Legal Privacy

This is a translation for your convenience. Only the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

2. Overview

This is a static website without user accounts, without cookies, without analytics or tracking tools and without embedded third-party content. Fonts and scripts are loaded from the website's own web space. I only process personal data to the extent described below.

3. Hosting and server log files

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When a page is accessed, the hosting provider processes technically necessary data in so-called server log files: IP address, date and time of access, page accessed, amount of data transferred, referrer, and browser and operating system. IONOS processes this data on my behalf (Art. 28 GDPR).

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure and stable operation of the website. How long the log files are stored is determined by the hosting provider.

4. Storage in your browser

If you choose a language via the language selector, this choice is saved in your browser's local storage (localStorage) so the website appears in your language on your next visit. While you fill in the booking request, your entries are temporarily saved in session storage (sessionStorage) so they are kept if you switch languages. Session storage is cleared when you close the tab.

This data does not leave your browser and is not transmitted to me. The legal basis is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as the storage is strictly necessary for the function you requested. You can delete this data at any time in your browser settings.

5. Booking request and contact

When you submit the request form, your details are transmitted encrypted (HTTPS) to a script on my web space at IONOS, checked there and forwarded to me by email. The details are not stored on the web space. With “Send via Instagram DM”, the text is instead copied to your clipboard and Instagram is opened; nothing is sent to my server in that case.

I process the information in your request, for example your name, email address, phone number, preferred date, tattoo idea, body part, size and budget, to handle your request and arrange an appointment. The legal basis is Art. 6(1)(b) GDPR. I delete the data as soon as it is no longer needed for this purpose and no statutory retention obligations apply.

To protect against spam and abuse, the script stores a non-reversible hash of your IP address together with the time of the request for at most one hour (legal basis: Art. 6(1)(f) GDPR, legitimate interest in secure operation). No cookies are set for this.

To receive the emails I use the Gmail service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to the USA cannot be ruled out. Please don't send me health data through the request; we'll discuss health questions personally.

6. Instagram

This website contains links to Instagram, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. These are simple links: as long as you don't click them, no data is transmitted to Instagram. If you open a link or message me on Instagram, Instagram's privacy policy also applies. I process messages you send me there as described in section 5.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Simply contact me by email.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.

8. Last updated

This privacy policy was last updated in September 2026.