WWE TRAVEL CY · COOKIES POLICY

Cookies Policy

Worldwide Wellness Escapes Ltd (trading as WWE Travel CY)
Effective date: 1 January 2026 · Last reviewed: May 2026
Legal basis: ePrivacy Directive 2002/58/EC · Cyprus Law 112(I)/2004 · GDPR (EU) 2016/679

1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or smartphone) when you visit a website. They are widely used to make websites function efficiently, to remember your preferences, and to provide information to website operators about how their site is being used.

Our website (www.wwe-cy.com) uses cookies and similar tracking technologies, including pixels (small invisible images embedded in web pages or emails) and local storage objects. This policy covers all of these technologies collectively.

Cookies can be distinguished in several ways:

By origin: First-party cookies are set directly by www.wwe-cy.com. Third-party cookies are set by external providers whose services are embedded on our website (e.g. Google Analytics, Meta Pixel).
By duration: Session cookies expire when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them.
By purpose: Strictly necessary, analytics, marketing, or functional — as described in Section 3 and the Cookie Register in Section 4.

2. Legal Framework

Our use of cookies is governed by the following legislation:

ePrivacy Directive 2002/58/EC (the EU Cookie Law) — as transposed into Cyprus law by Part 14 of the Law on the Regulation of Electronic Communications and Postal Services, Law No. 112(I)/2004 (the ePrivacy Law). This law requires your prior consent before we place any non-essential cookies on your device.
GDPR — Regulation (EU) 2016/679 — which governs the personal data processed through cookies and sets the standard for valid consent (freely given, specific, informed, and unambiguous — Article 4(11)).
Cyprus Law 125(I)/2018 — which implements GDPR in Cyprus national law.

Important — Cyprus position on analytics cookies: The Cyprus supervisory authority has confirmed that consent is required for all analytics cookies, including those using IP anonymisation. This is a stricter position than some other EU member states. WWE Travel CY follows this stricter standard.

The Commissioner for the Protection of Personal Data (www.dataprotection.gov.cy) is the competent supervisory authority in Cyprus for matters relating to cookies and personal data.

3. Categories of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for our website to function. They enable core functionality such as page navigation, form submission, booking request processing, and website security. Without these cookies, our website cannot operate properly.

Strictly necessary cookies do not require your consent under the ePrivacy Law or GDPR, because they are used solely to provide a service you have explicitly requested. However, we are required to inform you of their existence and purpose, which we do here and in the Cookie Register in Section 4.

You cannot opt out of strictly necessary cookies through our consent banner. If you wish to block these cookies via your browser settings, some parts of our website will not function correctly.

3.2 Analytics Cookies

Analytics cookies help us understand how visitors use our website by collecting information about pages visited, time spent on the site, links clicked, and other usage statistics. This information is used in aggregate to improve our website content, structure, and user experience.

We use Google Analytics 4 and Wix Analytics for this purpose. Google Analytics processes data on servers within the EU/EEA and the United States (under the EU-US Data Privacy Framework). IP addresses are anonymised where technically feasible.

Analytics cookies are not set until you give your explicit consent. You can withdraw consent at any time via our cookie settings. If you decline analytics cookies, we will not be able to count your visit or understand your navigation patterns, but the website will remain fully functional.

3.3 Marketing & Advertising Cookies

Marketing cookies track your browsing behaviour across websites to build a profile of your interests and deliver advertising that is more relevant to you. These cookies are set by third-party advertising platforms integrated with our website.

We use the following marketing technologies:

Meta Pixel (Facebook / Instagram) — measures the effectiveness of our social media advertising campaigns by tracking actions taken on our website after clicking a Meta ad. Data is processed by Meta Platforms Ireland Ltd under the EU-US Data Privacy Framework.
Google Ads / Google Tag Manager — measures conversions from Google search and display advertising campaigns. Data is processed by Google LLC / Google Ireland Ltd.

Marketing cookies are not set until you give your explicit consent. Without consent, our advertising campaigns cannot measure their effectiveness, but you will still see ads from us — they simply will not be personalised based on your browsing behaviour on our site.

3.4 Functional Cookies

Functional cookies allow our website to remember choices you make (such as your preferred language or region) and provide enhanced, personalised features. These cookies may be set by us or by third-party providers whose services we have integrated.

