Privacy Policy

Last updated: 1 September 2026

1. Controller

The controller responsible for processing personal data through this website is:

Gabriel Wolff
Hebrew Tattoos
Seelenbinderstraße 141
12555 Berlin
Germany

Telephone: +49 160 664 1528
Email: studio@hebrew-tattoos.com
Website: https://www.hebrew-tattoos.com

2. General Information

We treat privacy as part of the trust at the heart of our work. This policy explains what personal data we collect when you visit our website, contact us, subscribe to our correspondence, commission an artwork, or otherwise work with Hebrew Tattoos.

“Personal data” means information relating to an identified or identifiable person.

3. Website Hosting and Squarespace

This website is hosted and operated using Squarespace. When you visit it, Squarespace may process technical information including:

  • Your IP address

  • Browser and device information

  • Operating system

  • Date, time, and duration of your visit

  • Pages visited and referring website

  • Security and diagnostic information

This processing is necessary to deliver the website securely and reliably. The legal basis is Article 6(1)(f) GDPR—our legitimate interest in operating, protecting, and improving our website.

Squarespace may process information outside the European Economic Area. Where required, international transfers are protected through an adequacy decision, the EU Standard Contractual Clauses, or another legally recognized safeguard.

4. Enquiries and Project Applications

When you contact us or apply to begin a project, we may collect:

  • Your name and contact details

  • Age, location, profession, and preferred language

  • Information about your tattoo idea and intended placement

  • Personal stories, family history, cultural or religious identity, and artistic preferences

  • Photographs, reference images, and images of the relevant area of your body

  • Details about existing tattoos or physical considerations

  • Messages and correspondence exchanged with our team

  • Information required to assess, organize, and complete the proposed commission

We process this information to respond to your enquiry, evaluate whether a collaboration is appropriate, prepare a proposal, and perform the commissioned work.

The legal bases are Article 6(1)(b) GDPR, where processing is necessary before entering into or performing a contract, and Article 6(1)(f) GDPR, based on our legitimate interest in managing enquiries and maintaining appropriate project records.

Some stories may reveal sensitive information, such as religious beliefs, health information, ethnicity, sexuality, or political opinions. You are never required to disclose more than you feel comfortable sharing. Where you voluntarily provide sensitive information because it is relevant to the work, we process it with your explicit consent under Article 9(2)(a) GDPR. You may withdraw that consent at any time, although this will not affect processing that has already lawfully occurred.

5. Email, Telephone, and WhatsApp

If you contact us by email, telephone, or WhatsApp, we process the information you provide to answer your message and manage the relationship.

WhatsApp is operated by a company within the Meta group. When you choose to contact us through WhatsApp, information may be processed outside the European Economic Area under that provider’s terms. You may contact us by email instead if you prefer not to use WhatsApp.

6. Commissions, Contracts, and Payments

When you commission an artwork, we process information required to:

  • Prepare and administer the agreement

  • Communicate throughout the artistic process

  • Create and deliver the artwork

  • Issue invoices and record payments

  • Meet accounting and tax obligations

  • Establish, exercise, or defend legal claims

Payment details may be processed by the relevant bank or payment provider. We generally do not receive or retain complete card or banking credentials beyond the information appearing in payment and accounting records.

The legal bases are Article 6(1)(b) GDPR for contractual processing and Article 6(1)(c) GDPR for legal and accounting obligations.

7. Newsletter

If you subscribe to receive correspondence from us, we process your email address and subscription records to send updates about Hebrew calligraphy, tattoos, Jewish thought, studio news, and related work.

The legal basis is your consent under Article 6(1)(a) GDPR. Where applicable, we use a confirmation email to verify the subscription.

You may unsubscribe at any time by using the link in an email or contacting us. After unsubscribing, we may retain limited information on a suppression list so that we can respect your request not to receive further marketing.

8. Cookies and Analytics

The website uses cookies and similar technologies. Some are necessary for security and essential website functions. Others help us understand how visitors use the website.

