Privacy policy

The controller of your personal data is Parvata Tattoo Robert Góra, registered at: ul. Łąkowa 39, 51-180 Szymanów, Poland, Tax ID (NIP): 8941774962, REGON: 541233573.

For matters related to personal data protection, you can contact us by email at parvata.tattoostudio@gmail.com or by phone at +48 511 043 248.

Data from the booking form: full name, email address, phone number, Instagram handle (if provided), and information about the planned tattoo (idea description, size, body placement, budget, preferred date and any uploaded inspiration images).

Technical data collected automatically as you use the site: IP address, device and browser type, pages visited and identifiers stored in cookies. Some of it is collected only after you consent to analytics and marketing cookies.

Handling your request, contacting you about your appointment and providing the service — GDPR Art. 6(1)(b) (actions necessary for entering into and performing a contract). Providing this data is voluntary but necessary to process your booking.

Visit statistics, advertising performance measurement and marketing — GDPR Art. 6(1)(a), i.e. the consent you give in the cookie banner. You may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out before it.

Keeping the site secure and protecting the form against spam and abuse — GDPR Art. 6(1)(f) (our legitimate interest).

Meeting tax and accounting obligations once a service has been performed — GDPR Art. 6(1)(c).

Booking data is retained for as long as necessary to handle the request and provide the service, and where a service was performed — for the period required by tax and accounting law (as a rule 5 years from the end of the settlement year).

Data processed on the basis of consent is retained until that consent is withdrawn. Data processed on the basis of legitimate interest — until an effective objection is raised.

Events from the anonymous usage statistics described in section 7 are kept for a maximum of 90 days and deleted automatically.

Your data may be entrusted to: IT infrastructure and hosting providers, an email delivery provider, a provider of the anti-spam protection guarding the form, and — only if you consent to analytics and marketing cookies — providers of analytics and advertising tools, including Google and Meta (Facebook, Instagram).

Any such entrustment takes place under data processing agreements and only to the extent necessary to deliver the given service. We do not sell your data.

Some of our providers, in particular analytics and advertising tools, may process data outside the European Economic Area, including in the United States.

Such transfers rely on the mechanisms provided for in the GDPR — Standard Contractual Clauses approved by the European Commission or an adequacy decision (Data Privacy Framework). You have the right to obtain information from us about the safeguards applied.

Essential cookies keep the site working and remember your consent choice — they are always active and do not require consent.

Analytics and marketing cookies (including Google Analytics, Google Ads, Meta Pixel) are activated only after you click “Accept” in the banner. Until then these tools run in a restricted mode: they store no advertising identifiers and transmit no data that could identify you.

If you click “Decline”, analytics and marketing cookies are not activated. You can change your choice at any time — including by clearing site data in your browser settings, which brings the consent banner back.

Independently of cookies we keep our own, anonymous usage statistics. We record: the address of the page visited, its language version, the type of event (page view, how far the page was scrolled, time spent on the page, a click on a tagged element, moving through or abandoning a step of the booking form) and the label of the element clicked. The statistics exist for one purpose: to know which parts of the site help and which are passed over.

To connect events within a single visit we use a random identifier kept in the browser tab’s memory (sessionStorage) — it is not a cookie, it disappears when the tab is closed, and it cannot link your visits or recognise you on another site. We do NOT store your IP address, information about your browser, or anything you type into the form.

This data does not allow us to identify you, and we process it on the basis of our legitimate interest (GDPR Art. 6(1)(f)), namely improving the website. We keep it for a maximum of 90 days, after which it is deleted automatically.

If your browser sends a “Do Not Track” or Global Privacy Control signal, we do not collect these statistics at all — you do not have to click anything.

If you reached us from a Google ad, the page address contains a click identifier assigned by Google (the gclid parameter). We keep it in your browser tab memory and store it with your enquiry only if you send the booking form yourself. It is used solely to check which ad led to a consultation — it contains none of your data and is not used for profiling.

If you consent to marketing cookies, advertising tools may profile your activity in order to tailor the ads shown to you. This profiling produces no legal effects concerning you and does not similarly significantly affect you.

We do not make decisions about you based solely on automated processing.

You have the right to access your data, rectify it, delete it or restrict its processing, the right to data portability, and the right to object to processing based on legitimate interest.

For data processed on the basis of consent, you have the right to withdraw it at any time — and doing so is as easy as giving it.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe the processing violates GDPR.