Privacy Policy
Effective date: 1 October 2026
1. Introduction
Vision of You Tattoo considers the privacy and protection of the personal data of its website visitors, prospective customers and clients important. This Privacy Policy aims to explain transparently which personal data we process when you use our website or contact us, the purposes and legal bases of that processing, how long we retain the data, and the rights available to data subjects.
When processing personal data, we take particular account of the following legislation:
- Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data – the General Data Protection Regulation (GDPR);
- the Austrian Data Protection Act (Datenschutzgesetz, DSG) – Federal Act concerning the Protection of Natural Persons with regard to the Processing of Personal Data;
- the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021, TKG 2021), in particular Section 165, in relation to electronic communications, cookies and similar technologies.
As the data controller operates in Austria, the processing of personal data on this website is primarily governed by the general data protection rules of the European Union and the applicable Austrian data protection provisions.
2. Details of the Data Controller
The following controller is responsible for the processing of personal data on this website:
Full name / Legal business name:
Address: Schönbrunner Straße 120, 1050 Vienna, Austria
Email: studio@visionofyoutattoo.com
Telephone:
3. Definition of Personal Data
Personal data means any information by which a natural person can be identified directly or indirectly. Such data may include, in particular, a name, email address, telephone number, IP address and other information supplied by a data subject when contacting us.
Technical data may also be generated when using the website, including information about the browser, device and operating system used, the IP address, the time of the visit and the pages visited.
4. Principles of Data Processing
We process personal data solely for specified, explicit and lawful purposes and only to the extent necessary to achieve the relevant purpose.
In processing personal data, we seek to ensure, in particular, data minimisation, accuracy, storage limitation, transparency and appropriate security of personal data.
Depending on the purpose of the processing, the legal basis may include:
- Article 6(1)(a) GDPR: consent of the data subject;
- Article 6(1)(b) GDPR: performance of a contract or steps taken prior to entering into a contract;
- Article 6(1)(c) GDPR: compliance with a legal obligation applicable to the controller;
- Article 6(1)(f) GDPR: legitimate interests pursued by the controller or a third party.
5. Use of the Website and Server Logs
When our website is visited, the web server may automatically record data necessary for the technical operation and security of the website.
Such data may include, in particular:
- IP address;
- date and time of access;
- page or file accessed;
- type and version of the browser used;
- operating system used;
- address of the referring website;
- other technical access log data.
The purpose of processing these data is to ensure the proper and secure operation of the website, identify technical errors and prevent unauthorised access and misuse.
The legal basis for this processing is legitimate interests under Article 6(1)(f) GDPR.
6. Web Hosting
We use a hosting provider to operate our website.
Cweb.hu Informatikai Kft
1173 Budapest, Borsó utca 12-32.
Hungary
Telephone: +36-70-282-7206
Email: support@cweb.hu
Company registration number: 01-09 436264
Tax number: 32666032-1-42
In the course of the technical operation of the website, the hosting provider may have access to data stored on the server and to server logs to the extent necessary to provide its services.
The hosting provider may act as a data processor on behalf of the controller.
7. Contacting Us
If you contact us by telephone, email or through the contact form on our website, we process the personal data you provide in order to handle and respond to your enquiry, arrange a consultation or appointment, and, where applicable, prepare for a subsequent contractual relationship.
In particular, we may process the following personal data in connection with an enquiry:
- name;
- email address;
- telephone number;
- content of the enquiry or message;
- other data voluntarily provided by the data subject: [TO BE COMPLETED OR REMOVED].
Where the contact relates to obtaining a service or preparing to enter into a contract, the legal basis for processing is Article 6(1)(b) GDPR.
For other general enquiries, the legal basis is our legitimate interest in handling and responding to enquiries under Article 6(1)(f) GDPR.
8. WordPress and Gravity Forms
Our website operates using the WordPress content management system. We use the Gravity Forms plugin to provide the contact form.
Personal data submitted through the form may be stored in the website’s WordPress database on the hosting provider’s server. An email notification containing data submitted through the form may also be generated for the controller.
