CityBox – Cookie Policy

Operated by MEGA ENTERTAINMENT SRL

Effective date: 01 June 2025

1) About this policy

This Cookie Policy explains how CityBox (“we”, “us”) uses cookies and similar technologies on our website and locker web app. It should be read together with our Privacy Policy.

2) Who we are (controller)

MEGA ENTERTAINMENT SRL

Str. Smârdan 16, Ap. 1, Sector 3, Bucharest, Romania

Email (privacy): data.protection@citybox.ro

3) What are cookies and similar technologies?

  • Cookies are small text files stored on your device by your browser.
  • Similar technologies include local storage, pixels, SDKs, and web beacons.
    We use them to make the site work, remember your choices, measure performance, and—only with your consent—personalize/market.

4) Who places cookies?

  • First-party cookies (CityBox / Odoo instance): used to run the site and your booking/session.
  • Third-party cookies (e.g., analytics, payment, video, chat) if you accept them.

Platform note (Odoo): This website is built on the Odoo platform provided by Odoo S.A.. Some strictly necessary cookies are set by Odoo modules to operate sessions, language, security, and consent. For Odoo’s own privacy information, see https://www.odoo.com/privacy (including their Cookies section).

5) Legal bases

  • Strictly necessary cookies: Art. 6(1)(f) GDPR (our legitimate interest to provide a secure, functioning service).
  • Preferences, Analytics, Marketing: Art. 6(1)(a) GDPR (your consent). You can withdraw consent at any time (see Section 9).

6) Cookie categories we use

A. Strictly necessary (cannot be switched off)

Used to provide core functions: logging in, booking lockers, security, fraud prevention, and consent storage.

Examples (names may vary by Odoo version/modules):

  • session_id — maintains your session and booking/cart; session; First-party (Odoo)
  • website_lang / frontend_lang — remembers language; 12 months; First-party (Odoo)
  • tz — stores time zone; 12 months; First-party (Odoo)
  • im_livechat_session (if live chat enabled) — chat continuity; 12 months; First-party (Odoo)
  • cookie_consent (or similar) — remembers your cookie choices; 6–12 months; First-party (Odoo)

B. Preferences (only with consent)

Remember optional choices (e.g., saved form fields, UI settings).

Example: ui_prefs — layout/filters; 6 months; First-party

C. Analytics (only with consent)

Help us understand website performance and improve the service.

Examples:

  • Google Analytics 4: _ga, _ga_*, _gid — usage statistics; up to 24 months; Third-party: Google
    We configure analytics to avoid collecting precise identifiers and to respect your consent choices.

D. Marketing (only with consent)

Measure campaigns and show relevant ads on partner platforms.

Examples (used only if enabled):

  • Google Ads: IDE, _gcl_au — ad conversion/attribution; 3–13 months; Third-party: Google
  • Meta (Facebook) Pixel: _fbp — ad delivery/measurement; 3 months; Third-party: Meta
  • YouTube/Vimeo (embedded videos): may set player and preference cookies when you press play.

E. Security / anti-abuse (only if enabled)

  • reCAPTCHA (Google): _GRECAPTCHA — bot protection on forms; session/6 months; Third-party: Google

Important: Exact cookie names and durations can change when Odoo or third-party providers update their services. We update this page when significant changes occur.

7) Third-party providers

Where we use third-party services (e.g., Google, Meta, payment gateways, video platforms), those providers may act as processors or independent controllers. Their use of data is governed by their own policies. Links are available from their consent entry in the Cookie Preferences panel.

8) Data retention

Cookies persist for the periods listed above or until you delete them. Analytics/marketing data derived from cookies is retained according to our Privacy Policy and the relevant provider’s terms.

9) Managing your consent

  • Cookie banner: On your first visit you can Accept all, Reject all, or Manage preferences.
  • Change your mind anytime: Use the Cookie Preferences link in our footer to modify or withdraw consent.
  • Browser settings: You can also block or delete cookies via your browser (Help menu for instructions). Blocking strictly necessary cookies may break site functions.

10) Do Not Track

Our site currently does not respond to DNT signals due to the lack of a common standard. We honor your choices made in the Cookie Preferences panel.

11) Contact

Questions about cookies?

MEGA ENTERTAINMENT SRL – CityBox

Email: data.protection@citybox.ro

Address: Str. Smârdan 16, Ap. 1, Sector 3, Bucharest, Romania

12) Updates to this policy

We may update this Cookie Policy. The latest version and effective date will always appear here.