Cookie Policy of shop.blacklotus.eu
Website: shop.blacklotus.eu · Policy version: v2 · Last update: 2026-07-22T16:09:04+00:00
This Cookie Policy is generated from the categories, services and consent settings configured in Lean Cookie Consent. The website owner must keep it aligned with the real scripts, pixels, embeds, tag manager triggers, forms, checkout tools and plugins running on the website.
Introduction
This document explains how this website uses cookies, local storage, pixels, embedded scripts and similar technologies. These technologies can store information on the user device, read information from it, load third-party resources or help the Owner understand how the website is used.
In this document, these technologies are called Trackers. The word Cookie is used when the technology is specifically stored by the browser as a cookie.
Technical Trackers are used to provide the website and remember consent choices. Optional analytics and marketing Trackers are disabled until the user gives the required consent, unless a different lawful configuration is explicitly documented by the Owner.
Owner and Data Controller
Tracker categories
Necessary
This website uses technical Trackers for security, page delivery, consent preference storage and functions requested by the user.
Technical Trackers
Required for core site features and security. Always active.
Status: always active because they are needed for the website to work or to remember the user choices.
Measurement and analytics
Analytics Trackers help the Owner understand traffic, page performance and interaction patterns. They should be loaded only after analytics consent where required.
Analytics Trackers
Help measure traffic and improve content.
Status: disabled until the user gives analytics consent.
Marketing, ads and embeds
Marketing Trackers may support campaign measurement, remarketing, advertising pixels, social media features, maps, videos, reviews, lead-generation forms or other embedded third-party content. They should be loaded only after marketing consent where required.
Marketing Trackers
Allow advertising, pixels and campaign measurement scripts.
Status: disabled until the user gives marketing consent.
Detailed list of Trackers and Services
The following list is generated from the services associated with this website profile. It should be checked against the real website, tag manager, plugins, embeds and scanner results.
| Service | Provider | Category | Purpose | Cookies | Duration | Privacy |
|---|---|---|---|---|---|---|
| Google Analytics 4 | Google LLC | analytics | Measures website traffic, events and aggregated usage statistics. | _ga, _ga_*, _gid | Up to 2 years | Provider policy |
| Google Tag Manager | Google LLC | analytics | Loads and manages tags configured by the website owner. | Depends on configured tags | Depends on configured tags | Provider policy |
| Google Maps | Google LLC | marketing | Displays interactive maps and may process location and interaction data. | NID, 1P_JAR and related Google cookies | Session to 6 months | Provider policy |
| YouTube Embed | Google LLC | marketing | Displays embedded video content and may collect interaction data. | VISITOR_INFO1_LIVE, YSC, PREF | Session to 2 years | Provider policy |
| Trustpilot Widget | Trustpilot A/S | marketing | Displays customer reviews or trust badges and may process interaction, device and referral data. | Trustpilot widget/session identifiers | Session to 1 year | Provider policy |
| Cloudflare | Cloudflare, Inc. | technical | Provides CDN, security, bot mitigation, caching and network protection services. | __cf_bm, cf_clearance, _cfuvid | Session to 30 minutes | Provider policy |
| Google Fonts | Google LLC | technical | Loads web fonts used by the site interface; when loaded from Google servers it can expose technical request data such as IP address and user agent. | Usually none | Request-level technical data | Provider policy |
| Google reCAPTCHA | Google LLC | technical | Protects forms against spam and abuse by analyzing technical signals. | _GRECAPTCHA, NID | Session to 6 months | Provider policy |
Service-level processing matrix
Operational details for each tracker/service category used by this website.
