Cookies Policy

(Last update date: December 18, 2023)

Definition

Cookies are small pieces of text used to store information on web browsers. Cookies are widely used to store and receive identifiers and other information on computers, smartphones, and other on-line smart devices. These types of files have a variety of functionalities, such as remembering your preferences and chosen web content, assisting you to improve your site experience, as well as offer promotions, advertisements or other web content more relevant to you.

Pixels are small objects embedded into a web page, but are not visible. They are also known as "tags,” “web bugs,” or "pixel gifs." We use pixels to deliver cookies to your computer, monitor our website activity, make logging into our sites easier, and for online marketing activity. We also include pixels in our promotional email messages or newsletters to determine whether you open and act on them.
You can at any time change or withdraw your consent from the Cookies Settings on our website.

Where we use Cookies

We use cookies and similar technologies onto the following online platforms, collectively referred to “hereinbelow, as “Website”:

  1. AIA website (www.aia.gr and m.aia.gr) 
  2. Official airport parking website https://secure-parking.aia.gr
  3. ATH mobile applications (on Android and IOS Platforms) 
  4. AIA interactive communication platform (AI chatbot)
  5. Corporate platforms.

We use Cookies to:

  • Facilitate your navigation and experience once visiting our Website;
  • Create a more secure environment for our visitors;
  • Analyze how you use our Website which helps us to troubleshoot any problems and to monitor our own performance;
  • Analyze the use of the Website and to provide you with contents that match your interests
  • Learn more about the way you interact with our web content so that we can provide a better experience;
  • Remember your preferences, such as a language, so there is no need for you to customize the Website on each visit;
  • Optimize any advertisements and offers in relation to the users’ interests and preferences

Types of Cookies

As per their duration:

  • Essential Cookies: Stored on your device by us, at the time the you visit our Website (using a randomly generated ID) and are deleted automatically after closing the browser.
  • Persistent Cookies: Stored on your device at the time you visit our Website, record your browsing activity and remain stored after you close your browser.
    • Performance/ Statistics & Tracking: Anonymous information on how visitors use our Website and the data is merged with other users to enable us to improve how the site performs. For example, we utilize Google Analytics cookies to help us understand how customers arrive, browse or use our Website and highlight areas where we can improve areas such as navigation, retrieval of Airport related information, marketing campaigns.
    • Advertising/Third Party Anonymous information gathered to be used for targeting purposes of promotion advertising campaigns, promotions and retargeting. These cookies may remember the websites you have visited and share them with the third parties such as advertisers. These cookies are used by third parties to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign.

As per their ownership:

  • First-Party Cookies: Generated by our us.
  • Third-Party Cookies: Generated by third-parties without you having visited their websites, using advertisements, targeting pixels or similar technologies to collect marketing-relevant information such as age, origin, gender, and user behavior data, and through this collection are powerful online marketing tools, especially for personalized advertising, promotions and retargeting. Information contained in these cookies is anonymous and doesn't contain your personal data.


Cookies can be "First Party", i.e. set by us, or "Third Party", i.e. placed on your device by another company when you visit our website, for example Google Analytics or Advertising cookies. Third-party cookies may be placed on your device by someone providing a service to us (for example, we use Google Analytics to help us understand how our website is being used) or by our business partners, so that they can advertise products and services to you on our website and elsewhere on the Internet. Because of how cookies work, our website cannot access third-party cookies; nor can other organisations access the data in the cookies we use on our website.

What cookies do we use? 

We use two types of cookies, which we describe in this section. You can also find a full list of all different first and third-party cookies that we use in the table below.

