About cookies and similar technologies
TUI UK Retail Limited, acting as agent for TUI Deutschland GmbH trading as Sundeals (referred to in this Notice as “we” or “us”), part of the TUI Group, uses cookies and similar technologies including from our partners (together “cookies”). Cookies are small text files placed on your device to store data which can later be accessed and read by the party placing the cookie. Some cookies are strictly necessary for our website and mobile apps to work properly, while others allow us and our partners to enhance your experience, personalise content and adverts across your devices, and provide insights into how our website and mobile apps are being used.
We also use additional identifiers, such as Web Beacons and Email Pixels, for similar purposes, and our website and mobile apps also contain other similar technologies which we explain below.
What cookies do we use?
The cookies we use are categorised in the following ways:
Which other technology may be used?
Alongside cookies, we may also use other tracking technologies on our website and mobile apps and in emails we send to you, some of which are very similar to cookies.
We generate and store a unique identifier when you click a tracking link or are shown an advertisement. When you later make an action such as a website visit or a purchase, the unique identifier is matched. This allows us to monitor the effectiveness of our advertising.
Web Beacons are electronic tags that can be delivered to your device as part of a web page request, in an app, an advertisement or an HTML email message. We and our partners may use web beacons to help deliver cookies on our websites, to count website visitors, and to help us compile statistics about the effectiveness of our promotional campaigns or other operations.
We may use techniques such as pixels, which we don’t refer to as cookies because they don’t store information on your device. A pixel is an electronic file embedded into an email or newsletters which allows us to see if the message was delivered, if and when you read it, and what you clicked on. We may use similar technology to get the same information about push notifications we send you.
For which purposes do we use cookies?
We use cookies for a variety of purposes. Some cookies are strictly necessary for our website and mobile apps to work properly and therefore cannot be declined. Others allow us and our partners to enhance your experience, personalise content and adverts across your devices, and provide insights into how our website and mobile apps are being used. These cookies are not strictly necessary and won’t be placed on your device unless you give your permission to do so.
We divide our cookies into the following categories:
Strictly Necessary Cookies
Strictly necessary cookies enable core functionality such as logging you in, saving your language preferences, improving performance, routing traffic between web servers, detecting the size of your screen, determine page load times, displaying external media and keeping your online shopping basket. We also use strictly necessary cookies for protecting your security, network management, accessibility and to help our webpages to load quickly. They help us to keep track of what you place in and remove from your shopping basket as you move through each stage of the booking process.
Without them you could not complete your online booking and our website and mobile apps could not function properly which is why they cannot be declined.
The following strictly necessary cookies are placed on your device:
Name | Provider | Description | Expiry Period |
AMCV_#@AdobeOrg | Adobe – Visitor API | Cookie associated with the Adobe Marketing Cloud. Contains a unique visitor identifier for a site visitor on a particular device/browser. All browsing behaviour collected in Adobe is associated to this cookie value. | 2 years |
AMCVS_####@AdobeOrg | Adobe – Visitor API | Cookie associated with the Adobe Marketing Cloud which serves as a flag indicating that the session has been initialized. | Session |
gpv_pn | Adobe Analytics | Cookie associated with the Adobe Analytics Get Previous Value plugin. Is used to return value held in an Adobe variable. | 30 minutes |
gpv_pn2 | Adobe Analytics | Cookie associated with the Adobe Analytics Get Previous Value plugin. Is used to return value held in an Adobe variable. | 30 minutes |
s_cc | Adobe Analytics | Cookie used to determine if JavaScript is enabled in the browser. | Session |
s_comp_click | Adobe Analytics | Cookie used to track what components users click on on our sites. | 10 seconds |
s_depth | Adobe Analytics | Cookie used to capture how many pages are viewed in a session which is passed to Adobe Analytics. | 2 years |
s_depth_vis | Adobe Analytics | Cookie used to capture how many pages a visitor has viewed which is passed to Adobe. | 30 minutes |
s_fid | Adobe Analytics | Cookie associated with the Adobe Analytics. Is a fallback unique visitor ID used when the s_vi or AMCV cookies are not present. | 2 years |
s_lv | Adobe Analytics | Adobe Analytics used to identify the time (in days) between two visits. | 3 years |
s_lv_s | Adobe Analytics | Cookie used to store the time of a visitors last visit | 1 month |
s_nr | Adobe Analytics | Cookie used to store the date of visit and whether they are new or returning. | 1 month |
s_ptc | Adobe Analytics | Cookie is set as part of the Adobe performance timing plugin. Is used to capture page load speed statistics on our site. | Session |
s_vi | Adobe Analytics | Cookie associated with the Adobe Marketing Cloud containing an anonymous visitor identifier for a site visitor on a particular device/browser. | 2 years |
ttc | Adobe Analytics | Cookie associated with the Adbe Analytics getTimeToComplete plugin. Used to understand how quickly our checkout process is completed. | Session |
ev_sync_dd | Adobe Analytics – Everestech | Cookie associated with the Adobe Marketing Cloud. This cookie synchronises a visitors unique ID when visiting our site. | 1 month |
everest_g_v2 | Adobe Analytics – Everestech | Cookie associated with the Adobe Marketing Cloud. This cookie synchronises a visitors unique ID when visiting our site. | 2 years |
everest_session_v2 | Adobe Analytics – Everestech | Cookie associated with the Adobe Marketing Cloud. This cookie synchronises a visitors unique ID when visiting our site. | Session |
check | Adobe Target | Confirms whether the browser supports cookies. | Session |
mbox | Adobe Target | Cookie associated with Adobe Target. Stores multiple values to control how your visitors experience Adobe Target activities on the site. | 2 years |
mboxEdgeCluster | Adobe Target | Keeps track of the currently used Adobe Target edge server. | 30 minutes |
tntPQRY | Adobe Target | Used to pass custom data such as search behaviour to Adobe Target which is used for mechandising. Only use for personalisation purposes if opted in to personalisation. | 30 days |
demdex | Adobe Visitor API | Cookie associated with the Adobe Marketing Cloud. The demdex cookie is set in the third-party, demdex.net domain in the browser. Allows the Adobe Visitor Service to identify a site visitor across our domains. | 6 months |
dpm | Adobe Visitor API | Cookie associated with the Adobe Marketing Cloud. DPM is an abbreviation for Data Provider Match . It tells internal Adobe systems that a call from Audience Manager or the ID service is passing in customer data for synchronization or requesting an ID. On our site this is used for ID generation. | 6 months |
_dd_s | Datadog | Cookie used to group all events generated from a unique user session across multiple pages. It contains the current session ID, whether the session is excluded due to sampling, and the expiration date of the session. The cookie is extended for an extra 15 minutes every time the user interacts with the website, up to the maximum user session duration (4 hours). | 1 Year |
STORAGE_PREFERENCES | Ryanair | Stores the preferences of the cookie categories for the Ryanair website. | Session |
mkt | Ryanair | Enables the browser to remember the market for a specific user. | 365 days |
fr-correlation-id | Ryanair | Tracks an anonymous user session between internal Ryanair services. | Session |
rid | Ryanair | Used to identify unique devices for enhanced security. | 365 days |
rid.sig | Ryanair | Used to identify unique devices for enhanced security. | 365 days |
CONSENTMGR | Tealium | Saves preferences from the Tealium Consent Tool. | 1 year |
utag_main | Tealium | Tealium cookie that provides the Tag Manager functionalities. | 1 year |
ab_####_V# | TUI | Used for A/B tests and are in the format ab_####v# or ab####. Used to trial out new experiences on our site. | 2 months |
consent | TUI | Saves whether you have interacted with the cookie policy or not. | 3 years |
mytui.uid | TUI | Cookie associated with logging into your account. | Session or 400 days |
mytui.session | TUI | Cookie associated with your logged in status. | Session or 400 days |
YXX-XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXX | TUI | Used for session externalisation. | 30 minutes |
JSESSIONID_* | TUI / CLOUD IQ | Stores the data for the session. | Session |
irclickid | Impact | Used for affiliate trafficking so we are able to match the booking back to the correct referring affiliate partner. For cashback and loyalty partners only, this is will be stored regardless of cookie consent as this is necessary to award any cashback payments or rewards the customer may be eligible for. For all other affiliates, this cookie is only stored when Marketing cookies are accepted. | 1 month |
isTDAFlow | TUI | Cookie associated to our promo code solution, allowing us to provide code discounts. | Session |
tsm_rid | Travel Supermarket | Stores an affiliate referral ID (“rid”) when a visitor arrives via TravelSupermarket. With Marketing consent, set/update a cookie for 30 days. If a booking is completed within that period, include the stored rid on the booking/conversion pixel to attribute partner credit. No cookie is set or read if Marketing consent is declined. | 30 days |
ilm_rid | Icelolly | Stores an affiliate referral ID (“rid”) when a visitor arrives via Icelolly. With Marketing consent, set/update a cookie for 30 days. If a booking is completed within that period, include the stored rid on the booking/conversion pixel to attribute partner credit. No cookie is set or read if Marketing consent is declined. | 30 days |
Functional Cookies
These cookies improve the way our website and mobile apps work and provide you with enhanced, more personal features. They also help us to remember your preferences, recent searches, and shortlisted holidays, to make it easy for you to return to the previous search. If you deactivate our functional cookies, our website services and your user experience may be affected.
