Cookie Policy

www.dr-massing-cosmetics.de Cookie Policy

Welcome to the www.dr-massing-cosmetics.de Cookie Policy. This policy helps you understand what cookies and tracking technologies we use, how we use them, and what rights you have in this regard.

Last updated: November 6, 2025

Table of Contents

Introduction

This document informs Users about the technologies this Application uses to achieve the purposes described below. These technologies allow access to or storage of information (e.g., by using Cookies) on the User's device, or the use of the device's data processing capabilities when the User accesses or runs this Application.

For simplicity, such technologies, unless there is a reason for differentiation, are defined as "Trackers" within this document.

For example, while cookies can be used in both web and mobile browsers, they are not applicable as browser-based trackers in mobile apps. Therefore, in this document, the term cookie is only used when specifically referring to that type of Tracker.

Some of the processing purposes for which Trackers are used require the User's consent. If consent is given, it can be freely revoked at any time according to the procedure described in this document.

This Application uses proprietary Trackers (so-called "first-party Trackers") and third-party Trackers in connection with services provided by third parties (so-called "third-party Trackers"). Unless otherwise stated in this document, such third parties also have access to the Trackers they manage.

The duration and expiration of cookies and other similar Trackers depend on the lifespan set by the provider or the respective third-party provider. Some of them expire as soon as the User ends the browser session.

To obtain more precise and up-to-date information on the lifespan, as well as other information - such as regarding the use of other Trackers - Users are referred to the descriptions of the categories listed below, as well as to the linked privacy policies of corresponding third-party providers or to contacting the provider.

How this Application uses Trackers.

Functionality

This Application uses so-called "technical" cookies and similar Trackers to enable processes that are absolutely necessary for the performance and provision of the service.

Trackers managed by third parties

Shopify

Company: Shopify Inc.

Processing location: Canada

Personal data processed: Device information +2

Shopify is a platform provided by Shopify Inc. that allows the provider to create, host, and operate an e-commerce website. This service may place Trackers on the user's device. The most current and comprehensive information can be found in the service's official documentation.

Personal data processed:
  • Device information
  • Usage data
  • Tracker
Service provided by:
Tracker duration:
  • _ab: 3 years
  • _customer_account_shop_sessions: 1 month
  • _identity_session: 3 years
  • _master_udr: session duration
  • _merchant_essential: 2 years
  • _orig_referrer: 14 days
  • _pay_session: session duration
  • _s: 30 minutes
  • _secure_admin_session_id: 4 months
  • _secure_admin_session_id_csrf: 4 months
  • _shopify_country: session duration
  • _shopify_d: session duration
  • _shopify_essential: 2 years
  • _shopify_essential_: 2 years
  • _shopify_evids: session duration
  • _shopify_fs: 1 year
  • _shopify_m: session duration
  • _shopify_s: 30 minutes
  • _shopify_test: 1 minute
  • _shopify_tm: session duration
  • _shopify_tw: session duration
  • _storefront_u: 1 minute
  • _tracking_consent: session duration
  • _y: 1 year
  • auth_state_*: 25 minutes
  • c: 2 years
  • cart: 14 days
  • cart_currency: 14 days
  • cart_ver: 14 days
  • checkout_queue_checkout_token: 2 years
  • checkout_queue_token: 2 years
  • checkout_session_token: 21 days
  • checkout_worker_session: 3 days
  • customer_account_new_login: 20 minutes
  • customer_account_preview: 7 days
  • customer_auth_provider: indefinite
  • customer_auth_session_created_at: indefinite
  • discount_code: session duration
  • keep_alive: session duration
  • localization: 14 days
  • login_with_shop_finalize: 5 minutes
  • master_device_id: 2 years
  • shopifyChatData: session duration
  • shopify_pay: 2 years
  • source_name: indefinite
  • storefront_digest: 2 years

Visa

Company: Visa Inc.

Processing location: United States

Personal data processed: Email +3

Visa is a payment service provided by Visa Inc. that allows users to make online payments.

Personal data processed:
  • Email
  • Usage data
  • Tracker
  • Payment data
Service provided by:

PayPal

Company: Paypal

Processing location: See the PayPal Privacy Policy

Personal data processed: Email +3

PayPal is a payment service provided by PayPal Inc. that allows users to make online payments.

