, create audiences or carry out remarketing. Consent to statistics does not constitute consent to these purposes.
Each such service is activated only after its specific provider, purposes, data and retention periods have been disclosed in “Cookie settings” and you have chosen to accept it. The general reference to this category does not mean that all available advertising providers are used.
4Cookies and retention periods
| Cookie or technology | Provider and purpose | Duration on your device | Category |
|---|---|---|---|
loopster_consent | Loopster — stores acceptance or rejection and choices by purpose | 6 months from saving the choice | Strictly necessary |
_ga | Google Analytics 4 — distinguishes visits from different browsers | Up to 6 months from installation | Statistics — with consent |
_ga_<identifier> | Google Analytics 4 — maintains session state | Up to 6 months from installation | Statistics — with consent |
These periods concern storage on your device. Browsers may impose shorter periods. The detailed list in “Cookie settings” supplements this Policy and shows each additional active cookie or similar technology, its exact name or name pattern, provider, domain, purpose, category and duration. You can view it before making your choice.
For user and event data covered by the relevant Google Analytics retention setting, we have set a retention period of 2 months, without resetting it on new activity. Google deletes the data through its periodic deletion process. This setting does not cover the service’s standard aggregated reports.
Acceptance and rejection choices are stored for the same period of 6 months. Minimal evidence of a choice, such as its time, notice version, selected purposes and a random identifier, is retained separately for up to 12 months from recording. It is not used for advertising tracking. Longer retention applies only where required for a specific legal obligation or to establish, exercise or defend a legal claim.
5How you give and change consent
On your first visit, you can select “Accept all”, “Reject optional” or “Cookie settings”. In the settings, you can accept or reject each available optional purpose separately and save your choices. Optional settings are initially switched off.
Until you consent to the corresponding purpose, the relevant analytics or advertising tools do not load or send data to their providers, including without cookies. Continuing to browse, scrolling or closing the banner does not constitute consent. You can use the website without accepting optional cookies.
At any time, you can open the permanent “Cookie settings” link in the footer and withdraw or change your consent. After withdrawal, future collection for the corresponding purposes stops and the relevant cookies that our website can delete are removed from your device. For any cookies on third-party domains, you can also use your browser settings. Withdrawal does not affect the lawfulness of earlier processing and does not automatically erase data already transmitted.
A new choice may be requested after the above period expires, or earlier if new purposes or providers are added that your consent does not cover. Changing your device or browser, or deleting the stored preferences file, may also require a new choice.
6Legal basis
Article 4(5) of Greek Law 3471/2006 applies to storing or accessing information on your device. For optional cookies and the associated processing of personal data, we rely on your consent under Articles 6(1)(a) and 7 of the GDPR.
For any personal data processed through strictly necessary functions, the basis is, as applicable, providing a service you requested under Article 6(1)(b), or our legitimate interest in security and proper operation under Article 6(1)(f). Keeping necessary evidence of consent is based on the accountability obligation under Articles 5(2) and 7(1), together with Article 6(1)(c) of the GDPR.
7Who receives data
Authorised Loopster personnel and technical support partners have access to the extent required for their duties. Google Analytics is provided by Google Ireland Limited, with involvement of Google companies and subprocessors, such as Google LLC in the United States, under the applicable data processing terms. Any additional providers are identified in detail in “Cookie settings” before activation.
Using Google services may involve processing outside the European Economic Area, including in the United States. Where required, the mechanisms under Chapter V of the GDPR apply, such as an applicable adequacy decision covering the recipient or standard contractual clauses with the necessary supplementary safeguards. You can request information about the safeguards applied at info@loopster.gr.
Google’s information on data use through partner websites: https://policies.google.com/technologies/partner-sites?hl=en. Information on international transfers: https://policies.google.com/privacy/frameworks?hl=en.
8Social networks and external content
A simple link to our social network page does not itself activate a tracking pixel on our website. If you follow the link, the external website’s policies apply. Embedded content using optional trackers loads only after your corresponding choice, with prior information about the provider and purpose.
9Your rights
In addition to changing your cookie settings, you can, subject to the GDPR’s conditions, request access, rectification, erasure, restriction or portability of your data and exercise the right to object where applicable. To exercise these rights, contact info@loopster.gr. To identify data associated with cookies, we may need the relevant identifier or other necessary information.
We normally respond within one month of receiving your request. If a lawful extension is necessary, we inform you within that month. You can also lodge a complaint with the Hellenic Data Protection Authority through https://www.dpa.gr.
10Changes to this Policy
We update this Policy when the technologies used or the relevant requirements change. The last updated date appears at the beginning. Where new consent is required, we request it before activating the new use.