Privacy Policy

1. Data controller

The controller responsible for personal data processed through StefanoAlcantaraTattoo.com is:

Tamara Florán-Vélaz

NIF52317187F

AddressC/ Calvario 86, 11520 Rota (Cádiz), España

Emailcontacto@stefanoalcantaratattoo.com

WebsiteStefanoAlcantaraTattoo.com

2. Scope

This Privacy Policy explains how personal data may be processed when visitors use StefanoAlcantaraTattoo.com, contact the editorial team or interact with embedded third-party services.

StefanoAlcantaraTattoo.com is an independent editorial publication and is not the official website of Stefano Alcántara, the featured tattoo studios or the New York Empire State Tattoo Expo.

3. Personal data we may process

3.1. Contact form data

When a visitor uses the contact form, the following information may be processed:

• name;
• email address;
• subject;
• message;
• any information voluntarily included in the message.

The contact form should not be used to submit sensitive personal information unless strictly necessary.

3.2. Technical and security information

Hosting and infrastructure providers may process technical information required to operate and protect the website, which may include:

• IP address;
• browser information;
• device information;
• date and time of access;
• requested URLs;
• technical logs;
• security and anti-abuse data.

3.3. Embedded media

The website may include privacy-enhanced embedded content, including YouTube videos.

Where click-to-load technology is used, the external video provider is not contacted until the visitor chooses to activate the video.

Once activated, the external provider may process technical information in accordance with its own privacy policies.

4. Purposes and legal bases

Personal data may be processed for the following purposes:

A. Responding to editorial enquiries, corrections, factual updates, image-rights requests, copyright matters or website feedback.

Legal basisLegitimate interest in operating the publication and responding to communications voluntarily initiated by visitors.

B. Website security, fraud prevention, debugging and technical operation.

Legal basisLegitimate interest in maintaining the security, availability and integrity of the website.

C. Compliance with legal obligations and the establishment, exercise or defence of legal claims.

Legal basisCompliance with legal obligations and legitimate interests where applicable.

D. Advertising and advertising measurement.

If Google AdSense or another advertising service is activated, non-essential advertising technologies will be used only in accordance with applicable consent requirements.

Where consent is required, the legal basis will be the visitor's consent.

5. Contact form

Messages submitted through StefanoAlcantaraTattoo.com are received by the editorial team responsible for this publication.

They are not automatically delivered to:

• Stefano Alcántara;
• Stefano's Tattoo Studio New York;
• Stefano's Tattoo Studio Fort Lauderdale;
• the Lima tattoo studio;
• the New York Empire State Tattoo Expo organization.

The form is intended for matters concerning this publication, including corrections, editorial enquiries, factual updates, image rights, copyright requests and website feedback.

6. Recipients and service providers

Personal data may be processed by service providers acting on behalf of the controller where necessary to operate the website.

Depending on the final production configuration, these providers may include:

• hosting and infrastructure providers such as Vercel;
• transactional email providers such as Resend;
• consent-management providers;
• Google and YouTube when visitors activate embedded video content;
• Google and advertising technology providers if Google AdSense is enabled.

Service providers must only be used where appropriate contractual and data-protection safeguards are in place.

Personal data is not sold by the operator of StefanoAlcantaraTattoo.com.

7. International data transfers

Some technology providers may process data outside the European Economic Area.

Where an international transfer takes place, appropriate safeguards required by applicable data-protection law will be used, such as an applicable adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.

8. Data retention

Contact enquiries will normally be retained only for as long as necessary to respond to and manage the communication.

Unless a longer period is required for legal reasons, editorial correspondence may generally be retained for up to 12 months after the last relevant communication.

Technical and security logs are retained according to the legitimate operational and security needs of the website and the retention policies of the relevant infrastructure providers.

Data necessary to demonstrate consent choices may be retained for the period reasonably required to demonstrate compliance.

9. Rights

Under applicable data-protection law, individuals may have the right to request:

• access to their personal data;
• rectification of inaccurate data;
• erasure of their data;
• restriction of processing;
• objection to processing;
• data portability where applicable;
• withdrawal of consent at any time where processing is based on consent.

Requests may be sent to:

contacto@stefanoalcantaratattoo.com

The identity of the requester may be reasonably verified before a request is fulfilled.

Individuals also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

10. Automated decision-making

The operator of StefanoAlcantaraTattoo.com does not make decisions producing legal or similarly significant effects solely through automated processing.

If advertising services are activated, advertising providers may perform automated processing for ad selection or measurement in accordance with visitor choices and their own policies.

11. Google AdSense and advertising

StefanoAlcantaraTattoo.com may use Google AdSense in the future.

Until advertising is enabled, the website should not load Google AdSense advertising tags.

If AdSense is activated:

• third-party vendors, including Google, may use cookies or other identifiers to serve and measure advertising;
• Google and its partners may use advertising cookies to serve ads based on visits to this or other websites where permitted;
• visitors will be provided with the required privacy and consent controls;
• personalized advertising will only be enabled where the required consent or other lawful basis exists.

For users in territories where Google requires a certified consent-management platform, advertising will be implemented together with a Google-certified CMP.

The Privacy Policy must be reviewed again when AdSense is actually activated to ensure it accurately reflects the advertising vendors and technologies then in use.

12. Security

Reasonable technical and organizational measures are used to protect personal data against unauthorized access, alteration, disclosure, loss or destruction.

No online system can guarantee absolute security.

13. Changes to this Privacy Policy

This Privacy Policy may be updated where the website, service providers, advertising technologies or legal requirements change.

The latest revision date will be shown at the top of this page.