Cookie policy

Tattooed OÜ

Legal Notice: This Cookie Policy is designed to maximize the protection of the Seller’s (Tattooed OÜ) interests while ensuring minimal data collection and strict compliance with the ePrivacy Directive, GDPR, and the national laws of Estonia and Croatia. We use cookies only where strictly necessary for website operation or with your explicit consent. By using this website, you acknowledge that you have read and accepted this Policy. If you do not agree, please immediately cease using the website and adjust your browser settings.

1. What are Cookies and Why are They Used?

Cookies are small text files that a website saves on your device (computer, smartphone, tablet) via your browser. They allow the website to “remember” your actions and preferences (such as language, shopping cart, and settings) over a certain period.

We use cookies exclusively for the following purposes:

• Core Functionality: To ensure the website works correctly (Strictly Necessary cookies).

• Optimization & Analytics: To improve performance and analyze traffic (Analytical cookies — only with consent).

• Personalized Advertising: To provide relevant marketing (Marketing cookies — only with explicit consent).

2. Types of Cookies We Use

Important: Only strictly necessary cookies operate without your consent. Analytical and marketing cookies are activated only after your explicit consent via the cookie banner.

3. Consent Management

3.1 Consent Options

Upon your first visit, a banner will appear with three choices:

• “Accept All”

• “Reject All” (except strictly necessary cookies)

• “Settings” (granular consent — allowing you to choose analytics or marketing separately)

3.2 Recording Consent

Consent must be free, specific, informed, and unambiguous. We record your choice (date, IP address, and selection) in our logs. This record is stored until consent is withdrawn or the cookie expires.

3.3 Withdrawing Consent

You may withdraw your consent at any time:

• Through the website banner (click “Change Settings”).

• By emailing us at: tattooedeu@gmail.com.

• By clearing your browser settings. Withdrawal does not affect the legality of data processed prior to the withdrawal.

3.4 “Do Not Track” & Blockers

If you use “Do Not Track” (DNT) browser headers or privacy blockers (e.g., AdBlock, Ghostery), we respect these settings and will not install non-essential cookies.

4. Third Parties & International Transfers

4.1 Third-Party Services

We use third-party services that may set their own cookies:

• Google Analytics: Servers located in the EU; IP addresses are anonymized.

• Meta Pixel / Google Ads: Activated only upon your explicit marketing consent.

4.2 Data Transfer to the USA

Transfers to third parties (Meta, Google) occur only with your explicit consent and are based on Standard Contractual Clauses (SCC) and supplementary safety measures (encryption, minimization, annual audits) in compliance with Schrems II and 2026 EU updates.

4.3 Disclaimer

The Seller is not responsible for the cookie policies or privacy practices of third parties. Users interact with third-party services at their own discretion.

5. User Responsibility & Liability

5.1 User Responsibility: The User is solely responsible for configuring their browser (blocking/allowing cookies) and for any consequences resulting from disabling necessary cookies (which may cause the site to malfunction).

5.2 Seller’s Limitation of Liability: The Seller shall not be held liable for:

• Website malfunctions caused by the user disabling cookies.

• Data breaches occurring within third-party services (Meta, Google) if not caused by the Seller’s negligence.

• Any claims related to advertising if the User gave initial consent.

5.3 Indemnification: The User agrees to indemnify the Seller against any losses or expenses arising from the User’s violation of this Policy or unlawful use of cookies.

6. Retention Periods

• Necessary: Until the end of the session or up to 12 months.

• Analytical: Up to 14 months (Google Analytics).

• Marketing: Up to 24 months (Meta/Google). Cookies are automatically deleted upon expiration or withdrawal of consent.

7. Policy Updates

Changes will be published on the website and sent via email (if subscribed) 30 days prior to taking effect. Continued use of the site after changes are published constitutes acceptance. Significant changes (e.g., new processing purposes) will trigger a new consent request via the banner.

How to manage cookies in your browser:

• Google Chrome: Settings → Privacy and security → Cookies and other site data

• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data

• Safari: Settings → Privacy → Manage Website Data

• Microsoft Edge: Settings → Privacy, search, and services → Cookies

Last updated: January 23, 2026