The following functional cookies are placed on your device:
None
Analytical Cookies
These cookies collect information that is used to help us understand how our website is being used and to help us improve your website experience. Using these cookies, we will know which web pages customers enjoy reading most and what products are most popular.
We use partners for the above purposes who we allow to place analytics cookies on our website and mobile apps which include:
Google Analytics. Google Analytics helps us to understand how you interact with our website by collecting and reporting information anonymously. We use Google Analytics to help us analyse the information collected. It also reports website trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our website – for more information on opting out of being tracked by Google Analytics across all websites you use, visit: http://tools.google.com/dlpage/gaoptout
Adobe Analytics. Adobe Analytics uses analytics software to help us and them to collect and analyse visitor information such as browser usage, new visitor numbers, response to marketing activity and shopping times. This information helps us to make improvements to our website, the shopping experience and marketing campaigns.
The following analytical cookies are placed on your device by us or our partners:
Name | Provider | Description | Expiry Period |
__utma | Google Analytics | Used to distinguish users and sessions. The cookie is created when the javascript library executes and no existing __utma cookies exists. The cookie is updated every time data is sent to Google Analytics. | 2 years |
_ga and _ga_R1P4W35ZRQ | Google Analytics | Used to distinguish visitors. | 2 years |
_gac_ | Google Analytics | Contains campaign related information for the user. If you have linked your Google Analytics and Google Ads accounts, Google Ads website conversion tags will read this cookie unless you opt-out. | 90 days |
_gat_tui2 | Google Analytics | Used to limited request rate. Used for the Google Analytics tracker tui2. | 1 minute |
_gat_tuinew | Google Analytics | Used to limited request rate. Used for the Google Analytics tracker tuinew. | 1 minute |
_gid | Google Analytics | Used to distinguish visitors. | 24 hours |
_ga2 / _gaDuplicate | Google Analytics/TUI | Replicates the behaviour of the _ga cookie but is set from our server. | 2 years |
QSI_HistorySession | Qualtrics | A session cookie that stores what pages a visitor has visited for the current session. | Session |
QSI_SI_XXX_intercept | Qualtrics | Cookie used to prevent repeated display of our customer surveys. | Up to 90 days |
QST | Qualtrics | Enables us to record that a survey response has been submitted and prevent the user from taking a survey again. | 6 months |
QuantumMetricSessionID | Quantum Metric | The session id retrieved from QM | 30 minutes |
QuantumMetricUserID | Quantum Metric | The user id retrieved from QM | 1 year |
QuantumMetricEnabled | Quantum Metric | Persists if a session is enabled/disabled. Used when sampling settings are in use or when opt-out behaviors are called. | Sess |
Marketing Cookies
Marketing cookies help us and our partners to learn about how you browse our website, which ads you click and which content you view. These insights are used to deliver more relevant online advertising to you and to measure the effectiveness of our advertising campaigns. They collect data about your online behaviour, IP address, the website you arrived from, information about your purchase history or the content of your shopping basket, so that we can try to predict what other products, services, and information you might be most interested in. For example, to suggest flights from your nearest airport, holidays in destinations you have shown interest in or products you might like. They also tell us if you have seen a specific advert, how long it has been since you saw it and control the number of times you are shown an advert. They also tell us if you have opened a marketing email that we sent you and which content you have viewed and clicked.
We work with our partners to collect your data as set out above. These partners may link your data to other information they collect to create custom audiences or deliver targeted ads to you on our or other websites.
By declining these cookies, adverts you see will not be personalised to your interests anymore, as they will not consider information from your past online behaviour, purchase history or the content of your shopping basket.
Name | Provider | Description | Expiry Period |
_uetmsclkid | Bing | Used for Universal Event Tracking for tracking conversions. Bing Ads automatically adds a unique click ID to the landing page URL after a user clicks on an ad. The UET tag sets this first party cookie to capture the click ID from the URL. This allows for conversion events to be tied to the ad click. | 90 days |
_uetsid | Bing | Cookie associated with Microsoft Bing, used to gather anonymous information on how visitors are using our websites. | 4 days |
_uetvid | Bing | Cookie associated with Microsoft Bing Ads. It is a tracking cookie that allows us to engage with a user that has previously visited our website. | 16 days |
MUID | Bing | Used by Microsoft advertising to anonymously identify user sessions to help us measure the effectiveness of our marketing campaigns. | ~25 months |
b | Blis | Cookies are used by Blis to track the actions of the users who viewed or clicked on one of the advertisements in order to measure its effectiveness. | 1 year |
_fbc | Contains the click ID to be used to track back Facebook Pixel events to the Facebook click. It is only set when a user lands on the site with a fbclid in the URL. | 90 days | |
_fbp | Tracks the visitor across devices and marketing channels. Used by Facebook to deliver a series of advertising products such as real time bidding from third parties. It holds the unique ID of the user. | 90 days | |
fr | Facebook ad statistics cookie. | 90 days | |
__ar_v4 | Google – DoubleClick | Used by DoubleClick to place advertisements that point to our website in Google search results. This cookies is used to track conversion rates for these ads. | 30 days |
IDE | Google – DoubleClick | Used by DoubleClick for serving targeted advertisements that are relevant to you across the web. Targeted advertisements may be displayed to you based on your previous visits to the site. | 390 days |
RUL | Google- DoubleClick | Used by DoubleClick to determine whether website advertisement has been properly displayed- This is done to make their marketing efforts more efficient. | 390 days |
_gcl_au | Google Ads | Google Ads – this collects information about ad clicks into a first party cookie. | 90 days |
_gcl_aw | Google Ads | Google Ads – this collects information about ad clicks into a first party cookie. | 90 days |
_gcl_dc | Google Ads | Google Ads – this collects information about ad clicks into a first party cookie. | 90 days |
IR_10316 | Impact | This is a current session cookie. The activity is updated everytime the page loads. This is as part of UTT API implementation for tracking web events. | Session |
IR_gbd | Impact | This is the base domain cookie, set on host site. This is under the part of UTT tracking of web events. | Session |
IR_PI | Impact | Impact radius tracking is set on advertisers page and drops cookies when the user clicks on banner/ad. These are first party cookie’s which are set on advertisers domain. This part of UTT JavaScript functions and works based on unique identifier UUID keys. | 2 years |
_ttp | TikTok | Cookie for identifying a user and for tracking behaviour. | 390 days |
ttclid | TikTok | TikTok – this collects information about ad clicks into a first party cookie. | 90 days |
eid | TUI | Stores an ID which allows us to identify visitors so we can send more relevant email communications and browser push notifications. | 730 days |
ga_id | TUI | A current session conversion tracking cookie. Captures the Advertising ID or IDFV for the visitor, to track Android or iOS users who make a purchase. | Session |
SL | TUI | This is a current session cookie used to track users that have interacted with a sponsored listing from our partners. | 30 days |
timingTagFired | TUI | This is a session cookie used to more accurately identify users that have interacted with our website. | Session |
msclkid | TUI | Used to identify users that have interacted with a Microsoft campaign. | 90 days |
trv_reference | TUI | This is a session cookie used to more accurately identify users that have interacted with our website. | 30 days |
_tq_id.TV-8181365463-1.cda1 | TVSquared | Used by TV Squared to aid reporting of site visits and actions for analytical reporting. | 730 days |
taventid | TUI/Tripadvisor | Used to track users that have interacted with a Tripadvisor listing. | 30 days |
ta_rmaudience | TUI/Tripadvisor | Used to identify users that have interacted with Tripadvisor since interacting with TUI. | 180 days |
_cf_bm | Travel Supermarket & Icelolly | This is a Cloudflare cookie, set automatically by using cloudflare to serve pages/assets, and to help with handling its bot management tools. | 30 minutes |
cto_bundle | criteo.com | This cookie helps Criteo better manage the tracking solution. This bundle is a partitioned cookie (aka CHIPS) enabling personalised marketing by locally storing match keys only for users who have provided appropriate related consent. | 13 months |
uid | criteo.com | This cookie contains an identifier that enables Criteo to identify the user across different websites. | 13 months |
optout | criteo.com | This cookie enables Criteo to remember that the user made the choice not to be tracked by Criteo. “1” is the only value available for this cookie and means an optout cookie has been set. Otherwise the cookie won’t be set. | 400 days |
browser_data | dnacdn.net | This cookie helps Criteo better manage the tracking solution. It is enabling personalised marketing in some technical environments by locally storing match keys.. | 13 months |
__Secure-3PAPISID | Google Campaign Manager / Google Ads | Used by Google to build a profile of the user's interests across third-party sites to deliver more relevant advertising and to measure ad performance. Also used for authentication of the user's Google account in third-party contexts. | 2 years |
__Secure-3PSID | Google Campaign Manager / Google Ads | Used by Google to authenticate the user and store user preferences in third-party contexts, and to serve personalised advertising on non-Google websites based on recent Google searches and interactions. | 2 years |
__Secure-3PSIDCC | Google Campaign Manager / Google Ads | Security cookie used by Google to protect user data from unauthorised access in third-party contexts and to enable customised ads on Google services. | 1 year |
__Secure-3PSIDTS | Google Campaign Manager / Google Ads | Used by Google to verify and refresh user session tokens in third-party contexts, supporting authentication and personalised advertising on non-Google sites. | 1 year |
__Secure-3PSIDRTS | Google Campaign Manager / Google Ads | Used by Google to manage session rotation tokens in third-party contexts as part of secure authentication for advertising and account features. | 1 year |
NID | Google Campaign Manager / Google Ads | Stores the user's preferences and other information, in particular the preferred language, the number of search results to display per page, and whether to activate Google's SafeSearch filter. Also used by Google to display personalised ads on Google services. | 6 months |
GCL_AW_P | Google Ads | Partitioned (CHIPS) variant of the _gcl_aw cookie. Stores Google Ads click information (gclid) in a first-party context to attribute conversions to the originating ad click, while complying with browser restrictions on third-party cookies. | 90 days |
We also use server-to-server tracking by generating and storing a unique identifier when you click a tracking link or are shown an advertisement. When you later make an action such as a website visit or a purchase, the unique identifier is matched. This allows us to monitor the effectiveness of our advertisement. Where we use server-to-server tracking, no marketing cookies will be placed on your device via your browser. Instead, we will share the information about your online behaviour and the following data points with our partners Facebook and Google, directly via server-to-server tracking to improve our marketing tracking and capabilities:
Key Type: Key Name | Description |
Email: em | An email address in lower case. Example joe@eg.com |
Phone: ph | A phone number. Include only digits with country code, area code and number. Remove symbols, letters and any leading zeros. In addition, always include the country code as part of the customer phone number, even if all the data is from the same country, as the country code is used for matching. For example, the number 1 must always precede a phone number for the United States. Example 16505551212. |
Last name: In | A last name in lowercase. Example: smith. |
First name: fn | A first name in lowercase. Example: joe. |
Client IP address: client_ip_address | The IP address of the browser corresponding to the event (HTTP headers) |
Client user agent: client_user_agent | The IP address of the browser corresponding to the event. Note: this information is automatically added to events sent through the browser/ pixel,but must be manually configured to events sent through server. |
Click ID: fbc | The Facebook click ID value stored in the _fbc browser cookie under your domain. See managing fbc and fbp parameters for how to get this value or generate this value from a fbclid query parameter. |
Browser ID: fbp | The Facebook browser ID value stored in the _fbp browser cookie under your domain. See Managing fbc and fbp Parameters for how to get this value. |
Our partners may link your data received from us to other information they collect to create custom audiences or deliver targeted ads to you on our or other websites.
What are your choices when it comes to cookies?
You can manage how cookies are placed on your device by us and our partners and change your related preferences at any time in Manage Cookie Preferences in the website footer. Simply use the sliders to turn cookies ‘On’ or ‘Off’ as you wish, then click ‘Save and Close’. You may need to refresh your page for your new settings to take effect.
In addition, you can use your browser settings to accept or reject new cookies and to delete existing persistent cookies. You can also set your browser to notify you each time new cookies are placed on your device. You can find more detailed information about how you can manage cookies by referring to the ‘help’ section of your browser. Here you can find out how to manage cookies on popular browsers:
Also, the operating system of your mobile device may allow you to control cookies through its settings function. Please refer to your relevant device manufacturer’s instructions for more information.
For further information about opting out of targeted advertising please also visit All About Cookies and Your Online Choices.
If you choose to disable some or all cookies, you may not be able to make full use of our website or mobile apps as it may disable some of our strictly necessary cookies. For example, you may not be able to add items to your shopping basket, proceed to checkout, or use any of our products and services that require you to sign in.
Google – for further information on how Google handles your personal data please see here: https://business.safety.google/privacy/
How to contact us
To learn more about who we are, how we process your personal data and how you can contact us if you have any questions or concerns, please see our Privacy Notice.
Changes to our Notice
This Cookie Notice replaces all previous versions as from the update date stated below. We may change the Notice at any time so please check regularly on our website for any updates. If changes are significant, we will provide a prominent notice to users on our website and, if we believe it is appropriate, we may send you an electronic notification of Cookie Notice changes.
Last updated: June 2026