Last updated: 1 November 2026. This notice explains how the ChristmasClick website works and which third-party services visitors may contact while browsing.
Website delivery and security
Our website is delivered through Cloudflare. When you visit a page, technical information such as your IP address, requested pages, browser identifiers and security-related request details may be processed to deliver content, prevent abuse and maintain website reliability. This processing is necessary for site operation and security; retention by Cloudflare depends on the applicable service and its policies. See Cloudflare’s privacy policy.
Images hosted by third parties
Some photographs are currently loaded directly from image services such as Unsplash, Pexels and Wikimedia Commons. When your browser requests such an image, it connects to the provider and may disclose your IP address and technical browser information. These requests are separate from ChristmasClick and are subject to the providers’ data handling policies. We are working to reduce external image requests. You can find individual image sources on our photo credits page.
Search and saved places
Search and date filtering run in your browser. If you choose to save favourite places, identifiers are stored in your browser’s local storage. They are not sent to a ChristmasClick user account, and you can remove them using your browser’s site-data controls.
Advertising, analytics and links
We may display advertising or use affiliate links in the future. Sponsored placements and commercial relationships will be identified when active. Non-essential advertising or measurement technologies, where introduced, will be subject to applicable notice and consent requirements. Links to organisers and other external websites take you to services that maintain their own privacy notices.
Data protection rights
Where EU data protection law applies, individuals may have rights to access, rectify, erase or restrict personal data, object to certain processing, and complain to a relevant supervisory authority. The website publisher and data controller for the purposes of this notice is UNIPOSE PRIVATE COMPANY ΙΚΕ (Unipose P.C.), 25 Theodorou Natsina Street, 54249 Thessaloniki, Greece, AFM 800778878, GEMI 140657604000. The dedicated website contact mailbox is being activated; see the legal notice for the currently published contact particulars. Further information about providers, data retention and any future advertising processing will be added as the website services are finalised.