Cookie Policy
Welcome to the cookie policy of bauhaus-shop.de. This policy helps you understand which cookies and tracking technologies we use, how we use them, and what rights you have in this regard.
Last updated: June 23, 2026
Table of contents
- Introduction
- How this application uses trackers
- How to manage settings
- Definitions and legal notices
Introduction
This document informs users about the technologies that help this application achieve the purposes described below. Such technologies allow the operator to access and store information (e.g., by using a cookie) or use resources (e.g., by executing a script) on a user's device while interacting with this application.
For simplicity, all these technologies are referred to in this document as "trackers" – unless there is a reason to distinguish them.
For example, cookies can be used in both web and mobile browsers, but it would be inaccurate to speak of cookies in the context of mobile apps, as these are browser-based trackers. For this reason, the term "cookies" is only used in this document when specifically referring to this type of tracker.
Some of the purposes for which trackers are used may also require the user's consent. Whenever consent is given, it can be freely revoked at any time by following the instructions provided in this document.
This application uses trackers that are directly managed by the operator (so-called "first-party" trackers), as well as trackers that enable services provided by third parties (so-called "third-party" trackers). Unless otherwise stated in this document, third parties may access the trackers they manage.
The validity and expiration periods of cookies and other similar trackers may vary depending on the lifespan set by the operator or the respective provider. Some of them expire at the end of the user's browser session.
In addition to the information provided in the descriptions of the individual categories below, users can find more precise and up-to-date information about the lifespan as well as other relevant information – such as the presence of other trackers – in the linked privacy policies of the respective third parties or by contacting the operator.
---
How this application uses trackers
Necessary
This application uses so-called "technical" cookies and other similar trackers to perform activities that are absolutely necessary for the operation or provision of the service.
Trackers managed by third parties
Shopify
Company: Shopify Inc.
Processing location: Canada
Processed personal data: Device information +2
Shopify is a platform provided by Shopify Inc. that enables the operator to create, operate, and host an e-commerce website. This service may place trackers on the user's device. For the most current and comprehensive information, we refer to the official documentation of the service.
Processed personal data:
- Device information
- Tracker
- Usage data
Service provided by:
- Shopify Inc. (Canada) – Privacy Policy
Duration of trackers:
- _ab: 3 years
- _customer_account_shop_sessions: 1 month
- _identity_session: 3 years
- _master_udr: Session duration
- _merchant_essential: 2 years
- _orig_referrer: 14 days
- _pay_session: Session duration
- _s: 30 minutes
- _secure_admin_session_id: 4 months
- _secure_admin_session_id_csrf: 4 months
- _shopify_country: Session duration
- _shopify_d: Session duration
- _shopify_essential: 2 years
- _shopify_essential_: 2 years
- _shopify_evids: Session duration
- _shopify_fs: 1 year
- _shopify_m: Session duration
- _shopify_s: 30 minutes
- _shopify_test: 1 minute
- _shopify_tm: Session duration
- _shopify_tw: Session duration
- _storefront_u: 1 minute
- _tracking_consent: Session duration
- _y: 1 year
- auth_state_*: 25 minutes
- c: 2 years
- cart: 14 days
- cart_currency: 14 days
- cart_ver: 14 days
- checkout_queue_checkout_token: 2 years
- checkout_queue_token: 2 years
- checkout_session_token: 21 days
- checkout_worker_session: 3 days
- customer_account_new_login: 20 minutes
- customer_account_preview: 7 days
- customer_auth_provider: unlimited
- customer_auth_session_created_at: unlimited
- discount_code: Session duration
- keep_alive: Session duration
- localization: 14 days
- login_with_shop_finalize: 5 minutes
- master_device_id: 2 years
- shopifyChatData: Session duration
- shopify_pay: 2 years
- source_name: unlimited
- storefront_digest: 2 years
Visa
Company: Visa Inc.
Processing location: United States
Processed personal data: Email address +3
Visa is a payment service provided by Visa Inc. that allows users to make online payments.
Processed personal data:
- E-Mail-Adresse
- Payment information
- Tracker
- Usage data
Service provided by:
- Visa Inc. (United States) – Privacy Policy
PayPal
Company: PayPal Inc.
Processing location: See the PayPal Privacy Policy
Processed personal data: Email address +3
PayPal is a payment service provided by PayPal Inc. that allows users to make online payments.
