SUITE 447 / INFORMATION
Privacy notice
Controller
Mark Turovski, Suite 447 Tattoo Munich, Auenstraße 2, 80469 Munich, Germany. For privacy enquiries, email info@suite447.de or call +49 89 68971179.
Website hosting and server logs
This website is hosted in the European Economic Area on a server provided by Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany. When you open a page, your browser transmits technical information. The server may record the IP address, time, requested address, HTTP status, amount of data, browser identifier and any referrer sent by the browser. We use these logs to operate the site, troubleshoot problems and detect attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is secure, reliable operation. Ordinary web server logs rotate daily and are removed after the 14 daily archives have been rotated. If a specific security incident occurs, necessary extracts may be kept longer to investigate it and, where applicable, pursue legal claims.
Contact and appointment enquiries
When you contact us by phone, email or the online form, we process your contact details, your message and any information you provide about your design, placement, preferred date or application. Tattoo enquiries can include optional reference images. Please do not submit health information, someone else's personal data or identity documents. Access is given to the studio staff responsible and, where needed to handle the enquiry, the relevant artist. Our email provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Where your enquiry concerns a contract or steps leading to one, we rely on Art. 6(1)(b) GDPR. General enquiries and applications to work with the studio are processed under Art. 6(1)(f) GDPR. Our interest is handling your message or selecting collaborators. Where employment data protection law applies to an application for employment, section 26(1) of the German Federal Data Protection Act applies. We keep enquiries and reference images for as long as needed to handle them. The CMS is configured to flag cancelled enquiries for review after 90 days. Statutory retention obligations or ongoing legal claims may require longer storage.
Gift vouchers, payments and withdrawal
When online purchases are available, we process the name (if provided), email address, order details and payment status to sell and deliver the PDF voucher, redeem it and handle any withdrawal. An optional dedication and recipient name appear on the voucher. You enter card details on the SumUp payment page. We receive a payment reference and status rather than full card details. SumUp processes payment data for its payment service under its own privacy notice. We rely on Art. 6(1)(b) GDPR to perform the contract, Art. 6(1)(c) for legal duties such as tax record keeping and confirmation of withdrawal, and Art. 6(1)(f) to prevent fraud or handle legal claims. For a withdrawal, we keep identifying and contact details, the statement and the time it was received, and send an acknowledgement. We retain these data as necessary to handle the transaction, meet statutory obligations or document it for the parties.
Browser storage and analytics
We use essential browser storage for functions you request, such as signing in to the studio CMS or accessing your own order. The basket stores selected items locally and expires after seven days. Where applicable, we rely on section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(b) or (f) GDPR. When first-party website analytics are enabled, page views and selected clicks are counted by day, referrer category and device class. The analytics do not store IP addresses, cookie identifiers or individual browsing histories. We use these statistics to improve the site under Art. 6(1)(f) GDPR. DNT and GPC browser signals are respected.
Instagram and external links
Gallery images are served from our own server. When you follow a link to Instagram, Google Maps or a different site, the provider processes data under its own privacy notice. Viewing the gallery does not load an Instagram embed in your browser.
Your rights
Where the statutory requirements are met, you have the right to access, rectify, erase, restrict or obtain a portable copy of your data (Arts. 15–20 GDPR). You may object to processing based on legitimate interests for reasons arising from your particular situation (Art. 21 GDPR). You may withdraw consent at any time with future effect. You may complain to a supervisory authority, such as the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. Without required information, we may be unable to handle your enquiry, purchase or withdrawal. We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR.