ELDORADO MARKET PRIVACY POLICY
This Privacy Policy (hereinafter referred to as the "Privacy Policy") explains how Eldorado Market, UAB ("Eldorado" or "we"), a public institution registered and operating under the legislation of the Republic of Lithuania, with a legal entity code 304881891, registration address Juozo Balčikonio str. 9, Vilnius, Lithuania, as the controller of your personal data, processes your personal data when you contact us via the addresses provided, make donations, or otherwise use this website. It also informs you of your rights as a data subject.
When processing personal data, Eldorado is guided by and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as "GDPR"), the Law of the Republic of Lithuania on the Legal Protection of Personal Data, and any other applicable legal acts regulating personal data protection.
If you are using the website, it means that you have read and understood this Privacy Policy and the purposes, methods and procedures for processing your personal data set out therein.
WHAT PRINCIPLES DO WE FOLLOW IN PROCESSING PERSONAL DATA?
When we process your personal data, we:
We will comply with the requirements of current and applicable laws, including the GDPR;
We will process your personal data in a lawful, fair and transparent manner;
We will collect your personal data for specified, explicit and legitimate purposes and will not further process your personal data in a way that is incompatible with those purposes, except to the extent permitted by law;
We will take all reasonable steps to ensure that personal data which are inaccurate or incomplete in relation to the purposes for which they are processed are promptly rectified, supplemented, suspended or destroyed;
We will keep them in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed;
We will not disclose personal data to third parties or make it public, except as provided in the Privacy Policy or applicable law;
We will ensure that your personal data is processed in such a way that appropriate technical or organizational measures are taken to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.
2. PROCESSING OF YOUR PERSONAL DATA
Eldorado processes your personal data for the following purposes:
To create and manage your user account on the Eldorado marketplace:
Data categories
Identification and contact data
Account and profile data
Transaction data
Order and delivery data
Payment and financial data
Billing data
Device and technical data
Fraud prevention data
Identity verification data
Communication and support data
Marketing and preference data
Compliance and legal data
Technical and usage data
Analytics and tracking data
Legal basis for processing Processing is necessary for the performance of a contract to which you are a party (Article 6(1)(b) GDPR).
Retention period
Account data is retained for as long as your account remains active. After account closure, personal data is retained for an additional 90 days for technical and administrative purposes, and then deleted or anonymized, unless longer retention is required for compliance with legal obligations or for the establishment, exercise or defense of legal claims (up to 5 years).
We get our data from Provided directly by you.
We provide or transfer data Hosting providers, anti-fraud tools, customer support systems.
2. To enable and administer purchase and sale transactions on the Eldorado marketplace:
Data categories
Transaction details, payment status, delivery details, user ID, contact details.
Legal basis for processing
Processing is necessary for the performance of a contract to which you are a party (Article 6(1)(b) GDPR); processing is necessary for compliance with legal obligations (Article 6(1)(c) GDPR – accounting and taxation).
Retention period
Transaction, accounting-related payment records are retained for 10 years in accordance with the General Document Retention Schedule approved by the Chief Archivist of Lithuania and applicable accounting and taxation laws.
We get our data from
Provided directly by you, also generated during platform use.
We provide or transfer data
Payment service providers, accounting service providers, auditors.
3. To process payments and prevent fraud:
Data categories
Payment details (masked identifiers), IP address, device data, fraud signals.
Legal basis for processing
Processing is necessary for the performance of a contract to which you are a party (Article 6(1)(b) GDPR); processing is necessary for the purposes of Eldorado’s legitimate interests in ensuring the security of transactions and preventing fraud (Article 6(1)(f) GDPR).
Retention period
Data retained for up to 3 years for dispute resolution and fraud-prevention purposes.
We get our data from
Provided by you, also received from payment providers and fraud-prevention tools.
We provide or transfer data
Payment providers (controllers), fraud-prevention service providers (processors), authorities if required.
4. To verify the identity of sellers (buyers) in order to prevent fraud and/or scams:
Data categories
Identity document copy, selfie/photo, name, date of birth, address, account ID.
Legal basis for processing
Processing is necessary for the purposes of Eldorado’s legitimate interests in protecting marketplace integrity, preventing fraud and ensuring user trust (Article 6(1)(f) GDPR).
Retention period
Data retained for up to 90 days for dispute resolution and fraud-prevention purposes; accounting-related payment records are retained for 10 years in accordance with the General Document Retention Schedule approved by the Chief Archivist of Lithuania and applicable accounting and taxation laws.
