COOKIE POLICY

1. INTRODUCTION

1.1. Purpose of these guidelines

These guidelines explain how PhysioDock.com uses cookies to improve the user experience, analyze traffic, and provide personalized content and ads. We describe the types of cookies we use, how they work, and how you can manage your preferences.

1.2. What cookies are and why we use them

1.2.1. Definition. Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They store information about your activity and preferences.

1.2.2. Why we use cookies:

• Improve user experience: Remember login status, cart contents, and language choice.

• Analyze behavior: Understand how visitors use the site to improve content and functionality.

• Personalize content: Show relevant ads and recommendations based on your interests.

• Ensure functionality: Enable essential features such as login and payment systems.

1.3. Using the site implies acceptance

By using PhysioDock.com, you consent to our use of cookies as described in this policy.
You can change or withdraw your consent at any time via our Cookie Settings.

1.4. Last updated

These guidelines were last updated: [DD.MM.YYYY].
Future updates will be announced on the website; material changes will be notified by email if you are a registered user.

2. WHAT ARE COOKIES?

2.1. Definition

Cookies are small text files stored on your device when you visit a website. They help the site recognize your device on subsequent visits.

2.2. Purpose

We use cookies to:

• Enhance experience: Remember preferences such as language, login status, and cart.

• Remember settings: So you don’t have to re-enter them each visit.

• Gather statistics: Analyze usage to improve functionality and content.

• Customize content & ads: Show relevant ads and product recommendations based on behavior.

2.3. First-party vs third-party cookies

Cookie typeDescriptionExamples

First-partySet by PhysioDock.com; required for proper operation; store actions on our site.Remembering login and cart.

Third-partySet by trusted partners for analytics, advertising, or social integrations.Google Analytics (stats), Meta (ads).

2.4. Examples of how we use cookies

• Login: Keep you signed in across pages.

• Courses: Store your progress so you can resume later.

• Shop: Remember items added to your cart.

• Analytics: Collect anonymized data on popular pages and time spent.

2.5. Without cookies

Some features will not work as expected, e.g. you may need to log in on every page; your cart won’t persist; recommendations won’t be tailored.

3. TYPES OF COOKIES WE USE

PhysioDock.com uses several cookie categories to improve experience, analyze traffic, and provide targeted content.

A) Essential Cookies

3.1. Purpose: Core operation of the site.

• Login: Keep you authenticated while browsing.

• Cart: Track items during checkout.

• Security: Help prevent fraud and protect your account.
  3.2. Opt-out? No. These are necessary to deliver requested services.
  3.3. Examples: session_id, cart_token.

B) Functional Cookies

3.4. Purpose: Improve experience by remembering preferences and prior choices.

• Language selection, persistent login, UI preferences (e.g., theme).
  3.5. Opt-out? Yes, but you may need to re-enter preferences each visit.
  3.6. Examples: language_preference, user_theme, remember_me.

C) Performance / Analytics Cookies

3.7. Purpose: Collect anonymized usage data to improve functionality and content.
3.8. Tools: Google Analytics, Hotjar.
3.9. Data collected (anonymized): Truncated/anonymized IP, browser/device, time on site, pages visited.
3.10. Opt-out? Yes. Manage in Cookie Settings.
Examples: _ga (Google Analytics), _hjid (Hotjar).

D) Marketing / Advertising Cookies

3.11. Purpose: Show relevant ads based on your on-site activity.

• Personalized ads, retargeting, and cross-site relevance via partners.
  3.12. Providers: Google Ads, Meta Ads (Facebook/Instagram).
  3.13. Data: Pages/products viewed, ad clicks/interactions.
  3.14. Opt-out? Yes. Requires your consent.
  Examples: fr (Facebook), _gads (Google Ads).

E) Social Media Cookies

3.15. Purpose: Enable sharing and social login.
3.16. Set by: Third-party social platforms.
3.17. Use of data: Targeted ads and social recommendations on those platforms.
3.18. Opt-out? Yes. Requires your consent.
Examples: fbp (Facebook Pixel), li_sugr (LinkedIn).

3.19. Summary

CategoryPurposeData collectedOpt-out?

