Privacy Policy and Legal Notice
Privacy Policy
Information pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
1. Data controllers
The website www.pinkesteticaetattoo.it presents the independent professional activities operating under the shared trading name P.ink Estetica & Tattoo, at Via dell'Orto 11R, Florence, Italy.
The professionals are:
Alessia Camerati
Alessia Camerati Beauty Ink
Italian VAT number: 06746580486
Business Register (REA): FI-652902
Via dell'Orto 11R, Florence, Italy
Simone Camerati
Mone Ink di Simone Camerati
Italian VAT number: 06746590485
Business Register (REA): FI-652904
Via dell'Orto 11R, Florence, Italy
For the management of the website and initial enquiries received through shared contact channels, the professionals act as joint controllers to the extent that they jointly determine the purposes and means of processing.
Each professional remains independently responsible for personal data processed in connection with their own services, client records and invoicing.
Shared privacy contact: pinksanfrediano@gmail.com
2. Categories of personal data
Depending on website usage and communications with the studio, the following information may be processed:
- Technical browsing data, including IP addresses, browser information, request dates and times, and requested resources.
- Contact details, including names, telephone numbers and email addresses.
- Information voluntarily provided in enquiries, quotation requests and appointment discussions.
- Photographs of professional work, where they constitute personal data.
- Essential records required to handle requests concerning data protection rights.
Visitors are asked not to share health information or other particularly sensitive data through general enquiry channels unless specifically requested by the relevant professional through appropriate procedures.
Personal data needed for professional services is governed by the privacy notices provided by the relevant professional.
3. Purposes and legal bases
Website operation and security: delivering website pages, preventing misuse and diagnosing technical issues. Legal basis: legitimate interests under Article 6(1)(f) GDPR, where applicable.
Handling enquiries: responding to messages, providing service information and quotations, and discussing appointments. Legal basis: steps requested by the individual prior to entering into a contract under Article 6(1)(b) GDPR, where applicable; legitimate interests for general enquiries.
Legal obligations: meeting applicable legal requirements and responding to lawful requests from authorities. Legal basis: Article 6(1)(c) GDPR.
Publishing photographs: displaying professional work for illustrative and promotional purposes, subject to the client's separate, optional authorisation. Legal basis: consent under Article 6(1)(a) GDPR. Where photographs reveal special categories of personal data, a valid condition under Article 9 GDPR is also required.
Handling privacy rights requests: receiving, assessing and documenting requests from individuals. Legal basis: compliance with data protection obligations and, where applicable, protection of the controllers' legal rights.
Personal data collected through the website is not used for newsletters, advertising profiling or automated marketing campaigns.
4. Contact options
The website is for informational purposes only. It does not support online purchases, payments or automatically confirmed bookings.
Visitors may contact the studio by telephone, email or WhatsApp.
The website form prepares a message intended for WhatsApp. The information entered is not stored in a website database; communication through WhatsApp takes place when the visitor chooses to proceed.
Providing personal data is voluntary. However, the studio may be unable to respond without the necessary information.
5. Data recipients and external services
Personal data may be processed by the professionals and, where necessary, by service providers supporting the website and communications.
These services include:
- Aruba S.p.A., providing domain registration and website hosting, acting in accordance with the data protection roles established under its applicable contractual terms.
- Google, providing the shared Gmail email service.
- WhatsApp, providing the messaging service.
Professional advisers and public authorities may also receive data where legally appropriate.
The use of international services may involve processing or transfers of personal data outside the European Economic Area. Information concerning providers' independent processing activities and applicable safeguards is available in their respective privacy notices:
- Aruba: https://www.aruba.it/informativa_arubaspa.pdf
- Google: https://policies.google.com/privacy
- WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea
Instagram and Google Maps are accessed through external links only when visitors choose to open them. The website does not automatically embed social media feeds or interactive maps.
6. Data retention
Enquiries without a booking: WhatsApp conversations and emails that do not result in an appointment are deleted once no longer necessary, and in any event within 14 days of the last communication, unless a specific legitimate reason justifies further retention.
