COOKIE POLICY

The purpose of this Cookie Policy ("Policy") is to provide detailed information about which cookies we use in the operation of the bukio.hu website and the Bukio Platform (hereinafter jointly: "Website/Platform"), how and why we process the data associated with them, and how users can manage their cookie settings.

This Policy applies to any use of the Website from any device capable of accessing the internet and browsing the web.

A cookie is a small text file that is stored in the user's browser or on the user's device when visiting a website. Cookies can serve various purposes: they remember the user's settings, assist with the login process, enable more convenient browsing, or collect statistics about the performance of the website.

Cookies can be grouped according to several criteria. They fall into the following main categories:

• Session cookies: Temporary cookies that remain on the device until the browser is closed and enable basic functions (e.g. login, form data).
  
• Persistent cookies: Stored on the user's device for a longer period, or until a specified expiry date. We use them mainly when the user's settings need to be remembered (e.g. language preference).
  
• First-party cookies: Placed on the user's device by the operator of the website.
  
• Third-party cookies: Placed by an external provider (e.g. analytics/marketing providers).
  
  
  Another way to categorise cookies is by function:
  
  
• Necessary (technical/essential) cookies: Without these, the website cannot function as intended (e.g. login).
  
• Functional cookies: Enable convenience features, e.g. remembering the user's preferences.
  
• Statistical cookies: Collect data on website usage and support traffic analysis.
  
• Marketing cookies: Track users' online behaviour in order to display targeted advertising.
  

The vast majority of the cookies currently in use relate to the user's login and session. These are indispensable for the user to be able to log in securely and use their account.

Note: the exact names/attributes of the cookies may vary depending on the authentication configuration (for example cookies of the "session-token" or "csrf-token" type). We may use the following, typically occurring cookies:



1. __Host-next-auth.csrf-token

- Type: Session cookie

- Purpose: Provides protection against cross-site request forgery (CSRF) during login

- Expiry: When the browser is closed / at the end of the session

- Category: Necessary (security) cookie



2. __Secure-next-auth.callback-url

- Type: Session cookie

- Purpose: Records the return URL after login or registration

- Expiry: When the browser is closed

- Category: Necessary (functional) cookie



3. __Secure-next-auth.session-token

- Type: Persistent/session cookie (depending on the settings with which it was created)

- Purpose: Maintains the authenticated session and identifies the user after login

- Expiry: Depending on the configuration (e.g. days/weeks); otherwise it lasts until the end of the session.

- Category: Necessary (authentication) cookie



4. cookie_consent

- Type: Persistent, first-party cookie

- Purpose: Stores the consent settings given on the cookie banner (which cookie categories are permitted), so that the decision does not have to be made again on every visit

- Expiry: 365 days

- Category: Necessary cookie (for fulfilling the statutory obligation of consent management)



5. NEXT_LOCALE

- Type: Persistent, first-party cookie

- Purpose: Remembers the language selected by the user so that the Website is displayed in the appropriate language

- Expiry: 365 days

- Category: Functional cookie (stores the language setting requested by the user)



Cookies 1–3 are so-called "strictly necessary" cookies, since without them we would be unable to provide a secure login process and user session.

On the public, marketing pages of bukio.hu (e.g. home page, pricing, solutions, contact, registration) we also use statistical and – in some cases – marketing cookies. These are placed only with the user's prior consent: by default, all non-necessary cookies are blocked (Google Consent Mode v2, "default denied"), and only the categories selected via "Accept" or in the detailed settings are enabled.



Important: these cookies do NOT run on the embedded, guest-facing reservation widget or on the admin interface, only on Bukio's own marketing pages.



a) Statistical (analytics) – Google Analytics 4

• _ga: Distinguishes users. Expiry: 2 years. Category: Statistical.
  
• _ga_<property-id> (e.g. _ga_*): Maintains session state. Expiry: 2 years. Category: Statistical.
  
• _gid: Distinguishes users. Expiry: 24 hours. Category: Statistical.
  
• _gat / _gat_*: Throttles the request rate. Expiry: 1 minute. Category: Statistical.
  
  
  
  b) Marketing – Google Ads (only with advertising consent)
  
• _gcl_*: Conversion measurement (Google Ads). Expiry: max. 90 days. Category: Marketing.
  
• _gac_*: Campaign-related data. Expiry: max. 90 days. Category: Marketing.
  
• IDE / test_cookie / __gads / __gpi: Ad delivery and measurement. Expiry: depending on the provider (max. ~13 months). Category: Marketing.
  
  
  
  c) Marketing – Meta (Facebook) Pixel
  
• _fbp: Cookie placed by the Meta Pixel to support ad measurement and targeting. Expiry: ~3 months. Category: Marketing.
  
• fr (on the facebook.com domain): Ad delivery and measurement. Expiry: ~3 months. Category: Marketing.
  
  
  
  With respect to these cookies, the statistical and marketing providers (Google, Meta) may act as independent or joint controllers; their own privacy policies are available within their services. Consent can be changed or withdrawn at any time using the 🍪 cookie button displayed in the bottom left corner; upon withdrawal, the affected cookies that have already been placed are deleted.
  

In addition to the above, the Platform allows the Restaurant to connect an external analytics or marketing tool (e.g. Google Analytics 4, Google Tag Manager, Meta Pixel, TikTok Pixel) to its own public reservation page (the embedded reservation widget). If the Restaurant enables such a tool, these providers may place third-party cookies on the Guest's device and act as independent controllers.



In this case, obtaining the prior consent required for placing non-necessary cookies, displaying the cookie banner and providing the appropriate information are the responsibility of the Restaurant as controller. Bukio accepts no liability for these external, restaurant-side tools or for the cookies they place; the relevant information is contained in the privacy policy of the respective third party and of the Restaurant.

Most browsers allow the use of cookies by default. Users can find options for managing, disabling or deleting cookies in their browser settings. Please note that if you disable strictly necessary cookies, certain functions of the website (e.g. login, managing reservations) will not be available.



Help pages available for the main browsers:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• Safari
  

On the public marketing pages of bukio.hu we display a cookie banner on which the user can individually allow or block non-necessary cookies by category (statistical, personalisation, advertising, etc.). The default state for every non-necessary category is blocked (Google Consent Mode v2), and the affected cookies are activated only after explicit consent.



Previously given consent can be changed or withdrawn at any time by clicking the 🍪 cookie button displayed in the bottom left corner of the screen. If consent is withdrawn, the affected cookies that have already been placed are deleted; strictly necessary cookies remain regardless, as they are indispensable for the operation of the Website.



If a Restaurant connects an external analytics/marketing tool to its own public reservation page (see 3.3.), providing the associated cookie banner and consent management is the responsibility of that Restaurant.

Certain personal data may also be processed in the course of using cookies (e.g. session token identifier, IP address, etc.). Detailed information on this processing can be found in our Privacy Policy.

The use of strictly necessary cookies is required for the secure and proper operation of the Website/Platform; for the use of non-necessary cookies (statistical/marketing) on our marketing pages we request prior, explicit consent via the cookie banner (see 3.2. and 4.2.).