Last updated: 6 September 2026
The operator of this website and the party responsible for the use of the cookies and similar technologies described in this policy is:
Cookies are small files that a website may store in a visitor’s browser or device. They can remember preferences, support website security and help measure how a website is used. We may also use similar technologies such as tags, pixels, local storage and consent signals.
This policy explains which technologies this website uses, who operates them, their purposes and how long they may remain active.
These are required to store your consent choices, protect the website and its forms from malicious traffic, and provide requested functions. They are not used for advertising and cannot be disabled through the cookie manager.
With your consent, Google Analytics 4 helps us understand statistically which pages are visited and how visitors interact with booking, telephone, email, WhatsApp and contact controls. A booking_start event records only a click leading to the BukyApp booking system; it does not confirm a purchase or payment.
With your consent, we use Google consent signals to measure whether visits or actions resulted from Google Ads campaigns. The Google Analytics property is linked to Google Ads, and selected events may be imported as secondary conversion actions. The verified configuration does not contain remarketing or personalised-advertising tags; ad_personalization remains denied.
Cloudflare Web Analytics collects aggregate visit and performance metrics without setting cookies or tracking individual visitors across websites. Because it does not store or read cookies, this service does not depend on acceptance of an optional category in the cookie manager.
| Cookie or technology | Operator | Category and purpose | Duration |
|---|---|---|---|
moove_gdpr_popup | Scuba Legends / GDPR Cookie Compliance (Moove) | Necessary. Stores the accepted or rejected categories so the choice is not requested on every page. | Up to one year. |
__cf_bm, when required by Cloudflare | Cloudflare | Necessary. Distinguishes legitimate from automated traffic and helps protect the website. | 30 minutes of inactivity. |
cf_clearance, only after a challenge or when pre-clearance is enabled | Cloudflare | Necessary. Stores proof that a security challenge was passed. | Set by the Cloudflare security configuration; it may vary. |
| Cloudflare Turnstile | Cloudflare | Necessary. Performs security checks to protect forms against bots. Cloudflare states that it does not access the content entered in form fields. | During the check; it may use cf_clearance when pre-clearance is enabled. |
| Cloudflare Web Analytics beacon | Cloudflare | Aggregate visit and performance measurement without cookies or individual tracking. | Does not set cookies. |
Google Tag Manager, GTM-MWZPKJ2X | Technical tag manager. It does not set cookies itself; it loads authorised tags according to the consent choice. | Does not set cookies itself. | |
_ga | Google Analytics 4 | Analytics. Statistically distinguishes visitors when Analytics is accepted. | Up to two years by default, subject to browser limits and the GA4 configuration. |
_ga_1V0Y7ZC3CK | Google Analytics 4 | Analytics. Maintains session state when Analytics is accepted. | Up to two years by default, subject to browser limits and the GA4 configuration. |
_gcl_*, where applicable | Google Ads / Google Analytics | Marketing and advertising measurement. May store information about an ad click to attribute a later action on the website. | Up to 90 days. |
| Google Consent Mode v2 | Scuba Legends / Google | Communicates choices for analytics_storage, ad_storage, ad_user_data and ad_personalization to Google tags. All are denied initially. | The choice is retained through the consent manager cookie. |
When Analytics is accepted, Google Analytics may collect data such as pages visited, date and time, approximate location, browser, device type, visit source and actions performed on the website. Configured events include booking_start, phone_click, email_click, whatsapp_click, contact_page_view and contact_submit.
The configured tags do not send a visitor’s name, email address, telephone number, form message or payment details to Google Analytics. Form submission is measured when the confirmation page is reached, without transmitting the form’s contents.
On your first visit, you may accept all categories, reject non-essential technologies, or configure Analytics and Marketing separately. Optional technologies remain disabled until you make an affirmative choice.
You can change or withdraw consent at any time through the permanent cookie-preferences control on the website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. You can also delete cookies through your browser settings.
Google and Cloudflare may process information outside the European Economic Area. Where applicable, that processing and those transfers are governed by the safeguards and mechanisms described in each provider’s contracts and policies. See Google’s information for sites using its services, the Google Privacy Policy, the Cloudflare Privacy Policy and the Cloudflare Data Processing Addendum.
Booking buttons lead to BukyApp, which operates on an external domain. Where permitted by the visitor’s consent choice, this website records the click that starts that journey, but it does not measure or confirm purchases or payments completed within BukyApp. Once you leave this website, the external provider’s cookie and privacy policies apply.
Links to WhatsApp, Facebook, Instagram, YouTube, Tripadvisor, telephone or email do not by themselves install those platforms’ cookies within this website. When you follow an external link, the destination service may process information under its own policies.
We may update this policy when the technologies, purposes, providers or applicable rules change. The date of the current version appears at the top. Questions about this policy may be sent to [email protected].
Technical and regulatory sources:
AEPD cookie guide
GA4 cookie usage
Google advertising cookies
Cloudflare cookies
Cloudflare Web Analytics
Cloudflare Turnstile
