Privacy Policy

1. Data controller

The controller responsible for personal data processed through StefanoAlcantaraTattoo.com is:

Tamara Florán-Vélaz

NIF52317187F

AddressC/ Calvario 86, 11520 Rota (Cádiz), España

Emailcontacto@stefanoalcantaratattoo.com

WebsiteStefanoAlcantaraTattoo.com

2. Scope

This Privacy Policy explains how personal data may be processed when visitors use StefanoAlcantaraTattoo.com, contact the editorial team or interact with embedded third-party services.

StefanoAlcantaraTattoo.com is an independent editorial publication and is not the official website of Stefano Alcántara, the featured tattoo studios or the New York Empire State Tattoo Expo.

3. Personal data we may process

3.1. Contact form data

When a visitor uses the contact form, the following information may be processed:

• name;
• email address;
• subject;
• message;
• any information voluntarily included in the message.

The contact form should not be used to submit sensitive personal information unless strictly necessary.

3.2. Technical and security information

Hosting and infrastructure providers may process technical information required to operate and protect the website, which may include:

• IP address;
• browser information;
• device information;
• date and time of access;
• requested URLs;
• technical logs;
• security and anti-abuse data.

3.3. Embedded media

The website may include privacy-enhanced embedded content, including YouTube videos.

Where click-to-load technology is used, the external video provider is not contacted until the visitor chooses to activate the video.

Studio pages may include a Google Maps location map. The map is also click-to-load: Google is not contacted until the visitor chooses "Load interactive map" or follows the "View on Google Maps" link.

Once activated, the external provider may process technical information in accordance with its own privacy policies.

3.4. Consent preferences

The website stores the visitor's consent choice (selected categories and date) in the browser's local storage, only to remember and demonstrate that choice. Visitors can change or withdraw it at any time through "Cookie settings" in the footer. The current consent tool is the website's own and is not a Google-certified Consent Management Platform. Advertising technologies are not currently active.

3.5. Analytics

StefanoAlcantaraTattoo.com uses Google Tag Manager to manage analytics tags and Google Analytics 4 to understand how visitors use the website. Google acts as the analytics technology provider.

These services are not loaded before the visitor grants consent for Analytics. If Analytics consent is refused, Google Tag Manager and Google Analytics are not activated for analytics purposes.

When Analytics consent is granted, Google Analytics may process information such as pages visited, approximate device and browser information, interaction data, session information and other technical data used to produce website usage statistics.

The purpose of this processing is to measure website usage, understand content performance and improve the publication.

Legal basisConsent.

Visitors may withdraw or change their Analytics consent at any time through "Cookie settings" in the footer.

4. Purposes and legal bases

Personal data may be processed for the following purposes:

A. Responding to editorial enquiries, corrections, factual updates, image-rights requests, copyright matters or website feedback.

Legal basisLegitimate interest in operating the publication and responding to communications voluntarily initiated by visitors.

B. Website security, fraud prevention, debugging and technical operation.

Legal basisLegitimate interest in maintaining the security, availability and integrity of the website.

C. Compliance with legal obligations and the establishment, exercise or defence of legal claims.

Legal basisCompliance with legal obligations and legitimate interests where applicable.

D. Website usage analytics.

Measuring website usage, understanding content performance and improving the publication through Google Analytics 4, managed through Google Tag Manager.

Legal basisConsent. These technologies are only activated after the visitor grants Analytics consent.

E. Advertising and advertising measurement.

If Google AdSense or another advertising service is activated, non-essential advertising technologies will be used only in accordance with applicable consent requirements.

Where consent is required, the legal basis will be the visitor's consent.

5. Contact form

Messages submitted through StefanoAlcantaraTattoo.com are received by the team responsible for this publication at contacto@stefanoalcantaratattoo.com.

Personal data submitted through the contact form may be processed for:

• responding to editorial enquiries;
• responding to correction or factual-update requests;
• handling image-rights or copyright matters;
• responding to website feedback;
• managing tattoo appointment, availability and project enquiries;
• forwarding messages expressly addressed to Stefano Alcántara so that he can review and respond to them.

Messages are not sent to 1983 Art Studio in New York, the Lima tattoo studio or the New York Empire State Tattoo Expo organization.

Messages addressed to Stefano Alcántara

When a visitor submits a message that is expressly intended for Stefano Alcántara, including tattoo appointment requests, availability enquiries, project enquiries or other questions directed to him, the relevant contact details and message content may be forwarded to Stefano Alcántara for the purpose of reviewing and responding to that enquiry.

Only information reasonably necessary for handling the enquiry should be forwarded.

StefanoAlcantaraTattoo.com remains an independent editorial publication. The forwarding of messages does not make the website the official website or official booking platform of Stefano Alcántara.

6. Recipients and service providers

Personal data may be processed by service providers acting on behalf of the controller where necessary to operate the website.

Depending on the final production configuration, these providers may include:

• hosting and infrastructure providers such as Vercel;
• transactional email providers such as Resend;
• a certified consent-management provider, if one is installed before advertising is enabled;
• Google, as the provider of Google Tag Manager and Google Analytics 4, when the visitor grants Analytics consent;
• Google and YouTube when visitors activate embedded video content or interactive maps;
• Google and advertising technology providers if Google AdSense is enabled.

Service providers must only be used where appropriate contractual and data-protection safeguards are in place.

Where a message is specifically addressed to Stefano Alcántara, the information necessary to handle that enquiry may be shared with Stefano Alcántara as the intended recipient of the communication. Other messages, such as editorial, legal, copyright or website enquiries, are not shared with him.

Personal data is not sold by the operator of StefanoAlcantaraTattoo.com.

7. International data transfers

Some technology providers may process data outside the European Economic Area.

Where an international transfer takes place, appropriate safeguards required by applicable data-protection law will be used, such as an applicable adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

8. Data retention

Contact enquiries will normally be retained only for as long as necessary to respond to and manage the communication.

Unless a longer period is required for legal reasons, editorial correspondence may generally be retained for up to 12 months after the last relevant communication.

Messages forwarded to Stefano Alcántara are not retained by the website team for longer than necessary to handle the forwarding and any related follow-up.

Technical and security logs are retained according to the legitimate operational and security needs of the website and the retention policies of the relevant infrastructure providers.

Data necessary to demonstrate consent choices may be retained for the period reasonably required to demonstrate compliance.

9. Rights

Under applicable data-protection law, individuals may have the right to request:

• access to their personal data;
• rectification of inaccurate data;
• erasure of their data;
• restriction of processing;
• objection to processing;
• data portability where applicable;
• withdrawal of consent at any time where processing is based on consent.

Requests may be sent to:

contacto@stefanoalcantaratattoo.com

The identity of the requester may be reasonably verified before a request is fulfilled.

Individuals also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

10. Automated decision-making

The operator of StefanoAlcantaraTattoo.com does not make decisions producing legal or similarly significant effects solely through automated processing.

If advertising services are activated, advertising providers may perform automated processing for ad selection or measurement in accordance with visitor choices and their own policies.

11. Google AdSense and advertising

StefanoAlcantaraTattoo.com may use Google AdSense in the future.

Until advertising is enabled, the website should not load Google AdSense advertising tags.

If AdSense is activated:

• third-party vendors, including Google, may use cookies or other identifiers to serve and measure advertising;
• Google and its partners may use advertising cookies to serve ads based on visits to this or other websites where permitted;
• visitors will be provided with the required privacy and consent controls;
• personalized advertising will only be enabled where the required consent or other lawful basis exists.

For users in territories where Google requires a certified consent-management platform, advertising will be implemented together with a Google-certified CMP.

The Privacy Policy must be reviewed again when AdSense is actually activated to ensure it accurately reflects the advertising vendors and technologies then in use.

12. Security

Reasonable technical and organizational measures are used to protect personal data against unauthorized access, alteration, disclosure, loss or destruction.

No online system can guarantee absolute security.

13. Changes to this Privacy Policy

This Privacy Policy may be updated where the website, service providers, advertising technologies or legal requirements change.

The latest revision date will be shown at the top of this page.