  • Essential cookies. These cookies are required to enable core functionality and allow you to have a seamless navigation. They also help us, as website owners understand how visitors interact with the website, by collecting and reporting statistics information at Google Analytics anonymously. They are automatically enabled when you use this site.
  • Marketing/ advertising cookies. These cookies are used to track visitors across the website. The intention is to display ads that are relevant and engaging, for the individual user and thereby their use is valuable for publishers and third party advertizers.
  • Local Storage. In addition to the use of cookies, our Website utilizes the browser's local storage to render the user experience functional (the “Local Storage”). Local Storage is a web standard that allows us to store and retrieve data in your web browser on a session basis. This storage capability is essential for the operation of specific functions on our Website, such as our AI chatbot, by retaining session-related information that is necessary for these functions to operate seamlessly and efficiently. The information we store in Local Storage is strictly limited to non-personal identifiers and session state data, ensuring that your privacy is maintained. This data is used only for the purpose of maintaining the continuity and quality of your interaction with the features that rely on Local Storage for a maximum two months term and is not used for tracking purposes.

Controlling your Cookies Preferences

We have implemented a consent / selection and edit cookies management mechanism, related to the cookies records. Your preferences are retained for a period of 180 days..

Still, you can change the settings on your browser or your connected device to refuse all cookies, indicate when a cookie is being sent to your computer or mobile device, without your explicit consent, or delete cookies every time you finish browsing. Your browser “help” section will normally provide details on how to manage the cookie settings. However, if you choose to reject cookies, as noted above, you may not be able to use certain features of our website, application and services. 
More information generally on cookies: www.allaboutcookies.org and www.youronlinechoices.eu.


We may change the terms of our Cookies Policy from time to time. Any revised version will be posted on our Website.

