Cookie policy
LUGANO TATTOO ROYALE - luganotattooroyale.com
This Cookie Policy applies to the website www.luganotattooroyale.com (the “Website”), operated in connection with the Lugano Tattoo Royale international tattoo convention.
The Data Controller is Tattoo Royale SAGL (Corso San Gottardo 20, 6830 Chiasso, Switzerland – IDI Nr / VAT Nr: CHE-401.733.952), acting in accordance with Regulation (EU) 2016/679 (GDPR) and the Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023). The Website’s technical infrastructure is located in Italy and managed by Macko Investment Srl (P.IVA 07979690729), which acts as joint technical controller pursuant to Art. 26 GDPR solely in respect of the processing operations carried out through that infrastructure.
This Policy explains how cookies and similar technologies are used on the Website and applies only to this Website, not to any third-party websites that may be accessed via links.
For questions or to exercise your rights, contact: info@luganotattooroyale.com
1. What Are Cookies?
A cookie is a small text file that is stored by your browser on your device when you visit a website. Cookies allow the website to recognise your device on subsequent visits and may store user preferences, session data, or tracking identifiers.
Scripts are pieces of code used to ensure that the Website functions correctly and interactively. This code may be executed on our servers or on your device.
Web beacons (also known as pixel tags) are small invisible elements used to monitor traffic on a website. They may collect information about user interactions for analytical or marketing purposes.
2. Categories of Cookies Used
2.1 Functional Cookies (Always Active)
These cookies are strictly necessary for the proper functioning of the Website and cannot be disabled. They enable essential features such as page navigation, access to secure areas, and protection against spam and abuse. The Website cannot function properly without these cookies.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in ensuring the secure and proper functioning of the Website. No consent required.
2.2 Statistics Cookies
These cookies help us understand how visitors use the Website so we can improve content, performance, and user experience. They collect aggregated or pseudonymised information and do not directly identify individual users.
Statistics cookies are activated only with your consent. You can disable them at any time via the “Cookie Preferences” link in the footer of the Website without affecting its basic functionality.
Legal basis: Art. 6(1)(a) GDPR – consent.
2.3 Third-Party Content Cookies
This category enables embedded content from third-party services, such as interactive maps (Google Maps) and videos (YouTube). Third-party providers may set cookies and process personal data for their own purposes, including analytics and advertising, acting as independent data controllers.
Some of these providers may transfer data outside the European Economic Area (EEA) and Switzerland. For further information on applicable safeguards, please refer to the Privacy Policy available on the Website.
Legal basis: Art. 6(1)(a) GDPR – consent.
3. Security Service: Google reCAPTCHA v3
To protect the Website from spam and automated abuse, we use Google reCAPTCHA v3, a security service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Unlike traditional CAPTCHAs, reCAPTCHA v3 works invisibly in the background — it analyses user behaviour on the page (such as mouse movements, browsing patterns, and interaction signals) to assign a risk score, without requiring any action from the user. It may be active on contact forms and newsletter subscription fields.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest of the Data Controller in ensuring the security of the Website and protecting its forms against spam and abuse. No consent required. For information on data transfers and applicable safeguards, please refer to the Privacy Policy available on the Website. This Website is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
4. Third-Party Embedded Content
The Website embeds content from the following third-party platforms. These providers may set cookies and collect personal data for their own purposes, acting as independent data controllers. Third-party embedded content is loaded only where the user has consented to the Third-Party Content category via the cookie banner. For information on data transfers outside the EEA and Switzerland and applicable safeguards, please refer to the Privacy Policy available on the Website.
YouTube (Google LLC)
Some pages of the Website embed videos hosted on YouTube. YouTube is used in two configurations:
• Background videos are loaded via privacy-enhanced mode (youtube-nocookie.com). This configuration is designed to minimise data collection. However, YouTube may still set certain session cookies (__Secure-ROLLOUT_TOKEN, __Secure-YNID, __Secure-YEC) regardless of user consent, as these are set directly by YouTube’s infrastructure and are outside the control of this Website.
