Privacy Policy

01 Data Controller

The Data Controller responsible for the processing of personal data collected through this Website and in connection with the Yearbook publications is:

The Data Controller is committed to protecting your personal data and ensuring that it is processed in a lawful, fair, and transparent manner, in full compliance with the GDPR and applicable Italian law.

02 Types of Data Processed

2.1 Browsing Data

The systems and software used to operate this Website automatically collect, during normal operation, certain technical data whose transmission is implicit in the use of Internet communication protocols. This includes: IP addresses (anonymised), browser type and version, operating system, pages visited, date and time of access, and referring URLs. These data are not collected to be associated with identified individuals and are used solely to obtain aggregated statistical information on Website usage and to ensure its correct functioning and security. They are retained for a maximum of 90 days unless required for the investigation of unlawful activities.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in ensuring Website security and proper functioning.

2.2 Data Provided in Connection with Yearbook Participation

Tattoo artists and studio owners who wish to participate in one of the Tattoo Life Magazine Yearbook editions (Annuario Tatuatori Italiani, Jahrbuch, Yearbook, or other editions) are required to complete and sign a participation agreement (the "Contract"). In this context, the following personal and business data are collected:

• Studio name and legal entity name
• Name of the legal representative
• Business address, city, province, and postcode
• Phone number and email address
• VAT number and tax code
• Electronic invoicing data (SDI / PEC), where applicable
• Payment information (method selected: bank transfer, cheque, or PayPal)
• Photographic material and editorial content provided for publication
• Studio details for publication: names of tattoo artists and staff, address, phone, website, social media profiles, and any additional information the participant chooses to include

The provision of these data is necessary for the performance of the Contract. Failure to provide mandatory data will make it impossible to process the participation request and issue the relevant invoice.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract to which the data subject is party; Art. 6(1)(c) GDPR — compliance with legal obligations (fiscal and accounting requirements).

2.3 Data Provided Voluntarily via Contact or Information Requests

Users who contact us through the email addresses published on the Website voluntarily provide their contact details (name, email address, and any other information included in the message). These data are used solely to process and respond to the request received.

Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures taken at the request of the data subject.

03 Purposes and Legal Basis of Processing

3.1 Performance of the Yearbook Participation Contract

Personal and business data collected through the Contract are processed to manage the participation in the Yearbook edition selected, including layout production, printing, distribution, and invoicing. This processing is necessary for the execution of the Contract and the fulfilment of the related fiscal and administrative obligations under Italian and EU law.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract; Art. 6(1)(c) GDPR — legal obligation.

3.2 Publication of Studio Data and Photographic Material

The studio information and photographic content provided by participants are published in the printed Yearbook edition and, as included in the participation package, in a dedicated online gallery on www.tattoolife.com and on the official Tattoo Life Magazine social media channels, for the duration of one year from the date of publication. By signing the Contract, the participant expressly authorises Mediafriends S.r.l. to use and publish the submitted material for these purposes, and assumes full responsibility for the content provided, including compliance with applicable copyright, trademark, and privacy laws.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract; Art. 6(1)(a) GDPR — consent expressed through the contractual agreement.

3.3 Email Communications and Newsletter (MailUp)

Participants who complete the Yearbook Contract and provide their email address will be included in the Tattoo Life Magazine mailing list, managed through MailUp (MailUp S.p.A., Via Famagosta 75, 20142 Milan, Italy — an EU-based platform), as expressly indicated in the Contract itself. This mailing list is used to send informational and promotional communications relating to Tattoo Life Magazine publications, Yearbook editions, editorial news, events, and related products and services of Mediafriends S.r.l.

Consent to receive such communications is collected through the dedicated checkbox in the Contract. Participants may withdraw consent and unsubscribe at any time by clicking the unsubscribe link included in every email, or by sending a written request to info@tattoolife.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect the performance of the Contract.

Legal basis: Art. 6(1)(a) GDPR — consent.
MailUp Privacy Policy: www.mailup.com/privacy-policy/

3.4 Compliance with Legal and Fiscal Obligations

Data provided in the context of a commercial transaction (participation in the Yearbook) are processed for the purpose of issuing invoices, maintaining accounting records, and fulfilling all applicable fiscal, administrative, and legal obligations under Italian and EU law. These data are retained for the period required by law (generally 10 years under Italian fiscal law).

Legal basis: Art. 6(1)(c) GDPR — legal obligation.

3.5 Protection of Legal Rights

Personal data may be processed where necessary to establish, exercise, or defend legal claims, including in the event of disputes arising from the Contract. Any dispute arising from or in connection with the Contract shall be subject to the exclusive jurisdiction of the Court of Milan (Foro di Milano), as stated in the contractual terms.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest.

04 Data Retention

• Contractual and participation data (Yearbook): retained for the duration of the contractual relationship and for 10 years thereafter, as required by Italian fiscal and civil law.
• Published editorial content (studio data and photographs in the printed Yearbook): once published, the printed edition constitutes a permanent editorial record and cannot be withdrawn. Online gallery content is retained for one year from the date of publication, in accordance with the contractual terms.
• Email and newsletter data (MailUp): retained until consent is withdrawn and, in any case, no longer than 24 months from the last interaction.
• Contact request data: retained for up to 12 months from the date of the last interaction.
• Browsing data and server logs: retained for a maximum of 90 days, unless required for the investigation of unlawful activities.
• Invoicing and fiscal records: retained for 10 years as required by applicable Italian law (D.P.R. 633/1972 and D.P.R. 600/1973).

