Privacy policy

Translation for convenience, German version prevails. Datenschutzerklärung (deutsche Fassung)

⚠️ Please confirm: new draft (as of 23 Oct 2026) – the previous website had no privacy policy of its own, only two short paragraphs in the legal notice. Not yet reviewed by the studio.

⚠️ Draft, not legal advice. To be reviewed before going live (e.g. with the eRecht24 generator or by a qualified professional) and approved by the studio.

In short: this website does not set cookies, does not use tracking or analytics tools and does not load any content from third-party servers when you visit it.

1. Controller

The controller responsible for data processing on this website is:

⚠️ Placeholder: full name of the owner and legal form – as in the legal notice.

Meduza Ink Tattoo & Piercing
Horster Straße 85
45897 Gelsenkirchen
Email: meduzainktattoo@web.de

2. Hosting with Google Firebase

This website is hosted on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

When a page is accessed, the server automatically processes data transmitted by your browser (server log files):

• IP address
• date and time of access
• address accessed (URL)
• browser and operating system (user agent)

This is technically necessary in order to deliver the website and to ensure its secure operation, for example to fend off attacks. The legal basis is Art. 6(1)(f) of the General Data Protection Regulation (GDPR; German: DSGVO); our legitimate interest lies in providing the website securely and reliably.

It cannot be ruled out that data is transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision.

⚠️ Placeholder: retention period of the server log files and confirmation of the data processing agreement with Google – to be checked before going live.

3. Fonts

The fonts used on this website are stored on our own web space. No connection to Google Fonts or other font providers is established when the page loads.

4. No cookies, no tracking

We do not set cookies and do not use analytics or tracking services or advertising networks. Maps from Google Maps or Apple Maps are not embedded; the directions links only open the respective map service when you click them.

5. Contact by email, phone or WhatsApp

If you contact us by email, phone or WhatsApp, we process the information you provide (e.g. name, phone number, message and, where applicable, images of your design idea) in order to answer your enquiry and arrange appointments. The legal basis is Art. 6(1)(b) GDPR where an appointment or order is concerned, otherwise Art. 6(1)(f) GDPR (interest in answering enquiries). We delete the data when it is no longer needed and no statutory retention periods prevent deletion.

WhatsApp: The WhatsApp button leads to WhatsApp, a service of WhatsApp Ireland Limited (Meta group). If you write to us there, WhatsApp’s privacy policy also applies; data may also be transferred to Meta Platforms in the USA. If you do not want this, you can also reach us by phone or email.

⚠️ Placeholder: does the studio use WhatsApp Business or a private account? How long are chats and images kept? – Details to be provided by the studio.

6. Links to Instagram

On this website we link to our Instagram profile (Instagram is a service of Meta Platforms Ireland Limited). These are simple links: only when you click a link are you redirected to Instagram, and Meta then processes data in accordance with its own terms. Merely visiting our pages does not transfer any data to Instagram.

7. Your rights

You have the following rights at any time:

• access to your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise these rights, simply write to us at meduzainktattoo@web.de.

8. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW – State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

9. Version

Version of this privacy policy: October 2026 (draft)