Cookie Policy
Last updated: [DATE]
This Cookie Policy explains how Shark Tattoo Studio ("we", "us", "our") uses cookies and similar technologies on sharktattoo.de (the "Website"). It should be read together with our Privacy Policy.
By using the Website, you agree to the use of strictly necessary cookies. All other cookies are only set after you give consent through our cookie banner.
1. What are cookies?
Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They allow the site to recognize your browser, remember your preferences, keep you logged in, and protect form submissions.
We also use similar technologies (local storage, session storage) for the same purposes. Throughout this document, "cookies" refers to all of these.
2. Legal basis
We process cookie data under:
- § 25 (2) TTDSG — for strictly necessary cookies, no consent required.
- § 25 (1) TTDSG + Art. 6 (1)(a) GDPR — for all other cookies, your prior consent is required.
You can withdraw consent at any time with effect for the future via the cookie settings link in the footer.
3. Categories of cookies we use
3.1 Strictly necessary (always active)
These cookies are required for the Website to function. They cannot be disabled.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
laravel_session |
sharktattoo.de | Maintains your session (cart-less; appointment flow, login state) | 2 hours |
XSRF-TOKEN |
sharktattoo.de | CSRF protection — prevents cross-site request forgery on forms | 2 hours |
cookie_consent |
sharktattoo.de | Stores your cookie preferences so we don't ask again on every page | 12 months |
locale |
sharktattoo.de | Remembers your language selection (DE / EN) | 12 months |
3.2 Functional cookies (set only with consent)
These improve your experience but are not strictly required.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
remember_web_* |
sharktattoo.de | "Remember me" on login — keeps you signed in across browser sessions | 5 years |
3.3 Third-party content (set only with consent)
We embed external content. When you load these features, the third party may set its own cookies and process your IP address.
| Service | Where used | Provider | Purpose | More info |
|---|---|---|---|---|
| Google Maps | Locations page | Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, IE | Embedded map of studio locations | https://policies.google.com/privacy |
| Meta (Messenger) | Contact buttons (m.me) | Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, IE | Direct messaging link | https://www.facebook.com/privacy/policy |
| Contact / social links | Meta Platforms Ireland Ltd. | External profile link | https://privacycenter.instagram.com/policy | |
| TikTok | Contact / social links | TikTok Technology Limited, Dublin, IE | External profile link | https://www.tiktok.com/legal/privacy-policy-eea |
| Contact buttons (wa.me) | WhatsApp Ireland Ltd., Merrion Road, Dublin 4, IE | Direct messaging link | https://www.whatsapp.com/legal/privacy-policy-eea |
Pure outbound links (e.g. https://www.instagram.com/...) do not set cookies on our site, but clicking them takes you to the third party's site where their cookie policy applies.
3.4 Analytics cookies (set only with consent)
We use Google Analytics 4 to analyse and improve the use of our Website. Data is processed in pseudonymised form (IP anonymisation enabled).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland | Distinguishes unique users | 2 years |
_ga_* |
Google Ireland Ltd. | Session state for GA4 (property-specific) | 2 years |
_gid |
Google Ireland Ltd. | Distinguishes unique users (daily basis) | 24 hours |
Data transfer: Data may be transferred to Google LLC in the United States. Legal basis: EU–US Data Privacy Framework adequacy decision (10 July 2023) and Standard Contractual Clauses. Provider's privacy policy: https://policies.google.com/privacy Opt-out: Browser add-on https://tools.google.com/dlpage/gaoptout
3.5 Marketing cookies (set only with consent)
We use Meta Pixel and TikTok Pixel to measure the effectiveness of our advertising on Facebook, Instagram, and TikTok, and to deliver audience-relevant content.
Meta Pixel (Facebook / Instagram)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_fbp |
Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland | Identifies the browser for advertising and analytics | 90 days |
_fbc |
Meta Platforms Ireland Ltd. | Stores the last advertising click identifier after a visit via Facebook ads | 90 days |
fr |
Meta Platforms Ireland Ltd. | Encrypted browser and user identifier for ad delivery | 90 days |
Joint controllership: For Meta Pixel, we and Meta are joint controllers under Art. 26 GDPR. The arrangement is available at https://www.facebook.com/legal/controller_addendum. Data transfer: Data may be transferred to Meta Platforms, Inc. in the United States. Legal basis: EU–US Data Privacy Framework and Standard Contractual Clauses. Provider's privacy policy: https://www.facebook.com/privacy/policy
TikTok Pixel
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ttp |
TikTok Technology Limited, Dublin, Ireland | Unique browser identifier | 13 months |
_tt_enable_cookie |
TikTok Technology Limited | Records consent to TikTok cookies | 13 months |
_tt_sessionId |
TikTok Technology Limited | Session identifier | Session |
Data transfer: Data may be transferred to servers in the United States and Singapore, and to TikTok group entities including outside the EU/EEA. Legal basis: Standard Contractual Clauses. No EU Commission adequacy decision exists for these third countries; there remains a residual risk that local authorities may access the data. Provider's privacy policy: https://www.tiktok.com/legal/privacy-policy-eea
3.6 AI Creator feature
Our AI Creator tool sends your prompt to a third-party AI provider to generate tattoo design suggestions. No cookies are set, but the prompt and resulting image are processed by the provider. See our Privacy Policy section "AI Creator" for details.
4. International data transfers
When using the analytics and marketing services listed above, data is transferred to providers in the United States and possibly other third countries. Since 10 July 2023, an adequacy decision exists for the United States ("EU–US Data Privacy Framework"); transfers take place on that basis or additionally secured by Standard Contractual Clauses under Art. 46 GDPR. For third countries without an adequacy decision, a residual risk remains that local authorities may access the data without effective legal remedy.
By activating the relevant cookie category, you expressly consent to these third-country transfers (Art. 49 (1)(a) GDPR).
5. Managing your preferences
You can manage your cookie consent at any time:
- Click "Cookie settings" in the footer of any page.
- Configure your browser to block or delete cookies. Note that blocking strictly necessary cookies will break login and appointment booking. Help pages:
6. Changes to this policy
We may update this policy if we add new features or if legal requirements change. The "Last updated" date at the top reflects the latest version. Material changes will trigger a new consent prompt.
7. Contact
Questions about cookies or data processing?
Shark Tattoo Studio Lange Str. 63, 49661 Cloppenburg, Germany Email: shark.tattoo03@gmail.com Phone: +49 174 4552303