Privacy Policy

Last updated: July 2026

1. Controller

The controller responsible for data processing on this website is:

Alexander Demtschenko Tattoo-Highlights Borgfelder Straße 64 20537 Hamburg Deutschland Email: kontakt@tattoo-highlights.com Phone: +49 174 5673 109

2. General information

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website. Personal data is any data that can be used to identify you personally. We process your data exclusively on the basis of the statutory provisions (GDPR, BDSG, TDDDG).

3. Your rights

You have the right at any time to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You can revoke any consent you have given at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is: The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

4. Hosting

This website is hosted by Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the website, technically necessary data (e.g. IP address, date and time of access, page accessed) is processed in order to provide the website securely and reliably. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a reliable presentation). A data processing agreement has been concluded with Vercel. Data may be transferred to the USA; Vercel relies on the EU standard contractual clauses for this.

5. Server log files

The hosting provider automatically collects and stores information in server log files transmitted by your browser: browser type and version, operating system used, referrer URL, time of the request and IP address. This data is not merged with other data sources and serves technical security and stability. The log files are deleted automatically by the hosting provider, at the latest after 30 days. Legal basis: Art. 6 (1) (f) GDPR.

6. Contact & inquiry forms

When you contact us via the inquiry form, by email, phone or WhatsApp, we process the information you provide (e.g. name, email address, phone number, age, place of residence and any images and descriptions of your tattoo request you upload) in order to handle your inquiry. The legal basis is Art. 6 (1) (b) GDPR (initiation of a contract) or Art. 6 (1) (f) GDPR (handling your request).

Inquiries submitted via the form are delivered to us by email and additionally stored in a database so that no inquiry is lost and we can process it. This database and our email mailbox are operated in Germany by our provider ALL-INKL.COM – Neue Medien Münnich (owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf), with whom a data processing agreement is in place. Your inquiry data is not transferred to any third country.

Inquiries that do not lead to an appointment or contract are deleted no later than 12 months after the last contact. If a contract is concluded, we retain the related correspondence within the statutory retention periods (6 or 10 years pursuant to § 257 HGB and § 147 AO), after which the data is deleted.

Special categories of personal data: In the appointment request form you may voluntarily state your skin type, describe the desired body area and upload photos of that area. Such information may allow conclusions to be drawn about your health (e.g. skin condition, scars, pre-existing conditions) or your ethnic origin. Providing this information is expressly voluntary and not strictly necessary for processing your request; you may omit it and discuss these points with us in person instead. Insofar as this constitutes special categories of personal data, we process it solely on the basis of your explicit consent pursuant to Art. 9 (2) (a) GDPR and only for the purpose of professionally assessing and preparing your tattoo request. Uploaded images are not published without your separate consent. You may revoke your consent at any time with effect for the future, informally by email; we will then delete the data concerned.

Optionally, you can consent via a checkbox in the inquiry form to us contacting you occasionally about promotions, offers and guest artists. This consent is voluntary and not a precondition for your inquiry. The legal basis is Art. 6 (1) (a) GDPR. You can revoke it at any time with effect for the future, informally by email — after which we will no longer use your data for these purposes.

7. Google Maps

On our contact page we embed maps from the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after you have actively consented ("Load map" / cookie consent). Only then is data – in particular your IP address – transmitted to Google; a transfer to the USA is possible. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time for the future. Further information in Google's privacy policy: https://policies.google.com/privacy

8. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is loaded only after you have consented to the "statistics" category; without your consent no script is loaded, no cookie is set and no connection to Google is established. After your consent, usage data (including a shortened IP address, pages viewed, time on site, approximate location, device and browser) is processed in order to analyse the use of our website statistically. A transfer to the USA is possible. Advertising features are disabled. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time for the future. Further information: https://policies.google.com/privacy

9. Booking reminder

On A-Dem's artist page you can optionally ask to be reminded as soon as his booking window opens again. For this we process your email address. Sign-up uses the double opt-in procedure: after entering your address you receive an email containing a confirmation link; only after you click it is your address added to the list. To document your consent we additionally store the time and IP address of the sign-up and of the confirmation. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR; for storing the documentation data also our legitimate interest in being able to prove consent pursuant to Art. 6 (1) (f) GDPR. You can withdraw your consent at any time — via the unsubscribe link in every email or informally to kontakt@tattoo-highlights.com. After withdrawal we delete your address from the list; the documentation data is kept for up to three years to defend against possible claims. The addresses are used solely for this reminder, not for other advertising, and are not passed on to third parties.

We use the service Brevo (Sendinblue GmbH, Köpenicker Strasse 126, 10179 Berlin, Germany, or Brevo SAS, 106 Boulevard Haussmann, 75008 Paris, France) to send these emails. Brevo processes your email address on our behalf on servers within the European Union; a data processing agreement pursuant to Art. 28 GDPR is in place. Further information: https://www.brevo.com/legal/privacypolicy/

10. Fonts

This website uses locally hosted fonts. No data is transferred to third-party servers (e.g. Google Fonts) when the page is loaded.

11. WhatsApp & social media

Our website only contains links to WhatsApp and to our profiles on Instagram, TikTok and Facebook. No data is transferred to these providers without your click. Only when you click a link are you redirected to the respective provider, whose privacy policy then applies. No social media content ("plugins") is embedded on our pages.

12. Cookies & local storage

Our website does not use tracking or marketing cookies. To store your cookie or map decision, we use your browser's local storage. This information remains on your device and is not transmitted to us.

13. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar.

14. Status

We reserve the right to amend this privacy policy so that it always complies with current legal requirements.