1. Who is responsible for your data?
The controller of personal data used to handle studio enquiries is INCEPCJA DAWID LITWINOWICZ. Contact address: Plac Wolności 4/1, 21-500 Biała Podlaska. For data-related matters, email incepcjatattoo@gmail.com or call 513 477 850.
2. What information do you provide?
The contact form includes a subject, name, email address, message and optional phone number. The tattoo planner additionally sends your selected placements, dimensions, descriptions, style and an optional inspiration link, plus a request to be contacted about a cancelled appointment if you select that option. Do not send health information, your Polish PESEL identification number or identity documents.
Forms do not send their contents while you type. Data is sent only when you choose the submit button. Choosing a voucher amount does not itself send data or place an order. An email link opens your email application; a phone link allows you to initiate a call.
3. Purposes and legal bases for processing
- Discussing a service, consultation, quote or voucher enquiry: steps taken at your request before entering into a contract — Article 6(1)(b) GDPR.
- Other correspondence and answering questions: the controller’s legitimate interest in handling correspondence — Article 6(1)(f) GDPR.
- Website security and establishing, exercising or defending legal claims: the controller’s legitimate interest — Article 6(1)(f) GDPR.
- Optional Instagram embeds: voluntary consent to load them — Article 6(1)(a) GDPR and the applicable rules on access to your device.
Acknowledging the privacy policy is not consent to marketing. Forms do not subscribe you to a newsletter. We do not use them to make solely automated decisions with legal effects or to profile clients. A person prepares your tattoo quote.
4. Is providing data compulsory?
Providing data is voluntary. Your name, email, subject and message are needed to handle the contact form. The planner also requires information about the planned tattoo. A form cannot be submitted without its required fields. Your phone number and inspiration link are optional. You can contact us through another channel.
5. Who may receive the data?
Access is available to people handling studio correspondence and providers needed to operate the website and email: website hosting, FormSubmit for forwarding forms, and Google as the Gmail provider. Where justified, data may be received by entities authorised under the law or advisers assisting with a particular matter.
A submitted enquiry is saved in the website’s protected database. The studio owner and administrator can access it in the dashboard. A copy is forwarded through FormSubmit to the studio’s email address; failure to confirm email delivery does not remove the enquiry from the dashboard. Read FormSubmit’s information and Google’s privacy policy. Processing by overseas providers may involve transfers outside the European Economic Area. Processing locations and safeguards depend on the provider and the terms of the relevant service; you may ask the studio for information concerning your correspondence.
6. How long do we retain data?
Enquiry data is needed while we exchange correspondence and agree the details of your request. If a contract is concluded, further retention depends on its performance and applicable legal obligations. Data necessary for a specific matter may be retained until the limitation period for related claims expires. It should no longer be retained once there is no purpose or legal basis.
Unsubmitted form contents remain in the memory of the open page. We do not save them in our database or local storage. Browser session storage may retain a technical submission identifier and a data hash so that retrying an interrupted request does not create a duplicate. We do not store form contents there; the record is removed once receipt is confirmed. Device privacy settings remain valid for up to 180 days. Technical retention periods for logs and data held by providers depend on their configuration and service terms.
7. Your rights
You may request access to, rectification or erasure of your data, restriction of processing and — where the GDPR provides for it — data portability. You may object on grounds relating to your particular situation to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing carried out before withdrawal.
Send your request to the studio’s address. If we have doubts about your identity, we may ask for information needed to fulfil the request securely. You may lodge a complaint with the President of the Polish Personal Data Protection Office — information is available at uodo.gov.pl.
8. Social media and external services
Instagram and Facebook icons and links to Booksy and Google Maps lead to external services. Simply displaying these links does not load their plugins. After you follow a link, the chosen provider’s rules apply. Booking an appointment through Booksy takes place outside this website.
Embedded Instagram posts, where available, load only after consent in the settings. Meta may then receive your IP address and browser information, among other data, and use its own cookies. When consent is withdrawn, the page refreshes to stop the loaded script. You can remove existing Meta files in your browser. Meta’s privacy policy.
9. Cookies and website changes
See our cookie policy for details. This version of the website does not run Google Analytics or Meta Pixel. With voluntary consent, we collect our own visit and click statistics: a random browser identifier, time, page and type of action. The data helps improve our services and website; events older than 30 days are removed on the next write. Statistics do not contain names, IP addresses or form contents. You can withdraw consent in cookie settings. Actual appointment counts entered by the studio are aggregated, with no client details. Adding payments, new analytics tools or other integrations requires the data information to be updated accordingly.