Cookie Policy

Data controller / Operator: ORION X GROUP S.R.L. (trading as "Orion Stays"), Italian VAT no. 17819521000, registered office at Via Latina 57, 00179 Rome (RM), Italy. Contact: info.orionxgroup@gmail.com, WhatsApp +39 320 802 2581.

1. What cookies are

Cookies are small text files that websites store on your device. They can be technical, when they are needed to make the site work or to deliver a service you have asked for, or advertising and profiling cookies, when they are used to measure advertising campaigns and personalise ads. Under the cookie guidelines issued by the Italian data protection authority (Garante per la protezione dei dati personali) on 10 June 2021, technical cookies require no consent, while advertising cookies may only be installed after your freely given, specific and prior consent.

2. Your choice

On your first visit a banner appears with two equivalent buttons, Accept and Reject, and a link to this page. Consent covers a single non-technical category: the Google Ads advertising and measurement cookies described in section 4.

Until you choose, and also when you choose Reject, no advertising cookie is installed on your device and no identifier relating to you is stored: only the technical cookies listed in section 3 remain. In this state Google's tags run in cookieless mode (Consent Mode): they receive a signal carrying no identifiers, which Google uses solely to estimate campaign performance in aggregate, statistical form. You are not profiled and you receive no personalised ads.
If you choose Accept, the Google Ads tag measures normally and the advertising cookies described in section 4 may be installed.
Ignoring or dismissing the banner is not acceptance: no choice is stored, no advertising cookie is installed and the banner reappears on your next visit.

Your choice is stored in a first-party cookie on your device; we use no localStorage or other storage for this purpose, and no third party is involved.

3. Technical cookies (no consent required)

locale — stores your browsing language (Italian or English). Duration: 12 months when you pick the language on the site, 6 months when it is set automatically by opening an English address (/en). Attributes: Path=/; SameSite=Lax.
orion_cookie_consent — records the choice you made on the banner. Values: "granted" (consent given) or "denied" (consent refused). Duration: 180 days (6 months), after which the banner asks again. Attributes: Path=/; SameSite=Lax; Secure over https. This is the cookie that lets us honour your refusal too: being technical, it needs no consent of its own.
orion_admin_session — technical session cookie reserved for the operator, set only after signing in to the site's admin area. It is HttpOnly and expires after 12 hours. It is never installed on visitors' or guests' devices.

Visit statistics are collected without cookies, through a first-party counter that stores no identifier on your device.

4. Advertising and measurement cookies: Google Ads (only with your consent)

We promote our properties with Google Ads. To measure which ads generate bookings we use the Google tag (gtag.js) linked to our advertising account AW-18334546634. The provider is Google Ireland Limited for users in the European Economic Area (Google LLC for users elsewhere).

Before consent: the tag is not loaded, the site does not contact googletagmanager.com and no advertising cookie is installed. On every page the Google Consent Mode v2 signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) start out set to "denied", with advertising data redaction (ads_data_redaction) enabled.
After you press "Accept": the tag is loaded and the four signals switch to "granted". Google may then install advertising cookies, including _gcl_au (a first-party cookie used to attribute conversions) and, if you reach the site by clicking an ad, third-party cookies from the googleadservices.com and doubleclick.net domains. The lifetime of those cookies is determined by Google.
Purposes: conversion measurement, that is understanding which campaigns and ads lead to a booking, and ad optimisation and personalisation by Google.
Transfers outside the European Union: Google may also process the data it collects in third countries, on the basis of the Standard Contractual Clauses approved by the European Commission and/or the EU-US Data Privacy Framework adequacy decision.
Google's information on cookies and data processing: policies.google.com/technologies/cookies and policies.google.com/privacy.

If you refuse, or make no choice at all, no advertising event is generated: no information about your browsing reaches Google Ads.

5. Payment: Stripe

The deposit is paid on Stripe's secure page (Stripe Payments Europe Ltd), to which you are redirected at payment time: the pages of this site load no Stripe script. On its own page Stripe uses technical and anti-fraud cookies, necessary to deliver the payment service you requested and to protect the transaction. Stripe's cookie policy: stripe.com/cookies-policy/legal.

6. Anti-abuse protection: Cloudflare Turnstile

The booking form may run the Cloudflare Turnstile anti-bot check, which tells people apart from automated programs and protects the checkout from abuse and card-testing fraud. It is a technical security measure necessary to deliver the requested service: it does not profile users and is not used for advertising purposes. Any technical identifier Cloudflare sets to complete the check therefore counts as a technical tool.

7. Other third-party content

On each property page the map is embedded from OpenStreetMap (openstreetmap.org): displaying it makes your browser send a request to OpenStreetMap's servers, which we do not use for advertising or profiling purposes. The site's fonts, by contrast, are served from our own domain, with no calls to external servers.

8. How to give, refuse or withdraw consent

You can change your mind at any time: withdrawing consent is as easy as giving it.

Open the address orion-stays.com/en/cookie#cookie-preferences: the panel with "Accept" and "Reject" reopens and your new choice replaces the previous one.
Alternatively, delete the orion_cookie_consent cookie in your browser settings: on your next visit the banner will ask you again.

After a withdrawal the Google Ads tag is no longer loaded on subsequent pages and the consent signals return to "denied". Cookies Google may already have installed remain on your device until you delete them in your browser (section 9) or until they expire.

9. Managing cookies in your browser

You can view, delete or block cookies in your browser settings (Chrome, Safari, Firefox, Edge) and browse in private mode. Blocking technical cookies may break some features, for example the language choice or the record of your refusal of advertising cookies.

10. Controller, rights and updates

The processing of personal data is described in this site's Privacy Policy, which also covers how to exercise your rights under Articles 15-22 GDPR and how to lodge a complaint with the Italian supervisory authority (www.garanteprivacy.it). For any cookie-related request write to info.orionxgroup@gmail.com. This policy may be updated: the version published on this page is the one in force.

*Last updated: August 2026.*