EssentialCore site functionalityUser/session dataNo

FunctionalRemember preferencesLanguage, login statusYes

AnalyticsUnderstand usageAnonymized IP, time on siteYes

MarketingRelevant adsBehavior, click historyYes

SocialSharing & social loginSocial interactionsYes

4. HOW WE USE COOKIES ON PHYSIODOCK.COM

4.1. Ensure correct operation (Essential)

• Login: Keep you signed in.

• Cart: Persist cart contents.

• Security: Prevent fraud and ensure safe navigation.
  Examples: session_id, cart_token.

4.2. Save user settings (Functional)

• Language: Always show your preferred language.

• Persistent login: Stay signed in across visits.

• Display settings: Dark/light mode, font size.
  Examples: language_preference, remember_me.

4.3. Analyze and improve performance (Analytics)

• Traffic analysis: Identify popular pages.

• Speed optimization: Improve load times.

• Error detection: Find slow or failing pages.
  Tools: Google Analytics, Hotjar.
  Data: Anonymized IP, time on site, clicks/pageviews.
  Examples: _ga, _hjid.

4.4. Show personalized ads (Marketing)

• Personalized ads & retargeting on and off PhysioDock.com.
  Partners: Google Ads; Meta (Facebook/Instagram).
  Examples: fr, _gads.

4.5. Enable social sharing & login (Social)

• Share buttons (e.g., Facebook, LinkedIn).

• Social login (e.g., Google, Facebook).
  Examples: fbp, li_sugr.

4.6. Quick overview

PurposeHow we use themExample cookies

EssentialLogin, cart, securitysession_id, cart_token

FunctionalPreferences (language, theme)language_preference, remember_me

AnalyticsSite improvements_ga, _hjid

MarketingRelevant adsfr, _gads

SocialSharing & social loginfbp, li_sugr

5. CONSENT TO USE COOKIES

PhysioDock.com collects and processes consent in line with the GDPR and the ePrivacy Directive (and applicable local law).

5.1. How we obtain consent (GDPR-compliant)

• Consent banner on first visit explaining purposes and options by category.

• No non-essential cookies are set before you opt in.

• Consent log is stored to document compliance.

5.2. Active opt-in for non-essential cookies

• Essential cookies: Set automatically (required for the site).

• Non-essential cookies: Require your active consent.
  Options: “Accept all” · “Reject all” · “Settings” (choose categories).

5.3. Choose specific categories

In Cookie Settings you can allow:

• Only essential · Functional · Analytics (statistics) · Marketing · Social media.

5.4. Update or withdraw consent

• Change preferences anytime via Cookie Settings (site footer).

• On withdrawal, all non-essential cookies are removed from your device.

5.5. Consent retention

• We keep a consent log (timestamp, choices, policy version) for compliance.

• Consent is retained for 12 months, after which you’ll be asked to renew.

5.6. Example banner text

“PhysioDock.com uses cookies to improve your experience, analyze traffic, and show personalized ads. Choose which cookies to allow. You can update your consent at any time.”

[Settings] [Reject all] [Accept all]

5.7. Consent process summary

StepDescription

1. NoticeBanner appears on first visit.

2. ChoiceAccept all, reject all, or choose categories.

3. StorageChoice stored in consent log.

4. WithdrawalChange/withdraw anytime via Cookie Settings.

5. RenewalConsent refreshed after 12 months.

6. HOW TO WITHDRAW OR CHANGE CONSENT

You have full control over your cookie consent on PhysioDock.com.

6.1. Change consent via the site’s Cookie Settings

• Click Cookie Settings in the footer.

• Adjust which categories you allow (functional, analytics, marketing, social).

• Save your changes; they take effect immediately.

• If you withdraw consent, all non-essential cookies are removed.

6.2. Delete cookies via your browser

You can also delete cookies manually in your browser settings (affects all sites).

6.3. How to block/remove cookies in popular browsers

• Google Chrome: Settings → Privacy & security → Cookies and other site data → See all site data → Clear. To block third-party cookies: enable Block third-party cookies. Learn more on Google Support.

• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data…. To block: choose Strict under Enhanced Tracking Protection. Learn more on Firefox Support.

• Safari (macOS): Settings → Privacy → Manage Website Data… → Remove All. To block: check Block all cookies. Learn more on Apple Support.

