Nillattt © 2024
ES

Legal

Privacy Policy

Last updated ·

This policy explains which personal data is processed when you visit nillattt.ink or request an appointment, what it is used for and how you can exercise your rights. It follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

01Data controller

Owner
Jaime Andres Cabezas Avalos (Nillattt)
Tax ID
46383476C
Address
Carrer de la Tradició, 2 (Önas Tattoo), Sarrià, Barcelona, España
Email
nilla.ttt@gmail.com

02What data we process

  • Booking form: name, email, phone (optional), subject, message, the photos you choose to attach (placement and references) and your confirmation that you are of legal age.
  • WhatsApp: if you message us, your number and the messages you send. That conversation is also governed by WhatsApp's (Meta) privacy policy.
  • Browsing: technical data (IP address, browser, pages visited) logged by the server for security and, only if you accept them, the analytics and advertising cookies described in the cookie policy.

We do not need health data or any other sensitive data to prepare your design: please do not include it in your message. If anything about your skin or health matters for the session, we will talk about it in person at the studio.

03Purposes and legal basis

  • Answering your request, preparing the quote and design and managing your appointment. Basis: pre-contractual steps and performance of the contract you request (Art. 6.1.b GDPR).
  • Sending you a confirmation email that we received your request. Basis: same as above.
  • Meeting legal obligations, such as tax and invoicing if you get tattooed. Basis: legal obligation (Art. 6.1.c GDPR).
  • Protecting the site from abuse and spam (technical logs and rate limiting). Basis: legitimate interest in the security of the service (Art. 6.1.f GDPR).
  • Measuring visits and campaigns with Google Analytics and Google Ads. Basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time from "Cookie settings".

We do not use your data to send you advertising, build profiles or make automated decisions.

04How long we keep it

  • Requests that do not lead to an appointment are deleted at most 12 months after the last contact.
  • If you get tattooed, we keep your data for as long as the relationship lasts and then for the periods required by law (for example, tax periods).
  • Cookie data is kept for the periods listed in the cookie policy.

05Who else can access your data

We do not sell or share your data with third parties unless required by law. To run the site we rely on these providers, who process it only on our instructions:

  • Vercel Inc. (USA): website hosting.
  • Resend (USA): sending the booking form emails.
  • Google (Gmail): the inbox where requests arrive; and, with your consent, Google Analytics and Google Ads.
  • Meta (WhatsApp): only if you choose to message us on WhatsApp.

Some of these providers are based in the United States. Transfers rely on the EU–US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

06Photos of the work

Portfolio photos are published with each client's consent. If you appear in one and want it removed, write to nilla.ttt@gmail.com and we will take it down as soon as possible.

07Your rights

You can request access to your data, its rectification or erasure, object to its processing or ask for it to be restricted, request its portability and withdraw your consent at any time. Write to nilla.ttt@gmail.com stating which right you want to exercise; if we need to verify your identity, we will ask.

If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency at aepd.es.

08Minors

We only accept requests from people aged 18 or over, which is why the form asks you to confirm it. If we find that a request comes from a minor, we will delete it.