Privacy Policy

Last updated: 14 October 2026

1. Controller

Teles Tattoo Halle

Owner: Florin-Răzvan Brebu

Am Steintor 6, 06112 Halle (Saale), Germany

Phone: +49 172 2173974

2. Overview – purposes and legal bases

We process personal data when you visit our website, contact us or purchase digital vouchers from our online shop. The legal bases include:

• Article 6(1)(b) GDPR: performance of a contract and pre-contractual measures, including orders, payments and customer service.

• Article 6(1)(c) GDPR: legal obligations, including tax and commercial obligations, invoicing and record retention.

• Article 6(1)(f) GDPR: legitimate interests, including IT security, preventing misuse and providing a stable website.

• Article 6(1)(a) GDPR: consent, including optional cookies and marketing only after consent.

3. Hosting (Wix) and server logs

Our website is hosted by Wix.com Ltd., Yunitsman 5, Tel Aviv, Israel. Wix processes visitor data to provide the platform as a processor under Wix's Data Processing Agreement. When you visit the website, technically necessary data, such as your IP address, date and time, device and browser information, referrer URL and pages accessed, are processed to provide a secure and stable website, analyse errors and prevent attacks. Legal basis: Article 6(1)(f) GDPR.

4. Cookies

We use technically necessary cookies so that basic functions expressly requested by you, such as security and the shopping cart or checkout, work. Where storing or accessing information is strictly necessary for this purpose, the legal basis is Section 25(2), no. 2 TDDDG. Non-essential storage or access requires consent under Section 25(1) TDDDG; subsequent processing of personal data is based on Article 6(1)(a) GDPR. Any additional statistics or marketing cookies are used only with your consent through a cookie banner, under Article 6(1)(a) GDPR.

5. Contacting us

If you contact us by email or phone, we process the data you provide, such as your name, contact details and message, to respond to your enquiry. Legal basis: Article 6(1)(b) GDPR for pre-contractual or contractual matters, or Article 6(1)(f) GDPR for our legitimate interest in efficient communication.

6. Online shop: digital vouchers (orders and delivery by email)

Our voucher shop sells digital vouchers, which are sent to the customer by email after purchase. Any additional club memberships are managed under the applicable plan terms.

Depending on the information entered at checkout and the invoicing requirements, we process:

• Billing details: first and last name, street address, house number, postcode, city and country.

• Contact details: email address; phone number if collected at checkout or stored as customer information, for example for order or payment enquiries.

• Order details: voucher or product, value, order number, time and status.

• Invoice and tax details: net and gross amounts, VAT, invoice number and date.

• Payment status and transaction details, such as paid status and transaction references.

Purposes: processing orders and delivering digital vouchers by email; issuing invoices with the legally required information; customer service, including enquiries, corrections and resending vouchers if delivery fails; preventing misuse and fraud; and IT security.

Legal bases: Article 6(1)(b) GDPR for the order or contract and Article 6(1)(c) GDPR for legal obligations, particularly tax requirements.

7. Payment processing (credit card / Klarna)

We disclose the necessary data to the payment provider you select to process your payment. Legal basis: Article 6(1)(b) GDPR.

7.1 Credit cards, such as Visa or Mastercard, through Wix Payments

Credit card payments are processed through Wix Payments or its payment service providers. These providers receive the information required to process payment, such as the amount, currency, order reference and, where applicable, your name, email and billing address. We generally do not receive complete card details, but payment confirmations and transaction information.

7.2 Klarna, if selected at checkout

If you choose Klarna at checkout, Klarna processes the payment. The personal data necessary for payment processing, such as name, contact and billing details, and order and transaction data, are disclosed to Klarna. Klarna may carry out identity and credit checks under its own responsibility. Further information is available in Klarna's privacy information.

8. Invoicing, accounting and retention

We process and retain order and invoice data to meet tax and commercial obligations. Legal basis: Article 6(1)(c) GDPR. We retain data for as long as necessary for the stated purposes and as required by statutory retention periods.

9. Recipients and disclosure

We disclose personal data only where necessary to process the transaction or where legally required. Recipients may include Wix.com for hosting, the shop, checkout, invoicing and technical infrastructure; Wix Payments or participating credit card payment providers; Klarna if selected; tax advisers or accountants if appointed; and public authorities where disclosure is legally required.

10. Transfers to third countries

Depending on the service providers used, such as Wix or payment providers, data may be processed outside the EU or EEA. The European Commission has adopted an adequacy decision for Israel. For other transfers by Wix, the safeguards described in Wix's Data Processing Agreement and information about subprocessors apply, in particular appropriate Standard Contractual Clauses where no applicable adequacy decision exists. You can request information and copies of the relevant safeguards using the contact details above.

11. Your rights

Under the GDPR, you have rights of access, rectification, erasure where retention obligations do not prevent it, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent with effect for the future.

Under Article 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. For Saxony-Anhalt: State Commissioner for Data Protection, Otto-von-Guericke-Straße 34a, 39104 Magdeburg, https://datenschutz.sachsen-anhalt.de. To exercise your rights, contact telestattoo@yahoo.com.

12. Data security

We apply technical and organisational security measures to protect your data against loss, manipulation and unauthorised access.

13. Changes to this privacy policy

We may update this policy if our processes, services or legal requirements change.

14. Appointment requests and members area

When you submit an appointment request through Wix Forms, we process your contact details, information about your tattoo idea and appointment, and any uploaded references to handle your request, under Article 6(1)(b) GDPR. Please do not submit health data through general enquiry forms. Required contact details are necessary for us to reply. Additional information is voluntary unless the form marks it as required.

When you register for and use the members area, we process your registration and contact details, profile information you provide, and information about orders, memberships, loyalty points and rewards insofar as you use those features. The purpose is to provide and manage your account and requested services, under Article 6(1)(b) GDPR. Wix receives the data as the technical platform provider. Mandatory information is necessary to provide the relevant function.

Account data are retained for the duration of the account and requested services. After termination, they are deleted once no statutory retention obligations or legitimate requirements to establish or defend legal claims remain. Enquiry data are retained only as long as necessary to handle the enquiry, follow-up questions, any resulting contract or legal obligations.

15. Objection and withdrawal of consent

Where we process data under Article 6(1)(f) GDPR, you may object at any time under Article 21 GDPR on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You may object to processing for direct marketing at any time without giving reasons.

You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.

16. Further information about Wix

Privacy: https://www.wix.com/about/privacy

Data processing: https://www.wix.com/about/privacy-dpa-users

Subprocessors: https://support.wix.com/de/article/liste-der-unterauftragsverarbeiter-von-wix

17. Online withdrawal and cancellation

If you use our withdrawal or cancellation forms, we process your name, email address, contract details, the content of your declaration and the time it was received. For cancellation, we also process the selected cancellation type, any reason provided and the requested termination date. Processing serves to receive and handle your declaration and send an acknowledgement of receipt through Wix. Legal bases: Article 6(1)(b) and (c) GDPR. Data are retained to process and document the declaration; thereafter, statutory retention periods and the time required to establish or defend legal claims apply.

18. AI-powered chat

Our website includes Wix Smart Chat. The chat is labelled as AI and generates automated answers based on our website and information provided. If you use it, your messages, voluntarily supplied contact details and technically necessary session data are processed through Wix to answer your enquiry. Depending on the enquiry, the legal basis is Article 6(1)(b) GDPR or our legitimate interest in responding to general enquiries under Article 6(1)(f) GDPR. Non-essential storage or access to your device requires consent; see section 4.

Using the chat is voluntary. You can contact us by email or phone instead. Please do not enter health information, copies of identity documents or payment details in the AI chat. Sections 3, 9, 10 and 14 apply accordingly to recipients, international transfers and retention periods.

19. External links to WhatsApp and Instagram

If you click a WhatsApp or Instagram link, you leave our website or open the relevant app. The provider processes the resulting data under its own responsibility in accordance with its privacy information. If you initiate communication with us, we process the contact details and messages you provide to handle your enquiry under Article 6(1)(b) or Article 6(1)(f) GDPR. Using these services is voluntary; you may also contact us by email or phone.