Personal data processed:
  • Email
  • Usage data
  • Tracker
  • Payment data
Service provided by:
Tracker duration:
  • LANG: 8 hours
  • __paypal_storage__: indefinite
  • akavpau_ppsd: session duration
  • enforce_policy: session duration
  • l7_az: session duration
  • nsid: session duration
  • ts: session duration
  • tsrce: session duration
  • x-cdn: session duration
  • x-pp-s: session duration

Mastercard

Company: Mastercard Inc.

Processing location: United States

Personal data processed: Email +3

Mastercard is a payment service provided by Mastercard Inc. that allows users to make online payments.

Personal data processed:
  • Email
  • Usage data
  • Tracker
  • Payment data
Service provided by:

American Express

Company: American Express Company

Processing location: United States

Personal data processed: Email +3

American Express is a payment service provided by American Express Company that allows users to make online payments.

Personal data processed:
  • Email
  • Usage data
  • Tracker
  • Payment data
Service provided by:

Google Tag Manager

Company: Google LLC

Processing location: United States

Personal data processed: Usage data +1

Google Tag Manager is a tag management service provided by Google LLC.

To understand how Google uses data, consult the Partner Policies and the Business Data page.

Personal data processed:
  • Usage data
  • Tracker
Service provided by:

Google Hosted Libraries

Company: Google LLC

Processing location: United States

Personal data processed: Usage data +1

Google Hosted Libraries is a service provided by Google LLC for optimizing and distributing data traffic.

Personal data processed:
  • Usage data
  • Tracker
Service provided by:

Cloudflare

Company: Cloudflare, Inc.

Processing location: United States

Personal data processed: Tracker +1

Cloudflare is a service provided by Cloudflare Inc. for optimizing and distributing data traffic. Due to the way Cloudflare's features are integrated, the service filters all data traffic occurring through this Application, i.e., communication between this Application and the user's browser, and at the same time allows for the collection of analytical data contained within this Application.

Personal data processed:
  • Tracker
  • various types of data as described in the service's privacy policy
Service provided by:
Tracker duration:
  • _cfuvid: indefinite
  • cf_clearance: 30 minutes

Functionality

This Application uses Trackers to enable simple interactions and operations, through which users are granted access to certain features of the service and communication with the provider is facilitated.

Trackers managed by third parties

WhatsApp Business Chat Widget

Company: Meta Platforms, Inc.

Processing location: United States

Personal data processed: Message sender +11

The WhatsApp Business Chat Widget is a service for interacting with Meta Platforms, Inc.'s WhatsApp live chat platform.

Personal data processed:
  • Message sender
  • Answers to questions
  • User content
  • Date of message
  • Email or message content
  • Last name
  • Profile picture
  • Phone number
  • Tracker
  • Time the message was sent
  • First name
  • Data transmitted during use of the service
Service provided by:

User Experience

This Application uses Trackers to provide users with enhanced options and features for interacting with external content, networks, and platforms.

Trackers managed by third parties

Kit Widget

Company: Kit, Inc. f/k/a ConvertKit, Inc.

Processing location: United States

Personal data processed: Email +6

The Kit Widget is a service that allows interaction with the Kit email and messaging service from Kit, Inc. f/k/a ConvertKit, Inc.

Personal data processed:
  • Email
  • Clicks
  • Last name
  • Usage data
  • Tracker
  • First name
  • Data transmitted during use of the service
Service provided by:

Performance Measurement

This Application uses Trackers to measure online traffic and analyze user behavior, thereby improving the service.

Trackers managed by third parties

Microsoft Clarity

Company: Microsoft Corporation

Processing location: United States

Personal data processed: Interaction events +4

Microsoft Clarity is a session recording and heatmap service from Microsoft Corporation. Microsoft processes or receives personal data via Microsoft Clarity, which in turn can be used for any purpose in accordance with Microsoft's privacy policy, including improving and providing Microsoft Advertising.

Personal data processed:
  • Interaction events
  • Clicks
  • Usage data
  • Session duration
  • Tracker
Service provided by:
Tracker duration:
  • ANONCHK: 10 minutes
  • CLID: 1 year
  • MR: 7 days
  • MUID: 1 year
  • SM: session duration
  • _clck: 1 year
  • _clsk: 1 day
  • _cltk: indefinite

Meta Events Manager

Company: Meta Platforms, Inc.