Essentials

Cookie Name Description Type Expiry First/Third Party
ApplicationGatewayAffinity Set by Azure Application Gateway to ensure a user's session stays routed to the same server during their visit (session stickiness). HTTP Persistent cookie First-party
visid_incap_* Set by Imperva Incapsula, this cookie assigns a unique visitor ID and is used to recognize returning visitors and improve site security. It helps detect and mitigate malicious traffic while ensuring legitimate users can access the site. HTTPS 1 year Imperva Incapsula (Third-party)
pcms_cookie_bot_2fee This cookie is used to store user cookie preferences. HTTP 6 months First-party
VISITOR_PRIVACY_METADATA YouTube sets this cookie to store the user's cookie consent state for the current domain. HTTP Persistent cookie YouTube (Third-party)
__utmz Collects data on where the user came from, what search engine was used, what link was clicked and what search term was used. Used by Google Analytics. HTTP 6 months Google (Third-party)
yt-remote-device-id Set by YouTube to store the user’s video preferences when embedded YouTube videos are used on the site. HTML Persistent cookie YouTube (Third-party)
__utma This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behavior and measure site performance. This cookie lasts for 2 years by default and distinguishes between users and sessions. It used to calculate new and returning visitor statistics. The cookie is updated every time data is sent to Google Analytics. The lifespan of the cookie can be customized by website owners. HTTP 2 years Google (Third-party)
yt-remote-cast-installed The yt-remote-cast-installed cookie is used to store the user's video player preferences using embedded YouTube video. HTML Session YouTube (Third-party)
__Secure-ROLLOUT_TOKEN This cookie is used by the Windows Azure Application Gateway in addition to ApplicationGatewayAffinity to maintain sticky session even on cross-origin requests (information received from a resource with a different domain name). HTTP Session First-party
_ga_* Used by Google Analytics to store and count pageviews. HTTP 400 days Google (Third-party)
AIA.Authentication Used for managing user authentication, allowing the site to recognize logged-in users and maintain their authenticated session. HTTPS Session First-party
igate* Session-based cookie for managing user authentication within the IGATE application. Ensures users stay logged in during session. HTTP Session First-party
cptmpc2 Works in conjunction with related temporary cookies to carry data across a single page reload. Removed after the event is triggered. HTTP Session First-party
ApplicationGatewayAffinityCORS Used for maintaining user sessions. This cookie is set by this website as it runs on the Windows Azure cloud platform. It enables web browser traffic to be kept assigned to single server during certain sections of website. HTTP Session First-party
yt.innertube::nextId Maintains tracking data for queued YouTube videos or navigation paths within embedded players. Supports consistent user video playback behavior. HTML Session YouTube (Third-party)
cp_total_cart_value Used as storage for the visitor cart's total value. It holds a number value. Responsible on storing and reference point for the informative messages concerning the visitor’s cart contents. It is utilized mainly as the triggering mechanism for abandoned cart popups. HTTP 1 year First-party
rc::c This cookie is set by the Google recaptcha service to identify bots to protect the website against malicious spam attacks. HTTP Session Google (Third-party)
cptmpc1 Temporary cookie used to store data for an internal event that is triggered after a page reload. Automatically removed on the next page refresh. HTTP Session First-party
ai_session Used by Microsoft Application Insights to collect statistical usage and telemetry information. HTTPS 30 minutes First-party
ai_user Used by Microsoft Application Insights to collect statistical usage and telemetry information. HTTPS 12 months First-party
yt-remote-connected-devices Set by YouTube, this cookie stores information about the user’s video playback preferences — especially related to connected devices (e.g., if a user has linked a smart TV or Chromecast). It's used when interacting with embedded YouTube videos on a third-party site HTML Persistent cookie YouTube (Third-party)
concessionaires* Used by the Concessionaires App to manage login sessions for authenticated users only. HTTP Session First-party
TS01* Security-related cookie set by the website’s infrastructure provider (e.g., Imperva or Wix). Used to maintain session integrity and protect against malicious activity. HTTP Session WIX (Third-party)
VISITOR_INFO1_LIVE Set by YouTube to measure a user’s bandwidth and determine whether they receive the new or old player interface. HTTP 180 days YouTube (Third-party)
ytidb::LAST_RESULT_ENTRY_KEY Stores the ID of the last clicked search result in embedded YouTube components. Used for maintaining session-specific video navigation data. HTML Persistent cookie YouTube (Third-party)
bi Used to support server load balancing by assigning a unique session identifier. Helps distribute user traffic evenly across infrastructure. HTTP 1 year First-party
__utmc Registers a timestamp with the exact time of when the user leaves the website. Used by Google Analytics to calculate the duration of a website visit. HTTP Session Google (Third-party)
cp_sessionTime Used as a session storage for the visitor's page visit time. (expires yearly, expiration renews upon each session) HTTP 1 year First-party
__utmb This is one of the four main cookies set by the Google Analytics service which enables website owners to track visitor behavior and measure site performance. This cookie determines new sessions and visits and expires after 30 minutes. The cookie is updated every time data is sent to Google Analytics. Any activity by a user within the 30-minute life span will count as a single visit, even if the user leaves and then returns to the site. A return after 30 minutes will count as a new visit, but a returning visitor. HTTP 1 day Google (Third-party)
_GRECAPTCHA This cookie is set by Google reCAPTCHA v3 and is used to validate that the website user is human and not a bot. HTTP 6 months Google (Third-party)