| Service | Purpose | Legal basis | Retention | Consent status |
|---|---|---|---|---|
| Google Analytics 4 Google LLC | Measures website traffic, events and aggregated usage statistics. | Consent where required by ePrivacy/GDPR; legitimate interests only for privacy-friendly analytics where locally appropriate. | Up to 2 years. The owner should verify provider-side retention and any account-level retention settings. | Loaded only after analytics consent unless configured as strictly necessary and privacy-friendly. |
| Google Tag Manager Google LLC | Loads and manages tags configured by the website owner. | Consent where required by ePrivacy/GDPR; legitimate interests only for privacy-friendly analytics where locally appropriate. | Depends on configured tags. The owner should verify provider-side retention and any account-level retention settings. | Loaded only after analytics consent unless configured as strictly necessary and privacy-friendly. |
| Google Maps Google LLC | Displays interactive maps and may process location and interaction data. | Consent for advertising, remarketing, social embeds, tracking pixels and similar optional technologies. | Session to 6 months. The owner should verify provider-side retention and any account-level retention settings. | Loaded only after marketing consent. |
| YouTube Embed Google LLC | Displays embedded video content and may collect interaction data. | Consent for advertising, remarketing, social embeds, tracking pixels and similar optional technologies. | Session to 2 years. The owner should verify provider-side retention and any account-level retention settings. | Loaded only after marketing consent. |
| Trustpilot Widget Trustpilot A/S | Displays customer reviews or trust badges and may process interaction, device and referral data. | Consent for advertising, remarketing, social embeds, tracking pixels and similar optional technologies. | Session to 1 year. The owner should verify provider-side retention and any account-level retention settings. | Loaded only after marketing consent. |
| Cloudflare Cloudflare, Inc. | Provides CDN, security, bot mitigation, caching and network protection services. | Contract necessity, legal obligation or legitimate interests for security, fraud prevention, checkout and core service delivery. | Session to 30 minutes. The owner should verify provider-side retention and any account-level retention settings. | Always active when strictly necessary. |
| Google Fonts Google LLC | Loads web fonts used by the site interface; when loaded from Google servers it can expose technical request data such as IP address and user agent. | Contract necessity, legal obligation or legitimate interests for security, fraud prevention, checkout and core service delivery. | Request-level technical data. The owner should verify provider-side retention and any account-level retention settings. | Always active when strictly necessary. |
| Google reCAPTCHA Google LLC | Protects forms against spam and abuse by analyzing technical signals. | Contract necessity, legal obligation or legitimate interests for security, fraud prevention, checkout and core service delivery. | Session to 6 months. The owner should verify provider-side retention and any account-level retention settings. | Always active when strictly necessary. |
First-party and third-party Trackers
Some Trackers are managed directly by the Owner. Others are provided by third-party services listed in this policy or in the Privacy Policy. Third-party duration, scope and processing terms may depend on provider settings, contracts and documentation.
How to manage preferences and provide or withdraw consent
When Trackers require consent, users can accept, reject or update optional categories from the cookie choices panel available on this website. Withdrawing consent should be as accessible as giving it.
The consent banner stores the selected categories, policy version, banner version, domain and timestamp to keep operational evidence of user choices.
How to control or delete Cookies via device settings
Users may also use browser settings to view, block or delete cookies and similar storage. Browser controls are useful, but they do not always provide the same category-level control as the website preference panel.
Consequences of denying Trackers
Users can refuse optional Trackers. Core website functions should remain available, but optional analytics, campaign measurement, personalized communication, videos, maps, social embeds or other third-party features may not work or may remain blocked.
Consent evidence and versioning
Lean Cookie Consent records the selected categories, policy version, banner version, domain and timestamp. This helps the Owner understand which disclosure and banner were active when the user choice was saved.
Definitions and legal references
Tracker
Any technology, such as Cookies, unique identifiers, web beacons, embedded scripts, pixels or local storage, that enables tracking, storing or accessing information on the User device.
Cookie
A browser-based Tracker made of small sets of data stored in the User browser.
Personal Data or Data
Any information that directly, indirectly or in connection with other information allows for the identification or identifiability of a natural person.
Usage Data
Information collected automatically through this website or third-party services, including IP-derived information, browser details, request time, page path and technical parameters about the User device.
User and Data Subject
The individual using this website who, unless otherwise specified, is the natural person to whom the Personal Data refers.
Legal information
This Cookie Policy relates to this website and to the technologies configured for it. For broader information on data processing, legal bases, recipients, transfers, retention and rights, users should read the Privacy Policy linked above. The Owner should update this document whenever services, categories, banner text, consent behavior or tracking technologies change.