SKEN
Book

Privacy
policy

What data I hold about you, why, for how long, and what you can do about it.

Last updated: 23 September 2026

1. Who processes your data

The controller for the purposes of the GDPR is Adam Rajnoha, a tattoo artist working from his own chair at Rose And Dagger, Karpatská 23, 811 05 Bratislava, Slovakia.

There is no appointed Data Protection Officer — the law does not require one here. For anything concerning personal data, write directly to the address above.

2. What I process and on what basis

The booking form and e-mail correspondence

Data: name, e-mail, phone, description of the motif, placement on the body, approximate size, preferred timing, any reference images you upload, and the content of our further correspondence.
Purpose: to reply to you, prepare a design and agree an appointment.
Legal basis: steps taken at your request prior to entering a contract, and performance of that contract (Art. 6(1)(b) GDPR).
Retention: an enquiry that did not lead to a booking is deleted within 12 months of the last message.

Health questionnaire and informed consent before tattooing

Data: name, date of birth, information about your health that could affect the tattoo or its healing (allergies, medication, skin conditions, pregnancy), and your signature.
Purpose: to assess whether I can tattoo you, and to document your consent to the procedure.
Legal basis: this is a special category of data — it is processed on your explicit consent (Art. 9(2)(a) GDPR) and to meet obligations relating to health protection in the provision of the service.
Retention: five years from the procedure, on account of possible claims arising from it.

Accounting records

Data: billing details and the record of payment.
Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR) under Slovak accounting and tax law.
Retention: ten years.

Photographs of finished work

I photograph finished tattoos for my portfolio. A photograph in which you are identifiable (your face, a distinctive mark, your whole figure) is published only with your consent (Art. 6(1)(a) GDPR). You can withdraw that consent at any time and I will take the photograph down from the site and from Instagram. Without consent it is kept only as an internal record of my own work.

Analytics and advertising

Data: truncated IP address, device and browser type, pages visited, referral source, identifiers held in cookies.
Purpose: to understand which pages are useful and to measure the effectiveness of Google Ads campaigns.
Legal basis: your consent alone, given in the cookie bar (Art. 6(1)(a) GDPR). Until you give it, these tools store and send nothing.
Retention: according to the lifetime of each cookie — the list is on the cookies page.

3. Third-party tools

  • Google Analytics 4 (Google Ireland Limited) — audience measurement. It runs only after analytics consent is given.
  • Google Ads (Google Ireland Limited) — conversion measurement and remarketing. It runs only after advertising consent is given.
  • Google Maps — the map on the contact page does not load automatically. It appears only once you click it; that is the point at which a connection to Google's servers is made.
  • Fonts are hosted on this server. They are not fetched from Google Fonts, so loading a page does not send your IP address to Google.
  • Hosting and e-mail — the provider of the server and mail services has technical access to the extent necessary to operate them, under a data processing agreement.

This site uses Google Consent Mode v2. Measurement and advertising tags are set to “denied” on first load and change only according to what you choose in the cookie bar.

4. Transfers outside the European Union

Data processed through Google services may be transferred to the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework, which the European Commission has recognised by an adequacy decision; standard contractual clauses apply in addition. No other transfers outside the EU take place.

5. Who I share data with

I do not sell data and do not pass it to third parties for their own marketing. Access is limited to:

  • the hosting and e-mail provider,
  • Google (to the extent described above, and only after consent),
  • my accountant and, if needed, legal counsel,
  • public authorities where the law requires it.

6. Your rights

In relation to your data you have the right to:

  • know whether and what data I hold about you, and obtain a copy,
  • have it corrected or completed,
  • have it erased, where I have no legal ground to keep it,
  • restrict processing, or object to it,
  • receive it in a machine-readable form and have it transferred elsewhere,
  • withdraw consent at any time — withdrawal does not affect the lawfulness of processing before it.

Write to rajnoha.a@gmail.com. I will respond within one month at the latest. Cookie consent can be changed here: open privacy settings.

If you believe your data is being handled improperly, you may lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

7. Automated decision-making

I do not carry out automated decision-making or profiling that produces legal effects concerning you. Google's advertising tools may build advertising audiences where advertising consent has been given — that has no bearing on whether I tattoo you or what I charge.

8. Age

I tattoo only people over 18 and do not knowingly process children's data. If I find that I have received data relating to someone under 18, I delete it.

9. Changes to this policy

This policy may be amended in future — for instance if a new tool is added. The current version is always on this page, with the date of the last update at the top.