Data Administrator

The Data Administrator of your personal data, i.e. the entity deciding on the purposes and means of processing, is BRUT TATTOO TATTOO STUDIO Judyta Kmieć, ul. Kręta 6, 50-234 Wrocław. In relation to matters regarding the processing of personal data, you can also contact us via email at: brut.tattoo.studio@gmail.com

Purpose of data processing

The Administrator processes your personal data:

1. In order to respond to an email contact. By contacting the Administrator via electronic mail, including by sending a query through the contact form placed on the site, you naturally provide your email address as the sender's address of the message. Furthermore, you may also include other personal data in the content of the message. Your data is processed in this case for the purpose of contacting you, and the basis for processing is Article 6(1)(f) of the GDPR, which means the legitimate interest of the Administrator in providing a response to your message. The legal basis for processing after the contact is concluded is the legitimate interest of the Administrator in archiving correspondence for internal purposes (Article 6(1)(f) of the GDPR). The content of the correspondence may be subject to archiving. You have the right to demand a presentation of the correspondence history (if it has been archived), as well as demand its removal, unless the archiving is justified due to the superior interests of the Administrator, for example, defense against potential claims. The scope of collected data: email address, other data provided by the User in the message content.

2. In order to take action at the request of the Data Subject prior to entering into a contract. By ordering a consultation with a specialist via our site, you provide us with your phone number and email address, which we will use to contact you. We will do this on the basis of Article 6(1)(b) of the GDPR, which applies, among other things, to situations where processing is necessary for the performance of a contract to which the Data Subject is a party, or to take action at the request of the Data Subject prior to entering into a contract (if you are contacting us for the first time to obtain a consultation with a specialist). The legal basis for processing after the contact is concluded is the legitimate interest of the Administrator in archiving correspondence for internal purposes (Article 6(1)(f) of the GDPR). The content of the correspondence may be subject to archiving. You have the right to demand a presentation of the correspondence history (if it has been archived), as well as demand its removal, unless its archiving is justified. The scope of collected data: phone number, email address, other data provided by the User in the message content.

3. Providing data is always voluntary, but sometimes necessary for the proper realization of the purpose for which you provide it.

Retention period of personal data

Your personal data will be retained for the period necessary to respond to your question sent through the contact form or directly to the Administrator's email address. After this time, they may be archived and stored until the expiry of any claims.

Your rights

1. You have the right to find out at any time whether your personal data has been stored and to consult with the Data Administrator to find out about its content and origin in order to verify its accuracy or to request its completion, cancellation, updating, or improvement, or to transform it into anonymous form or to block any data stored unlawfully, as well as to object to its use for any legitimate reasons.

2. If you believe that the processing of your personal data by the Administrator violates your rights or is otherwise inconsistent with Polish law or European Union law, you have the right to file a complaint with the President of the Personal Data Protection Office (UODO).

3. To exercise the above-mentioned rights, please contact the Administrator by email at brut.tattoo.studio@gmail.com or by mail at: BRUT TATTOO TATTOO STUDIO Judyta Kmieć, ul. Kręta 6, 50-234 Wrocław.

Data Recipients

1. In connection with the conducted activities, the Administrator will disclose your personal data to the following entities:

   1. state authorities or other entities authorized under the provisions of law,

   2. entities supporting us in conducting business on our behalf, in particular providers of external IT systems supporting our business, whereby such entities will process data based on a contract with the Administrator and solely according to our instructions.

2. Transfer of data to third countries:

   1. Personal data will generally not be transferred outside the European Economic Area (EEA). However, taking into account the provision of services by our subcontractors in executing support for IT services and IT infrastructure, the Administrator may commission the performance of certain IT activities or tasks to recognized subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA. According to the decision of the European Commission, the recipient countries outside the EEA provide an adequate level of protection of personal data in accordance with EEA standards.

   2. In the case of recipients in the territory of countries not covered by the decision of the European Commission, in order to ensure an adequate level of such protection, the Administrator concludes agreements with the recipients of personal data, which are based on standard contractual clauses issued by the European Commission in accordance with Article 46(2)(c) of the GDPR.

   3. A copy of the standard contractual clauses can be obtained from the Administrator — their contact details are provided above. The method used by the Administrator to secure your data is in accordance with the principles set out in Chapter 5 of the GDPR. You may request further information about the safety measures applied in this regard, obtain a copy of these protections, and find out where they are made available.