PRIVACY POLICY

In compliance with the provisions of the General Data Protection Regulation 2016/679 (GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD) of December 2018, we inform you:

1. DATA CONTROLLER

a. Controller for Training Identity: Tattoox S.L., with CIF B67709097 Postal Address: C/ Llull, 51; 08005 Barcelona Telephone: +34 644 007 638 E-mail: hola@tattoox.io

b. Controller for Physical Products Identity: Tattoox Retail S.L., with CIF B75309096 Postal Address: C/ D'Ausiàs Marc, 8; 08010 Barcelona Telephone: +34 931 405 829‬ E-mail: bcnclub@tattoox.io

2. PURPOSE OF DATA PROCESSING

We inform you that the data you provide to us is processed for the following purposes:

• To manage and attend to contact and/or information requests received about the services offered on the website, to facilitate contact between you and the self-employed professional and/or studio providing the requested service.

• To manage a personal account with a single registration for use on the website and to be part of the network of collaborators.

Likewise, in accordance with the provisions of the GDPR, a record of processing activities is maintained, which specifies, according to its purposes, the processing activities carried out and the other circumstances established in the GDPR. Personal information may not be used for purposes other than those related to the contracted services or purchased products. No automated decisions will be made based on this profile.

3. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing carried out is based on:

• The consent granted by the User through the acceptance of this Policy and the corresponding checkbox.

• The User has provided their personal data for the attention of their request about our services and therefore its processing is necessary for the maintenance of said relationship.

• The legal obligations applicable to Tattoox S.L. that require the processing of personal data in accordance with the services provided, such as those related to tax matters.

The User may, at any time, revoke their consent for the processing of their personal data. In no case does the withdrawal of these consents condition the provision of the service, and/or the execution of contracts with Tattoox S.L.

4. PERSONAL DATA PROCESSED AND SOURCE

The personal data we process has been provided by the User themselves by sending emails or using the functionalities offered on the Portal. The use of the contact sections, completion of forms, and/or functionalities offered on the Portal is voluntary. However, the completion of certain fields of the form or its provision through the use of other functionalities are necessary to correctly address and manage your request, so the User's refusal to provide the required information will prevent Tattoox S.L. from correctly addressing and managing it.

 

The User guarantees that the data they provide to us is true, accurate, and complete. The data will be canceled, deleted, or blocked when it is inaccurate, incomplete, or has ceased to be necessary or relevant for its purpose in accordance with current legislation. If the personal data provided belongs to a third party, the User guarantees that they have informed them of the Privacy Policy and have obtained their authorization to provide their data for the purposes indicated above. They also guarantee that the data provided is accurate and updated, being responsible for any damage or loss, direct or indirect, that may be caused as a consequence of non-compliance with such obligation. The User commits to and is responsible for the veracity and correctness of the data they provide to us, committing to keep it duly updated.

The Portal may include links to third-party sites. The aforementioned websites have not been reviewed nor are they subject to control by the portal. Tattox S.L. is present on Instagram, Facebook, and TikTok for the purpose of informing about the services it offers, as well as any other information it wishes to publicize, but it will at no time obtain personal data from the users who interact on them unless there is express authorization. It cannot, under any circumstances, be considered responsible for the content of these websites or for the measures adopted regarding their privacy or the processing of their personal data. It is recommended to carefully read the terms of use and the privacy policy of these sites.

If you are interested in activating a link to this page, you must notify Tattoox S.L., obtaining express consent to create the link. Tattoox S.L. reserves the right to oppose the activation of links to its website.

5. PERSONAL DATA RETENTION PERIODS

The personal data provided by the User will be kept as long as they remain registered for the service, as long as the business relationship is maintained, as long as the User does not request its deletion, or for the legally established period. Likewise, they may be kept when necessary for compliance with a legal obligation or for the formulation, exercise, and defense of claims.

If the User revokes their consent or exercises the rights of opposition or deletion, their data will be kept blocked and available to the Administration of Justice during the legally established periods to meet any possible responsibilities arising from the processing of personal data.

6. SECRECY AND SECURITY OF PERSONAL DATA

Tattoox S.L. undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the collected data, to guarantee the security of personal data and avoid the destruction, loss, or accidental or unlawful alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and guarantee through a legal or contractual obligation that such confidentiality is respected by its employees, associates, and all persons to whom the information is made accessible.

7. TRANSFER AND RECIPIENTS OF PERSONAL DATA

The data will not be communicated to third parties, except in legally provided cases or when necessary to fulfill the purpose of the processing or to provide services strictly necessary for the development of the activity.

8. USER RIGHTS

What are your rights when you provide us with your data?

 

The User has the right to obtain confirmation as to whether or not we are processing personal data concerning them. The User has the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the User may request the limitation of the processing of their data, in which case we will only retain them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, the User may object to the processing of their data, in which case the data controller will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. In those cases where legally appropriate, they will have the right to data portability, which implies the right to receive the personal data relating to their person that we are processing and to store it on their own device. Likewise, we inform you that you can address any type of complaint regarding the protection of personal data to the Spanish Data Protection Agency www.agpd.es, Spain's Supervisory Authority.

 

You can exercise the rights of access, rectification, opposition, deletion, limitation of processing, portability, and to object to being subject to automated individual decisions before Tattoox S.L., where applicable, by written communication accompanied by a photocopy of your D.N.I. (National Identity Document) addressed to the following address: C/ Badajoz, 32; 08005; Barcelona - Barcelona; email hola@tattoox.io.