Privacy policy

1. Controller

The controller within the meaning of the GDPR is:

2. General information on data processing

I process personal data only to the extent necessary to provide a functional website and to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) for requests, and Art. 6(1)(f) GDPR (legitimate interest in a technically sound presentation) for automatically collected server logs.

3. Contact form and image uploads

When you submit the contact form, the following data is processed:

• Name, email address, optional phone number
• Details about the desired motif (style, size, placement, description)
• Optional reference images you upload
• Technical metadata (IP address, timestamp, user agent)

Reference images are stored for the purpose of handling your request with Hetzner Online GmbH (Industriestrasse 25, 91710 Gunzenhausen, Germany) in an object store located in Germany. Legal basis is Art. 6(1)(b) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Your data will be deleted at the latest 12 months after your request is concluded, unless statutory retention periods (e.g. tax law) require otherwise.

4. Server logs

When you visit this website, the hosting system automatically records information (IP address, requested URL, timestamp, referrer, user agent). This data is processed solely to ensure uninterrupted operation and is deleted or anonymized at the latest after 14 days.

Hosting: [provider name and address], data processing agreement in place pursuant to Art. 28 GDPR.

5. Fonts

This website uses self-hosted fonts (Fraunces, Inter). No connection is made to Google Fonts or any other external CDN; in particular, your IP address is not transmitted to Google.

6. Cookies and analytics

This website does not set cookies that are not strictly technically necessary, and currently uses no analytics or tracking tool.

7. Social media links

This website links to an Instagram profile. A connection to Instagram's servers (Meta Platforms Ireland Ltd.) is only established when you actively click such a link. Please refer to Instagram's own privacy notices.

8. Recipients of your data

Your data is only passed to third parties as part of the processing arrangements named above (hosting, object storage). No transfer to third countries outside the EU/EEA takes place.

9. Your rights

Under the GDPR you have the following rights:

• Access to your processed data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure ("right to be forgotten", Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7(3))

To exercise these rights, a plain email to hello@jiabaotattoo.com is sufficient.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for me is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Strasse 22, 20459 Hamburg, Germany.