Privacy notice for customers

A tattoo studio has sent you a link to choose an appointment, complete your inquiry or pay a deposit. This page runs on Taddoo, software made by Tattoomii GmbH, Badenerstrasse 541, 8048 Zurich, Switzerland. Here is what happens with the details you provide.

Who is responsible for your data

The controller is the studio that sent you the link. It decides which data it collects from you and how long it keeps it. Tattoomii GmbH processes your data solely on behalf of and on the instructions of that studio. You will find the studio's contact details in the email containing the link.

What data is processed

• The details from your inquiry: name, email address, phone number where given, your description of the design and any images you sent to the studio.
• Your appointment choice: the time slots you select, the duration and the time of your confirmation.
• For a deposit: amount, currency, time and status of the payment. Your card details are processed exclusively by the studio's payment provider; neither the studio nor Tattoomii GmbH sees them.
• Technical data when the page is opened: IP address, browser and time, to keep the service running and to prevent abuse.

Purpose and legal basis

Your data is used to answer your inquiry, arrange and confirm your appointment, handle any deposit and remind you of the appointment. The legal basis is the preparation and performance of the contract between you and the studio, and the legitimate interest in secure operation. You only receive marketing emails if you gave the studio your consent; you can withdraw it at any time using the unsubscribe link. No automated decision with legal effect takes place: replies from the studio may be prepared with AI, but they are always approved and sent by a person.

Who receives your data

Apart from the studio, only the service providers we use for operation, storage, email delivery, AI drafts and payments have access. They act on our instructions and are contractually bound. The full list with purpose, processing location and safeguard is on our sub-processor page. Your data is not sold, not used for third-party advertising, and not used to train general AI models.

How long and how securely

The retention period is decided by the studio within the statutory framework; statutory retention periods apply to payment records. The link that brought you here is time-limited and can only be opened with the personal token it contains. Your data is encrypted in transit and at rest and is technically separated from the data of other studios.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent at any time with effect for the future. Please contact the studio that sent you the link; it is the controller. If you cannot reach the studio, write to hello@taddoo.com and we will put you in touch. You may also complain to the competent data protection authority, in Switzerland the FDPIC and in the EU the authority where you live.