Privacy Policy
Information about personal data processing on this website.
Last updated: 6 November 2026
Data controller
The data controller is Nicola Martinello, operating professionally as Metz Tattooer. Privacy contact: [email protected]. For data protection requests, please use the email address above.
Personal data we process
When you visit this website, technical data such as IP address, browser and device information, request times and security information may be processed to deliver and protect the pages. If you contact me through Instagram or WhatsApp, I may process the name, username, phone number, messages, photographs and tattoo project information that you choose to send. There is no on-site contact form.
Purposes and legal bases
Technical data may be processed to deliver and protect the site on the basis of legitimate interests in security and proper operation (GDPR Article 6(1)(f)), where applicable. Information sent for quotes and bookings is used to respond to your request and take pre-contractual steps (Article 6(1)(b)). Some information may also be processed to fulfil legal obligations (Article 6(1)(c)) or protect legal claims where permitted by law. This website does not use advertising profiling.
Special categories of data
Please avoid sending unnecessary health information through messaging services. Where health-related information, such as allergies or contraindications, is needed to assess or perform a tattoo, it must be handled under an appropriate condition and safeguards provided by GDPR Article 9. Separate privacy information applies to clients at the studio.
Is providing data mandatory?
Some technical data is necessary to browse the website. Contacting me is optional, but without sufficient contact and project details I may not be able to reply or arrange a booking.
Service providers and external services
This website is hosted and protected using Cloudflare Pages. Cloudflare Web Analytics is enabled for aggregate traffic and performance statistics and is described by Cloudflare as operating without analytics cookies. The website hosts its Tropikal and Inter web fonts locally, without requesting them from Google Fonts servers. Instagram and WhatsApp links open external platforms subject to their respective privacy notices. Technical providers and authorised recipients may access information only where necessary for their duties.
International transfers
International providers may process data outside the European Economic Area. Where this occurs, transfers must rely on mechanisms and safeguards provided by Chapter V of the GDPR, taking into account the applicable services and contracts.
Retention
Technical data is retained according to the actual configuration of the hosting and security services. Messages and personal data relating to enquiries or quotes that do not lead to a booking are retained for up to 24 months after the last interaction and then deleted, unless longer retention is needed to comply with legal obligations or protect legal claims. Data relating to confirmed appointments and established professional relationships is retained as necessary to manage the relationship and applicable legal obligations. Health-related data is addressed separately in the privacy notice provided at the studio. Periodic deletion applies to information under the controller’s control and does not itself change Instagram’s or WhatsApp’s own retention periods.
Your rights
Where applicable under GDPR Articles 15–22, you may request access, rectification, erasure, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it. Contact [email protected]. You can lodge a complaint with the Italian Data Protection Authority. There is no solely automated decision-making with legal or similarly significant effects.
Cookies and updates
For cookies and similar technologies please see the Cookie Policy. This notice may be revised if the website or data processing changes.