Privacy policy
1. Who is responsible for your data?
Controller: Gábor Kütsán, sole trader (FakirTattoo)
Registered address: Százhold utca 20, 9700 Szombathely, Hungary
Email: gabor@fakirtattoo.hu
Phone: +36 20 978 5350
You can contact me at these details with any privacy question.
2. What data do I process and why?
2.1. Online booking
When you request an appointment through the booking button on the website, the booking system asks for: your name, email address, phone number, a description of the tattoo you want (size, placement, style), any reference image you upload, and the appointment you choose.
- Purpose: arranging the appointment, designing the tattoo and contacting you about it.
- Legal basis: steps prior to entering into a contract and performance of the contract (Art. 6(1)(b) GDPR).
- Retention: 1 year after your last appointment. If you cancel and don’t book a new appointment, I delete your data within 30 days.
Please make sure your reference image doesn’t show other people’s faces or anything you don’t want to share.
2.2. Contact by email, phone or Messenger
- Data: your name, contact details and the content of your message.
- Purpose: answering your question.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or, if your message relates to a booking, steps prior to entering into a contract.
- Retention: up to 1 year if no booking follows.
When you use Facebook Messenger or Instagram, Meta Platforms Ireland Ltd. also processes your data as an independent controller under its own privacy policy.
2.3. Invoicing
If an invoice is issued, the data on it (name, address) must be kept for 8 years under Hungarian accounting law (Art. 6(1)(c) GDPR).
2.4. Visiting the website (server logs)
To keep the website secure, the hosting provider may automatically log technical data (IP address, browser type, time of visit). Legal basis: legitimate interest (website security). The hosting provider keeps this data for a short period under its own rules.
The website uses no visitor analytics (such as Google Analytics) and no advertising trackers (such as the Facebook Pixel).
3. Cookies
| Category | What it does | Legal basis |
|---|---|---|
| Necessary | Basic operation of the site and remembering your cookie settings. | Legitimate interest; cannot be switched off. |
| Map (Google Maps) | Shows the embedded Google map. It only loads if you allow it; until then a button is shown in its place. Once loaded, Google may set cookies and receive data such as your IP address. | Consent (Art. 6(1)(a) GDPR). |
You can withdraw or change your consent at any time with the Cookie settings link at the bottom of the homepage. Withdrawal doesn’t affect the lawfulness of earlier processing.
The Facebook and Instagram icons are plain links: they send no data to Meta until you click them.
4. Who has access to your data? (processors)
- Rackhost Zrt. (Tisza Lajos körút 41, 6722 Szeged, Hungary) – website hosting.
- Google Cloud EMEA Limited (Ireland) and its parent company Google LLC (USA) – running the booking system and storing booking data (Google Cloud Run, Firebase).
- Google Ireland Limited – Google Maps (only with your consent) and the Gmail email account.
- My accountant and invoicing software provider, if an invoice is issued.
I don’t sell your data or share it with third parties for advertising.
Transfers outside the EU
Because of Google’s services, your data may be transferred to the United States. Google LLC participates in the EU–US Data Privacy Framework and also applies the Standard Contractual Clauses approved by the European Commission, so transfers are made with appropriate safeguards.
5. Security
The website and the booking system are only available over an encrypted (HTTPS) connection. Only I can access booking data, through an interface protected by password and Google sign-in.
6. Your rights
At any time you can ask me to:
- tell you what data I hold about you (access),
- correct inaccurate data (rectification),
- delete your data if it’s no longer needed or you’ve withdrawn consent (erasure),
- restrict processing,
- give you the data you provided in a machine-readable format (portability),
- stop processing based on legitimate interest (objection),
- and you can withdraw your consent.
I’ll reply within one month of your email to gabor@fakirtattoo.hu.
Complaints
If you feel your privacy rights have been violated, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Falk Miksa utca 9–11, 1055 Budapest, Hungary
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu
You can also complain to the data protection authority of the EU country where you live (in the Netherlands, the Autoriteit Persoonsgegevens), or go to court.
7. Changes
If the way the website or booking system handles data changes, I’ll update this policy. The current version is always available on this page.
Back to the homepage