Privacy Policy

Privacy Policy

Tatuno.eu

www.tatuno.eu

1. GENERAL INFORMATION ABOUT DATA PROCESSING

1. The controller of your personal data within the meaning of Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) is:

Vascoo Piotr Wąsowicz

ul. Zagnańska 84A/207, 25-558 Kielce, Poland

VAT ID: PL 9591876791

REGON: 384911630

Email: tattooland@o2.pl

Tel: +48 575 338 331

2. This Privacy Policy explains in particular the nature, scope, purposes, duration and legal bases of the processing of personal data where we decide, alone or jointly with others, on the purposes and means of processing. It also explains the third-party tools and services used to optimize the Online Store, improve user experience, process payments, measure performance, market our products and provide customer support.

3. Please read these provisions carefully to understand how we handle your personal data when you use the Online Store available at www.tatuno.eu.

2. PERSONAL DATA

1. Under Article 4(1) and Article 4(2) GDPR, “personal data” means any information relating to an identified or identifiable natural person, and “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, restriction, erasure or destruction.

2. We exercise particular care to protect the interests of data subjects and to ensure, in particular, that personal data are:

1. processed lawfully, fairly and in a transparent manner;

2. collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;

3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

4. accurate and, where necessary, kept up to date;

5. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed;

6. processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organizational measures.

3. Providing personal data is voluntary. However, in some cases it is necessary in order to create an account, place an order, process payment, arrange delivery, reply to your inquiry, handle complaints and returns, or provide selected functionalities of the Online Store.

4. We use reasonable technical and organizational measures to protect the data you provide to us in material, electronic and administrative form. We strongly recommend that you also take appropriate measures to protect your data when using the Internet.

5. On pages where personal data are entered, we use SSL/TLS encryption or comparable transport-layer security.

6. Where this Privacy Policy refers to content, tools or services provided by third parties, and those third parties are based outside the European Economic Area (“EEA”), your personal data may be transferred outside the EEA. In such cases, we rely on an adequacy decision, standard contractual clauses or another valid transfer mechanism where required by law.

3. PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA

Your personal data may be processed for different purposes and on different legal bases, depending on which functionalities of the Online Store you use, in particular for the conclusion and performance of contracts, account and service administration, personalized order handling, customer support, payment processing, analytics, statistics, fraud prevention, direct marketing where permitted, and compliance with legal obligations. Details are set out below.

1. ONLINE STORE ACCOUNT / E-SERVICES

Personal data provided when creating an account in the Online Store, as well as other personal data collected in connection with your activity in the Online Store and your use of electronic services, are processed primarily in order to enable registration, account administration, login, order history, saved delivery details and the use of other available electronic services. The legal basis is Article 6(1)(b) GDPR, i.e. processing necessary for the performance of a contract for the provision of services.

Your personal data may also be processed for analytics, service improvement, fraud prevention, statistics, direct marketing of our own products where permitted by law, and for the establishment, exercise or defense of legal claims. The legal basis in such cases is Article 6(1)(f) GDPR, i.e. our legitimate interests or the legitimate interests of a third party.

2. PLACEMENT OF ORDERS AND PERFORMANCE OF THE SALES CONTRACT

Personal data provided in connection with placing an order and concluding a sales contract in the Online Store are processed primarily for the purpose of handling the purchasing process, in particular:

a) to process your order, conclude and perform the sales contract, prepare, pack and deliver products, including deliveries to the European Union countries to which shipping is offered by the Online Store. The legal basis is Article 6(1)(b) GDPR;

b) to issue and store accounting and tax documents, process returns, complaints, statutory rights and other after-sales matters. The legal basis is Article 6(1)(c) GDPR, i.e. processing necessary to comply with legal obligations, including accounting and tax obligations;

c) to prevent abuse, investigate fraud, compile internal statistics, improve our processes and defend or pursue legal claims. The legal basis is Article 6(1)(f) GDPR.

3. PAYMENT PROCESSING

To process payments in the Online Store, we cooperate with technical service providers, banks and payment service providers.

1. DATA PROCESSING FOR THE PURPOSE OF TRANSACTION HANDLING

Depending on the selected payment method, we transfer the data necessary for payment handling to our technical providers acting on our behalf, to the relevant financial institution, or to the selected payment service provider, to the extent necessary to process the payment. This processing is necessary for the performance of the contract under Article 6(1)(b) GDPR. In some cases, the payment provider collects the payment data directly, for example on its own website or via a technical integration within checkout. In such cases, the privacy policy of the relevant payment provider also applies.

2. DATA PROCESSING FOR FRAUD PREVENTION AND PAYMENT PROCESS OPTIMIZATION

Where necessary, we may also provide our service providers with additional data to help prevent fraud, optimize invoicing, manage disputed transactions, support bookkeeping and improve payment workflows. The legal basis is Article 6(1)(f) GDPR, i.e. our legitimate interest in fraud prevention and efficient payment management.

4. CUSTOM DESIGN GENERATOR / PERSONALIZED ORDERS

If you use a design generator, configurator or upload your own design, text, image or other file in connection with a personalized order, we process the data and content you provide to prepare, review, manufacture and fulfill your custom order, communicate with you about that order and handle any related customer support or legal claims. The legal basis is Article 6(1)(b) GDPR and, where applicable, Article 6(1)(f) GDPR.

5. CUSTOMER CONTACT

Personal data provided when you contact us by e-mail, telephone, contact form or other communication channel are processed primarily to handle your inquiry and provide a response. The legal basis is Article 6(1)(f) GDPR, i.e. our legitimate interest in responding to inquiries and managing customer communication. If your request relates to the conclusion or performance of a contract, the legal basis may also be Article 6(1)(b) GDPR.

