Privacy Policy
This document explains which personal data we process when you book a tattoo, request a callback, submit a review or order a gift voucher.
Personal Data Controller
- Controller
- Marina Cheremnykh
- Czech business ID (IČO)
- 24617849
- Address
- Cesta brigádníků 819, Kralupy nad Vltavou, 278 01
- GDPR contact
- admin@sidmaink.cz
- Effective date
- 6.6.2026
What Data We Process
We process data that you provide in forms or during communication with the studio. This usually includes your name, phone, e-mail, preferred date, selected service, message, references, photographs or sketches attached to an enquiry.
For gift vouchers, we also process data needed to create and deliver the voucher, such as buyer name, contact details, recipient e-mail, amount, variable symbol, voucher message and PDF files generated during the order.
For reviews, we process name, contact, rating, selected service and review text. If a review is later published, we use only the data and scope agreed with the client.
Purposes and Legal Bases
Data from booking and contact forms is used to answer enquiries, arrange consultations, prepare designs, confirm appointments and perform a contract or pre-contractual steps requested by the client.
Gift voucher data is used to handle the order, create the voucher, check payment, deliver PDF documents and keep related communication records.
Some data is also stored based on legitimate interest, especially protection of legal claims, form security, abuse prevention and proof of communication. Data on accounting or tax documents is stored under legal obligations.
- Marketing messages are sent only with separate consent or where the law allows communication with existing customers. Consent can be withdrawn at any time.
- Google Analytics cookies are used only after consent is given in the cookie banner.
- The mandatory form confirmation proves that you have read this policy; for bookings, the main legal basis is handling your request and the contractual relationship, not consent.
Recipients and Services Used
Forms are submitted to the form service operated for the studio. This service handles validation, anti-spam protection, attachments and delivery of notifications to the studio.
Selected form data may be delivered to Telegram as an internal studio notification so we can respond quickly. Attachments may contain references, sketches or photographs sent by the client.
We also use technical providers for hosting, e-mail, security tools and analytics. If personal data is transferred outside the EU/EEA, this is done only under GDPR-compliant safeguards, such as standard contractual clauses or another suitable mechanism.
Retention Periods
Data from ordinary enquiries and bookings is stored for the time needed to handle communication, booking, design preparation and service delivery. After that, we keep it only as long as necessary to protect legal claims.
Unrealised enquiries are usually deleted or anonymised no later than 12 months after the last communication. Data related to completed services is usually kept for up to 3 years after completion, unless a longer period is necessary for legal claims.
Accounting and tax documents are stored for the period required by law, usually up to 10 years. Marketing contacts are kept until consent is withdrawn or the purpose expires. Analytics data follows Google Analytics settings and cookie consent.
Your Rights
For privacy matters, contact us at admin@sidmaink.cz. We will handle your request without undue delay, usually within 1 month under GDPR.
You have the right to request access to your personal data, correction of inaccurate data, completion of incomplete data, erasure, restriction of processing, data portability and to object to processing based on legitimate interest.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- The right to erasure does not automatically mean deletion of data we must keep because of a legal obligation, contract performance or defence of legal claims.
- If you believe we process data incorrectly, you may lodge a complaint with the Czech Data Protection Authority, www.uoou.cz.
Security
We protect personal data with appropriate technical and organisational measures. Access is limited to people who need the data to handle requests, operate the studio, manage accounting or provide technical administration.
Clients should not send sensitive data through forms unless it is necessary for arranging the tattoo. Health information should be shared only to the extent needed for safe assessment of the session and later in the client questionnaire at the studio.
Changes to This Policy
We may update this policy according to changes in the website, forms, services used or legal requirements. The current version is always available on this page.