Privacy Policy

On this page we explain in plain language what personal data we process about you, why we do it, how long we keep it and what rights you have. We follow Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (the "GDPR") and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.

If anything is unclear, feel free to get in touch.

I. Who processes your personal data

The operator of the Elorinks Tattoo studio and the controller of your personal data is:

II. Data protection officer

We have not appointed a data protection officer, as we are not required to do so by law. For anything related to your personal data, you can contact us directly using the details above.

III. What data we process, why and for how long

1. Booking with a tattoo artist

When you fill in the "Book an Appointment" form on one of our tattoo artists' pages, we process:

• your first and last name, e-mail and phone number, if you provide it,
• your preferred tattoo date,
• your age group (18 or older, or 15–17 accompanied by a parent or legal guardian),
• the description of your tattoo, such as placement and size, and any inspiration photos you attach.

Purpose: to arrange an appointment, prepare a design and talk with you about your tattoo.
Legal basis: steps taken at your request before entering into a contract, and performance of the contract (Article 6(1)(b) GDPR).
How long: during our communication and your tattoo, and then for no more than 1 year after our last contact.

2. Contact form, e-mail and messages

When you write to us through the contact form, by e-mail or on social media, we process the data you send us, usually your name, e-mail, phone number and the content of your message.

Purpose: to reply to you.
Legal basis: our legitimate interest in answering your message (Article 6(1)(f) GDPR), or steps taken before entering into a contract (Article 6(1)(b) GDPR).
How long: no more than 1 year after our last contact.

If you message us on Instagram or Facebook, your messages are also processed by Meta as an independent controller under its own terms.

3. Age verification before tattooing

We tattoo clients aged 18 and over, and clients aged 15 to 17 only when accompanied by a parent or legal guardian. Before tattooing, we therefore check your ID and, for minors, the ID of the parent or legal guardian as well. We do not copy or scan any IDs.

Purpose: to make sure we are allowed to carry out the tattoo.
Legal basis: compliance with our legal obligations (Article 6(1)(c) GDPR).
How long: we do not store any data from IDs. If a parent or legal guardian signs a written consent to the tattoo, we keep it for 3 years after the tattoo.

We do not collect any data about your health on the website or through our forms.

4. Payments and accounting

If we issue you a payment receipt, we keep the data on it because accounting and tax regulations require us to.

Legal basis: compliance with our legal obligations (Article 6(1)(c) GDPR).
How long: 10 years, as required by the Slovak Accounting Act.

5. Photos of finished tattoos

We only publish photos or videos of your tattoo in which you can be recognised on our website and social media with your consent. You can withdraw your consent at any time and we will then remove the photo.

Legal basis: your consent (Article 6(1)(a) GDPR).

6. Cookies and website traffic

Cookies are small files that a website stores in your browser. We only use these:

Analytics cookies are only activated after you allow them in the cookie banner. We do not use any advertising or other tracking cookies. To change your choice, delete the cookies for this website in your browser and the cookie banner will appear again.

Legal basis: for essential cookies, our legitimate interest in running the website (Article 6(1)(f) GDPR); for analytics cookies, your consent (Article 6(1)(a) GDPR).

IV. Who we share your data with

We do not sell your data. It is only accessible to those who need it for their work:

• the tattoo artist you are booking with,
• our website and web hosting provider,
• Google Ireland Limited (e-mail inbox and Google Analytics),
• the provider of our cookie banner, CookieScript,
• our accountant,
• public authorities, where required by law.

Our suppliers process data only according to our instructions and are obliged to protect it.

V. Transfers outside the European Union

We process data within the European Union. The exception is Google's services, as Google may also transfer data to the USA. Such transfers are protected by the EU-U.S. Data Privacy Framework and by standard contractual clauses approved by the European Commission.

VI. Your rights

With regard to your personal data, you have the right:

• of access – to know what data we process about you and to receive a copy of it,
• to rectification of inaccurate or incomplete data,
• to erasure of data we no longer need and are not required to keep by law,
• to restriction of processing, for example while we check the accuracy of your data,
• to data portability – to receive the data we have from you in a commonly used, machine-readable format,
• to object to processing based on our legitimate interest,
• to withdraw your consent at any time – this does not affect processing carried out before the withdrawal,
• to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk, or with the supervisory authority in the country where you live.

You can exercise your rights simply by e-mail to the contact address above or through the forms further down this page. We will reply without undue delay and within one month at the latest.

VII. Do you have to provide your data?

No, providing your data is voluntary. However, without the required details in the form we cannot book your appointment, and without verifying your age we cannot tattoo you.

VIII. Where we get your data from

We get all data directly from you and, in the case of minors, also from their parent or legal guardian.

IX. Automated decision-making

We do not make any automated decisions or carry out profiling that would have legal or similarly significant effects on you.

X. How we protect your data

Only authorised persons who need the data for their work have access to it. The website is secured with an encrypted connection (HTTPS) and the accounts in which we keep data are password-protected.

XI. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.

Last updated: 13 October 2026