These cookies are set with your consent (except where they are strictly necessary for a service you have explicitly requested, such as maintaining a logged-in session after you have chosen to log in).

3.5 Consent Management Cookies

Our consent management system (built into the Wix platform) sets a cookie to remember your consent preferences. This cookie is strictly necessary — without it, we cannot comply with our legal obligation to record and respect your consent choices. It does not track your browsing behaviour and contains only your consent status.

4. Cookie Register

The following table lists the specific cookies currently in use on www.wwe-cy.com, their purposes, retention periods, and whether consent is required. We review and update this register when new cookies are added or when third-party providers change their cookie configurations.

Cookie / Provider

Wix Session Cookie (ssr-caching)
Wix XSRF-TOKEN
Wix svSession
_ga (Google Analytics)
_ga_[ID] (Google Analytics 4)
_gid (Google Analytics)
Wix Analytics
_fbp (Meta Pixel)
_fbc (Meta Click ID)
Google Ads / gclid
Wix Language / Region Preference
Wix Members / Login State
Consent Management (Wix CMP)

5. Legal Basis Summary

The table below sets out the legal basis under GDPR for processing personal data through each category of cookie, and whether ePrivacy consent is required before the cookie is set.

Cookie Category

Strictly Necessary
Analytics
Marketing / Advertising
Functional
Consent Management

Legal Basis for Processing Personal Data (GDPR Art. 6)

Article 6(1)(b) — necessary for performance of the service; or Article 6(1)(f) — legitimate interest in website security
Article 6(1)(a) — your explicit consent. Note: Cyprus supervisory authority requires consent for all analytics cookies, including anonymised analytics (confirmed position)
Article 6(1)(a) — your explicit consent. No legitimate interest basis available for advertising cookies (EDPB guidance)
Article 6(1)(a) — your consent; or Article 6(1)(b) where directly necessary for a service you have requested
Article 6(1)(c) — legal obligation to maintain records of consent (GDPR Art. 7(1))

ePrivacy Consent Required?

No. Exempt under ePrivacy Law 112(I)/2004 / Art. 5(3) ePrivacy Directive
Yes — explicit opt-in required before cookie is set
Yes — explicit opt-in required before cookie is set
Yes — except where directly necessary for a service you have explicitly requested
No. Necessary to operate the consent system itself

Key principle — Consent must be given before non-essential cookies are set. Our cookie banner is designed to load no analytics, marketing, or functional cookies until you actively click Accept or customise your preferences. Pre-ticked boxes, scrolling, or continued browsing do not constitute valid consent under EU law (EDPB Cookie Banner Task Force Report, 2023; CJEU Planet49 judgment).

6. How We Obtain & Manage Your Consent

6.1 Consent Banner

When you first visit www.wwe-cy.com, a consent banner is displayed before any non-essential cookies are set. The banner:

Clearly describes each category of cookie and its purpose
Presents Accept All and Reject All options with equal prominence (in compliance with EDPB guidance)
Allows you to customise your preferences by category
Does not use pre-ticked boxes, dark patterns, or deceptive design
Does not use a cookie wall (you can access our website whether or not you consent to non-essential cookies)

6.2 Recording Consent

We record the following information when you give or refuse consent, in compliance with GDPR Article 7(1):

The date and time consent was given or refused
The specific categories accepted or refused
The version of the consent banner in effect at that time
A technical identifier linking the consent record to your session

This consent record is stored securely and is available to us for audit purposes. We do not use consent records for any other purpose.

6.3 Consent Duration & Renewal

Your cookie consent preferences are stored for 12 months. After this period, we will ask you to renew your consent. You can change your preferences at any time before the renewal date — see Section 6.4.

6.4 Changing or Withdrawing Consent

You can review, change, or withdraw your cookie consent at any time by:

Clicking the Cookie Settings link in the footer of our website
Accessing our cookie preference centre directly at www.wwe-cy.com/cookies-policy
Using your browser settings to block or delete cookies (see Section 7)

Withdrawing consent is as simple as giving it. Withdrawal of consent does not affect the lawfulness of any processing that took place before withdrawal. Please note that withdrawing consent may affect the functionality of some features of our website.