05 Methods of Processing and Security

Personal data are processed using electronic and, where necessary, manual tools, in compliance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality set out in Art. 5 GDPR. Appropriate technical and organisational security measures are implemented to protect personal data against unauthorised access, loss, destruction, or unlawful processing. Access to personal data is restricted to authorised personnel of Mediafriends S.r.l. who require it for the performance of their duties. Hosting infrastructure is located in Italy.

However, it is not possible to guarantee that such measures completely eliminate any risk of unauthorized access or data disclosure. To report security concerns or malfunctions, please contact: info@tattoolife.com

06 Data Recipients

Personal data may be disclosed to the following categories of recipients, who act either as Data Processors pursuant to Art. 28 GDPR or as independent Data Controllers, depending on the nature and circumstances of the processing:

• Authorised personnel of Mediafriends S.r.l. involved in the production, administration, and distribution of the Yearbook publications;
• Printing and production companies involved in the physical production of the Yearbook;
• IT and hosting service providers (servers located in Italy);
• MailUp S.p.A. — email marketing platform (EU-based);
• Accounting, legal, and administrative consultants and professionals;
• Public authorities and institutions, where required by applicable law.

Personal data are never sold, rented, or otherwise disclosed to third parties for their own commercial or marketing purposes.

07 Transfers Outside the EEA

Personal data collected through this Website and in connection with the Yearbook publications are processed primarily within the European Economic Area (EEA). The email marketing platform used (MailUp S.p.A.) is an Italian company and processes all data within the EU. No systematic transfers of personal data to third countries are carried out in connection with the Yearbook operations.

In the event that any transfer to a third country outside the EEA becomes necessary, the Data Controller shall ensure that such transfer is carried out in compliance with Chapter V of the GDPR, through one of the following safeguards: an adequacy decision issued by the European Commission, or Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914/EU). Further information on applicable safeguards may be requested by writing to info@tattoolife.com.

08 Cookies

This Website uses only technical cookies, strictly necessary for its correct functioning. No profiling cookies, behavioural advertising cookies, or third-party tracking cookies are used.

Technical Cookies

Technical cookies are used exclusively to ensure the basic functioning of the Website (session management, navigation, and storage of the user's cookie consent preference). They do not collect personal data for profiling or marketing purposes and do not require prior consent from the user, in accordance with applicable Italian and EU law (ePrivacy Directive 2002/58/EC and Garante per la protezione dei dati personali guidelines).

Google Fonts

This Website uses Google Fonts for typography. All font files are self-hosted directly on the Website's server. No requests are sent to Google's servers, and no data (including IP addresses) is transmitted to Google LLC. The use of Google Fonts in this configuration involves no cookie setting and no personal data processing.

Managing Cookies

Users may configure their browser to block or delete cookies at any time. Please note that disabling technical cookies may impair the correct functioning of the Website. Instructions for managing cookies in the most commonly used browsers:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge
• Opera

09 Minors

This Website and the Yearbook publications are directed exclusively at professional tattoo artists and studio owners acting in a business capacity. No person under the age of 18 may participate in a Yearbook edition, sign the participation Contract, or submit any personal data through this Website without the prior consent of their parent or legal guardian, unless otherwise permitted by applicable law. The Data Controller does not knowingly collect personal data from minors. If such data are inadvertently collected, they will be promptly deleted upon notification to info@tattoolife.com.

10 Rights of the Data Subject

In accordance with Articles 15–22 of the GDPR, data subjects have the right at any time to:

• Access their personal data and obtain a copy, including information on purposes, categories of recipients, retention periods, and applicable safeguards (Art. 15 GDPR);
• Rectification of inaccurate or incomplete personal data (Art. 16 GDPR);
• Erasure ('right to be forgotten') where processing lacks a lawful basis or the purpose has ceased, subject to applicable legal retention obligations (Art. 17 GDPR);
• Restriction of processing in specific circumstances, e.g. while accuracy is contested (Art. 18 GDPR);
• Data portability — receive data in a structured, machine-readable format and transmit it to another controller, where processing is based on consent or contract (Art. 20 GDPR);
• Object to processing based on legitimate interest, including for direct marketing purposes (Art. 21 GDPR);
• Withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal (Art. 7(3) GDPR);
• Lodge a complaint with the competent supervisory authority.

Requests to exercise any of the above rights may be submitted by email to info@tattoolife.com or by written communication to Mediafriends S.r.l., V.le Papiniano 49, 20123 Milano, Italy. We may request proof of identity to protect against unauthorised access. We will respond within one month of receipt of the request, extendable by two further months in complex cases (Art. 12(3) GDPR).

The competent supervisory authority in Italy is the Garante per la protezione dei dati personali (www.garanteprivacy.it). Data subjects may also lodge a complaint with the supervisory authority of their habitual residence or place of work within the EU.

No automated individual decision-making or profiling pursuant to Art. 22 GDPR is carried out in connection with this Website or the Yearbook publications.

11 Third-Party Websites

This Website may contain links to external websites not managed or controlled by the Data Controller, including the social media profiles of Tattoo Life Magazine (Facebook, Instagram, YouTube). When users click on such links, they leave this Website and are subject to the privacy policies of the respective third-party platforms. The Data Controller is not responsible for the content, privacy practices, or data processing activities of such external websites.

12 Changes to This Privacy Policy

The Data Controller reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, processing activities, or the services used. The updated version will be published on this page with a revised "Last updated" date. Users and participants are encouraged to review this page periodically. Continued use of the Website or submission of a participation Contract after any update constitutes acceptance of the revised Policy.