We keep cookies to a minimum. Apart from those strictly needed to run the site, nothing is stored on your device until you choose.
This policy complements our Privacy Policy (opens in a new tab), which explains who we are and how we handle personal data more generally.
What cookies are
Cookies are small text files that a website stores in your browser. Similar technologies, such as tracking pixels, tags and browser storage, work in a comparable way, and “cookies” in this policy covers them too.
First-party cookies are set by this website. Third-party cookies are set by another company’s domain, for example Google or Meta, when their services run on our pages. Some cookies last only until you close your browser (session cookies); others stay for a set period.
Your consent
Under the EU ePrivacy rules, implemented in Croatia by the Electronic Communications Act, and under the GDPR, we need your consent before using any cookie that is not strictly necessary. When you first visit, a banner asks you to accept all, reject all or customise your choice by category. Rejecting is as easy as accepting, and the site works fully either way.
We store your choice in a first-party cookie called sc_consent for six months, then ask again. We also ask again if we add a new type of cookie or a new provider.
Google Consent Mode. We pass your choice to Google’s tags through Google Consent Mode (version 2). Until you agree, Google Analytics and Google Ads do not set or read cookies. They may still send limited cookieless signals, for example that a page was viewed or an application was submitted, without any cookie or advertising identifier, which Google uses to model campaign results in aggregate. The Meta Pixel does not load at all unless you allow advertising cookies.
The cookies we use
Strictly necessary · always on
Needed for the site and the application form to work securely and to remember your cookie choice. Legal basis: our legitimate interest in a secure, working website.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
sc_consent | This website | Remembers your cookie choices | 6 months | First-party |
__cf_bm, _cfuvid | HubSpot, via its network provider Cloudflare | Distinguish people from bots and apply rate limits in the application form | 30 minutes / session | Third-party |
_GRECAPTCHA | Google reCAPTCHA | Protects the application form from spam, if spam protection is active on the form | 6 months | Third-party |
Analytics · only with your consent
Google Analytics 4 shows us, in aggregate, how visitors find and use the site. Google processes this data on our behalf.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_ga | Google Analytics | Distinguishes one browser from another, to count unique visitors | 2 years | First-party |
_ga_<ID> | Google Analytics | Keeps track of the current visit (session) | 2 years | First-party |
Advertising · only with your consent
Google Ads and the Meta Pixel measure which adverts lead to applications and let us show relevant adverts on Google, YouTube, Facebook and Instagram. If you apply, a hashed version of your email and phone number is used to match your application to an advert (see section 04 of the Privacy Policy (opens in a new tab)).
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_gcl_au | Google Ads | Links ad interactions to visits and applications (conversion measurement) | 90 days | First-party |
_gcl_aw, _gcl_gb | Google Ads | Stores the ad click identifier when you arrive from a Google advert | 90 days | First-party |
IDE | Google (doubleclick.net) | Shows and measures adverts and builds remarketing audiences | Up to 13 months | Third-party |
test_cookie | Google (doubleclick.net) | Checks whether the browser accepts cookies | 15 minutes | Third-party |
_fbp | Meta | Identifies the browser for ad delivery, measurement and audiences | 90 days | First-party |
_fbc | Meta | Stores the ad click identifier when you arrive from a Facebook or Instagram advert | 90 days | First-party |
fr | Meta (facebook.com) | Delivers, measures and improves the relevance of adverts | 90 days | Third-party |
Providers occasionally rename or add cookies. We review this list regularly; the categories and your choices always apply to the provider as a whole.
Embedded content
- Application form. The form is provided by HubSpot and shown in a frame on our page. HubSpot may set the strictly necessary cookies listed above inside that frame. We do not run HubSpot’s own visitor tracking code on this site.
- Typefaces. The fonts are hosted on our own website, so loading them sets no cookies and sends nothing to third parties.
Changing your choice
You can change or withdraw your consent at any time with the link at the foot of every page. When you withdraw consent, we stop using those cookies straight away and delete the first-party ones we can reach (such as _ga, _gcl_*, _fbp). Third-party cookies can only be removed by you, in your browser.
You can also:
- block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop the application form from working;
- manage Google ad personalisation in My Ad Center (opens in a new tab), and install the Google Analytics opt-out add-on (opens in a new tab);
- manage Meta ad personalisation in your Meta ad preferences (opens in a new tab);
- use Your Online Choices (opens in a new tab) to opt out of interest-based advertising from many providers.
Changes and contact
We will update this policy when we change the cookies we use, and show the new date at the top. If the change needs your consent, the banner will ask you again.
Questions about cookies or your data: gdpr@san-canzian.hr, Sileo Resorts d.o.o., Ulica kneza Branimira 41/1, Zagreb, Croatia.