Legal
Privacy Policy
Last updated: 27.08.2026
This notice explains how personal data of visitors to dc-tattoo.it is processed, under Regulation EU 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Data controller
The data controller is Daniele Cassano, trading as DC Tattoo Artist.
Phone and WhatsApp: +39 333 187 3761
Instagram: @daniele90cassano
2. What data is collected
2.1 Data you provide
The contact form on this site sends no data to this server: it composes the message inside your browser and opens WhatsApp with the text ready. You decide whether to send it. From that point I collect whatever you choose to share in the conversation, that is your name, phone number and the content of the messages.
2.2 Data collected automatically
The servers hosting the site record access logs for technical and security purposes, containing IP address, date and time of the request, requested page, browser type and operating system. This data is not used to identify individual visitors.
2.3 Special categories of data
Please do not enter health information or other special category data under art. 9 GDPR into the contact form. The health information needed for a session is collected in person at the studio, on paper, before the treatment.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering requests received on WhatsApp or Instagram | Art. 6.1.b GDPR, pre contractual steps at the data subject request | 24 months from last contact |
| Managing appointments and the client relationship | Art. 6.1.b GDPR, performance of a contract | 10 years for tax obligations |
| Site security and abuse prevention | Art. 6.1.f GDPR, legitimate interest | 12 months |
| Non necessary cookies and third party content | Art. 6.1.a GDPR, consent | Until withdrawn, 6 months maximum |
4. Is providing data mandatory
To receive an answer I need at least one contact point, that is the WhatsApp number or the Instagram profile you write from. Without it the request cannot be handled.
5. Who receives the data
Data may be processed by providers of technical services to the site, appointed as processors under art. 28 GDPR:
- Hostinger International Ltd, hosting provider, with servers in the European Union.
- Meta Platforms Ireland Ltd, if you choose to contact me through WhatsApp or Instagram, under the privacy notices of those services.
Data is never sold, rented or shared with third parties for marketing purposes.
6. Transfers outside the EU
The site infrastructure is located in the European Union. If you use WhatsApp or Instagram, the related processing may involve transfers to third countries on the basis of the standard contractual clauses adopted by the European Commission and of the Data Privacy Framework.
7. Your rights
At any time you may exercise the rights set out in articles 15 to 22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Withdrawal does not affect the lawfulness of processing carried out before it.
To exercise your rights message me on WhatsApp at +39 333 187 3761. I will reply within 30 days.
If you believe the processing breaches the law you may lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, garanteprivacy.it.
8. Minors
The site is not aimed at children under 14 and does not knowingly collect their data. Tattoos on minors are governed by the applicable regional rules and require the consent of whoever holds parental responsibility.
9. Security
The site is served over HTTPS only. The private area is protected by authentication with hashed passwords, brute force protection, anti CSRF tokens and sessions that expire automatically. The public pages set no session cookie and collect no data.
10. Cookies
For cookie usage please read the Cookie Policy.
11. Changes
This notice may be updated. The version in force is always the one published on this page, with the last update date shown at the top.