Cookie Policy
Version 1.1 — 2 September 2026. English (binding original).
1. About this Cookie Policy
This Cookie Policy explains how Tebura BV (“Tebura”, “we”, “us”) uses cookies and similar technologies on www.tebura.eu. It supplements, and should be read together with, our Privacy Policy, which explains more broadly how we process your personal data.
Controller: Tebura BV, Tiensevest 26 bus b0200, 3000 Leuven, Belgium. CBE/KBO 1039.726.370, VAT BE 1039.726.370. Contact: [email protected].
2. What are cookies?
A cookie is a small text file that a website places on your device when you visit it. Cookies let a site recognise your device, remember your preferences, and keep you signed in through a booking. We also use similar technologies such as local storage. In this policy we refer to all of these as “cookies”.
3. Cookies we use
We use strictly necessary cookies — cookies required for the website and the booking flow to work, including signing in, remembering your language, and paying securely. These are exempt from consent under the ePrivacy rules. We also use advertising cookies from Google, Meta and OpenAI, which measure which advertisements lead to bookings. Advertising cookies are placed only after you accept them in our cookie banner, and never before.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| tebura_session | Tebura | Maintains your session and secures the booking flow | Session |
| locale | Tebura | Remembers your language choice (English or Dutch) | 12 months |
| remember_user_token | Tebura | Keeps you signed in when you tick “Remember me” | 2 weeks |
| __stripe_mid, __stripe_sid | Stripe | Payment processing and fraud prevention at checkout (set on payment pages) | 1 year / session |
| tebura_consent | Tebura | Records your cookie choice, the banner version you saw, and a reference to that decision | 12 months |
| _gcl_au | Stores advertisement-click information so we can measure which Google advertisements lead to bookings | 90 days | |
| _gcl_aw, _gcl_gs | Stores the Google advertisement click and the session it belongs to, set only when you arrive from a Google advertisement | 90 days | |
| _fbp | Meta | Identifies the browser so Meta can measure which advertisements lead to bookings | 90 days |
| _fbc | Meta | Stores Meta advertisement-click information for that same measurement | 90 days |
| __oppref | OpenAI | Stores the advertisement-click reference from an OpenAI advertisement, so a later booking can be matched to it | 30 days |
| __obref | OpenAI | A randomly generated identifier for your browser, used by OpenAI to recognise it across visits | 12 months |
| __oaiq_consent | OpenAI | OpenAI's own record of the advertising choice you made here | 30 days |
The Google tag also stores one entry in your browser's local storage, _gcl_ls, for the same advertisement measurement. Withdrawing your consent removes it along with the cookies above.
4. Analytics without cookies
To understand how the site is used we use Simple Analytics, a privacy-first analytics service that does not use cookies and does not collect personal data. We only see aggregate statistics, such as page views.
5. Legal basis
Strictly necessary cookies are placed on the basis of our legitimate interest in providing a secure, working website (Article 6(1)(f) GDPR) and are exempt from consent under the ePrivacy rules. Advertising cookies are placed only with your prior consent (Article 6(1)(a) GDPR and Article 129 of the Belgian Electronic Communications Act), and Google, Meta and OpenAI act as independent controllers for the advertising data they receive. Withdrawing your consent does not affect the lawfulness of processing carried out before you withdrew it.
6. Managing cookies
You can control cookies through your browser settings, including deleting existing cookies or blocking new ones. Blocking strictly necessary cookies may stop parts of the site, including booking, from working properly.
You can change or withdraw your advertising-cookie consent at any time through the “Cookie settings” link in the footer of every page. Your choice is stored in the tebura_consent cookie described above.
7. Third-party services and international transfers
Several third-party services can process data when you use the site. The Stripe cookies are set by Stripe, which acts as a separate controller for its payment and fraud-prevention processing. Our hotel search (“my hotel isn't listed”) loads Google's Places service in your browser as soon as your cursor reaches or you tap the hotel search field; Google then processes your IP address, and your search input once you type, as a separate controller, and may use its own cookies and similar technologies, governed by Google's own policies. If you accept advertising cookies, Google, Meta Platforms Ireland Limited and OpenAI Ireland Ltd. also process data about your visit as independent controllers under their own policies, for advertising measurement. Where Stripe, Google, Meta or OpenAI transfer personal data outside the European Economic Area, appropriate safeguards such as the EU Standard Contractual Clauses apply, as described in our Privacy Policy.
8. Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or in the law. The version and date at the top of this page indicate when it was last updated. Material changes will be communicated through the website.
9. Contact
For any question about this Cookie Policy or about how we use cookies, contact us at [email protected]. For a fuller explanation of how we handle your personal data, and your rights, see our Privacy Policy.