We get our data from
Provided directly by you.
We provide or transfer data
To third-party identity verification service provider (acting as processor).
5. To provide customer support and communicate with you:
Data categories
Name, email, user ID, contents of your inquiries and other correspondence with us, dispute resolution history.
Legal basis for processing
Processing is necessary for the performance of a contract to which you are a party (Article 6(1)(b) GDPR); processing is necessary for the purposes of Eldorado’s legitimate interests in resolving disputes and providing effective support (Article 6(1)(f) GDPR).
Retention period
Correspondence retained no longer than 6 months following the end of communication.
We get our data from
Provided by you.
We provide or transfer data
To customer support service providers (acting as processors) and, where necessary, to legal advisors, courts, or competent authorities for dispute resolution purposes.
6. To send you marketing communications (where permitted):
Data categories
Name, email, marketing preferences, in-app identifiers.
Legal basis for processing
Processing is based on your consent (Article 6(1)(a) GDPR); processing is necessary for the purposes of Eldorado’s legitimate interests in informing existing customers about similar services (Article 6(1)(f) GDPR), where applicable.
Retention period
Retained until consent is withdrawn or for no longer than 5 years in line with account data retention.
We get our data from
Provided by you when opting in; inferred from service use.
We provide or transfer data
Email/SMS marketing service providers.
7. To comply with legal obligations and defend legal claims
Data categories
Any relevant personal data necessary for compliance, investigations, audits, disputes.
Legal basis for processing
Processing is necessary for compliance with a legal obligation (Article 6(1)(c) GDPR); processing is necessary for the purposes of Eldorado’s legitimate interests in establishing, exercising or defending legal claims (Article 6(1)(f) GDPR).
Retention period
As long as required to comply with legal obligations or statutory limitation periods.
We get our data from
Provided by you, authorities, or third parties.
We provide or transfer data
Authorities, regulators, courts, auditors, legal advisors.
8. To ensure the functionality of the website, to collect statistical information, to analyze information flows, to improve the website and the browsing experience, and to personalize the website for users:
Data categories
Online identifiers; type of browser; number of visits; pages viewed; time spent on the website; referral source; device information; language; country; ISP, etc.
Legal basis for processing
Processing is necessary for the purposes of Eldorado’s legitimate interests in ensuring the proper functioning and security of the website (Article 6(1)(f) GDPR); processing is based on your consent for analytics and advertising cookies (Article 6(1)(a) GDPR.
Time limit for data processing
Personal data is retained for as long as the specific cookie is valid, unless you withdraw your consent earlier. See Section VI of this Privacy Policy for more details.
We get our data from
Collected via cookies directly from you when using the website.
We provide or transfer data
Shared with data processors (IT service providers, hosting providers, cloud infrastructure services, etc.)
3. TO WHOM WE MAY TRANSFER YOUR PERSONAL DATA
Please be advised that we do not transfer or otherwise disclose your personal data to third parties, except in the following cases:
with your consent;
to our employees, agents and authorized service providers who need access to such data in order to provide services reasonably necessary for the purposes set out in this Privacy Policy;
to data processors, i.e. third-party service providers (such as IT infrastructure and hosting providers, identity verification providers, payment processors, marketing and analytics providers, and customer support systems) who process personal data on our behalf and only in accordance with our instructions;
to law enforcement authorities, bodies and/or other recipients to whom the data must be communicated in accordance with legal requirements or in order to defend their rights and interests.
In cases where Eldorado transfers personal data to data processors, Eldorado requires that such processors process the data solely in accordance with Eldorado’s instructions, for the purposes defined by Eldorado, and in compliance with this Privacy Policy, applicable data protection laws, and the data processing agreements concluded between Eldorado and the processors.
Eldorado may transfer your personal data to entities outside the European Economic Area (EEA) on a lawful basis and for legitimate purposes (e.g., if the data processors or other recipients are located outside the EEA). In cases where personal data is transferred to countries that have not been recognized by the European Commission as providing an adequate level of data protection, Eldorado will implement appropriate safeguards to ensure the protection of your personal data – for example, by relying on standard contractual clauses approved by the European Commission.
4. WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?
As a data subject, you have the following rights:
Right to be informed about the processing of personal data by Eldorado. You have the right to obtain information about the processing of your personal data, the source of the personal data, the purposes of the processing, the legal basis, the duration of storage and the persons, recipients or processors of the data, the rights of the data subject, etc.
Right of access to your personal data processed by Eldorado. You have the right to have access to and obtain a copy of the personal data processed about you.