Processing location: United States

Personal data processed: Browser history +4

Meta Events Manager is an analytics service provided by Meta Platforms, Inc. Through the integration of the Meta pixel, Meta Events Manager can provide the provider with insights into traffic and interactions on this Application.

Personal data processed:
  • Browser history
  • Clicks
  • Usage data
  • Page views
  • Tracker
Service provided by:
Tracker duration:
  • _fbp: 3 months
  • lastExternalReferrer: session duration
  • lastExternalReferrerTime: session duration

Matomo Cloud

Company: InnoCraft

Processing location: New Zealand

Personal data processed: Device information +2

Matomo Cloud is an analytics service provided by InnoCraft.

Personal data processed:
  • Device information
  • Usage data
  • Tracker
Service provided by:
Tracker duration:
  • _pk_cvar*: 30 minutes
  • _pk_id*: 2 years
  • _pk_ref*: 7 months
  • _pk_ses*: 30 minutes
  • _pk_testcookie: 3 seconds

Google Analytics 4

Company: Google LLC

Processing location: United States

Personal data processed: Number of users +3

Google Analytics 4 is a web analytics service provided by Google LLC ("Google"). Google uses the collected data to track and examine how this Application is used, compile reports on its activities, and share them with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in a data center or on a server. Users can learn more by consulting Google's official documentation.

To understand how Google uses data, consult the Partner Policies and the Business Data page.

Personal data processed:
  • Number of users
  • Usage data
  • Session statistics
  • Tracker
Service provided by:
Tracker duration:
  • _ga: 2 years
  • _ga_*: 2 years

Marketing

This Application uses Trackers to deliver advertising or marketing content and measure its performance.

Trackers managed by third parties

Microsoft Advertising

Company: Microsoft Ireland Operations Limited

Processing location: Ireland

Personal data processed: Usage data +1

Microsoft Advertising is an advertising service provided by Microsoft Corporation.

Personal data processed:
  • Usage data
  • Tracker
Service provided by:
Tracker duration:
  • MUID: 2 years
  • _uetmsclkid: 3 months
  • _uetmsclkid: indefinite
  • _uetsid: 1 day
  • _uetsid: indefinite
  • _uetvid: 2 years
  • _uetvid: indefinite

Meta Ads Conversion Tracking (Meta Pixel)

Company: Meta Platforms, Inc.

Processing location: United States

Personal data processed: Usage data +1

Meta Ads Conversion Tracking (Meta Pixel) is an analytics service provided by Meta Platforms, Inc. that connects data from the Meta advertising network with actions performed on this Application. The Meta Pixel tracks conversions attributed to ads on Facebook, Instagram, and the Audience Network.

Personal Data processed:
  • Usage Data
  • Tracker
Service provided by:
Tracker duration:
  • _fbc: 3 months
  • _fbp: 3 months
  • fr: 3 months
  • lastExternalReferrer: session
  • lastExternalReferrerTime: session

Google Ads Conversion Tracking

Company: Google LLC

Processing location: United States

Personal data processed: Usage data +1

Ads Conversion Tracking is an analysis service provided by Google LLC that links data from the Google Ads advertising network with actions performed through this application.

To understand Google's use of data, please consult the Partner Policies and the Business Data Page.

Personal Data processed:
  • Usage Data
  • Tracker
Service provided by:
Tracker duration:
  • IDE: 2 years
  • test_cookie: 15 minutes

Converge-Digital

Company: Converge-Digital

Processing location: Ireland

Personal data processed: Usage data +1

Converge-Digital is an advertising service provided by Converge-Digital.

Personal Data processed:
  • Usage Data
  • Tracker
Service provided by:
Tracker duration:
  • ADKUID: 1 month
  • ADK_CID: session
  • ADK_EX_*: 14 days
  • ADK_OPTOUT: 69 years
  • DSP2F_*: session
  • SSPR_*: session
  • SSPZ: session
  • adk_rtb_conv_id: 6 months

ConnectAd

Company: ConnectAd Demand GmbH

Processing location: Austria

Personal data processed: Usage data +1

ConnectAd is an advertising service provided by ConnectAd Demand GmbH.