• Embedded videos are loaded via the standard YouTube embed (youtube.com) and are blocked by the cookie consent banner until explicit consent is granted. Upon activation, YouTube may set cookies and collect data including the user’s IP address, device information, and viewing behaviour.
Google Maps (Google LLC)
The Website embeds interactive maps provided by Google Maps. Maps are blocked by the cookie consent banner and are activated only after the user has granted explicit consent. When a map is displayed, the user’s browser connects to Google’s servers and may transmit the user’s IP address, location data (if the user has granted browser geolocation permission), and device information.
5. Statistics Service: Google Analytics 4
The Website uses Google Analytics 4 (“GA4”), a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). GA4 collects browsing data — such as pages visited, session duration, device type, and approximate geolocation — and generates aggregated statistical reports on Website usage. IP addresses are anonymised before any data is stored. GA4 is activated only after the user grants consent to Statistics cookies via the cookie banner.
Legal basis: Art. 6(1)(a) GDPR – consent.
Data transfer: Covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses (SCCs — Decision 2021/914/EU).
Opt-out: Withdraw consent via the cookie preferences panel at any time, or install the Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout.
Privacy policy: policies.google.com/privacy
6. Cookie Consent Management – Complianz
Cookie consent on this Website is managed through Complianz, a cookie consent management platform provided by Complianz B.V. (Kalmarweg 14-5, 9723 JG Groningen, Netherlands). Complianz displays the cookie banner, records user consent choices by category, and ensures that only authorised scripts and third-party services are activated based on the user’s preferences.
Consent preferences are stored locally via functional cookies (see Cookie Reference Table for details). No personally identifiable data collected through the consent process is shared with third parties. For further information: complianz.io/privacy-statement
When you first visit the Website, the cookie banner allows you to accept or reject non-essential cookies and to manage your preferences by category. Functional cookies are always active and do not require consent. All other categories are activated only upon your explicit consent.
You can modify or withdraw your consent at any time by accessing the “Cookie Preferences” link available in the footer of the Website. Please note that withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.
7. Cookie Reference Table
The following table lists the main cookies currently used on the Website, their provider, duration, category, and purpose. This list is updated periodically and may not be exhaustive due to the dynamic nature of third-party content.
In addition to cookies, the following third-party technology transmits data to external servers independently of cookie consent and outside the control of this Website. It is disclosed here for transparency:
– Google Fonts loads font files directly from Google’s servers (fonts.gstatic.com) on every page visit. This is not a cookie but causes your IP address to be transmitted to Google LLC as part of a standard HTTP request, independently of your consent choices. For further information, please refer to the Privacy Policy available on the Website.
| Cookie Name | Provider | Duration | Category | Purpose |
|---|---|---|---|---|
| cmplz_banner-status | Complianz | 1 year | Functional | Records the status of the cookie banner (e.g. dismissed) to avoid showing it on every visit |
| cmplz_policy_id | Complianz | 1 year | Functional | Stores the version ID of the cookie policy at the time consent was given, to detect policy changes and request new consent if needed |
| cmplz_functional | Complianz | 1 year | Functional | Records whether the user has consented to functional cookies |
| cmplz_statistics | Complianz | 1 year | Functional | Records whether the user has consented to statistics cookies |
| cmplz_marketing | Complianz | 1 year | Functional | Records whether the user has consented to third-party content cookies |
| cmplz_preferences | Complianz | 1 year | Functional | Records whether the user has consented to preference cookies |
| cmplz_consented_services | Complianz | 1 year | Functional | Stores the list of third-party services for which the user has given consent |
