Privacy policy
1. Controller
Çağdaş Al
Çağdaş Al Tattoo Art
Kassel
Germany
E-mail: info@cagdasaltattooart.com
Phone: +49 155 10225742
2. General information
We only process personal data to the extent necessary to operate this website and to handle your requests. We do not use any analytics, tracking or marketing tools.
3. Hosting and server log files
This website is hosted by an external hosting provider. When you visit the website, the server automatically processes data transmitted by your browser: IP address, date and time of access, page visited, referrer URL, browser type and operating system. This data is required to deliver and secure the website (Art. 6(1)(f) GDPR) and is deleted after a short period unless it is needed to investigate a security incident.
4. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
5. Appointment requests via the form
When you use the appointment form, we process the details you provide: first and last name, age, city or appointment location, e-mail address, optionally your phone number, details of your tattoo idea (size, body location, preferred days, preferred month) and any reference images you upload. Your age is used to confirm that you are of legal age.
The purpose is to handle your request and arrange an appointment; the legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). The request is sent in encrypted form to our e-mail inbox and additionally stored on the server. Form data and reference images are deleted after 12 months at the latest unless statutory retention obligations apply.
To prevent misuse, we store a non-reversible hash of your IP address with each request and limit the number of requests per hour (Art. 6(1)(f) GDPR).
6. Contact by e-mail, phone and WhatsApp
If you contact us by e-mail or phone, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The WhatsApp link takes you to the WhatsApp service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Data is only transmitted once you click the link, and WhatsApp’s privacy policy applies. A transfer of personal data to the USA cannot be ruled out.
7. Instagram
We link to our Instagram profile (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland). No Instagram plugins are embedded on this website; data is only transmitted once you click the link.
8. Cookies
We only use one technically necessary session cookie (“cat_sid”) on the appointment page to protect the form against misuse. It is deleted when you close your browser. The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. We do not use analytics or marketing cookies.
9. Fonts and media
Fonts, images and videos are loaded directly from our own server. There is no connection to servers of Google or other third parties.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). Please contact us at the e-mail address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.