Processed personal data:
- E-Mail-Adresse
- Payment information
- Tracker
- Usage data
Service provided by:
- PayPal Inc. (See the PayPal Privacy Policy) – Privacy Policy
Duration of trackers:
- LANG: 8 hours
- __paypal_storage__: unlimited
- akavpau_ppsd: Session duration
- enforce_policy: session duration
- l7_az: session duration
- nsid: session duration
- ts: session duration
- tsrce: session duration
- x-cdn: session duration
- x-pp-s: session duration
Mastercard
Company: Mastercard Inc.
Processing location: United States
Processed personal data: Email address +3
Mastercard is a payment service provided by Mastercard Inc. that allows users to make online payments.
Processed personal data:
- E-Mail-Adresse
- Payment information
- Tracker
- Usage data
Service provided by:
- Mastercard Inc. (United States) – Privacy Policy
Google Pay
Unternehmen: Google Ireland Limited
Verarbeitungsort: Irland
Processed personal data: Email address +5
Google Pay is a payment service provided by Google Ireland Limited that allows users to make online payments using their Google login credentials.
Processed personal data:
- E-Mail-Adresse
- First name
- Last name
- Payment information
- Tracker
- Usage data
Service provided by:
- Google Ireland Limited (Ireland) – Privacy Policy
American Express
Company: American Express Company
Processing location: United States
Processed personal data: Email address +3
American Express is a payment service provided by American Express Company that allows users to make online payments.
Processed personal data:
- E-Mail-Adresse
- Payment information
- Tracker
- Usage data
Service provided by:
- American Express Company (United States) – Privacy Policy
Cloudflare
Company: Cloudflare, Inc.
Processing location: United States
Processed personal data: Trackers +1
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means it filters all traffic through this application, i.e., the communication between this application and the user's browser, while also allowing analytical data to be collected by this application.
Processed personal data:
- Tracker
- various types of data as specified in the service's privacy policy
Service provided by:
- Cloudflare, Inc. (United States) – Privacy Policy
Duration of trackers:
- _cfuvid: unlimited
- cf_clearance: 30 minutes
User experience
This application uses trackers to improve the quality of the user experience and to enable interactions with external content, networks, and platforms.
Trackers managed by third parties
Judge.me
Company: Judge.me Ltd
Processing location: United Kingdom
Processed personal data: Data communicated during the use of the service +3
Judge.me is a service for collecting and displaying reviews, provided by Judge.me Ltd, which allows this application to embed this content on its pages.
Processed personal data:
- Daten, die während der Nutzung des Dienstes kommuniziert werden
- E-Mail-Adresse
- Tracker
- Usage data
Service provided by:
- Judge.me Ltd (Vereinigtes Königreich) – Datenschutzrichtlinie
Messung
Diese Anwendung verwendet Tracker, um den Traffic zu messen und das Nutzerverhalten zu analysieren, um den Dienst zu verbessern.
Trackers managed by third parties
Meta Events Manager
Company: Meta Platforms, Inc.
Processing location: United States
Verarbeitete personenbezogene Daten: Browserverlauf +4
Meta Events Manager ist ein Analysedienst, der von Meta Platforms, Inc. bereitgestellt wird. Durch die Integration des Meta-Pixels kann Meta Events Manager dem Betreiber Einblicke in den Traffic und die Interaktionen auf dieser Anwendung geben.
Processed personal data:
- Browserverlauf
- Klicks
- Seitenaufrufe
- Tracker
- Usage data
Service provided by:
- Meta Platforms, Inc. (United States) – Privacy Policy – Opt-out
Duration of trackers:
- _fbp: 3 months
- lastExternalReferrer: Session duration
- lastExternalReferrerTime: Session duration
Google Analytics 4
Unternehmen: Google Ireland Limited
Verarbeitungsort: Irland
Verarbeitete personenbezogene Daten: Anzahl der Nutzer +3
Google Analytics 4 is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the collected data to track and analyze the use of this application, generate reports on its activities, and share them with other Google services. Google may use the collected data to contextualize and personalize ads in its own advertising network
To understand Google's use of data, please consult their Partner Policy and their Corporate Data page.
Processed personal data:
- Number of users
- Session statistics
- Tracker
- Usage data
Service provided by:
- Google Ireland Limited (Ireland) – Privacy Policy – Opt-out
Duration of trackers:
- _ga: 2 years
- _ga_*: 2 years
Marketing
This application uses trackers to provide advertising or marketing content and measure their performance.
Trackers managed by third parties
Meta Ads Conversion Tracking (Meta Pixel)
Company: Meta Platforms, Inc.