| _ga | Google LLC | 2 years | Statistics | Google Analytics: distinguishes unique users |
| _ga_* | Google LLC | 2 years | Statistics | Google Analytics: session and campaign tracking |
| _gid | Google LLC | 24 hours | Statistics | Google Analytics: distinguishes users within a session |
| _gat | Google LLC | 1 minute | Statistics | Google Analytics: throttles request rate to limit data collection |
| _GRECAPTCHA | Google LLC (reCAPTCHA) | 6 months | Functional | Google reCAPTCHA: risk analysis to distinguish humans from automated bots |
| rc::a | Google LLC (reCAPTCHA) | Persistent | Functional | Google reCAPTCHA: persistent token used to distinguish humans from bots |
| rc::b | Google LLC (reCAPTCHA) | Session | Functional | Google reCAPTCHA: session token used during active bot verification |
| rc::c | Google LLC (reCAPTCHA) | Session | Functional | Google reCAPTCHA: session token used during active bot verification |
| NID | Google LLC (Maps) | 6 months | Third-Party | Google Maps: stores user preferences and information to personalise maps and ads |
| CONSENT | Google LLC (Maps) | 2 years | Third-Party | Google Maps: stores the user’s cookie consent state for Google services |
| 1P_JAR | Google LLC (Maps) | 30 days | Third-Party | Google Maps: collects website statistics and tracks conversion rates |
| VISITOR_INFO1_LIVE | Google LLC (YouTube) | 6 months | Third-Party | Estimates user bandwidth for YouTube embedded videos |
| VISITOR_PRIVACY_METADATA | Google LLC (YouTube) | 6 months | Third-Party | Stores privacy and consent metadata related to YouTube embedded content |
| YSC | Google LLC (YouTube) | Session | Third-Party | Tracks views of embedded YouTube videos |
| yt-remote-* | Google LLC (YouTube) | Persistent/Session | Third-Party | Stores YouTube player preferences (volume, quality, etc.) |
| __Secure-ROLLOUT_TOKEN | Google LLC (YouTube) | 6 months | Third-Party | Set by youtube-nocookie.com when loading background videos in privacy-enhanced mode. Outside the control of this Website. See Section 4. |
| __Secure-YNID | Google LLC (YouTube) | 6 months | Third-Party | Set by youtube-nocookie.com when loading background videos in privacy-enhanced mode. Outside the control of this Website. See Section 4. |
| __Secure-YEC | Google LLC (YouTube) | Session | Third-Party | Set by youtube-nocookie.com when loading background videos in privacy-enhanced mode. Outside the control of this Website. See Section 4. |
8. Managing Cookies via Browser Settings
In addition to the consent management tool on the Website, you may manage or delete cookies at any time through your browser settings. Most browsers allow you to:
• View and delete individual cookies;
• Block all cookies or only third-party cookies;
• Configure the browser to notify you before cookies are stored.
Please note that disabling cookies may affect the proper functioning of the Website or limit access to certain features.
For guidance on cookie management for common browsers:
• Google Chrome: support.google.com/chrome/answer/95647
• Mozilla Firefox: support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Safari: support.apple.com/en-us/105082
• Microsoft Edge: support.microsoft.com/en-us/windows/delete-and-manage-cookies
9. Your Rights Regarding Personal Data
In accordance with the GDPR and the Swiss nFADP, you have the following rights regarding personal data processed through cookies and tracking technologies:
• Right to be informed about processing purposes, retention periods, and recipients;
• Right of access to your personal data;
• Right to rectification, erasure, or restriction of processing;
• Right to withdraw consent at any time;
• Right to data portability;
• Right to object to processing.
Supervisory Authorities:
For data subjects in the EU/EEA: Garante per la protezione dei dati personali (Italy) – www.garanteprivacy.it – or the authority of your habitual residence;
For data subjects in Switzerland: Federal Data Protection and Information Commissioner (FDPIC) – www.edoeb.admin.ch.
Requests can be submitted to: info@luganotattooroyale.com
10. Amendments to this Cookie Policy
The Joint Data Controllers reserve the right to update this Cookie Policy at any time to reflect changes in applicable law, the technologies used, or the cookies deployed on the Website. The date of the last update is indicated at the top of this document.
Users are encouraged to review this page periodically.