Privacy policy

1. INFORMATION FOR USERS

Who is responsible for processing your personal data?

ARRELS TATTO – Javier de Jesús Obregón Montiel is the CONTROLLER responsible for processing the USER’s personal data and informs the USER that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

Why do we process your personal data?

At Arrels Tattoo, we process information provided by users for the following purposes:

• To manage the commercial relationship arising from tattoo and piercing services, including appointments, quotations, billing, enquiries and incidents.
• To send informative and promotional communications relating to our services, events and studio news through any contact method provided, including email, social media, instant messaging and SMS, always with the data subject’s prior consent.
• To manage the publication of images and videos of completed work on our social media channels and website, only where the user has expressly authorised this.
• To respond to requests and enquiries submitted through the website contact forms.
• To comply with applicable tax and accounting obligations.

What is our legal basis for processing your personal data?

Processing is lawful under Article 6 of the GDPR on the following grounds:

• The USER’s consent: for sending commercial communications and newsletters.
• The CONTROLLER’s legitimate interests: for carrying out market research and statistical analysis, among other activities, and for processing orders and requests submitted by the USER.

How long will we retain your personal data?

Personal data will be retained no longer than is necessary for the purpose of processing, or for as long as a legal limitation or retention period requires. When it is no longer required, the data will be deleted using appropriate security measures to ensure that it is anonymised or completely destroyed.

Who do we disclose your personal data to?

No disclosure of personal data to third parties is planned, except where necessary to develop and carry out the purposes of processing through our communications-related service providers. The CONTROLLER has entered into the confidentiality and data-processing agreements with these providers that are required under current privacy regulations.

What are your rights?

The USER has the following rights:

• The right to withdraw consent at any time.
• The rights of access, rectification, portability and erasure of personal data, and the rights to restrict or object to its processing.
• The right to lodge a complaint with the supervisory authority (www.aepd.es) if the USER believes that processing does not comply with current regulations.

Contact details for exercising your rights: ARRELS TATTO – Javier de Jesús Obregón Montiel. Carrer de Venero, 18 – 08005 Barcelona (Barcelona). Email: arrelstattoo@gmail.com.

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

By ticking the relevant boxes and entering data in fields marked with an asterisk (*) on the contact form or in download forms, USERS expressly, freely and unequivocally accept that their data is necessary for the service provider to respond to their request. Entering data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER is accurate and accepts responsibility for communicating any changes to it.

The CONTROLLER informs users that all data requested through the website is mandatory because it is necessary to provide the USER with an optimal service. If all data is not provided, the information and services supplied cannot be guaranteed to be fully suited to the USER’s needs.

3. SECURITY MEASURES

In accordance with current personal data protection regulations, the CONTROLLER complies with all provisions of the GDPR and the LOPDGDD applicable to the processing of personal data for which the CONTROLLER is responsible, and expressly with the principles described in Article 5 of the GDPR. Accordingly, personal data is processed lawfully, fairly and transparently in relation to the data subject and is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

The CONTROLLER guarantees that appropriate technical and organisational policies have been implemented to apply the security measures established by the GDPR and the LOPDGDD, protect USERS’ rights and freedoms, and provide them with the appropriate information so that they can exercise those rights.

For further information about privacy safeguards, contact the CONTROLLER: Javier de Jesús Obregón Montiel, Carrer de Venero, 18 – 08005 Barcelona (Barcelona). Email: arrelstattoo@gmail.com.