Cookie policy
Note: the registry details of the business (legal name, VAT number, GEMI) are still marked [ΣΥΜΠΛΗΡΩΝΕΤΑΙ] and are filled in from the admin panel.
1 · The short answer
This site uses no tracking cookies and no advertising cookies. There is no advertising network on it, no remarketing tag, no social plugin and no third-party analytics service. That is also why you are not asked to click through a consent banner: there is nothing to consent to.
What does exist is three small things that make the site work, and they are listed below in full.
2 · Exactly what is stored on your device
| Name | Type | What it does | Lifetime |
|---|---|---|---|
| xs_lang | Cookie | Remembers whether you chose Greek or English, so the site does not reset every time you open a page. It holds the value el or en and nothing else. It is not an identifier. | 1 year |
| XSC_SESS | Cookie | Session cookie, strictly necessary. It ties your browser to the anti-forgery token (CSRF) that protects the contact, trade-in, finance, parts and vehicle-enquiry forms. It is set only when a form is on the page and holds a random session id, no personal data. | Until you close the browser |
| xs_seen | sessionStorage | Not a cookie. Records that you have already seen the opening animation, so it does not play again on every page of the same visit. | Until you close the tab |
| xs_sid | sessionStorage | Not a cookie. A random, anonymous session identifier so the visit statistics can tell one visit from two. It is not tied to a person, it is never sent to a third party, and it disappears with the tab. | Until you close the tab |
One further cookie exists for the admin panel at /admin and is set only when the owner logs in. A visitor never receives it.
3 · Legal basis
Under Article 4(5) of Greek Law 3471/2006, which transposes the ePrivacy Directive, consent is not required for storage that is strictly necessary to provide a service you have asked for, nor for a preference you set yourself. XSC_SESS is strictly necessary for form security; xs_lang stores your own language choice. Neither is used to profile you.
4 · Statistics without cookies
We do count page views, but not with cookies. The counter runs on our own server: it records the page, the time, a rough device type, the referring domain and the anonymous xs_sid of the tab, and it stores your IP address only as an irreversible HMAC-SHA256 hash. If your browser sends Do Not Track, nothing is recorded at all. The data never leaves our server and is never used for advertising. Details are in the privacy policy.
5 · Third-party content
The typefaces are loaded from Google Fonts (fonts.googleapis.com, fonts.gstatic.com). Google does not set cookies for font files, but your IP address becomes known to Google in the act of downloading them. Nothing else on the site loads from a third party. The map and the messaging app open only when you click their links, and from that point their own terms apply.
6 · How to delete or block them
You control everything stored by this site from your own browser: Settings → Privacy → Cookies and site data, where you can view, delete or block cookies per site. Closing the tab is enough to clear xs_seen and xs_sid, and private/incognito browsing keeps nothing after the window closes.
Note what happens if you block everything: the forms will refuse to submit, because the security token cannot be checked without XSC_SESS, and the site will forget your language choice. Calling us on 693 333 3335 always works.
7 · Changes
If we ever add anything that stores data on your device, this page is updated first and the date at the top changes with it.