Privacy policy

Who handles the data

Sevenink Tattoo Taranto, Via Cataldo Nitti, 129a, 74123 Taranto. VAT no. 03433930736. For anything to do with this page you can write to daniele@seveninktattoo.it.

What this site collects

The appointment request

The booking form asks three questions — when you would like to be tattooed, in what style, and who you are and what project you have in mind — and asks for your first name, surname, email address and, if you like, a phone number.

What you write reaches the studio by email and is kept in this site’s database, in the tables of the request form, so that the studio can answer you and know who is still waiting: alongside your answers are the status the studio gives the request, its internal notes and the replies it sends you from the panel. Only the site’s administration accounts can read it. It is deleted automatically 365 days after it arrives, with everything linked to it; the copy that reached the studio’s inbox by email is separate.

The legal basis is Article 6(1)(b) of the GDPR: these are pre-contractual measures, that is, what is needed to answer a request you made.

There is only one free-text field, the one where you describe the project, and next to it you are asked not to write information about your health. The site cannot stop you, but it does not ask for it and does not need it: medical questions are asked in person, on the paper consent form, and do not pass through here.

The «I have read the privacy notice» tick is recorded together with the request. It is not consent — the request is handled on the basis of Article 6(1)(b), not your permission — it is an acknowledgement, and the form cannot be sent without it. What is kept is the sentence you read, the language you read it in and the moment you sent the form, and no IP address: it serves to know which text was in force when you wrote, and it is deleted together with the request. The newsletter box, on the other hand, is not recorded with the request: it only starts the double opt-in subscription described below.

The newsletter

If you subscribe, the site keeps your email address and nothing else. Subscription is double opt-in: until you open the link that reaches you by email you are not subscribed and receive nothing. An address that does not confirm is deleted after seven days — after that it is an address nobody has agreed to keep.

The legal basis is your consent, Article 6(1)(a), and you can withdraw it whenever you like: every message has a link at the bottom to unsubscribe, and email programs that support it show an «unsubscribe» button of their own. A confirmed subscription is kept until you cancel it.

If you type your address by mistake into someone else’s form, you will receive a single message: the confirmation one. Without your confirmation no others arrive.

Reviews

The sentences in the «voci» section of the home page are reviews from people who were tattooed here. They arrive in two ways: the studio transcribes them, noting how you gave it permission to publish them, or you write them yourself from a personal invitation the studio sends you by email. There is no form open to anyone: without an invitation you cannot leave one.

The invitation contains a link that works only once and expires after 30 days; if you do not reply, at most one reminder arrives, after 7 days, and then nothing more. The legal basis for the invitation is Article 6(1)(f), the studio’s interest in knowing how it went: if you do not want to receive them, write to the address above.

Of the review, the site keeps the text — and, if the studio corrects it, your original words too —, your first name, the initial of your surname, the language and, if you give them, the work done and the month. Published are the text, your first name and initial («Marco R.») and those two details. Your email address is used for the invitation and the thank-you message, and is never published.

Publishing your words with your name requires your consent, Article 6(1)(a). The form contains the sentence by which you give it, and the site keeps its exact text, the language and the moment, without any IP address. Nothing is published before the studio has read it.

With the thank-you message you receive a personal link: from there you can reread the review, change it — it goes back to the studio before being published again — or withdraw it. Withdrawing it deletes it at once, together with the consent and the link. A published review stays until you withdraw it or the studio removes it; the ones the studio rejects, closed invitations and the record of the emails sent are deleted after 180 days.

Frequently asked questions

Below the frequently asked questions there is a form to ask what you cannot find. The site keeps the question, your name if you write it and, if you want the answer by email, your address: they serve only to answer you, and the legal basis is Article 6(1)(f), the interest in answering what you asked. The address requires your consent, of which the exact sentence, the language and the moment are kept. Nothing is sent to your address until the studio answers: the answer arrives by email, or becomes a public question on this page — without your name or your address — and, if the studio decides so, you receive a single message telling you. A question the studio has answered, or has archived, is deleted after 180 days together with the address, the consent and the record of the emails sent; until it has an answer it stays waiting.

«Was this helpful?», below each answer, adds one to a counter and nothing else: that you have already answered is remembered by your browser, in its local storage, and nobody else knows it. When a search among the questions finds nothing, the words searched for are counted, to know which answers are missing — never who searched for them — and they are forgotten after 90 days.

