1. Controller
TETOVÁNÍ s.r.o.
Registered office: Stará 97/17, Zábrdovice, 602 00 Brno
Company ID (IČO): 05916933
Court registration: Section C, File 98839, Regional Court in Brno
Email: info@tattoobar.cz
2. What this policy covers
This policy describes cookies, localStorage, sessionStorage and similar technologies used on tattoobar.cz, as well as network connections to external services. Some technical data, particularly the IP address, browser information, referrer, visited URL and time of the request, may be personal data even if the storage itself contains no name or contact details.
We store information on or read information from a device without consent only where this is strictly necessary to transmit a communication or provide a service expressly requested by the visitor. We require prior consent for preferences, analytics, marketing and optional external content under Section 89(3) of Act No. 127/2005 Coll.
Where an optional technology involves the processing of personal data, the lawful basis is consent under Article 6(1)(a) of the GDPR. Basic website delivery, security and the handling of an expressly submitted enquiry are governed by the relevant lawful basis described in the Privacy Policy.
3. Categories
Strictly necessary
These technologies ensure secure website delivery, basic functions expressly requested by the visitor and storage of the visitor's cookie choice. They may be used without consent only to the extent that they are genuinely necessary.
Preferences
After consent, these technologies can remember selected interface settings and load optional content, such as a map.
Analytics
These technologies measure how the website is used. Analytics scripts run and device data is accessed only after consent to this category.
Marketing
These technologies are used for advertising measurement or personalisation. We do not currently use Google Ads or any other marketing pixel.
4. Choosing, changing and withdrawing consent
Optional technologies remain disabled until the visitor actively gives consent. We do not treat closing the banner, inactivity or continued browsing as consent.
The visitor can accept all optional categories, reject them all or choose individual settings. The accept and reject buttons are available in the same layer. The choice can be changed at any time using the Cookie settings button available on the website.
Withdrawing consent is as easy as giving it and does not affect the lawfulness of earlier processing. After consent is withdrawn, optional services will not load again; the page reloads to terminate optional content that has already loaded.
We store the choice locally in the browser under the key tb_site_consent_v1. The record contains the settings version, the values of the individual categories and the time of the choice; it contains no name or contact details. It is retained for 180 days. We then ask the visitor to make a new choice. If the purposes or recipients change materially, we ask for a new choice sooner.
5. Technologies we use
Updated 9 August 2026. A new service, or a change to its purpose, recipient or retention period, requires this overview to be updated before the service is activated.
Tilda, website delivery and the form
Tilda and its infrastructure deliver the page and make the native form available. When a request is made, they may process the IP address, user agent, referrer, requested URL and time. Form values are processed only after the visitor expressly submits the form and are governed by the Privacy Policy.
No Tilda cookie was detected in controlled home-page responses during an ordinary load. A copy of an expressly submitted enquiry is retained in the Tilda interface for no longer than 30 days. Essential technical processing is limited to delivery, security and a function expressly requested by the visitor.
Cookie choice
tb_site_consent_v1 v localStorage stores the version, the three optional categories and the time of the choice for 180 days. Its purpose is to remember and respect the visitor's choice. When consent is withdrawn, the record is overwritten with a rejection of all optional categories; when the version changes, when the period expires or when the record is corrupted, the choice is invalidated and the website requests it again.
Interface preference
tb.intake.consultation.language.v1 v localStorage stores the manually selected form language only after consent to the Preferences category, for no longer than 180 days. Without this consent, the website neither reads the language from persistent storage nor writes the language choice to it.
Tilda Analytics
The Tilda analytics script loads only after consent to the Analytics category. It may send the page, referrer, URL and UTM parameters, user agent, language, platform and plugin information, screen properties, time zone, touch points and technical identifiers to the Tilda interface.
We do not currently use Google Analytics or any other separately added external analytics tool.
Tilda form protection and Google reCAPTCHA
The website uses Tilda's standard form protection against spam. Google reCAPTCHA does not load during an ordinary page view. If the visitor expressly submits the form repeatedly from the same IP address, Tilda's server may use forms.tildaapi.one to request additional verification and display a Google reCAPTCHA checkbox.
When the verification is performed, Google Cloud EMEA Limited, acting as a further processor engaged by Tilda, may process the IP address, browser and device data, and behaviour and interaction data. When the service starts, it sets the essential cookie _GRECAPTCHA for security analysis and protection against spam and misuse. The cookie and related technical data are retained for the period determined by the provider's settings for performing and protecting this security check. The verification is not used for this website's analytics or marketing.
OpenStreetMap map
The embedded map on the contact page loads only after consent to the Preferences category. The OpenStreetMap Foundation may receive the IP address, browser or application type, operating system, referrer, date, time and requested map resources. Without consent, the address text and ordinary route links remain available.
Google Fonts
Fonts are loaded from fonts.googleapis.com a fonts.gstatic.com. The Google Fonts interface does not set or record cookies during this load, but Google receives technical data from the HTTP request, particularly the IP address, requested URL, user agent and referrer. The purpose is to display the website consistently and legibly.
Local data layer and external links
The local data layer prepares only permitted events without names, contact details or form content. It does not make network requests itself. GTM, GA4 and Google Ads are not active.
Links to social networks, maps and communication services establish a connection to the external provider only after the visitor deliberately clicks them.
6. Recipients and international transfers
We use Tilda Platform Cloud Services Co. LLC as a processor to operate the website. Under its data processing agreement, it may engage, in particular, Hetzner Online GmbH, G-Core Labs S.A. and Google Cloud EMEA Limited. Tilda states that processing takes place in the EU and the USA and that standard contractual clauses are used for transfers to countries without an adequacy decision; for individuals in the EU and EEA, it also describes standard contractual clauses in relation to the United Arab Emirates. Details are available in Tilda's DPA.
During a reCAPTCHA security check, TETOVÁNÍ s.r.o. remains the controller, Tilda the processor and Google Cloud EMEA Limited a further processor engaged by Tilda. Under the service rules applicable from 2 April 2026, the reCAPTCHA customer acts as controller and Google as processor. reCAPTCHA is involved only in a security check triggered by repeated express submissions of the form, not during an ordinary page load. Further information is provided in the official reCAPTCHA FAQ.
When Google Fonts loads, Google is the recipient of the technical data. The terms for international processing are described in the Google Data Privacy Frameworks. When the map loads, the OpenStreetMap Foundation is an independent controller; details are provided in its Privacy Policy.
7. Visitor rights
To the extent provided by the GDPR, the visitor has the right of access, rectification, erasure and restriction of processing, the right to object to processing based on legitimate interests, the right to data portability where the legal conditions are met, and the right to withdraw consent at any time.
A request can be sent to info@tattoobar.cz. The visitor also has the right to lodge a complaint with the Office for Personal Data Protection. We do not use the technologies described here to make automated decisions that have legal or similarly significant effects on the visitor.
8. Changes to this policy and contact
We update this policy when the technologies, purposes, recipients or retention periods change. A material change to optional purposes or recipients triggers a new request for consent.
Questions can be sent to info@tattoobar.cz. Further information about the processing of personal data is available in the Privacy Policy.
This policy is effective from 9 August 2026.