The same data may also be processed for analytics, statistics, service improvement and the establishment, exercise or defense of legal claims, based on Article 6(1)(f) GDPR.

4. RETENTION PERIOD

1. Your personal data are retained as follows:

1. in connection with an account or other electronic services — for the duration of the account or the use of the relevant service, and then for the period necessary to comply with legal obligations or to defend against claims;

2. in connection with an order and sales contract — for the period necessary to perform the contract, process payment, dispatch and deliver the goods, provide after-sales service, and comply with accounting, tax and consumer law obligations;

3. in connection with customer contact — for the time necessary to handle your inquiry and provide a response, and longer if necessary to document communication or defend against claims;

4. in connection with analytics, statistics, service improvement and marketing based on legitimate interests — until a valid objection is raised or until the data are no longer necessary for the relevant purpose;

5. where processing is based on consent — until you withdraw consent, without affecting the lawfulness of processing carried out before withdrawal.

2. In every case, personal data may be retained for a longer period where necessary to comply with legal obligations, maintain accounting and tax records, or establish, exercise or defend legal claims for the duration of the applicable limitation periods.

3. If different retention periods apply to the same set of data, the longer retention period shall prevail to the extent required by law or justified by the relevant purpose.

V. RECIPIENTS OF PERSONAL DATA

1. We may disclose your personal data to third parties cooperating with us in the operation of the Online Store. These may include entities that technically support the store, such as hosting providers, IT providers, software providers, payment processors, banks, accounting providers, carriers and logistics providers handling deliveries to the EU countries to which we ship, customer communication tools, newsletter or marketing tool providers, analytics providers, legal advisers, compliance advisers and other processors or independent controllers where justified by the service provided.

2. As a rule, your personal data are processed within the European Economic Area. However, in connection with the use of certain third-party services, your data may be transferred outside the EEA, in particular where a provider uses infrastructure or subprocessors located outside the EEA.

3. Where personal data are transferred to recipients outside the EEA, we implement appropriate safeguards required by Chapter V GDPR, including, where relevant, an adequacy decision, standard contractual clauses adopted by the European Commission, or another lawful transfer mechanism.

5. SOCIAL MEDIA

1. Social buttons or links to Facebook, Instagram, YouTube or other social networks displayed on our website may be implemented as ordinary HTML links. In that case, opening our website does not automatically establish a connection with the servers of the relevant social network merely because the page contains such a link. If you click on a social button or link, the website of the relevant social network may open in a new browser window or tab.

2. If you visit our profiles or pages on Facebook, Instagram, YouTube or other social media platforms, the operators of those platforms may process your data for their own purposes, including advertising, audience measurement, market research and user behavior analysis, in accordance with their own privacy policies. We may receive aggregated, anonymized or statistical information about the use of our social media presence.

6. YOUR RIGHTS REGARDING PERSONAL DATA

1. Under the GDPR, you have extensive rights regarding the processing of your personal data. These include in particular:

1. the right to be informed about how your personal data are processed;

2. the right of access to your personal data and to obtain a copy of them;

3. the right to rectification of inaccurate or incomplete personal data;

4. the right to erasure of personal data where the statutory conditions are met;

5. the right to restriction of processing under the conditions set out in Article 18 GDPR;

6. the right to data portability where processing is based on consent or contract and carried out by automated means;

7. the right to object, at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or 6(1)(f) GDPR, including profiling based on those provisions;

8. the right to object at any time to processing for direct marketing purposes;

9. the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

10. the right not to be subject solely to automated decision-making, including profiling, where the conditions of Article 22 GDPR are met;

11. the right to lodge a complaint with a competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

2. To exercise your rights, please contact us using the contact details given in this Privacy Policy.

7. COOKIES AND SIMILAR TECHNOLOGIES

1. We use cookies and similar technologies on our website. Cookies are small files stored on your device that save certain settings and data for exchange with our system via your browser. In principle, there are two basic types of cookies: session cookies, which are deleted when you close your browser, and persistent cookies, which remain stored on your device for a longer period or until you delete them.

2. Strictly necessary cookies may be used without consent where they are necessary for the proper functioning, security and essential operation of the website and checkout. Analytics, functionality and marketing cookies are used only where a valid legal basis exists, in particular your consent where required by law.

3. Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR. Where cookies or similar technologies are strictly necessary for the functioning of the Online Store or for security purposes, the legal basis may be Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the purpose.

4. You can change your cookie settings at any time using the cookie banner or your browser settings. You can also delete cookies already stored on your device. Blocking or restricting cookies may affect some functionalities of the Online Store and may make checkout or some features unavailable.

5. In addition to strictly necessary cookies, the Online Store may use the following categories of cookies:

a) analytical and functional cookies, used to analyze the use of the Online Store, improve performance, detect errors, remember selected settings and make the website easier to use;

b) marketing cookies, used to measure advertising performance and to display or tailor marketing content and ads to your interests, including content delivered by third parties with whom we cooperate.

6. Depending on the technical configuration of the Online Store, we may use or later enable third-party tools such as Google Analytics 4, Google Ads, Meta Pixel or similar services. If such tools are used, they may collect information about your interaction with the Online Store in accordance with your cookie preferences, the relevant legal basis and the respective third-party provider’s privacy terms.

7. You can find more information about managing cookies in your browser’s help menu. The exact path to those settings depends on the browser and version you use.

8. FINAL PROVISIONS

1. We may amend this Privacy Policy in the future, in particular if this becomes necessary due to changes in law, supervisory guidance, the operation of the Online Store, the range of products or services offered, the countries to which we ship within the European Union, or the technologies and third-party tools we use. Information about significant changes will be made available on the Online Store website. Each updated version will be published with a new date.