Privacy notice
How information submitted through this website is used and how to exercise your rights.
Notice currently in effect
01
Controller and contact
Data controller: MIRABELLA STEFANO, VAT IT03607310160, tax code MRBSFN80D05H509D, Via 21 Aprile 59, 24056 Fontanella (BG), Italy. Privacy enquiries: info@stetotattoo.it.
02
Data and whether it is required
The project enquiry form collects full name, email, phone number, city, body placement, approximate scale, project description, a declaration of being an adult, and technical data required for security and delivery. No date of birth is requested: the declaration is enough, and identification is checked in person before a session if needed. Instagram, availability and reference images are optional. Required information is necessary to review and answer the enquiry; without it the request cannot be sent. Do not include unnecessary health information or intimate images: upload only the body area needed for the review.
03
Purposes and legal bases
Booking data is used to review and answer an enquiry, as a pre-contractual step requested by the person submitting it (Article 6(1)(b) GDPR). Anti-spam checks, service security and legal protection rely on the controller’s legitimate interests (Article 6(1)(f) GDPR). Legal obligations rely on Article 6(1)(c) GDPR. No solely automated decisions are made and personal data is not sold.
04
Recipients and providers
Data can be accessed by Steto and authorised administrators. The service may use Convex (EU-region database and storage), Resend (email delivery), Vercel (hosting and technical metrics), Sanity (delivery of published editorial content, which receives the browser's IP address on every page), Cloudflare Turnstile (anti-spam protection) and Clerk (restricted-area authentication) as technical providers. If a provider processes data outside the European Economic Area, transfers rely on the safeguards available under GDPR Chapter V, such as adequacy decisions or Standard Contractual Clauses.
05
Retention
Enquiries and reference images are automatically deleted within 24 months of their last update. Expired technical submission sessions are removed earlier. If an enquiry leads to a contractual relationship, information required for that relationship is kept separately for the periods required by civil, tax and legal-protection obligations.
06
Minors
The form is intended for adults. Anyone under 18 should not submit their data through the website: contact must be handled by the person holding parental responsibility, who can write to info@stetotattoo.it. If we receive data relating to a minor outside this condition, we delete it.
07
Rights and complaints
You may request access, correction, deletion, restriction or portability, or object to processing, by emailing info@stetotattoo.it. You may also lodge a complaint with the Italian Data Protection Authority. The acknowledgement required by the form is not marketing consent and does not limit these rights.
08
Works waiting list
On the Works on paper page you can leave your email to be told when the original works go on sale. The legal basis is your consent (Article 6(1)(a) GDPR and Article 130 of the Italian Privacy Code), separate from the booking one and revocable at any time. You may leave a name, optional, used only to address the messages. Sign-up uses double confirmation: we record the address, any name given, the language, the date and the exact wording you accepted, then send a single email to confirm the address is yours. Until you confirm you receive nothing else and the address is deleted within 30 days. After confirmation we process only the email address and any name given, for the opening notice and the availability of works; the data needed for a purchase (address, billing, payment) will be collected only when an order is placed, on the basis of the contract rather than consent; every message carries an unsubscribe link that works without writing to us. Addresses that unsubscribe are deleted within 30 days. Email is delivered through Resend and sign-up is protected by Cloudflare Turnstile.