Privacy policy
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Tattoo Studio Jaga, owner: Evgenij Korsun
Walramstraße 4, 65183 Wiesbaden, Germany
Phone: +49 173 6745227 · Email: evgenij.korsun@yahoo.de
2. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically collects information in so-called server log files that your browser transmits:
browser type and version
operating system
referrer URL
host name of the accessing computer
time of the server request
IP address
Processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in providing the website in a technically flawless, secure and fast manner. A data processing agreement (Art. 28 GDPR) is in place with Vercel. Data transfers to the USA are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
3. Content management and media
The content of this website (texts, photos, videos) is managed with the Sanity content management system and partly delivered directly from the content delivery network of Sanity AS, Oslo, Norway (cdn.sanity.io). In the process, your IP address is transmitted to Sanity so that the files can be delivered to your browser. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliably displaying the content). Norway is a member of the European Economic Area.
4. Booking request form
If you contact us via the request form, we process the data you enter: name, email address, phone number and, optionally, your tattoo idea, the desired placement and a reference photo.
The request is sent to us by email via the delivery service Resend, Inc., San Francisco, USA. A data processing agreement is in place with Resend; data transfers to the USA are based on the EU Standard Contractual Clauses.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures, e.g. an appointment request) and your consent under Art. 6(1)(a) GDPR, which you give by ticking the checkbox. To prevent abuse, your IP address is processed briefly to limit the number of requests (Art. 6(1)(f) GDPR).
We store your data until your request has been fully dealt with or you ask us to delete it. Statutory retention periods remain unaffected.
5. Contact by email, phone or WhatsApp
If you contact us by email, phone or WhatsApp, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). Please note that the privacy policy of WhatsApp Ireland Ltd. also applies when you use WhatsApp.
6. Cookies
This website only uses technically necessary cookies. The cookie banner stores your choice in the cookie “cc_cookie” so that the banner does not reappear on every visit (storage period: 6 months). The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.
For audience measurement we use a cookieless analytics tool (see section 7). No marketing tools are used.
7. Web analytics with Pirsch
To analyse visitor numbers statistically we use Pirsch Analytics, a service of Emvi Software GmbH, Germany. Pirsch does not use cookies and does not store any information on your device.
When a page is visited, your IP address, your browser's user agent and a daily changing random value are combined into an anonymous identifier (hash). The IP address itself is not stored, and you cannot be recognised across several days or websites. Among other things, the pages visited, referrer, approximate origin (country), browser, operating system and device type are evaluated. The data is processed exclusively on servers in Germany.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the anonymous analysis of usage in order to improve our website. A data processing agreement is in place with Pirsch. More information: pirsch.io/privacy.
8. Google Maps
On the contact page you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The map is only loaded when you click “Load map” (two-click solution). Before that, no data is sent to Google. After the click, your browser transmits, among other things, your IP address to Google; data may also be transferred to the USA (basis: EU-U.S. Data Privacy Framework). Google may also set cookies.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by clicking. Consent only applies to the respective page view. More information: policies.google.com/privacy.
9. Fonts
The fonts used on this website are served locally from our server. No connection to servers of Google or other third parties is established.
10. Links to social networks
This website contains links to Instagram, Facebook, WhatsApp and Google Maps. These are plain links, not embedded content – no data is transferred to these providers unless you click the link. After clicking, the privacy policy of the respective provider applies.
11. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar. However, complete security of data transmission over the internet cannot be guaranteed.
12. Your rights
You have the right at any time:
to access the data we hold about you (Art. 15 GDPR),
to have inaccurate data rectified (Art. 16 GDPR),
to erasure (Art. 17 GDPR),
to restriction of processing (Art. 18 GDPR),
to data portability (Art. 20 GDPR),
to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
to withdraw consent with effect for the future (Art. 7(3) GDPR).
Simply contact us at evgenij.korsun@yahoo.de.
13. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.
Last updated: October 2026