Privacy policy

Who processes your data

The data controller is [fill in: full name or company name], Company ID (IČO): [fill in], registered address: [fill in], studio at Chelčického 297/24, Hradec Králové, Czech Republic ("Invictus Studio").

Contact for anything related to personal data: info@invictus-studio.cz, +420 792 451 726.

What data I process

• ✦the name, email and phone number you enter in the enquiry form,
• ✦photos you attach to the enquiry (design, inspiration, tattoo or scar),
• ✦your message and the service or gift voucher you're interested in,
• ✦communication with me by email, phone, WhatsApp or social media.

Why and on what legal basis

• ✦handling your enquiry, arranging the date and design – steps prior to a contract and performance of a contract (Art. 6(1)(b) GDPR),
• ✦keeping records of services provided and handling claims – legal obligations and legitimate interest (Art. 6(1)(c) and (f) GDPR),
• ✦photos of scars or skin may reveal health information; I process such photos only because you send them to me and thereby explicitly consent to their use for assessing the treatment (Art. 9(2)(a) GDPR). You can withdraw your consent at any time.

How long I keep your data

Data from enquiries that don't lead to a booking is deleted within [fill in, e.g. 12 months] at the latest. Client data is kept for as long as the law requires and otherwise only as long as needed to handle possible claims.

Who I share data with

• ✦Vercel Inc. – website hosting,
• ✦Resend (Plus Five Five, Inc.) – delivery of the enquiry email,
• ✦Stripe Payments Europe, Ltd. – online payment for gift vouchers,
• ✦Google Ireland Ltd. – the business mailbox (Google Workspace) enquiries are delivered to, and a client overview in Google Sheets (name, contact details, service, enquiry text, visit source; photos are not stored there).

I don't sell your data or share it with third parties for marketing. To run the website and deliver enquiries I use these processors:

Transfers outside the EU

Some processors are based in the USA. Transfers take place on the basis of the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

If you message me via WhatsApp, Instagram or Facebook, your data is also processed by Meta under its own policies.

Cookies and analytics

Without your consent, the website only uses technically necessary elements (e.g. storing your cookie choice).

With the consent you give in the cookie banner, I use: Google Analytics analytics cookies (Google Ireland Ltd.) – measuring traffic and what interests visitors; Meta Pixel (Meta Platforms Ireland Ltd.) and Google Ads (Google Ireland Ltd.) marketing cookies – measuring and targeting ads. Among other things, page views, clicks on the phone number or WhatsApp and enquiry submissions are measured; the content of your enquiry (text and photos) is not sent to these services.

If you consent to marketing cookies and submit an enquiry, the website reports to Meta (Conversions API) that an enquiry was made, together with your email, phone number and first name in irreversibly encrypted form (SHA-256 hash), your IP address and browser type – so Meta can match the enquiry to the ad you came from. Without consent, none of this is sent.

If you arrive from an ad, which ad or campaign it was (parameters in the address) is stored for the duration of your visit. This information is only attached to an enquiry you submit yourself.

The map in the contact section loads from Google Maps only after you click “Show map”.

You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page.

Your rights

• ✦the right of access to your data and a copy of it,
• ✦the right to rectification of inaccurate data,
• ✦the right to erasure (“to be forgotten”),
• ✦the right to restriction of processing,
• ✦the right to data portability,
• ✦the right to object to processing based on legitimate interest,
• ✦the right to withdraw consent at any time,
• ✦the right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

To exercise your rights, just email info@invictus-studio.cz. I'll reply without undue delay, within one month at the latest.