Right to request correction of your personal data processed by Eldorado. You have the right to request the rectification of inaccurate or erroneous personal data processed by Eldorado.
Right to withdraw consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent prior to the withdrawal of your consent.
Right to request erasure. You have the right to request that your personal data be deleted if (i) it is no longer necessary for the purpose for which it was collected; ii) you have withdrawn your consent to the processing of your personal data, where the processing was based on your consent; (iii) we are processing your personal data on the basis of legitimate interest and you object to such processing and there are no overriding legitimate grounds for processing; (iv) we are required to delete your personal data to comply with a legal obligation imposed on us; or (v) your personal data has been unlawfully processed.
Right to restrict processing. You have the right to restrict Eldorado’s processing of your personal data: (i) if you dispute the accuracy of the data and Eldorado conducts a review; (ii) if your personal data has been processed unlawfully, but you do not consent to its erasure; (iii) if your personal data is no longer necessary for the purpose for which it was collected, but is required for the establishment, exercise or defense of a legal claims; or (iv) if you have objected to the processing of your data as described below, pending verification that Eldorado's legitimate grounds override your grounds.
Right to object to processing. You have the right to object to the processing of your personal data by Eldorado for direct marketing purposes, the right to object to the processing of your personal data in the public interest or in the legitimate interests of Eldorado, unless these interests override the grounds for your objection.
Right to portability of your personal data. You have the right to receive the personal data that you have provided to us or to request the transfer of such data to another controller in a structured, commonly used and computer-readable format, provided that the processing of your personal data is based on your consent or on an agreement between us and that your personal data is processed by automated means.
Right to complain. If you believe your rights have been violated, you can contact Eldorado DPO at [email protected] and/or file a complaint with the data protection authority. In Lithuania, the data protection authority is the State Data Protection Inspectorate (L. Sapiegos g. 17, LT-10312 Vilnius, email: [email protected]), while in other countries you can contact the data protection authority of your place of residence or the place where Eldorado operates here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
You can contact Eldorado [email protected] to exercise your rights. Eldorado may ask you to provide proof of identity before exercising your right(s).
Eldorado hereby informs you that the exercise of the foregoing rights may be subject to the conditions established by law for the exercise of a particular right, and that, therefore, Eldorado has the right to refuse, in a reasoned written decision, your request to exercise a particular right for specific reasons established by law.
Upon receipt of your request, Eldorado undertakes to exercise your right as soon as possible, but in any event within one month of receipt of your request, or to refuse to do so in a reasoned written decision. Eldorado may charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive.
5. ENSURING THE SECURITY OF YOUR PERSONAL DATA
Eldorado processes your personal data in a responsible and secure manner, taking into account the requirements for the security of personal data set out in the legislation. When determining the measures for the processing of personal data, as well as during the processing of the data, Eldorado shall implement the technical and organizational measures for data protection set out in the legislation in order to protect the processed personal data against accidental or unlawful destruction, damage, alteration, loss, disclosure, as well as against any other unauthorized processing. The security measures and the level of security of personal data shall be determined taking into account the risks associated with the processing of personal data.
Among other things, Eldorado employees who have access to personal data are made aware of the requirements for the protection of personal data and ensure the complete confidentiality of the personal data processed.
6. COOKIES
Eldorado notifies you that the website uses cookies.
Cookies are small text files that are sent to and temporarily stored on the device of each visitor to the website from which the website is accessed.
The information collected by cookies helps to identify the visitor to the website, to store the visitor's history and to tailor content accordingly. The information collected by cookies enables us to provide you with a more convenient browsing experience, to provide you with attractive offers and to learn more about visitor behavior, to analyze trends and to improve the website and our services.
When you visit the website, you may actively choose to accept the use of cookies. If you do not consent to the use of cookies, cookies that are not necessary for the functioning of the website or are purely technical nature will not be placed on your device.
Please note that you can also manage and/or delete cookies according to your preferences by selecting the cookie management tool on the website. You can also choose which cookies you want to accept and which you want to reject in the settings of your browser (Microsoft Edge, Safari, Firefox, Chrome, etc.). You can delete any cookies that are already on your device, and most browsers allow you to set them to not store cookies. The location of these settings depends on the browser you are using.
You may withdraw your consent to the use of cookies at any time by changing your preferences and deleting the cookies you have stored. Please note that if you choose to delete cookies, any options you have set will also be removed and the website may not function properly. For these reasons, we do not recommend that you disable cookies when you use the website.