Visit statistics

The site counts visits with a statistics service of its own, with no third parties: it runs on the same server as the site, in the European Union, and is run on the studio’s behalf by whoever built the site (frascella.dev), as a data processor. It serves to know how many people arrive, from which site or campaign (the referring domain, never the full address of the page), which pages and which works they look at, for how long and how far they scroll, from what kind of device and browser, from which country; and how many go on to ask for an appointment, subscribe to the newsletter or tap the phone number, the email address or WhatsApp. It records nothing of what you write in the forms: only that a step of the form was opened or that a request was sent.

Without your consent the service writes nothing on your device: no cookie, no local storage. Your IP address is shortened as soon as it arrives (its last part removed) and used only to work out the country and, together with the kind of browser, to compute a fingerprint with a key that lasts one day and is then destroyed: it makes it possible to count the people of one day, not to recognise you the next. Neither the full nor the shortened address is kept. The legal basis is Article 6(1)(f), the studio’s interest in knowing how its site is used.

With your consent, which you give or refuse from the box that appears on your first visit, the site sets two measurement cookies (listed below) that make it possible to recognise someone who comes back and where they first came from. The legal basis is your consent, Article 6(1)(a). Refusing changes nothing on the site. You can change your mind whenever you like from the «cookies» link at the bottom of every page: withdrawing your consent deletes the two cookies. If your browser sends the Global Privacy Control signal, it counts as a refusal and the box does not appear.

Advertising campaign identifiers are removed from page addresses, and so is any email address or phone number that ended up in one. Detailed data is deleted after 13 months; only the totals remain — how many visits in a day, from which country — which contain nothing about any person. Whoever logs in to the site’s administration is not counted.

What the site does not collect

No profiling, no advertising, no third-party statistics service, no social buttons that load something from outside.

No IP address is kept. Your address is used for one thing only — preventing someone from sending a thousand requests in a minute — and in that form it is not even written down: what remains of it is a numerical fingerprint, computed with a key that changes every day, which expires within an hour and cannot be traced back to you. For the same purpose, for a quarter of an hour after a request the site remembers a fingerprint of your email address, not the address, so that a double submission does not arrive twice. The legal basis is Article 6(1)(f), the interest in keeping the site running.

Cookies

The technical ones do not require your consent; the two measurement cookies, an_vid and an_sid, are there only if you accept. They are all cookies of this site: the statistics service cannot read them, and they are not shared with anyone. Alongside them, a single entry in the browser’s local storage.

• agenda_draft — keeps your answers from one question of the booking form to the next, so that changing page you do not have to type them again. It contains a random value: on the server only its fingerprint remains, next to the answers already given (not those of a rejected submission). It is created only when you answer the first question: opening the page writes nothing. It lasts as long as the browser session, and when you send the request both the cookie and the saved answers are deleted; an abandoned draft is deleted automatically after 24 hours.
• pll_language — remembers which language you are reading in.
• an_consent — remembers your choice about measurement cookies, and which version of the box it refers to. Technical. It is written only when you choose, and lasts 180 days.
• an_vid — only if you accept: a random value that recognises someone who comes back, for the statistics. It lasts 13 months and is not extended by later visits.
• an_sid — only if you accept: groups the pages of one visit. It lasts 30 minutes from the last page opened.
• chiaro-vote-… — not a cookie but the browser’s local storage: it remembers that you have already answered «Was this helpful?» for an answer, so the button is not offered to you again. It is never sent to the site.
• wordpress_* — only for those who log in to the site’s administration, that is, the studio. If you are reading this page as a visitor, you do not have it.

Typefaces

The three typefaces this site is set in are served from this same domain and not from Google. It is a choice: loading them from outside would have meant handing your IP address to a third party before the page was even drawn, and without being able to ask you anything, because without the typefaces the page cannot be read.

The Google rating

If you see a star rating on the home page, it is two numbers — the average and how many reviews — that the server asks Google for once a day, with a scheduled task and never because someone opened a page: during a visit the code refuses to do it. None of your data takes part in the request, and your browser does not contact Google. If you follow the link to read the reviews on Google, from there on you are on their site and their rules apply.

Who else sees this data

Emails pass through the mail service that delivers the studio’s messages, which is the only provider involved. The site is hosted on a server in the European Union. No data is sold, exchanged or transferred outside the Union.

Your rights

You can ask to know what data there is, to correct it, to delete it, to restrict its use, to object to its processing and to receive it in a machine-readable format. Write to daniele@seveninktattoo.it: the answer arrives within a month.

If you think something is wrong, you can contact the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

If this page changes

It changes when the code changes, never on its own. The date below is the last time that happened.