Legal
What this site collects, what it does with it, and what you can ask it to forget.
Who is responsible
Tattooland47 is responsible for the personal data collected through this website. To reach the person handling data requests, write to the studio email printed on the contact page, or send a note through the booking form and say it is a data request — either route reaches the same inbox, and the studio is in Finland, so the GDPR and the Finnish Data Protection Ombudsman apply.
This policy covers this website only. It does not cover a third-party booking platform, payment provider or social network that you may reach through a link here.
What is collected, and why
Booking request form: the details you type into it — your name, email address, phone number, the service you want, your idea, preferred dates and any message. This is collected to answer your request and, if you go ahead, to prepare for your appointment. The lawful basis is the steps you take toward entering into a contract.
Email notifications: a copy of your request may be sent by email to the studio address and back to you, so neither side loses the conversation. Mail is delivered through an email service acting on the studio’s behalf.
Storage: requests are held in the studio’s own database, hosted on a server the studio administers, and are not sold, shared or used for advertising.
Server logs: like most websites, the server records the address that made a request, the page asked for, a timestamp and a user-agent string. This exists to keep the site running and to spot abuse, not to build a profile of you.
Checklist
- 01This site does not set advertising or cross-site tracking cookies
- 02No third-party analytics script is loaded
- 03A technical session may be stored in your browser so the site can remember its own state
- 04If tracking is ever added, this page is updated before it goes live
How long it is kept
Requests are kept for as long as they are relevant — an active booking, a piece that may need a touch-up, or a relationship you continue. A request that goes nowhere is deleted once it is clear nothing will come of it.
Photographs of finished work are a separate matter: they are only published with your agreement, and withdrawing that agreement removes the image from the site. It cannot remove copies already printed or shared elsewhere.
Checklist
Under the GDPR, you can ask the studio at any time to:
- 01Show you what it holds about you (access)
- 02Correct anything that is wrong (rectification)
- 03Delete what it holds about you (erasure)
- 04Stop processing it, or hand your data somewhere else (restriction and portability)
- 05Object to processing that relies on legitimate interest
- 06Withdraw a consent you gave — such as permission to publish your work
Children
This website is not aimed at children and no data is knowingly collected from anyone under eighteen. If you believe a child has submitted information through this site, contact the studio and it will be removed.
Complaints
If a request to the studio goes unanswered you may complain to the supervisory authority for the country the studio operates in. In Finland that is the Office of the Data Protection Ombudsman.