Squarespace Analytics may collect aggregated or pseudonymous information about visits, traffic sources, navigation, and website performance. The website may also use Google Tag Manager to manage analytics or other website technologies.

Necessary technologies are used under Article 6(1)(f) GDPR and the applicable provisions of German telecommunications and data-protection law. Non-essential analytics or marketing technologies are used only with your consent under Article 6(1)(a) GDPR.

You can accept or reject non-essential cookies through the website’s cookie controls and change or withdraw your consent at any time. You can also restrict cookies through your browser, although doing so may affect certain website functions.

9. Publication of Artwork and Client Stories

We may wish to publish completed artwork, photographs, testimonials, or parts of a client’s story on our website, social media, in exhibitions, publications, or promotional material.

Where the material identifies you or contains personal information, publication will be based on your consent or on a separate agreement with you. We will respect any agreed restrictions concerning your name, story, image, or the confidentiality of the project.

Consent may be withdrawn for future uses, although we may not be able to recall material that has already been lawfully printed, distributed, reposted by others, or incorporated into completed publications.

10. Recipients of Personal Data

Personal information may be accessible to:

  • Members of the Hebrew Tattoos team who need it for their work

  • Squarespace, as website and form-service provider

  • Newsletter and email-service providers

  • Payment, banking, invoicing, and accounting providers

  • Technical, hosting, security, and analytics providers

  • Professional advisers, where necessary

  • Public authorities, where disclosure is legally required

Service providers receive only the information reasonably required for their role and must process it in accordance with applicable data-protection requirements.

We do not sell personal data.

11. International Data Transfers

Some service providers may process information in the United States or other countries outside the European Economic Area.

Where the receiving country does not benefit from an EU adequacy decision, transfers are protected through appropriate safeguards such as the European Commission’s Standard Contractual Clauses, supplemented by additional measures where necessary.

12. Retention

We retain personal data only for as long as it is reasonably necessary for the relevant purpose:

  • Unsuccessful or inactive enquiries are generally retained for up to three years after the last meaningful contact.

  • Project correspondence and working material are retained for the duration of the commission and for a reasonable period afterward.

  • Contractual, invoice, and accounting records are retained for the periods required by German law, generally between six and ten years depending on the record.

  • Newsletter information is retained until you unsubscribe or the mailing list is discontinued.

  • Consent records may be retained for as long as necessary to demonstrate compliance.

  • Information relevant to a legal claim may be retained until the applicable limitation period has expired.

Information may be deleted or anonymized sooner where it is no longer needed.

13. Security

We use reasonable technical and organizational safeguards to protect personal information against loss, misuse, unauthorized access, alteration, and disclosure.

Because no electronic transmission or storage method is completely secure, absolute security cannot be guaranteed. Please avoid sending highly sensitive information through ordinary, unencrypted email unless necessary.

14. Your Rights

Subject to the conditions established by applicable law, you have the right to:

  • Request access to your personal data

  • Correct inaccurate or incomplete information

  • Request deletion of your information

  • Restrict certain processing

  • Object to processing based on legitimate interests

  • Receive certain information in a portable format

  • Withdraw consent at any time

  • Lodge a complaint with a data-protection authority

Where processing is based on legitimate interests, you may object for reasons arising from your particular situation. Where personal data is used for direct marketing, you may object at any time without giving a reason.

To exercise these rights, contact studio@hebrew-tattoos.com. We may request reasonable information to verify your identity.

15. Supervisory Authority

You may submit a complaint to:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

Telephone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de

You may also contact the data-protection authority responsible for your usual place of residence or work.

16. Children

This website and our commissioned services are not directed toward children. We do not knowingly collect personal data from children without the involvement or authorization of a parent or legal guardian where required by law.

If you believe a child has submitted personal information without appropriate authorization, please contact us.

17. External Links and Social Media

The website may contain links to third-party websites and social-media platforms. When you follow such a link, the third party processes information under its own privacy policy. We are not responsible for the privacy practices or content of independently operated websites.

18. Changes to This Policy

We may revise this policy when our website, services, or legal obligations change. The current version will always be published on this page with its effective date.