• Microsoft Edge: Settings → Privacy, search, and services → Choose what to clear → select Cookies and other site data → Clear now. To block: set Tracking prevention to Strict. Learn more on Microsoft Support.

6.4. What happens when you remove cookies?

• You may be logged out of websites.

• Saved preferences (e.g., language) may be lost.

• The site may load slightly slower on the next visit.

6.5. Verify or change your consent on PhysioDock.com

• Click Manage cookies in the footer on any page.

• Review the list of active cookies.

• Adjust consent per category (functional, analytics, marketing, social).

6.6. Summary

ActionHow

Change consentCookie Settings on PhysioDock.com

Delete cookiesBrowser settings (Chrome, Firefox, Safari, Edge)

Block cookiesBrowser settings or the consent banner

Update preferencesAnytime via Cookie Settings in the footer

If you have questions about this Cookie Policy or how we use cookies, please contact us via the channels listed in our Privacy Policy.

​

7. HOW LONG COOKIES ARE STORED

Cookies have different lifespans depending on their purpose and type. Below we explain the difference between session cookies (temporary) and persistent cookies, and how you can see exact retention times on PhysioDock.com.

7.1. Retention varies by cookie type

A) Session cookies (temporary)
Retention: Only for the duration of your session. Deleted automatically when you close the browser.
Purpose:

• Keep you logged in during the visit.

• Remember items in your cart until checkout is completed.

• Preserve navigation choices between pages.
  Example: session_id – deleted when the browser closes.

B) Persistent cookies (stored over time)
Retention: Saved on your device for a predefined period, even after the browser is closed.
Purpose:

• Remember settings like language and login status between visits.

• Retain analytics and marketing data to improve the user experience.
  Typical retention on PhysioDock.com:

• Functional cookies: up to 6 months (e.g., language preference).

• Analytics cookies (Google Analytics): up to 14 months.

• Marketing cookies (Google Ads, Meta): up to 1 year.

7.2. Examples of cookies and retention

Cookie typeNamePurposeRetention

Essential (session)session_idKeeps you logged in during the visitDeleted on browser close

Functional (persistent)language_preferenceRemembers your language choice6 months

Analytics (persistent)_ga (Google Analytics)Collects anonymized visit statistics14 months

Marketing (persistent)fr (Facebook Pixel)Serves relevant adsUp to 90 days

Social media (persistent)li_sugr (LinkedIn)Enables content sharing6 months

7.3. Where to find exact retention times on PhysioDock.com

• Cookie Settings: Under “Cookie Settings” you’ll find a list of all active cookies with their name, purpose, and retention.

• Browser verification: You can also check directly in your browser:

  • Chrome: Click the lock icon next to the URL → Cookies.

  • Firefox: Right-click page → View Page Info → Permissions.

  • Safari: Settings → Privacy → Manage Website Data.

  • Edge: Click the lock icon → Cookies and site permissions.

7.4. How to manage retention

You can always:

• Delete stored cookies via your browser settings.

• Adjust which cookies are allowed via Cookie Settings on PhysioDock.com.

• Update consent at any time in our cookie settings.

7.5. How long we keep consent

• Consent logs: We retain a log of your consent (for GDPR documentation) for 12 months, after which you will be asked to refresh your choices.

8. THIRD-PARTY COOKIES AND DATA PROCESSING

PhysioDock.com uses third-party cookies set by external providers. These help us analyze traffic, deliver targeted advertising, provide payment solutions, and integrate social media features.

8.1. What are third-party cookies?

Definition: Cookies not set by PhysioDock.com but by external companies whose services we use.
Purposes:

• Analytics: Understand how users navigate the site.

• Marketing: Show relevant ads.

• Social media: Enable content sharing.

• Payments: Ensure secure checkout.

8.2. Key third-party providers that may set cookies on PhysioDock.com

1) Google Analytics (Analytics)
Purpose: Collect anonymized behavior statistics to improve the site.
Data collected: Page views, time on page, device/browser info, anonymized IP.
Examples:

• _ga – distinguishes unique users (retention: 14 months)

• _gid – tracks navigation between pages (retention: 24 hours)
  Privacy: IP anonymization enabled before storage.

2) Google Ads (Marketing)
Purpose: Serve targeted ads based on your activity on PhysioDock.com.
Data collected: Clicks, searches, page views, product interest.
Examples:

• _gads – tracks ad impressions (retention: 1 year)

• IDE – measures ad effectiveness (retention: 13 months)
  Combination: Google may combine data across sites to improve relevance.

3) Meta (Facebook, Instagram) – Social & Marketing
Purpose: Targeted ads on Facebook/Instagram; enable “Like” and “Share” buttons.
Data collected: On-site behavior, ad interactions; your Facebook profile if logged in.
Examples:

• fr – delivers targeted ads (retention: up to 90 days)

• datr – browser identification for security/tracking (retention: 2 years)
  Combination: Meta may use data to show ads based on activity on other sites.

4) YouTube (Embedded videos)
Purpose: Display embedded videos and measure video interactions.
Data collected: Videos watched, watch duration, Like/Subscribe interactions.
Examples:

• YSC – interaction tracking (deleted after session)

• VISITOR_INFO1_LIVE – performance measurement (retention: 6 months)
  Privacy mode: We use YouTube’s enhanced privacy mode to limit data collection.

5) Stripe or Vipps (Payments)
Purpose: Secure and efficient payment processing.
Data collected: Transaction ID; device info for fraud prevention.
Examples:

• __stripe_mid – fraud prevention (retention: 1 year)

• __stripe_sid – session tracking (deleted after session)
  Security: Data is encrypted; PhysioDock.com does not store card details.

8.3. Can providers combine data with other sources?

Yes. Third parties may combine data from multiple sites to:

• Build a fuller user profile.

• Improve ad targeting accuracy.

• Show products you viewed elsewhere.
  Examples: Google Ads may show YouTube ads based on your activity here; Meta may show you our ads on Facebook after you visit us.

8.4. Managing third-party cookies

• Via our consent banner: Accept/decline third-party cookies under Cookie Settings.

• Via your browser: Block third-party cookies directly.

• Via third-party tools:

  • YourOnlineChoices.eu – manage interest-based ads across providers.

  • Google Ad Settings – control ads you see from Google.

9. PROFILING AND TARGETED ADVERTISING

9.1. What is profiling?

Profiling is automated processing of personal data to analyze or predict interests, preferences, or behavior. PhysioDock.com uses cookies to create user segments based on browsing behavior to personalize your experience and show relevant ads.

9.2. How we use cookies for profiling

• Behavior collection: Pages visited, products clicked, time on pages.

• Profile segments:

  • Interest profiles (e.g., “interested in physiotherapy courses”).

  • Purchase behavior (e.g., “added to cart but didn’t complete checkout”).

• Use of profiles:

  • Show ads aligned with your interests.

  • Recommend relevant courses, articles, or products.

  • Tailor on-site content based on prior behavior.

9.3. Tools we use

• Google Ads – ads based on prior searches and visits.

• Meta (Facebook/Instagram) – social ads based on your activity.

• Google Analytics (with remarketing) – ads across Google platforms.

9.4. Where you may see targeted ads

• On PhysioDock.com: personalized recommendations.

• On other sites: retargeting via ad networks.

• In social media: our ads after you’ve interacted with us.

9.5. How to opt out of targeted ads

• Cookie Settings: turn off Marketing cookies at any time.

• Third-party controls:

  • YourOnlineChoices.eu – cross-site ad preferences.

  • Google Ad Settings – Google platforms.

  • Meta Ad Preferences – Facebook and Instagram.

• Browser settings: block third-party cookies (may affect some site features).

9.6. If you opt out

• You will still see ads, but they won’t be behavior-based.

• Ads may be less relevant.

• Your advertising profile will not be updated with new data.

10. DATA TRANSFERS TO THIRD COUNTRIES (OUTSIDE THE EU/EEA)

10.1. When do transfers occur?

Transfers may occur when third-party cookies are set by providers outside the EU/EEA (e.g., Google, Meta, Stripe). This can include data about your behavior, IP address, and site interactions—often to the USA.

10.2. Providers that may transfer data to third countries

Third partyPurposeCountry

Google (Analytics, Ads, YouTube)Analytics, ads, embedded videoUSA

Meta (Facebook, Instagram)Social cookies, targeted adsUSA

StripePaymentsUSA

HotjarUX analyticsUSA

10.3. How transfers are safeguarded

PhysioDock.com ensures all transfers comply with GDPR using the following mechanisms:

A) Adequacy decisions (EU Commission):
If the destination country has an adequacy decision (sufficient protection), transfers can occur without additional measures (e.g., UK, Switzerland, Japan, Canada—commercial orgs).

