Privacy Policy
Last updated: November 2026
This Privacy Policy explains how personal data is collected, used and protected when you visit jorgedacruzartwork.com, contact us, book an appointment, or purchase products through our online shop.
The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.
1. Responsible Person
The controller responsible for data processing on this website is:
Jorge da Cruz / noTATTOO Berlin
[Postal address]
Berlin, Germany
Email: [contact email]
Website: www.jorgedacruzartwork.com
2. General Website Use
When you visit this website, certain technical information may be processed automatically. This can include:
IP address
browser and device information
date and time of access
pages visited
referring website
technical server information
This data is processed where necessary to operate the website securely and reliably.
The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in maintaining a secure and functional website.
3. Contact and Tattoo Enquiries
If you contact us by email, contact form, social media or another communication channel, we process the information you provide in order to respond to your request.
This may include your:
name
email address
telephone number, where provided
tattoo ideas, references or placement information
appointment information
messages and correspondence
The legal basis is Art. 6(1)(b) GDPR where communication relates to a booking or potential contractual relationship, and Art. 6(1)(f) GDPR for general enquiries.
We retain correspondence only for as long as it is reasonably necessary for the relevant communication, contractual relationship or legal obligation.
4. Online Shop and Orders
When you place an order through the online shop, we process the information necessary to complete the purchase.
This can include:
name
billing and shipping address
email address
order details
payment information
shipping and tracking information
The legal basis is Art. 6(1)(b) GDPR, as this processing is necessary to fulfil your order.
Where required by German tax or commercial law, certain order and transaction records may be stored for the statutory retention period.
5. Payment Providers
Payments may be processed through external payment service providers available through our website.
The relevant payment provider may receive the information required to process your transaction. Payment information is handled according to the privacy terms of the respective provider.
We do not receive or store complete credit-card details unless this is expressly necessary and technically provided by the payment system.
The legal basis for payment processing is Art. 6(1)(b) GDPR.
6. Production and Fulfilment Partners
Some products offered through the shop may be produced, packaged or shipped by external production and fulfilment partners.
Where necessary to fulfil an order, information such as your name, delivery address and order details may be transferred to these service providers.
Such information is used only insofar as necessary for production, fulfilment, delivery or customer service.
The legal basis is Art. 6(1)(b) GDPR.
7. Shipping Providers
For physical orders, we may provide your name, delivery address and other necessary shipping information to postal or courier services.
Depending on the carrier and service selected, your email address or telephone number may also be transmitted where necessary for delivery notifications or tracking.
8. Hosting and Website Platform
This website is operated using external website and hosting services.
These providers may process technical data required to provide, secure and maintain the website. Depending on the service provider, processing may also occur outside the European Economic Area.
Where personal data is transferred outside the EU or EEA, transfers are carried out only where an appropriate legal mechanism under the GDPR exists, such as an adequacy decision or approved Standard Contractual Clauses.
9. Cookies and Similar Technologies
This website may use cookies and similar technologies.
Some cookies are technically necessary for the website, shopping cart, security, checkout or other functions requested by the user.
Other technologies—for example analytics, marketing or third-party tracking technologies—are used only where legally permitted and, where required, after the user has given consent.
Consent can be withdrawn or changed through the website’s cookie settings at any time.
Under German law, storing information on or accessing information from a user’s device generally requires consent unless the technology is strictly necessary to provide a service expressly requested by the user.
10. Analytics
If analytics services are activated on this website, they may collect information about how visitors use the website, such as pages viewed, approximate location, device information and interactions with the site.
Where consent is legally required, analytics tools are activated only after consent has been given.
The legal basis in such cases is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time.
11. Social Media
The website may contain links to external social-media platforms such as Instagram.
When you follow an external link, the privacy policy of the respective platform applies.
Simply displaying a normal external link does not necessarily mean that personal information is transmitted to the platform before you click it. Embedded content, however, may involve additional data processing and should therefore be subject to the appropriate consent mechanisms where required.
12. Newsletter and Promotional Emails
If you subscribe to a newsletter or explicitly agree to receive promotional communication, your email address will be used for that purpose.
The legal basis is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time by using the unsubscribe function provided in the email or by contacting us directly.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
13. Data Sharing
We do not sell personal data.
Personal information is shared only where necessary, for example with:
website and hosting providers
payment processors
production and fulfilment partners
shipping providers
IT or technical service providers
tax or accounting professionals
public authorities where legally required
Service providers receive only the data necessary for the relevant purpose.
14. International Data Transfers
Some technical or commercial service providers may be located outside the European Union or European Economic Area.
Where data is transferred to a third country, we ensure that an appropriate legal basis for the transfer exists in accordance with the GDPR. This may include an adequacy decision by the European Commission, participation in an approved framework where applicable, or Standard Contractual Clauses.
15. Storage Period
Personal data is stored only for as long as necessary for the purpose for which it was collected or for as long as statutory retention obligations apply.
After the relevant purpose or legal retention period ends, the data is deleted or anonymised where appropriate.
16. Your Rights
Under the GDPR, you have the right, where applicable, to:
request information about personal data we process about you
request correction of inaccurate data
request deletion of your personal data
request restriction of processing
object to certain processing
receive certain data in a portable format
withdraw previously given consent at any time
You may exercise these rights by contacting:
[contact email]
You also have the right to lodge a complaint with a competent data protection supervisory authority.
For a business based in Berlin, the competent authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
Email: mailbox@datenschutz-berlin.de
17. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
Nevertheless, transmission of information over the internet cannot be guaranteed to be completely secure.
18. Changes to this Privacy Policy
We may update this Privacy Policy when our website, shop, service providers or legal requirements change.
The current version will always be available on this website together with its latest revision date.
Last updated: November 2026