Client communications: messages required for appointment management and continuity of the professional relationship are kept while genuinely needed. Conversations are reviewed at least annually, and those relating to inactive clients are deleted within 24 months of the last meaningful professional contact, unless further retention is legally justified and documented.
Privacy request register: essential records relating to data protection rights requests are retained for three years after each request is closed, unless further retention is justified.
Published photographs: images remain online while publication serves the authorised purposes and a valid condition for processing continues to apply. Requests to withdraw consent are assessed promptly, and images are removed where required.
Technical browsing data: the hosting service may process technical records required to deliver website pages, protect systems and diagnose technical issues. Retention is determined by the technical purposes, applicable log management and rotation procedures, and any legal obligations affecting the provider. The professionals do not use these records for visitor profiling or commercial analytics.
Professional service records, informed consent documents and tax records are governed by the relevant professional's separate privacy information and applicable retention obligations.
7. Data security
The professionals implement security measures appropriate to their processing activities, including restricted access, account protection and separate storage of their respective client records.
The shared email account is protected by two-factor authentication.
8. Cookies and similar technologies
The website is designed without Google Analytics, Meta Pixel, advertising profiling systems, embedded maps or embedded social media feeds.
Website fonts are hosted locally, without automatic requests to Google Fonts.
The hosting service may use strictly necessary technical tools for website operation and security.
Advertising and profiling cookies are not intended to be used. Any technical cookies are described according to the actual configuration of the service.
9. Data protection rights
Subject to the conditions of the GDPR, individuals may request access to their personal data, rectification, erasure, restriction of processing, data portability and may object to certain processing activities.
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.
Requests may be sent to:
Requests are answered without undue delay and generally within one month of receipt, subject to extensions permitted by law.
Individuals may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali): https://www.garanteprivacy.it
10. Essential elements of the joint controller arrangement
Alessia Camerati and Simone Camerati jointly manage the P.ink Estetica & Tattoo website and the shared channels used to receive and organise initial enquiries.
Simone Camerati is the main contact for domain registration, hosting and technical website management.
Both professionals cooperate in handling shared communications and data protection rights requests.
Each professional remains independently responsible for their own services, client records and invoicing.
The shared contact point is pinksanfrediano@gmail.com. Individuals may nevertheless exercise their rights in respect of either joint controller.
11. Updates
This Privacy Policy may be amended to reflect changes in services, processing activities or applicable law.
Legal Notice
Business information
P.ink Estetica & Tattoo is the shared trading name used to present two independent professional activities operating at Via dell'Orto 11R, Florence, Italy.
Alessia Camerati
Alessia Camerati Beauty Ink
Italian VAT number: 06746580486
Business Register (REA): FI-652902
Simone Camerati
Mone Ink di Simone Camerati
Italian VAT number: 06746590485
Business Register (REA): FI-652904
Business address: Via dell'Orto 11R, Florence, Italy
Telephone: +39 055 2335570
Mobile and WhatsApp: +39 331 4200880
Email: pinksanfrediano@gmail.com
The professionals operate independently and retain separate professional and tax responsibilities.
Purpose of the website
The website presents the services and professional work carried out at the studio.
Content is provided for general information and illustration and does not constitute confirmation of appointment availability or a binding booking offer.
Quotations, appointments and service details are agreed directly with the relevant professional.
The website does not support online payments or automatically confirmed bookings.
Photographs and content
Photographs of professional work are published on the basis of the appropriate authorisations obtained by the professionals, where required.
Texts, images, graphic elements and distinctive signs remain subject to the applicable rights and licences.
External services and links
The website contains links to external services, including WhatsApp, Instagram and Google Maps.
When visitors follow these links, the destination services operate according to their own terms and privacy notices.
Data protection
For more information, please refer to the Privacy Policy section of this page.
For privacy enquiries: pinksanfrediano@gmail.com.