Cookie policy
This policy covers both the oikosbozcaada.com website and the rezervasyon.oikosbozcaada.com booking site. The data controller is Oikos Turizm Gıda İnşaat Sanayi ve Ticaret Limited Şirketi.
A cookie is a small text file a website stores in your browser. The browser's own storage can be used for similar purposes. In this policy we call both cookies.
In short
- Cookies strictly necessary for the sites to work are always used. They do not need consent (KVKK Guide on Cookie Practices).
- Cookies for visit statistics (Google Analytics) and for measuring the results of ads (Google Ads, Meta) are only used if you press "Accept" in the consent banner. If you press "Reject", they are not loaded and the sites work the same.
- You can change your choice at any time via the "Cookie preferences" link at the bottom of the website.
Cookies on the hotel website
The consent cookie and the measurement and advertising cookies are written for the oikosbozcaada.com domain, so they also apply on the booking site. Measurement and advertising cookies are loaded through Google Tag Manager and only after your consent.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| oikos_onay | Remembers whether you accepted cookies. Applies on the website and the booking site. | Strictly necessary | 6 months |
| _ga | Google Analytics: tells visitors apart, measures which pages are visited and which steps are taken up to a booking | Analytics, with consent | 2 years |
| Starting with _ga_ | Google Analytics: remembers the visit session | Analytics, with consent | 2 years |
| _gcl_au | Google Ads: measures whether a visit from an ad leads to a booking | Advertising, with consent | 90 days |
| _fbp | Meta (Facebook, Instagram): measures whether a visit from an ad leads to a booking | Advertising, with consent | 90 days |
| _fbc | Meta: remembers the ad click if you came to the site from a Meta ad | Advertising, with consent | 90 days |
- Name
- oikos_onay
- Purpose
- Remembers whether you accepted cookies. Applies on the website and the booking site.
- Type
- Strictly necessary
- Duration
- 6 months
- Name
- _ga
- Purpose
- Google Analytics: tells visitors apart, measures which pages are visited and which steps are taken up to a booking
- Type
- Analytics, with consent
- Duration
- 2 years
- Name
- Starting with _ga_
- Purpose
- Google Analytics: remembers the visit session
- Type
- Analytics, with consent
- Duration
- 2 years
- Name
- _gcl_au
- Purpose
- Google Ads: measures whether a visit from an ad leads to a booking
- Type
- Advertising, with consent
- Duration
- 90 days
- Name
- _fbp
- Purpose
- Meta (Facebook, Instagram): measures whether a visit from an ad leads to a booking
- Type
- Advertising, with consent
- Duration
- 90 days
- Name
- _fbc
- Purpose
- Meta: remembers the ad click if you came to the site from a Meta ad
- Type
- Advertising, with consent
- Duration
- 90 days
Google and Meta may also use cookies on their own domains under their own policies. These are also only loaded after your consent.
So that the season notice does not appear on every page, a marker is written to the browser's session storage (a name starting with oikosSeasonNotice). It is deleted when you close the browser tab.
Videos on the room pages load from YouTube's cookieless address (youtube-nocookie.com) and only open when you press play. When you play a video, YouTube may store information in your browser under its own policy.
Cookies on the booking site
The cookies below belong only to the booking site's address and are not sent to other domains. Except for the theme cookie, they cannot be read by scripts in the browser (HttpOnly) and are only sent over an encrypted connection.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| __Host-oikos_ev | Remembers that you verified your email address until the last booking step | Strictly necessary | At most 60 minutes, deleted when the booking is complete |
| __Host-oikos_odeme | Lets only you, the person who booked, open the payment page | Strictly necessary | 3 days |
| __Host-oikos_panel | Protects your guest portal login | Strictly necessary | At most 24 hours, deleted when you log out |
| tema | Remembers the light or dark appearance you chose. Only stored if you change the appearance yourself. | Preference | 1 year, deleted when you choose "Match device" |
- Name
- __Host-oikos_ev
- Purpose
- Remembers that you verified your email address until the last booking step
- Type
- Strictly necessary
- Duration
- At most 60 minutes, deleted when the booking is complete
- Name
- __Host-oikos_odeme
- Purpose
- Lets only you, the person who booked, open the payment page
- Type
- Strictly necessary
- Duration
- 3 days
- Name
- __Host-oikos_panel
- Purpose
- Protects your guest portal login
- Type
- Strictly necessary
- Duration
- At most 24 hours, deleted when you log out
- Name
- tema
- Purpose
- Remembers the light or dark appearance you chose. Only stored if you change the appearance yourself.
- Type
- Preference
- Duration
- 1 year, deleted when you choose "Match device"
No Google Tag Manager, Analytics or advertising code runs on the booking site's pages. If you consented, our systems read the consent and Google Analytics cookies set on the website and report the booking steps (room choice, details, email verification, payment step, booking created and, once your payment is approved, confirmed) from the server to Google Analytics, Google Ads and Meta. For this, your browser's random Google Analytics and Meta identifiers and your browser details are stored with your booking for 14 months. When the booking site steps are reported to Meta, your IP address and browser details are also sent, and Meta uses them to match the visit to the ad. Your IP address is not stored for this purpose.
These reports never contain your name, phone, email, identity, bank or card details. The room type, number of nights and guests you choose, the booking amount and a random identifier that stops the same booking being counted twice are sent. If you did not consent, nothing is reported.
Managing cookies
You can change your consent at any time via the "Cookie preferences" link at the bottom of the website. If you withdraw it, the measurement and advertising cookies are deleted and nothing is reported from then on.
You can delete or block cookies in your browser settings. If you block strictly necessary cookies, email verification, the payment page and the guest portal will not work.
Personal data
Processing of personal data related to cookies and your rights are explained in the privacy notice.
Text version: 2026-10-26-2