← Back to President Ink

Privacy Policy

Last updated: April 20, 2025

1. Data Controller

The data controller for this website is:

President Ink
Pavel Bojetski (FIE)
Raua 3, Viljandi, Estonia
Phone: +372 5830 9117
Instagram: @pavelbojetski

2. What Data We Collect

We collect and process personal data only when it is necessary. Below is a summary of the data categories:

2.1 Data You Provide Directly

• Contact form submissions: name, email address, phone number, preferred tattoo style, and your message
• Booking inquiries: name, contact details, and appointment preferences

2.2 Data Collected Automatically

• Cookie consent preferences (stored locally)
• Language preference (stored in browser local storage)
• Analytics data (only with your consent): anonymized usage data such as pages visited, time on site, and device type

2.3 Data We Do NOT Collect

• We do not collect health data, biometric data, or any special category data
• We do not engage in automated decision-making or profiling
• We do not sell your personal data to third parties

3. How We Use Your Data

Purpose	Data	Legal Basis
Responding to contact form inquiries	Name, email, phone, message	Consent / Pre-contractual measures (Art. 6(1)(a),(b) GDPR)
Website functionality	Language preference, consent cookie	Legitimate interest (Art. 6(1)(f) GDPR)
Website analytics	Anonymized usage data	Consent (Art. 6(1)(a) GDPR)
Marketing	Anonymized tracking data	Consent (Art. 6(1)(a) GDPR)

4. Third-Party Services

We use the following third-party services. Data may be transferred to their servers:

Service	Provider	Purpose	Data Transfer
Google Fonts	Google LLC (USA)	Web fonts delivery	IP address transmitted to Google servers when fonts are loaded. Covered by EU-US Data Privacy Framework.
Cloudflare CDN	Cloudflare Inc. (USA)	Hosting Three.js library for 3D gallery	IP address may be logged. Covered by EU-US Data Privacy Framework.

5. Data Retention

• Contact form data: retained for 2 years after the last communication, then deleted
• Cookie consent records: retained for 1 year (matching consent cookie duration)
• Language preference: stored until manually cleared by the user
• Analytics data: as per the analytics provider's retention policy (typically 14–26 months)

6. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — request a copy of your data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion of your data
• Right to restrict processing (Art. 18) — limit how we use your data
• Right to data portability (Art. 20) — receive your data in a portable format
• Right to object (Art. 21) — object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3)) — withdraw consent at any time

To exercise any of these rights, contact us using the details in Section 1.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Access controls limiting who can view personal data
• Regular review of data processing activities

8. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

Andmekaitse Inspektsioon
Tatari 39, 10134 Tallinn, Estonia
Phone: +372 627 4135
Email: info@aki.ee
Website: www.aki.ee

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. For significant changes, we will notify you through a prominent notice on our website.

10. Cookies

For detailed information about the cookies we use, please see our Cookie Policy.