When you first visit the site, a banner lets you accept all cookies, allow only the necessary ones, or choose by category. Analytics and marketing cookies are not set until you accept them, and Google tags run in consent mode without setting cookies or storing identifiers until then. Your choice is stored in the crr_consent cookie for 180 days and can be changed at any time under Cookie settings, also found in the footer of every page. We keep a record of each consent choice (time, choice, an anonymised browser and IP fingerprint) for 12 months to demonstrate compliance.
Necessary cookies keep the site and the booking process working and need no consent. Analytics cookies (Google Analytics 4) tell us which pages are visited and how bookings progress; no advertising profiles are built from them. Marketing cookies (Google Ads, Meta Pixel) measure whether an advertisement led to a booking and may be used to show you relevant ads on those platforms.
If you have accepted marketing cookies and complete a booking, a SHA-256 hash of the email address used for the booking is passed to Google Ads so that the booking can be matched to an advertisement click (Enhanced Conversions). Google cannot recover the address from the hash; it can only compare it with addresses it already holds in the same hashed form. Without marketing consent nothing is sent.