Legal
Privacy policy
1. Data controller
- Controller: Cuch Mequena S.L.
- Tax ID (CIF): B44999142
- Address: Av. del Marqués de Corbera 33, 28017 Madrid, Spain
- Sole administrator: Erik Alan Fader Ortiz
- Contact: arkadiatattostudio@gmail.com
2. Purposes of processing and legal basis
Cuch Mequena S.L. processes the personal data of its clients and users for the following purposes:
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Handling quote requests and communication prior to booking | Art. 6.1.b — pre-contractual measures at the data subject's request |
| Managing appointment bookings, collecting the deposit and providing the tattooing service | Art. 6.1.b — performance of a contract |
| Health-related informed consent inherent to the tattooing procedure (health data) | Art. 6.1.a and art. 9.2.a — explicit consent for a special category of data |
| CCTV of the premises (entrance and ground floor) | Art. 6.1.f — legitimate interest in the safety of people, property and facilities |
| Identity verification and authorisation in the minors protocol (15–17 years) | Art. 6.1.c — compliance with a legal obligation, and art. 6.1.a — consent of the legal representative |
3. Health data and tattoo consent
Before any tattoo is performed, informed consent is collected, including questions about allergies, medication, pregnancy, skin conditions and other health data relevant to the safety of the procedure. This data constitutes a special category of personal data (article 9 GDPR) and is only processed with the client's explicit consent, exclusively to ensure a safe procedure. It is not used for any other purpose and is not disclosed to third parties except where legally required.
4. Minors protocol (15 to 17 years)
For minors from 15 years of age, written authorisation from the legal representative is required, along with ID copies of both the minor and the legal representative, and in-person verification of both at the studio. These documents are processed solely to evidence the legal consent for the procedure and are kept for the period legally required to answer for the provision of the service.
5. CCTV
The studio has 2 cameras (entrance and ground floor), operating 24/7, without audio capture and without pointing at private areas. Images are kept for a maximum of 1 month, unless they need to be kept longer due to an incident, claim or request from the police or security forces. The premises display the corresponding information signage at the access.
6. Retention periods
- Quote and booking data: for the duration of the pre-contractual relationship and, if it is not formalised, for a reasonable maximum period to respond to claims.
- Health informed consent and tattoo contract data: for the legal limitation period for civil and health liability.
- CCTV images: maximum 1 month, unless there is an ongoing incident.
- Minors protocol documentation: for the period legally required to answer for the service provided.
7. Recipients and data processors
The quote and booking form on this website is managed through Formspree, Inc. (formspree.io), based in the United States, which acts as a data processor for the data submitted through the form. Submission is made over an encrypted channel (HTTPS) and Formspree applies the safeguards required by the GDPR for international data transfers.
The remaining providers (web hosting, payment gateway, analytics tool, the establishment's insurer and clinical waste manager) will be added to this section as soon as a contractual relationship exists with each of them.
No international data transfers are made outside the European Economic Area unless a future processor requires them, in which case you will be informed and the safeguards required by the GDPR will be applied.
8. Rights of data subjects
Everyone has the right to obtain confirmation as to whether Cuch Mequena S.L. is processing personal data concerning them, and in particular has the right to:
- Access their personal data.
- Rectification of inaccurate data.
- Erasure ("right to be forgotten") where applicable.
- Object to the processing of their data.
- Restriction of processing in certain cases.
- Data portability, where technically possible.
These rights can be exercised by emailingarkadiatattostudio@gmail.com, stating the right you wish to exercise and attaching a copy of an identity document.
If you consider that your rights have not been properly addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) atwww.aepd.es.
9. Data security
Cuch Mequena S.L. applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration, appropriate to the risk of the processing carried out.