Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Art-In Tattoo Studio
Owner: Martin Ruf
Hauptstraße 208 A
79576 Weil am Rhein, Germany
Phone: +49 179 2573546
Email: Art-In-Tattoo-Studio@web.de

2. Processing when you visit the website

When you open this website, the hosting provider processes technically necessary data. This may include your IP address, date and time of access, the page requested, the amount of data transferred, browser type and operating system.

This processing serves the technical provision, stability and security of the website and is based on Art. 6(1)(f) GDPR. Log data is only kept for as long as these purposes require.

Hosting provider: Enter the hosting provider's name and address

To see how busy the website is, your browser sends a heartbeat roughly every 25 seconds during your visit, containing a random identifier, the page and the language. Your IP address is only processed in shortened form. This information is held in memory only, discarded after about 70 seconds of inactivity and never stored permanently (Art. 6(1)(f) GDPR).

3. Cookies and local storage

If you choose a language in the language menu, we store that choice in a cookie (ai_lang, valid for one year) so the site appears in your language next time. For the visitor counter, a random identifier is kept in your browser's session storage and deleted when you close the tab. These are required for the functions you request (§ 25(2) no. 2 TDDDG). We do not use tracking or advertising cookies.

4. Online booking

You can reserve an appointment at Art-In Tattoo Studio using the booking form. We process the following data:

• Name
• Phone number
• Email address (optional)
• The service requested
• The chosen artist, date and time
• Optional details about your tattoo idea
• Your confirmation that you are at least 18 years old
• The language in which you use the website

Please do not include any health information in the free-text field. We discuss allergies, medication or skin conditions in person before your appointment.

We process this data to carry out and manage your reservation and to contact you if we have questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract).

Booking data is stored on a server operated by us or our hosting provider. Only authorised staff of Art-In Tattoo Studio have access, and only as far as needed to manage appointments.

Retention: booking data is deleted once it is no longer needed for the appointment and any statutory retention obligations: e.g. “no later than 12 months after the appointment”.

5. Reviews

When you submit a review, we store the name you give, your star rating, your text, the language used, the time and a shortened IP address (to prevent abuse). Reviews are only published after being checked; only name, rating, text and date are published. The legal basis is Art. 6(1)(a) GDPR (your consent by submitting). You can ask us to delete your review at any time using the contact details above.

6. Contacting us

If you contact us by phone, Instagram or email, we process the data you send solely to handle your enquiry. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR, depending on the matter.

When you contact us via Instagram, the privacy policy of the provider (Meta Platforms Ireland Ltd.) also applies. Data may be transferred to countries outside the European Union.

7. Google Maps

On this website you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is only loaded when you click “Show map”. Only then is information such as your IP address transmitted to Google and processed there, possibly also on servers in the USA. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw for the future at any time by reloading the page. More information can be found in Google's privacy policy.

8. Fonts

The fonts used on this website are loaded from our own server. No connection is made to third-party servers (e.g. Google Fonts).

9. Your rights

Within the statutory requirements, you have the right to:

• Access to your stored personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Withdraw consent with effect for the future (Art. 7(3) GDPR)
• Lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

To exercise your rights, contact us at any time using the details above.

10. Updates and changes

This privacy policy was last updated on 7 October 2026. We may update it if the data processing on our website or the legal requirements change.