TattooTermineStudio data processing
Information for independent studios considering TattooTermine for customer data. This page explains roles and agreement of a GDPR Article 28 DPA/AVV; it does not confirm a contract has been concluded with a studio.
- Service operator
- SEMAK TATTOO · Ivan Semak
Einzelunternehmen, Deutschland - Postal address
- Brüder-Grimm-Straße 50, 36396 Steinau an der Straße, Deutschland
- Support email
- support@tattootermine.com
- VAT identification number
- DE416360929
The parties’ roles
An independent studio determines purposes and means of processing its customer records and is the controller for that activity. The operator acts on the studio’s behalf only within the agreed scope. The operator’s own account administration, security and legal obligations are assessed separately. Use by the operator’s own SEMAK TATTOO studio does not alone create a separate processor.
Before entering customer data
Before transferring this data for an independent studio, agree the parties, subject and duration, people and data categories, purposes, instructions, security measures, subprocessors, audit rights and end of processing. Email support@tattootermine.com with studio name and address, a contact person and intended use, without real customer materials.
Scope and instructions
The possible scope covers contacts, appointments, notes, photographs, attachments, comments, roles and change information chosen by the studio. Team access and publication follow documented authority. Special categories require a separately agreed lawful scope; blanket sign-in consent does not legitimise them.
Protection and assistance
Contract annexes must describe technical and organisational measures, confidentiality, access separation, incident response and assistance with people’s rights requests. Technical checks of individual features are not whole-service certification and do not create an SLA. Agreed commitments must match actual operation.
Providers and transfers
Subprocessors, legal entities, functions, processing locations and international-transfer bases must be checked for the particular agreement. Change notifications and objection procedures must also be agreed. A public provider DPA link or European storage location does not replace those checks.
Return, deletion and backups
The agreement must determine return procedure and format, deletion periods and exceptions, restrictions on remaining copies and confirmation. Recovery must not revive revoked permissions or previously deleted data without review. Technical permission expiry is not a permanent-erasure period for studio data or archives.
Version and agreement
A specified DPA version, agreed annexes and documented acceptance by authorised parties are required. A support request, invitation, saved billing information or page view is not that acceptance. Use demonstration data until agreement and clarify customer-data conditions with support.