incap_ses_* This is an Incapsula DDoS Protection and Web Application Firewall cookie that is used to relate HTTP requests to a certain session. HTTP Session First-party
cpab Stores a unique session identifier, used for analytics tracking or user session continuity within integrated platforms (e.g., Facebook Pixel). HTTP 1 year Facebook (Third-party)
rc::a This cookie is used to distinguish between humans and bots. It helps Google reCAPTCHA maintain security by tracking user behavior across websites to prevent automated abuse. It is typically loaded when a website includes Google reCAPTCHA v3 services. HTML Persistent cookie Google (Third-party)
yt-remote-fast-check-period The yt-remote-fast-check-period cookie is used by YouTube to store the user's video player preferences for embedded YouTube videos. HTML 399 days YouTube (Third-party)
yt-remote-session-name This cookie is set by YouTube and is used to store the user's video player preferences when interacting with embedded YouTube videos. It remembers specific settings or preferences for the video player to enhance the user experience across sessions. HTML 399 days YouTube (Third-party)
aia_session_cookie This cookie is set by Microsoft Application Insights, which is a service for monitoring and tracking application performance. The aia_session_cookie is used to track user sessions and collect telemetry data about interactions with the website or application. HTTPS Session First-party
.AspNetCore.Correlation.* This cookie is set by ASP.NET Core when OpenID Connect or OAuth authentication is used. It helps to manage and correlate authentication requests, ensuring that the response from the authentication provider matches the request initiated by the user. HTTPS 15 minutes First-party
yt.innertube::requests Stores information related to YouTube video requests, helping maintain continuity across embedded video sessions and user activity tracking. HTTP Session YouTube (Third-party)
_ga The main cookie used by Google Analytics, enables the service to distinguish a visitor. HTTP 400 days Google (Third-party)
Identity.External*
Used for user authentication.
HTTPS Session First-party
_track_flight_* Used to remember the flights that a user tracks or follows on the website. HTTP 24 hours First-party
__RequestVerificationToken Set by web applications built with ASP.NET MVC. This cookie is used to prevent Cross-Site Request Forgery (CSRF) attacks by verifying that requests made to the server are legitimate and originate from the current user. HTTP Session First-party
_gid Set by Google Analytics to store and update a unique value for each page visited. HTTP 24 hours Google (Third-party)
cp_shownnotscookie Used as an indicator on if web push notifications activation prompt has appeared and answered. It holds a string value. (expires yearly, expiration renews upon each session). HTTP 1 year First-party
.AspNetCore.OpenIdConnect.Nonce.* This cookie is set by ASP.NET Core applications when using OpenID Connect for user authentication. HTTPS 15 minutes First-party
YSC Set by YouTube to track views of embedded videos. It helps YouTube gather data about user interactions with videos, such as play count, playback behavior, and preferences. HTML Session YouTube (Third-party)
TS42ca1e71027 Security-related cookie set by the website’s infrastructure provider (e.g., Imperva). Used to maintain session integrity and protect against malicious activity. HTTP Session First-party
AIA.BCE Temporary cookie used during the parking reservation process. Stores selection data such as location or timeslot to ensure completion of the booking flow. HTTPS 10 minutes First-party
cptmpc3 Transient cookie that holds data required for an event or interaction across a page transition. Expires immediately after use. HTTP Session First-party
cp_trigger_add2cart Used as a session add2cart flag. It indicates the addition of the sessions's first item to cart. (expires and resets on each session) HTTP Session First-party
cp_laternotif Used as a session kill switch for the native push subscription dialog box. When the allow notifications browser native prompt is shown the user can choose to click the 'x' or 'Ask later' for the dialog box to close without taking an action. This closes the prompt but on the next refresh it will reappear in order for the user to give an answer. Because this is an annoying behavior ContactPigeon chose to set the 'cp_laternotif' cookie as 'yes' for the integration agent to know that the user should not be bothered until later (expires and resets on each session). HTTP Session First-party
yt-remote-session-app The yt-remote-session-app cookie is used by YouTube to store user preferences and information about the interface of the embedded YouTube video player. HTML Session YouTube (Third-party)
cp_total_cart_items Used to store the total count of items in the visitor's cart. It holds a numerical value and is primarily used to trigger informative messages regarding the cart contents, such as abandoned cart popups. HTTP 1 year First-party
ASP.NET_SessionId Issued by Microsoft's ASP.NET Application, this cookie stores session data during a user's website visit. HTTP Session First-party

Marketing

Cookie Name Description Type Expiry First/Third Party
_gcl_au Used by Google AdSense to store and track conversions across websites, measuring ad performance and user interactions with ads. HTTP 60 days Google (Third-party)
_fpb Set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website. HTTP 3 months Facebook (Third-party)
_gcl_gs This cookie is set by Google Ads and is part of the Google Conversion Linker functionality. It helps track ad clicks and conversions across domains. HTTP 50 days Google (Third-party)
_gac_UA-* This cookie is set by Google Ads in combination with Google Analytics and stores campaign information in order to provide better attribution of ad clicks and conversion tracking when Google Ads and Google Analytics are linked. HTTP 90 days Google (Third-party)
_gcl_aw Used by Google Ads to provide ad delivery or retargeting. HTTP 50 days Google (Third-party)