Processing location: United States
Processed personal data: Trackers +1
Meta Ads Conversion Tracking (Meta Pixel) is an analytics service provided by Meta Platforms, Inc. that links data from the Meta Audience Network with actions taken on this application. The Meta Pixel tracks conversions attributed to ads on Facebook, Instagram, and the Meta Audience Network.
Processed personal data:
- Tracker
- Usage data
Service provided by:
- Meta Platforms, Inc. (United States) – Privacy Policy – Opt-out
Duration of trackers:
- _fbc: 3 months
- _fbp: 3 months
- fr: 3 months
- lastExternalReferrer: Session duration
- lastExternalReferrerTime: Session duration
LightBox TV
Company: LightBox TV LTD
Processing location: United Kingdom
Processed personal data: Trackers +1
LightBox TV is an advertising service provided by LightBox TV LTD.
Processed personal data:
- Tracker
- Usage data
Service provided by:
- LightBox TV LTD (United Kingdom) – Privacy Policy
---
How to manage settings and grant or withdraw consent
Whenever the use of trackers is based on consent, users can grant or withdraw this consent by setting or updating their preferences via the relevant privacy choice panel available on this application.
Regarding third-party trackers, users can manage their preferences via the relevant opt-out link (if available) by using the means specified in the third party’s privacy policy or by contacting the third party.
How to control or delete cookies and similar technologies via device settings
Users can use their own browser settings to:
- Viewing which cookies or similar technologies have been set on the device;
- Blocking cookies or similar technologies;
- Deleting cookies or similar technologies from the browser.
However, browser settings do not allow granular control of consent by category.
Users can find information on how to manage cookies in the most commonly used browsers at the following addresses:
Users can also manage certain categories of trackers used in mobile apps by opting out through the relevant device settings, such as mobile device advertising settings or general tracking settings.
How to opt out of interest-based advertising
Notwithstanding the above, users can follow the instructions provided by the following initiatives:
- YourOnlineChoices (EU and UK)
- Network Advertising Initiative (USA)
- Digital Advertising Alliance (USA)
- DAAC (Canada)
- DDAI (Japan)
The Digital Advertising Alliance offers an application called AppChoices that helps users control interest-based advertising in mobile apps.
Consequences of refusing the use of trackers
Users are free to decide whether to allow the use of trackers or not. However, please note that trackers help this application provide users with a better experience and enhanced features (according to the purposes described in this document). Therefore, if a user blocks the use of trackers, the operator may not be able to provide the associated functions.
---
Definitions and legal notices
Personal data (or data)
All information that directly, indirectly, or in connection with other information – including a personal identification number – allows the identification or identifiability of a natural person.
Usage data
Information automatically collected by this application (or by third parties used in this application) may include: the IP addresses or domain names of the computers used by users accessing this application, the URI addresses (Uniform Resource Identifier), the time of the request, the method used to send the request to the server, the size of the file received in response, the numeric code indicating the status of the server response (successful result, error, etc.), the country of origin, the characteristics of the browser and operating system used by the user, various time stamps per visit (e.g., time spent on each page within the application), and details of the path followed within the application, with particular reference to the sequence of visited pages, as well as other parameters about the device's operating system and/or the user's IT environment.
User
The natural person who uses this application and who, unless otherwise stated, corresponds to the data subject.
Data subject
The natural person to whom the personal data relates.
Processor (or data processor)
The natural or legal person, authority, institution, or other body that processes personal data on behalf of the controller, as described in this privacy policy.
Controller (or operator)
The natural or legal person, authority, institution, or other body that alone or jointly with others determines the purposes and means of processing personal data, including security measures related to the operation and use of this application. Unless otherwise stated, the controller is the operator of this application.
This application
The means by which the user's personal data is collected and processed.
Service
The service provided by this application, as described in the relevant terms (if available) and on this website/application.
European Union (or EU)
Unless otherwise stated, all references to the European Union in this document refer to all current member states of the European Union and the European Economic Area.
Cookie
Cookies are trackers consisting of small data sets stored in the user's browser.
Tracker
A tracker refers to any technology – such as cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting – that enables tracking of users, for example by accessing or storing information on the user's device.
Legal information
This policy applies exclusively to this application, unless otherwise stated in this document.
---
How can we help?
What you can do
Your data
- Ask us what information we have stored about you
- Ask us to correct the information we have stored about you
- Ask us to delete the information we have stored about you
- Request the transfer of your data to another service
- Manage your privacy preferences
In case of problems
Although we strive to create a positive user experience, we understand that issues may occasionally arise between us and our users.
If this is the case, do not hesitate to contact us.