7. Browser-Level Cookie Controls

In addition to our consent banner, you can control cookies through your browser settings. Most browsers allow you to:

View which cookies are set on your device and delete individual cookies
Block all cookies, or block cookies from specific websites
Set your browser to notify you when a website attempts to set a cookie
Browse in private/incognito mode, which does not save cookies after you close the browser window

Instructions for managing cookies in commonly used browsers:

Google Chrome: Settings > Privacy and Security > Cookies and other site data
Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
Safari (Mac): Preferences > Privacy > Manage Website Data
Safari (iOS): Settings > Safari > Privacy & Security
Microsoft Edge: Settings > Privacy, Search, and Services > Cookies

Blocking strictly necessary cookies through your browser will prevent core features of our website from working, including booking request forms. We recommend using our consent banner to manage non-essential cookies rather than blocking all cookies at browser level.

8. Third-Party Providers & Their Privacy Policies

The following third-party providers may set cookies on our website. Each provider operates under its own privacy policy and data practices. We encourage you to review their policies for full information on how they process your data:

Google LLC / Google Ireland Ltd — Google Analytics 4, Google Ads. Privacy policy: policies.google.com/privacy. Google participates in the EU-US Data Privacy Framework.
Meta Platforms Ireland Ltd — Meta Pixel (Facebook / Instagram advertising). Privacy policy: www.facebook.com/privacy/policy/. Meta participates in the EU-US Data Privacy Framework.
Wix.com Ltd — website hosting, platform analytics, consent management. Privacy policy: www.wix.com/about/privacy. Wix processes data within the EU/EEA.

Where any of these providers transfer personal data outside the EEA, they are required to maintain appropriate safeguards under GDPR Chapter V (adequacy decisions, Standard Contractual Clauses, or participation in the EU-US Data Privacy Framework).

WWE Travel CY does not control third-party cookies once they are set, and does not have access to the data collected by third-party providers on our behalf beyond the aggregated reports and insights they provide to us.

9. Do Not Track & Similar Browser Signals

Some browsers transmit a Do Not Track (DNT) signal to websites. There is currently no binding EU or Cyprus law requiring websites to respond to DNT signals, and there is no agreed technical standard for implementing them. Accordingly, our website does not currently alter its behaviour in response to DNT signals. We continue to rely on our consent management system as the primary mechanism for respecting your privacy preferences.

We will monitor regulatory developments in this area and update this policy if the legal or technical position changes.

10. Cookies & Children

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children through cookies or other tracking technologies. The Cyprus Data Protection Law 125(I)/2018, consistent with GDPR Article 8, sets the age of digital consent at 16 in Cyprus.

If you believe that a child under 16 has used our website and consented to cookies without parental authorisation, please contact us at info@wwe-cy.com and we will take steps to address the situation.

11. Changes to This Cookies Policy

We review and update this Cookies Policy when:

New cookies or tracking technologies are added to our website
A third-party provider changes its cookie configuration
Applicable law or regulatory guidance changes
Our business model or services change in a way that affects our cookie use

When we make material changes, we will update the Last Reviewed date at the top of this policy and, where required, notify you via the consent banner or by email. We will request fresh consent where a change involves new categories of cookies or new processing purposes.

12. Contact Us

For any questions or concerns about our use of cookies or this policy, please contact:

Worldwide Wellness Escapes Ltd (WWE Travel CY)

Data Protection Contact Point

Theodosiou Hadjitheodosiou 6, Nicosia, Republic of Cyprus

Email: info@wwe-cy.com (subject: COOKIES / DATA PROTECTION)

Telephone: +357 22 420437

Website: www.wwe-cy.com/cookies-policy

To manage your cookie preferences right now, click the Cookie Settings link in the footer of our website.

For complaints about our cookie practices, you may contact the Commissioner for the Protection of Personal Data (Cyprus):

1 Iasonos Street, 1082 Nicosia, Cyprus

Tel: +357 22 818 456 | Email: commissioner@dataprotection.gov.cy

Website: www.dataprotection.gov.cy

© 2026 Worldwide Wellness Escapes Ltd. All rights reserved. This disclaimer was last reviewed in May 2026 against applicable Cyprus and EU law, including EU Directive 2015/2302 (Package Travel), GDPR (EU) 2016/679, Cyprus Consumer Protection Law 112(I)/2021, and Cyprus Data Protection Law 125(I)/2018. This document is provided for informational purposes. For legally binding advice specific to your circumstances, consult a qualified Cyprus lawyer