How SUBA TATTOO processes your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD).
Last updated: 26 July 2026
The data controller for your personal data is SUBA TATTOO, an artistic tattoo studio based in Montcada i Reixac (Barcelona), Spain. For any communication regarding the protection of your data you can write to us at [email protected] or visit the studio by appointment.
We collect the following categories of personal data: identification and contact details provided through the booking form or by email (full name, email address, phone or WhatsApp number, and, optionally, body area and project description); technical browsing data collected by the website (IP address, browser type, operating system, pages visited and visit duration); and data derived from the contractual relationship once the booking is confirmed.
We process your personal data for the following purposes: to manage booking requests and project assessments; to respond to enquiries sent through the contact form or by email; to maintain the contractual and pre-contractual relationship throughout the project lifecycle; to comply with applicable legal, accounting and tax obligations; and, where applicable, to send commercial communications only if you have given your express consent.
The legal bases that legitimise the processing of your data are: the data subject's consent, which is requested expressly when you submit the booking form; the performance of a contract for artistic services or pre-contractual measures taken at the data subject's request; compliance with legal obligations (tax, accounting and data protection); and, where applicable, the legitimate interest of the controller in ensuring information security and fraud prevention.
We keep your personal data for as long as the commercial or contractual relationship lasts and, once it ends, for the time strictly necessary to comply with applicable legal obligations. Specifically, accounting and tax documentation is kept for a minimum of six (6) years under Spanish law. Data used to send commercial communications is kept until you withdraw your consent.
We do not disclose your personal data to third parties, except where strictly necessary for the execution of the service or under a legal obligation. In particular, your data may be processed by service providers acting as data processors, such as hosting providers and email services, all located in the European Economic Area or in third countries with adequate safeguards under the GDPR. We do not carry out international transfers or commercial disclosures.
As a data subject, you may exercise at any time the rights of access, rectification, erasure (right to be forgotten), objection, restriction of processing, data portability and the right not to be subject to automated individual decisions with legal effects. To exercise them, write to [email protected] proving your identity. If you consider that your rights have not been duly addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
SUBA TATTOO applies appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These include encrypted communications, access controls, data minimisation and data processing agreements with every provider that may have access to personal data.
We reserve the right to modify this privacy policy to adapt it to legislative or case-law developments. Any change will be published on this same page and, where appropriate, communicated by email to affected users. We recommend reviewing this policy periodically.