To learn more about cookies and how to manage or remove them, you can visit: www.allaboutcookies.org.
We use the following cookies on the website:
Category | Name | Purpose | Type
Functional | AB test cookies | Use by the javascript framework to determine what variant of an AB tested feature to render, | First-party
Functional, Analytical | pseudoId | Used to maintain consistent A/B testing feature variations across sessions by anonymously identifying users for experiment assignment. | First-party
Required / Security | __Host-XSRF-TOKEN | Protects against Cross-Site Request Forgery (CSRF) attacks by validating that requests are made by the authenticated user and not malicious sites | First-party
Required / Essential | __Host-EldoradoIdToken | Stores the user's authentication token to maintain logged-in session state across the website | First-party
Required / Essential | __Host-EldoradoRefreshToken | Used to refresh the authentication token when it expires, allowing users to stay logged in without re-entering credentials | First-party
Analytical / Performance | _hjHasCachedUserAttributes | Hotjar: Enables Hotjar to know whether the data set in _hjUserAttributes Local Storage item is up to date or not. | First-party
Analytical / Performance | _hjSession_5163483 | Hotjar: Holds current session data and ensures subsequent requests in the session window are attributed to the same session. | First-party
Analytical / Performance | _hjSessionUser_5163483 | Hotjar: Persists the Hotjar User ID which is unique to the site. Ensures data from subsequent visits to the same site are attributed to the same user ID. | First-party
Functional | eldoradogg_currencyPreference | Maintains user Currency selection preference | First-party
Functional | cookie_available_check | This cookie is used by Klarna’s SDK to verify that the browser accepts cookies before proceeding with any payment or session-related functionality. | Third-party
Required / Essential | eldoradogg_guestUserEmail | One-time cookie to identify the user for guest checkout. | First-party
Required / Essential | eldoradogg_guestUserId | One-time cookie to identify the user for guest checkout. | First-party
Preference / Consent | usprivacy | Used by Primer to stores the user's U.S. Privacy (CCPA/CPRA) consent string — specifically the “USP String” defined by the IAB U.S. Privacy Framework. This value encodes whether the user has opted out of the sale or sharing of personal information. It also records timestamps for acknowledgment and opt-out actions to ensure compliance with U.S. privacy regulations. | Third-party
Analytical | wc_visitor | Used by Primer to stores a unique visitor identifier used by Primer’s SDK to link user activity across sessions for analytics and attribution. | Third-party
Analytical | wc_client | Used by Primer to stores referrer or client origin to attribute session or conversion source within Primer SDK. | Third-party
Required / Essential | _ps_did | Assigns a persistent session or device ID used by Checkout.com payment SDK to identify a customer’s device across payment interactions. | Third-party
Functional | _ps_fb | Set by checkout.com to store a fingerprint identifier for improving fraud detection and session verification in payment flows. | Third-party
Functional | _ps_lu | Set by checkout.com to stores the referring URL or merchant origin | Third-party
Security / Fraud Prevention | __cf_bm | t.co domain CloudFlare cookie to support its Bot Management service, which protects websites from automated traffic | Third-party
Security / Fraud Prevention | __cf_bm | analytics.twitter.com domain CloudFlare cookie to support its Bot Management service, which protects websites from automated traffic | Third-party
Required / Security | __Secure-1PAPISID | Used for Google targeting, it builds a profile of user interests to show personalized ads. | Third-party
Required / Security | __Secure-1PSID | This cookie is set by Google and is used to authenticate users, store session preferences, and perform security measures. | Third-party
Required / Security | __Secure-1PSIDCC | This cookie is set by Google and is used to protect users' data from unauthorized access. | Third-party
Required / Security | __Secure-1PSIDTS | Contains a unique identifier and collects information about your interactions with Google services and ads. | Third-party
Required / Security | __Secure-3PAPISID | This cookie is set by Google and is used to store user preferences and information when viewing pages | Third-party
Required / Security | __Secure-3PSID | This cookie is set by Google and is used to authenticate users, store session preferences, and perform security measures. | Third-party
Required / Security | __Secure-3PSIDCC | This cookie is set by Google and is used to protect users' data from unauthorized access. | Third-party
Required / Security | __Secure-3PSIDTS | Collects information about your interactions with Google services and ads. It is used to measure advertising effectiveness and deliver personalised content based on your interests. The cookie contains a unique identifier. | Third-party
Marketing / Campaign | _fbp | This cookie is used by Facebook to deliver advertising. The cookie contains an encrypted Facebook user ID and browser ID. It will receive information from this website to better target and optimise advertising. | First-party
Marketing / Campaign | _fbc | This cookie is used by Facebook to deliver advertising. The cookie contains an encrypted Facebook user ID and browser ID. It will receive information from this website to better target and optimise advertising. | First-party
Analytical | _ga_NMQG6CG3T7 | Used by Google Analytics to distinguish unique users and track their sessions on a website. | First-party
Analytical | _ga | Used by Google Analytics to distinguish unique users and track their sessions on a website. | First-party
Marketing / Campaign | _gcl_au | Used by Google AdSense to track user clicks and measure advertising efficiency across websites | First-party
Marketing / Campaign | _ScCbts | This cookie is associated with Snapchat and is used for targeted advertising. | First-party
Marketing / Campaign | _scid | Cookie associated with Snapchat. Sets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third party advertisement hubs, which facilitates real-time bidding for advertisers. | First-party
Marketing / Campaign | _scid_r | This cookie is associated with Snapchat and is used to identify visitors across different domains. | First-party
Marketing / Campaign | ad-id | Helps Amazon recognize your browser/device so it can serve and measure interest-based ads, do things like frequency capping and attribution/measurement. | Third-party
Marketing / Campaign | ad-privacy | Used for advertising/targeting across sites that show Amazon Ads—i.e., recognizing your browser to help deliver and measure personalized ads. | Third-party
Security / Fraud Prevention | AEC | Security & fraud prevention – ensures requests are made by the user, not malicious sites. Google | Third-party
Marketing / Campaign | APISID | Ad personalization & preferences for Google services on sites using Google plugins. | Third-party
Marketing / Campaign | DV | Ad personalization – helps deliver more relevant Google ads. | Third-party
Marketing / Campaign | guest_id | Identifies a logged‑out (guest) Twitter user for ad delivery and measurement on Twitter embeds. | Third-party
Marketing / Campaign | guest_id_ads | Advertising identifier for logged‑out Twitter users – ad targeting & frequency capping. | Third-party
Marketing / Campaign | guest_id_marketing | Marketing identifier for logged‑out Twitter users – personalization & attribution. | Third-party
Marketing / Campaign | Marketing | Snapchat advertising cookie – helps deliver and measure Snap ads. | Third-party
Functional | EssentialSession | Used to save Snapchat Essential Session cookie preferences. | Third-party
Marketing / Campaign | muc_ads | Twitter advertising analytics – ad performance, attribution, and personalization. | Third-party
Marketing / Campaign | NID | Preferences & ad personalization on Google services (e.g., language, SafeSearch). | Third-party
Functional | S | Google AB testing Session cookie. | Third-party
Marketing / Campaign | SAPISID | Download certain Google Tools and save certain preferences, for example the number of search results per page or activation of the SafeSearch Filter. Adjusts the ads that appear in Google Search. | Third-party
Preference / Consent | SOCS | Google to store a user’s state regarding their cookies choices. | Third-party
Marketing / Campaign | SSID | Google-related cookie primarily used for personalizing ads on sites that use Google services | Third-party
Analytical / Performance | OTZ | Aggregate site usage & ad performance measurement for Google services. | Third-party
Analytical / Performance | Performance | Snapchat performance measurement cookie – site/app performance analytics. | Third-party
Marketing / Campaign | personalization_id | Twitter ad personalization – tailors ads and content based on activity. | Third-party
Preference / Consent | Preferences | Snapchat preference cookie – saves user settings such as language/consent. | Third-party
Functional | presence | Functional – maintains chat presence and session status on Facebook plugins. | Third-party
Preference / Consent | sc-cookies-accepted | Stores your cookie consent choice for Snapchat widgets/SDK. | Third-party
Functional | sc-language | Stores preferred language for Snapchat content/widgets. | Third-party
Functional | wd | Functional – stores viewport dimensions to optimize Facebook UI rendering. Facebook | Third-party
Analytical / Performance | X-AB | A/B testing – helps Snapchat run experiments and measure performance. | Third-party
Marketing / Referral | ref | Tapfiliate referral code to be passed to the server for information regarding conversions of referrers. | First-party
Functional | promoCode | Used to set a promotional code automatically in checkout. | First-party
Marketing / Campaign | sc_click_id | Used to set Snapchat user identification token to be passed in checkout. | First-party
Marketing / Campaign | twclid | Used to set Twitter user identification token to be passed in checkout. | First-party
Marketing / Campaign | _clck | Persists the Clarity User ID and preferences, unique to that site is attributed to the same user ID. | First-party
Marketing / Campaign | _clsk | Connects multiple page views by a user into a single Clarity session recording. | First-party
Marketing / Campaign | CLID | Identifies the first-time Clarity saw this user on any site using Clarity. | Third-party
Marketing / Campaign | ANONCHK | Indicates whether MUID is transferred to ANID, a cookie used for advertising. Clarity doesn't use ANID and so this is always set to 0. | Third-party
Functional | MR | Indicates whether to refresh MUID. | Third-party
Marketing / Campaign | MUID | Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. | Third-party
Functional | SM | Used in synchronizing the MUID across Microsoft domains. | Third-party
Analytical | gaVisitorUuid | User identification cookie that assigns a unique ID to a visitor to recognize them on return visits and to track user behavior. Google | First-party
Marketing / Campaign | IDE | If you have personalized ads enabled, the ‘IDE’ cookie is used to personalize the ads you see. Google | Third-party
Marketing / Campaign | id | If you have personalized ads enabled, the ‘id’ cookie is used to personalize the ads you see. Google | Third-party
These cookies help us to | dbln | Used to help identify your browser securely for login and to protect against fraud and security threats. Facebook | Third-party
Marketing / Campaign | fr | Depending on your choices, this cookie is used to deliver, measured, and improve relevancy of your ads. Facebook | Third-party
Functional | oo | This cookie helps store your advertising preferences. Facbook | Third-party
Functional | presence | This cookie supports your use of Messenger chat windows. Facebook | Third-party
Functional | dpr | These cookies help deliver an optimal experience for your device's screen. Facebook | Third-party
Marketing / Campaign | FPGCLAW | Google Ads | Third-party
Marketing / Campaign | FPGCLGB | Google Ads | Third-party
Marketing / Campaign | FPGSID | Google Ads | Third-party
Marketing / Campaign | _gcl_gb | Google Ads | Third-party
Marketing / Campaign | _gac_gb_<wpid> | Google Ads | Third-party
Marketing / Campaign | _gcl_aw | Google Ads | Third-party
Marketing / Campaign | GCL_AW_P | Google Ads | Third-party
Marketing / Campaign | _gcl_gs | Google Ads | Third-party
Marketing / Campaign | _gcl_ag | Google Ads | Third-party
Required / Security | sb | Used to help identify your browser securely for login and to protect against fraud and security threats. Facebook | Third-party
Required / Essential | c_user | We use these cookies to authenticate you and keep you logged in as you navigate between Facebook Pages. | Third-party
Required / Essential | xs | We use these cookies to authenticate you and keep you logged in as you navigate between Facebook Pages. | Third-party
Required / Essential | datr | This is a unique identifier for your browser that, amongst other things, helps us protect you from fraud. This cookie also helps us to identify browsers used by malicious actors and to prevent cyber security attacks. Facebook | Third-party
Required / Essential | csrf | This cookie helps us to keep your account secure. Facebook | Third-party
Required / Essential | DSID | Used to identify a signed-in user on non-Google sites so that the user’s ads personalization setting is respected accordingly. The ‘DSID’ cookie lasts for 2 weeks. | Third-party
Security / Fraud Prevention | SID | Google account authentication & security; protects against abuse and maintains session state. | Third-party
Security / Fraud Prevention | SIDCC | Google security cookie protecting user data from unauthorized access and abuse. | Third-party
Security / Fraud Prevention | HSID | Google account security – prevents fraudulent use of credentials and protects user data. | Third-party
Required / Essential | intercom-device-id-mipk5r3a | Identifier for each unique device that interacts with the Intercom. It is refreshed on each successful ping, extending it another 9 months. | First-party
Required / Essential | intercom-session-mipk5r3a | Identifier for each unique browser session. This cookie is generated for each successful request to boot or update a user.
It gives the user access to their previous conversations and identifies them in the Intercom. | First-party
Required / Essential | intercom-id-mipk5r3a | Anonymous visitor identifier cookie. As people visit site they get this cookie. | First-party
Required / Essential | intercom-device-id-d03lq65y | Debugbear | Third-party
Required / Essential | intercom-id-d03lq65y | Debugbear | Third-party
Functional | eldoradogg_locale | Maintains user language selection preference | First-party
CHANGES TO THE PRIVACY POLICY
Eldorado has the right to change the terms and conditions set forth in this Privacy Policy. If we change the terms of this Privacy Policy, we will post an updated version of this Privacy Policy on the Website.
Changes to the Privacy Policy have been made and are effective from 1 October 2025.