Privacy Policy
Ink Under the Skin
Last updated: August 10, 2026
1. Data Controller
The person responsible for processing personal data is:
Sofiia Yatsynyk
Ink Under the Skin
Goldbacherstraße 13
63739 Aschaffenburg
Germany
Email: moc.niksehtrednukni%40ofni
Phone / WhatsApp Business: +49 163 8600 811
2. Website and Technical Data
When you visit this website, technically necessary data is processed, including your IP address, the date
and time of access, pages visited, and browser and device information.
This processing is carried out to ensure the secure and functional operation of the website.
The legal basis is Art. 6(1)(f) of the General Data Protection Regulation (GDPR).
3. Tattoo Inquiries and Contact
If you submit a tattoo inquiry through the website or contact me by email, telephone, or WhatsApp
Business, I process the information you provide.
This may include, in particular, your name, email address, telephone number, Instagram contact details,
tattoo idea, desired size, body placement, budget, and any uploaded photos or reference images.
This data is used to process your inquiry, communicate with you, assess your tattoo project, and prepare
for or carry out an appointment.
The legal basis is Art. 6(1)(b) GDPR. Where necessary, Art. 6(1)(f) GDPR may also apply.
When you use WhatsApp Business, the WhatsApp provider also processes data in accordance with its
own privacy policy.
If the website contains a simple WhatsApp link, data transmission generally begins only when you
actively use this function.
4. Health Data Before a Tattoo Appointment
Before your tattoo appointment, you may be asked to complete a health declaration and consent form in
paper format.
This may involve processing information about allergies, medications, pregnancy, skin conditions,
diabetes, or other circumstances relevant to the safe performance of the tattoo procedure.
Health data is processed only with your explicit consent.
The legal basis is Art. 9(2)(a) GDPR in conjunction with Art. 6(1)(a) GDPR.
Paper forms are stored securely and are generally destroyed in a manner compliant with data protection
requirements after 12 months, unless a legal obligation or a specific legal reason requires a longer
retention period.
5. Photos and Videos
Photos or videos of completed tattoos may be used for portfolio and advertising purposes.
Publication on the website or on social media platforms such as Instagram, TikTok, or Pinterest takes
place only on the basis of separate, voluntary consent.
The provision of tattoo services is not dependent on your consent to publication.
You may withdraw your consent at any time with effect for the future.
Following withdrawal, the relevant content will be removed from my own channels to the extent
technically and practically possible.
6. Google Analytics and Cookies
This website uses Google Analytics to statistically analyze website usage.
The provider responsible for personal data in Europe is generally Google Ireland Limited.
Google Analytics is used only with your consent.
The legal basis is Art. 6(1)(a) GDPR.
Where information is stored on or accessed from your device, this is additionally based on your consent
pursuant to Section 25(1) of the German Telecommunications Digital Services Data Protection Act
(TDDDG).
Technically necessary cookies and similar technologies may be used without consent where they are
required for the provision of the website.
You can change or withdraw your consent at any time for the future through the cookie settings.
7. External Links and Social Networks
This website may contain links to external services, particularly Instagram, TikTok, Pinterest, WhatsApp,
and Google Maps.
In the case of simple external links, data is generally transmitted to the respective provider only when
you click the link and access the external website.
8. Recipients and Data Transfers
Personal data may be transferred to technical website and hosting service providers, communication
service providers, and Google in connection with Google Analytics, where necessary for the respective
purpose.
Data is shared only where there is a valid legal basis under data protection law.
Certain services, particularly Google and WhatsApp, may also process data outside the European Union
(EU) or the European Economic Area (EEA).
Where required, such transfers are carried out in compliance with the conditions set out in Articles 44 et
seq. GDPR.
9. Data Retention
Personal data is stored only for as long as necessary for the respective purpose or as required by
statutory retention and documentation obligations.
Under the current internal policy, health declaration forms are generally destroyed after 12 months.
10. Your Rights
To exercise your rights, you can contact me at:
moc.niksehtrednukni%40ofni
You also have the right to lodge a complaint with a data protection supervisory authority.
For private-sector data controllers in Bavaria, the relevant supervisory authority is, in particular:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
11. Changes to This Privacy Policy
This Privacy Policy will be updated if data processing activities, the services used, or legal requirements
change.
The version published on this website at any given time shall apply.