The purpose of using Gravity Forms is to receive and process enquiries from prospective customers.
9. Email Communications
We use an email service provided by Google to process enquiries and communicate with prospective customers and clients.
The following data may be processed as part of email communications:
- name;
- email address;
- telephone number, if provided by the data subject;
- contents of messages and related correspondence;
- date and time of communication.
Depending on the content of the communication, the legal basis for processing is Article 6(1)(b) or Article 6(1)(f) GDPR.
10. Retention Period for Personal Data
We process personal data only for as long as necessary to fulfil the relevant processing purpose or for as long as retention is required by law.
As a general rule, we delete data relating to enquiries once the enquiry has been closed. However, we may retain such data for up to three years from the date of contact where this is necessary to substantiate possible later claims, agreements or disputes.
If the enquiry results in a contractual or business relationship, the retention period may also be affected by statutory record-keeping obligations applicable to that relationship.
11. Cookies and Similar Technologies
Our website may use cookies and technologies similar to cookies.
Cookies are small data files that may be placed on a visitor’s device. They can enable the proper functioning of the website, remember certain settings and, where appropriate consent has been given, facilitate statistical analysis and marketing measurement.
Technologies that are strictly necessary to provide the requested service may be used without consent. Non-essential statistical or marketing technologies are used only with the data subject’s prior consent.
The legal basis for processing requiring consent is Article 6(1)(a) GDPR, taking account of the relevant provisions of Section 165 of the Austrian Telecommunications Act 2021 (TKG 2021).
12. Complianz Consent Management System
We use the Complianz consent management system on our website to manage consent relating to cookies and external services.
Through the consent interface, visitors can choose which non-essential services they agree to use.
Visitors may change or withdraw previously given consent at any time for the future through the cookie settings available on the website.
13. Google Tag Manager
We use Google Tag Manager on our website for the technical management of various analytics and marketing tags.
This service allows us to manage, among other things, measurement tags for Google Analytics and Google Ads.
We configure services deployed through Google Tag Manager that require consent to operate according to the visitor’s consent preferences.
14. Google Analytics 4
We use Google Analytics 4 to analyse website traffic and usage.
This service may provide statistical information about the pages visitors view, the devices they use to access the website, how they interact with its content and the sources from which they arrive at the website.
The categories of data processed may include:
- technical information associated with an IP address;
- device and browser data;
- page views;
- interactions on the website;
- time of the visit;
- information about the source of the visit.
The purpose of using Google Analytics is to analyse website usage statistically and to improve the website’s operation and content.
The legal basis for Google Analytics processing that requires consent is Article 6(1)(a) GDPR.
Consent may be withdrawn at any time through the website’s cookie settings.
15. Google Ads and Conversion Tracking
We use the Google Ads advertising system to promote our services.
Google Ads conversion tracking allows us to measure whether a visitor performs an action that is important to us on the website after clicking on a Google advertisement.
Measurable actions may include, for example:
- submitting a contact form;
- initiating a telephone enquiry;
- completing a specified contact or quotation-request action.
The purpose of conversion tracking is to evaluate and optimise the effectiveness of our advertising campaigns.
The legal basis for Google Ads processing that requires consent is Article 6(1)(a) GDPR.
16. Google Consent Mode
Our website may use Google Consent Mode to adapt the operation of Google’s measurement services to visitors’ consent preferences.
The consent management system used on the website communicates the consent status to the relevant Google services, which may adjust the operation of their tags and measurement features accordingly.
17. Google Fonts
Our website may use Google Fonts typefaces loaded from external Google servers.
When external fonts are loaded, the visitor’s browser may establish a connection to Google’s servers. In this process, the visitor’s IP address and technical information about the browser and device used may be transmitted.
If Google Fonts are not served exclusively from our website’s own server, we adjust the establishment of external connections according to the visitor’s consent preferences.
The legal basis for processing that requires consent is Article 6(1)(a) GDPR.
18. Google Maps
Our website may use Google Maps to show the location of the Vision of You Tattoo studio and how to reach it.