B) Standard Contractual Clauses (SCCs):
For countries without adequacy (e.g., USA), we use EU SCCs—legally binding terms requiring the recipient to protect data per EU standards (used by Google, Meta, etc.).

C) Supplementary safeguards:
Encryption in transit, anonymization/pseudonymization where possible, and data minimization.

10.4. Potential risks of third-country transfers

• Government access: Some jurisdictions (e.g., USA under CLOUD Act/FISA 702) may allow official access.

• Lower protection: Laws may offer fewer rights than GDPR.

• Enforcement challenges: Exercising rights may be harder abroad.

10.5. How we inform you

• Our Cookie Settings disclose third-country transfers.

• You can always reject third-party cookies in the banner.

• By accepting Marketing or Analytics cookies, you also consent to possible third-country transfers.

10.6. How you can reduce risk

• Decline third-party cookies via Cookie Settings.

• Block third-party cookies in your browser.

• Use a reputable VPN for added browsing privacy.

11. HOW WE PROTECT YOUR INFORMATION (SECURITY)

11.1. GDPR-compliant third-party tools

We only partner with providers that meet GDPR requirements and maintain strong security. All processors sign Data Processing Agreements (DPAs).

Examples of compliant providers:

• Google (Analytics/Ads): IP anonymization, encryption.

• Stripe: PCI-DSS compliant for payment security.

• Meta: GDPR-aligned processing within the EU.

11.2. Anonymization in analytics

• IP anonymization in Google Analytics (truncation before storage).

• Pseudonymization where feasible.

• Aggregated reporting to analyze trends without identifying individuals.

11.3. No sale or sharing without consent

• We never sell user data.

• We don’t share data unless:

  • You’ve given explicit consent,

  • Sharing is necessary to deliver a service (e.g., payments), or

  • We are legally required (e.g., court order).

11.4. Our security measures

MeasureDescription

SSL/TLS encryptionAll traffic is protected via HTTPS.

FirewallsServer protection against unauthorized access.

Two-factor authentication (2FA)Secures admin accounts.

Least-privilege accessOnly authorized staff with a need-to-know get access.

BackupsRegular encrypted backups on secure servers.

Vulnerability testingOngoing scans and periodic penetration tests.

Data minimizationWe collect only what’s necessary and store it no longer than needed.

Logging & monitoringSystem activity monitored to detect anomalies and breaches.

11.5. Breach response

• Notification: If a breach risks your rights, we will notify you and the relevant authority per GDPR.

• Reporting: Serious breaches reported to the authority within 72 hours.

• Remediation: Immediate actions to limit impact and prevent recurrence.

11.6. Your rights on data protection

You have the right to understand how your data is protected. For details, please see our Privacy Policy and contact us via the channels listed there.

12. USER RIGHTS RELATED TO COOKIES

12.1. Right to information about the cookies we use

You have the right to clear information about:

• The types of cookies we use.

• The purpose of each cookie (e.g., essential, functional, analytics, marketing).

• Who sets the cookie (e.g., PhysioDock.com or a third party such as Google or Meta).

• How long each cookie is stored.

You can find this information in:

• Our consent banner on first visit.

• Cookie Settings (link in the footer of the site).

• This Cookie Policy and our Privacy Policy.

12.2. Right to withdraw consent at any time

You can withdraw consent to non-essential cookies at any time:

• Via Cookie Settings: click Cookie Settings in the site footer.

• Via your browser: block or delete cookies in your browser settings.

If you withdraw consent:

• All non-essential cookies will be removed from your device.

• Profiling and targeted advertising will stop.

Note: Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

12.3. Right to request deletion of data collected via cookies

You may request deletion of personal data collected through cookies unless:

• The data is required to fulfill a legal obligation, or

• The data has been anonymized and used only for statistics.

How to request deletion:
Contact us at the privacy email under Contact Us, or use Cookie Settings to clear stored data.
Response time: We respond within 30 days.

12.4. Right to object to profiling or targeted advertising

You may object to our use of cookie data for:

• Profiling: automated analysis of behavior or interests.

• Targeted ads: ads based on your past activity.

How to object:

• Turn off Marketing cookies in Cookie Settings.

• Use third-party tools:

  • YourOnlineChoices.eu

  • Google Ad Settings

  • Meta Ad Preferences

What changes:
You will still see ads, but they won’t be interest-based. PhysioDock will stop using your data for personalization.

12.5. How to exercise your rights

• Use Cookie Settings in the site footer, or

• Send a request to our privacy contact.
  We reply within 30 days in line with GDPR.

13. HOW TO EXERCISE YOUR RIGHTS

13.1. Privacy contact details

For requests about cookies and personal data, contact:

• Email: privacy@physiodock.com

• Postal: PhysioDock.com, Attn: Data Protection Officer, [Address to be added]

• Phone: [Number to be added] (privacy inquiries)

Please include:

• Which right you wish to exercise (access, rectification, deletion, objection, etc.).

• Your contact details for follow-up.

13.2. Change settings directly on the site

• Cookie Settings: click the footer link to change or withdraw consent and remove stored cookies.

• Privacy settings (account): update personal details or delete your account from your user profile.

13.3. How to file a complaint with the Data Protection Authority

If you believe PhysioDock.com has not complied with GDPR, you may contact:

• Datatilsynet (Norway): www.datatilsynet.no | +47 22 39 69 00 | Postboks 458 Sentrum, 0105 Oslo, Norway

13.4. Please contact us first

We encourage you to contact us so our privacy team can try to resolve the matter amicably.

13.5. Processing times

• Acknowledgement: within 7 days.

• Response: within 30 days (may extend up to 60 additional days for complex requests; we’ll inform you if so).

14. CHANGES TO THIS COOKIE POLICY

14.1. When we may update

We may update these cookie guidelines if:

• Laws change (GDPR, ePrivacy, or Norwegian law),

• Technology changes (new cookie types or tools),

• Our services change (new features or new third-party partners).

14.2. Notice of material changes

For material changes we will notify you clearly:

• Email (if you have an account), and/or

• A banner on PhysioDock.com asking you to review updates and refresh consent.

Examples include adding new third-party cookies (e.g., TikTok Pixel) or changing data use purposes.

14.3. “Last updated” date

The Last updated date will always be shown at the top of this page. Prior versions are available on request.

14.4. Your responsibility

By continuing to use PhysioDock.com after updates take effect, you accept the new terms. If you don’t accept them, you may update your cookie preferences, withdraw consent, or delete your account.

15. CONTACT FOR QUESTIONS ABOUT COOKIES

• Email: privacy@physiodock.com

• Data Protection Officer (DPO): [Name to be added] — dpo@physiodock.com

• Postal: PhysioDock.com, Attn: Data Protection Officer, [Address to be added]

• Phone: [Number to be added]

Response times:

• Acknowledgement within 7 days; full response within 30 days (GDPR).

• For complex matters, we may extend up to 60 days and will inform you of the reason.

16. GLOSSARY & DEFINITIONS (FAQ)

Cookie: Small text file stored on your device when you visit a website. Used to remember settings (e.g., language), collect anonymized stats, or serve relevant ads.
First-party cookie: Set directly by PhysioDock.com (e.g., keeps you logged in, remembers language).
Third-party cookie: Set by external providers (e.g., Google Analytics, Meta) for analytics/ads/social features.
Session cookie: Temporary; deleted when you close your browser (e.g., session_id to keep the cart active).
Persistent cookie: Stored for a predefined period after the browser closes (e.g., _ga for up to 14 months).
Profiling: Automated processing of personal data to analyze/evaluate/predict behavior or interests for personalization and targeted ads.
IP anonymization: Technique that truncates IP addresses to protect privacy.
Retargeting: Showing ads based on prior visits.
Consent banner: The prompt shown on first visit to accept/decline cookie categories.
Processor (data processor): A third party processing personal data on behalf of PhysioDock (e.g., Google for analytics).
Tracking pixel: A 1×1 invisible image used to record user actions (e.g., ad impressions/clicks).

You may ask us to delete or correct inaccurate data, and you can withdraw consent to processing at any time.