Privacy policy

1. Data controller

The controller of your personal data is VITALII SOSNYTSKYI SIGNUM TATTOO (trading as “Signum Tattoo & Piercing”), NIP (tax ID) 6751781863, REGON 525198777, registered address: Retoryka 9/2, 31-108 Kraków, Poland. The studio serves clients at Retoryka 9/1, 31-108 Kraków.

For any privacy matter you can reach us at signumtattookrk@gmail.com or +48 730 827 154.

2. What data we process and why

We process the data you voluntarily provide when contacting us by phone, e-mail or social media: your name, contact details and the content of your message — in order to answer your enquiry and arrange an appointment (Art. 6(1)(b) and (f) GDPR).

In connection with tattoo and piercing services we may also process information necessary to perform the procedure safely, including health declarations, only to the extent required and based on your explicit consent (Art. 9(2)(a) GDPR).

3. Booksy bookings and social media

Appointments are handled by Booksy (Booksy International sp. z o.o.), which is an independent controller of the data processed within your Booksy account — see Booksy's own privacy policy.

Our Instagram profiles (@signum_tattoo, @signum_piercing) operate within a service provided by Meta Platforms Ireland Ltd., which is an independent controller of data processed in that service.

4. Cookies

This website does not use analytics or marketing cookies and does not track its visitors. Only technical mechanisms necessary to display the site correctly may be used.

5. Hosting and server logs

This website is hosted on GitHub Pages, a service provided by GitHub, Inc. (USA). When the site is displayed, the hosting provider processes standard technical connection data — IP address, date and time of the request, and request metadata (server logs) — in order to deliver the site securely and reliably.

The legal basis for this processing is legitimate interest (Art. 6(1)(f) GDPR) in making the website available securely. Server logs are retained by the hosting provider for a limited time in accordance with its policy. Any transfer of data to the USA takes place under safeguards provided for by the GDPR, including the EU–U.S. Data Privacy Framework and standard contractual clauses — see GitHub's privacy statement for details.

6. How long we keep data

Correspondence data is kept for as long as needed to handle your enquiry; data related to performed services is kept for the period required by law (including tax law) or until potential claims are time-barred.

7. Your rights

You have the right to access, rectify, erase or restrict the processing of your data, the right to data portability, the right to object, and the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Recipients of data

Data may be entrusted to entities supporting our business (e.g. IT or accounting providers) — only to the necessary extent and under appropriate agreements. We do not sell personal data.