When an embedded Google Maps map loads, a connection to Google’s servers may be established. This may involve the transmission of the visitor’s IP address, device and browser data and technical information relating to the use of the map.
An embedded Google Maps map is loaded on the basis of the visitor’s appropriate consent. The legal basis is Article 6(1)(a) GDPR.
If the website contains only an external link to a Google Maps page, data are transmitted to Google only after the link is opened.
19. Google Services and Transfers of Data to Third Countries
The European provider of the Google services used on our website is generally Google Ireland Limited.
When Google services are used, certain data may also be processed outside the European Economic Area.
Where personal data are transferred to a third country, the transfer must be based on an appropriate legal basis and safeguards as set out in Chapter V of the GDPR. Such safeguards may include an adequacy decision by the European Commission or the use of standard contractual clauses adopted by the European Commission.
20. Data Processors and Recipients
In connection with operating the website and providing our services, access to personal data is granted, in addition to the controller, only to service providers whose involvement is necessary to provide the relevant service.
These providers include, in particular:
- Cweb.hu Informatikai Kft – web hosting and technical operation;
- Google – email services, analytics, advertising, measurement, mapping and other Google services actually used on the website.
Personal data are transferred to other recipients only where there is an appropriate legal basis, the transfer is required to comply with a legal obligation, or the data subject has given appropriate consent.
21. Data Security
The controller implements technical and organisational measures to protect personal data that are appropriate to the nature, circumstances and risks of the processing.
The purpose of these measures is, in particular, to protect personal data against unauthorised access, alteration, disclosure, transmission, deletion, destruction, damage or loss.
Access to personal data is restricted to persons and service providers who require it to fulfil the relevant processing purpose.
22. Rights of Data Subjects
Under the GDPR, data subjects have, in particular, the following rights in connection with the processing of their personal data:
22.1. Right of Access
Data subjects have the right to obtain confirmation as to whether personal data concerning them are being processed and, if so, to request access to those data and information about the processing.
22.2. Right to Rectification
Data subjects have the right to request the rectification of inaccurate personal data concerning them and the completion of incomplete personal data.
22.3. Right to Erasure
Data subjects may request the erasure of their personal data where the conditions laid down in Article 17 GDPR are met.
22.4. Right to Restriction of Processing
Data subjects may request the restriction of the processing of their personal data in the circumstances set out in Article 18 GDPR.
22.5. Right to Data Portability
Where the statutory conditions are met, data subjects have the right to receive personal data concerning them that they have provided in a structured, commonly used and machine-readable format, and to request that those data be transmitted to another controller.
22.6. Right to Object
Where processing is based on legitimate interests under Article 6(1)(f) GDPR, data subjects have the right to object to the processing of their personal data at any time on grounds relating to their particular situation.
22.7. Right to Withdraw Consent
Where processing is based on the data subject’s consent, that consent may be withdrawn at any time with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
23. Exercising Data Subject Rights
Requests relating to the processing of personal data may be submitted using the following contact details:
Email: studio@visionofyoutattoo.com
Postal address: Schönbrunner Straße 120, 1050 Vienna, Austria
The controller will review and respond to requests within the time limits specified by the GDPR.
If the identity of the data subject cannot be adequately established from the request, the controller may request additional information to verify their identity.
24. Right to Lodge a Complaint
If a data subject considers that the processing of their personal data infringes data protection legislation, they have the right to lodge a complaint with the competent data protection supervisory authority.
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
Data subjects may also lodge a complaint with another supervisory authority that has jurisdiction under the GDPR.
25. Links to External Websites
Our website may contain links to external websites over whose operation and data processing we have no direct control.
Once an external website is opened, the privacy policies of the respective provider apply. We recommend reviewing those policies separately.
26. Amendments to This Privacy Policy
We reserve the right to amend this Privacy Policy when necessary, particularly if the operation of our website, the services used, our data processing practices or the applicable legal framework change.
The current version of this Privacy Policy is always available on this website.
Vision of You Tattoo
Schönbrunner Straße 120
1050 Vienna, Austria
Email: studio@visionofyoutattoo.com
Telephone: