← Back to home

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how the NASTIA TATTOO website (nastiatattoo.com) collects, uses, and protects your personal data, in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is Anastasia, a tattoo artist based in Wrocław, Poland, working under the brand NASTIA TATTOO. For any privacy-related request, write to booking.nastiatattoo@gmail.com or via Instagram @nastia.tattoo.

2. Data We Collect

This is a small portfolio website and it collects only minimal data:

  • Usage data — pages visited, time on site, approximate region and device type, via Google Analytics, only if you accept analytics cookies.
  • Advertising data — page views and contact events, via Meta Pixel, only if you accept marketing cookies.
  • Messages — whatever you choose to share when you contact Nastia through Instagram, WhatsApp, Telegram, or email.

3. Cookies

The site uses three categories of cookies and similar local storage:

  • Essential — stores your language choice and your cookie preferences. Always active; the site cannot work without it.
  • Analytics — Google Analytics 4, to understand how the site is used. Loaded only with your consent.
  • Marketing — Meta (Facebook) Pixel, to measure the reach of advertising. Loaded only with your consent.

You can change or withdraw your choice at any time through the cookie banner at the bottom of every page.

4. Legal Basis

Analytics and marketing data are processed on the basis of your consent (Art. 6(1)(a) GDPR). When you contact Nastia directly, your message is processed on the basis of legitimate interest in replying to your inquiry (Art. 6(1)(f) GDPR). You can withdraw consent at any time.

5. Your Rights

Under the GDPR you have the right to:

  • Access the personal data held about you
  • Request correction or deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority (in Poland — the UODO)

6. Data Retention

Google Analytics retains usage data for 14 months. Your cookie preferences are stored locally on your device. Messages you send are kept only as long as needed to handle your inquiry and booking.

7. Third-Party Services

The site relies on the following third-party services, each with its own privacy policy:

  • Google Analytics 4 — policies.google.com/privacy
  • Meta (Facebook) Pixel — facebook.com/privacy/policy
  • Cloudflare Pages (hosting) — cloudflare.com/privacypolicy

8. Changes to This Policy

This Privacy Policy may be updated from time to time. The current version is always available on this page.