Personal Data processed:
  • Usage Data
  • Tracker
Service provided by:
Tracker duration:
  • id: 2 months
  • uid: 2 months

Content Ignite

Company: Content Ignite Limited

Processing location: United Kingdom

Personal data processed: Usage data +1

Content Ignite is an advertising service provided by Content Ignite Limited.

Personal Data processed:
  • Usage Data
  • Tracker
Service provided by:
Tracker duration:
  • up to 2 years

Klaviyo

Company: Klaviyo Inc.

Processing location: United States

Personal data processed: Email +3

Klaviyo is a service for managing email addresses and sending messages provided by Klaviyo Inc.

To use the service offered via Klaviyo, the provider typically shares information about (shopping) users, such as contact details and purchase history. An explanation of the extent of such sharing can be found under "personal data processed".

Personal Data processed:
  • Email
  • Purchase History
  • Usage Data
  • Tracker
Service provided by:
Tracker duration:
  • __kla_id: 3 years

Manage settings and give or withdraw consent

If the use of Trackers is based on consent, users can give or withdraw this consent by setting or updating their settings via the appropriate privacy selection panel on this Application.

With regard to all Trackers used by third parties, users can manage their settings by using the corresponding opt-out link (if available), using the means specified in the third party's privacy policy, or by contacting the third party.

How to control or delete cookies and similar technologies via your device settings.

Users can use their own browser settings to:

  • see which cookies or other similar technologies have been set on the device;
  • block cookies or similar technologies;
  • delete cookies or similar technologies from the browser.

However, browser settings do not allow for detailed control of consent by category.

For example, users can find information on managing cookies via the most common browsers at the following addresses:

Users can also manage certain Trackers used within mobile apps via appropriate device settings – for example, via mobile device advertising settings, or generally via tracking settings (users can access device settings and search for the corresponding commands).

How to opt out of interest-based advertising

In addition, users are advised that they can follow the instructions from YourOnlineChoices (EU and UK), Network Advertising Initiative (US) and Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow users to set their tracking preferences for almost all advertising tools. The provider therefore recommends that users make use of these means in addition to the information provided in this document.

The Digital Advertising Alliance offers the AppChoices application for controlling interest-based advertising in mobile apps.

Consequences of rejecting the use of Trackers

Users are free to decide whether or not to give their consent for the use of Trackers. However, it should be noted that Trackers help this Application provide users with a better user experience and enhanced functions (in accordance with the purposes described in this document). Therefore, if the user decides to block the use of Trackers, the provider may not be able to provide corresponding functions.

Definitions and legal notices

Personal Data (or Data)

All information by which the identity of a natural person is or can be determined directly or in conjunction with further information.

Usage Data

Information that this Application (or third-party services that this Application uses) automatically collects, e.g.: the IP addresses or domain names of the computers of users using this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to send the request to the server, the size of the response file received, the numeric code indicating the status of the server response (successful result, error, etc.), the country of origin, the features of the browser and operating system used by the user, the various time details per call (e.g. how much time was spent on each page of the application) and details about the path followed within an application, in particular the order of the pages visited, as well as other information about the device's operating system and/or the user's IT environment.

User

The person using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

A natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the Controller, as described in this privacy policy.

Controller (or Provider, sometimes also Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, as well as the means used for this, including the security measures concerning the operation and use relating to this application. Unless otherwise specified, the Controller is the natural or legal person through whom this Application is offered.

This Application

The hardware or software tool by which the user's personal data is collected and processed.

Service

The service offered by this Application, as described in the relevant terms and conditions (if any) and on this website/application.

European Union (or EU)

Unless otherwise stated, all references in this document to the European Union refer to all current member states of the European Union and the European Economic Area (EEA).

Cookie

Cookies are trackers that consist of a small data record stored in the user's browser.

Tracker

The term tracker refers to any technology - e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags or fingerprinting - by which users can be tracked, e.g. by enabling access to or storage of information on the user's device.

Legal notice

This privacy policy relates exclusively to this application, unless otherwise stated in this document.

How can we help?

What you can do

Your data

In case of problems

While we strive to create a positive user experience, we know that occasional problems can arise between us and our users.

If this is the case, please do not hesitate to contact us.

Contact us