Privacy Policy
En Bon Vivant Tattoo Studio nos tomamos en serio la privacidad de las personas que nos escriben y que pasan por nuestro estudio. En esta página explicamos qué datos recogemos, para qué los usamos, durante cuánto tiempo los conservamos y cómo puedes ejercer tus derechos.
1. Responsable del tratamiento
- Company Name: MONTERA INK 2023, S.L.U.
- Trade Name: Bon Vivant Tattoo Studio
- Tax ID Number: B72792153
- Address: Calle Montera, 24 — 28013 Madrid (Spain)
- Phone: 914 35 21 84
- Email: info@bonvivanttatoostudio.com
2. Treatments We Offer
2.1. Inquiries and Requests for Quotes
Information: name, phone number, email address, a description of the work you’re requesting, and—if you include them—any images or reference designs you upload to the form.
Purpose: to address your inquiry, evaluate the work, prepare a quote for you, and get in touch with you.
Legal basis: your consent, which you provide by checking the box on the form, and the implementation of pre-contractual measures you have requested (Articles 6.1.a and 6.1.b of the GDPR).
Retention: While we process your inquiry and for up to [12] months thereafter, unless a service relationship begins or you request that we delete your information sooner.
2.2. Contact via WhatsApp
Data: phone number, profile name, and the content of the messages you send us.
Purpose: To answer questions and schedule appointments through this channel.
Legal basis: your consent when initiating the conversation and the implementation of pre-contractual measures (Articles 6.1.a and 6.1.b of the GDPR).
Retention: For the duration of the conversation and as long as necessary to address any potential complaints. Please note that WhatsApp is a third-party service with its own terms and privacy policy.
2.3. Appointment Scheduling and Service Delivery
Data: identifying and contact information, identification document to verify legal age, work history, and payment information.
Purpose: To schedule and manage your appointments and provide tattooing, piercing, micropigmentation, dental gemstone, or other contracted services.
Legal basis: the performance of the service agreement (Article 6.1.b of the GDPR).
Retention: for the duration of the relationship with the firm and, thereafter, for the statute of limitations periods applicable to legal actions arising from the service.
2.4. Informed Consent and Health Data
Data: the information you provide in the questionnaire and the informed consent form prior to the session, which may include allergies, intolerances, medications, skin conditions, pregnancy or breastfeeding, relevant medical history, and, in the case of reconstructive micropigmentation, a history of cancer. This data falls under the special categories listed in Article 9 of the GDPR.
Purpose: to assess whether the procedure can be performed safely, to adapt the technique and products, to prevent adverse reactions, and to comply with the registration requirements established by health regulations.
Legal basis: your explicit consent (Article 9.2.a of the GDPR) and compliance with the health obligations applicable to tattoo, micropigmentation, and body piercing establishments in the Community of Madrid (Articles 6.1.c and 9.2.i of the GDPR).
Retention: for the period required by applicable health regulations. Access to this data is restricted to personnel involved in providing the service.
2.5. Photos of the work completed
Data: images of the work you have done, which may include parts of your body and, if applicable, your identifiable image.
Purpose: to document the work and, if you give us separate permission to do so, to publish it on our website, on our Instagram profile, and in the studio’s promotional materials.
Legal basis: your specific and distinct consent (Article 6.1.a of the GDPR and Organic Law 1/1982). You may refuse publication without this affecting the contracted service in any way, and you may withdraw this consent at any time by writing to us at info@bonvivanttattostudio.com.
Retention: until you withdraw your consent. Withdrawal does not affect the lawfulness of previous posts or any copies that third parties may have downloaded or shared on their own.
2.6. Billing and Legal Obligations
Data: identification and tax information, and details of transactions carried out.
Purpose: To issue invoices and comply with accounting, tax, and commercial obligations.
Legal basis: compliance with legal obligations (Article 6.1.c of the GDPR).
Retention: the periods specified in commercial and tax regulations, currently six and four years, respectively.
2.7. Business Communications
Information: name and email address or phone number.
Purpose: To send you news, promotions, and reminders from the studio.
Legal basis: your consent, or our legitimate interest in sending communications about services similar to those you have already contracted, in accordance with Article 21.2 of the LSSI-CE.
Retention: until you request to unsubscribe, which you can do at any time by clicking the link included in each communication or by writing to us.
2.8. Browsing the Web
Data: IP address, device identifiers, and browsing data collected through cookies and similar technologies.
Purpose: to enable the website to function, analyze its use, and, where applicable, measure the effectiveness of our advertising campaigns.
Legal basis: your consent, managed through the cookie panel, except for strictly necessary technical cookies. You can find more details on our Cookie Policy.
3. Who do we share your information with?
We do not sell or share your information with third parties for commercial purposes. Only the following parties have access to it:
- Our web hosting and email provider.
- The tax and accounting firm that handles the firm’s billing.
- Providers of analytics and digital advertising tools, in accordance with the settings you authorize in the cookie panel.
- The banks and payment gateways required to collect payment for the service.
- Government agencies and courts, when there is a legal obligation to do so.
All vendors that process data on our behalf do so as data processors, under a contract signed in accordance with Article 28 of the GDPR.
4. International Transfers
Some of the providers we use, such as analytics, advertising, and social media services, may process data outside the European Economic Area. In such cases, these transfers are based on an adequacy decision by the European Commission, the Standard Contractual Clauses, or other safeguards provided for in Chapter V of the GDPR. You may request information about the safeguards in place by writing to info@bonvivanttatoostudio.com
5. Your Rights
You may exercise the following rights at any time:
- Access: Find out what personal data we process about you.
- Correction: Correcting inaccurate or incomplete data.
- Deletion: Request that we delete your data when it is no longer necessary, subject to the limitations imposed by health and tax regulations.
- Objection: to object to certain processing activities, including the publication of photographs and the sending of marketing communications.
- Restriction: Request that we suspend processing while a complaint is being resolved.
- Data portability: Receive your data in a structured, commonly used format.
- You may withdraw your consent at any time, without this affecting the lawfulness of the processing that took place prior to the withdrawal.
To exercise these rights, please write to us at info@bonvivanttatoostudio.com or at Calle Montera, 24, 28013 Madrid, specifying which right you wish to exercise and including a copy of your ID. We will respond within one month.
If you believe we have not properly addressed your request, you may file a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es).
6. Minors
Our services are not provided to minors in accordance with applicable health regulations, and the form on our website is intended exclusively for individuals over the age of 18. If we discover that we have received information from a minor without the appropriate authorization, we will delete it.
7. Data Security
We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access, or improper disclosure, taking into account the nature of the data being processed and, in particular, the sensitive nature of the health information collected in the informed consent forms.
8. Automated Decisions
We do not make automated decisions or create profiles that have legal effects on you or that significantly affect you in a similar way.
9. Changes to This Policy
We may update this policy to reflect regulatory changes or new services. We will always post the current version on this page.
Last updated: [August 1, 2026].