BLACK & GREY · MAX TATTOO

Your data. Simply explained.

Updated: 5 October 2026

Who is responsible for your data

For studio interactions, your contact is Hisem Victor Florian (Florin), BLACK & GREY by MAX TATTOO, Calea Urseni 19 C, Timișoara, Romania. For questions about data, removal of a photo or exercising your rights, call or message 0771 185 872 on WhatsApp.

The tattoo idea form

There are no client accounts on the site. Your reference photo, placement, size and description are used locally in your browser to preview and prepare a message. The current form does not send this information to a studio database or upload your photo to a server. You can close or reload the page to abandon the form; a full reload clears the file preview.

Sending through WhatsApp

You decide whether to send. On compatible devices, the share menu can pass the photo and text to your chosen app; select WhatsApp, Florin’s chat and confirm sending. If file sharing is unavailable, attach the photo directly in WhatsApp. Opening a chat through a link may pass the prepared text to WhatsApp; that link does not automatically attach the photo.

After sending, the studio receives the information you choose to share, including your phone number, message and any photos. We use it to answer your request, discuss the project, deposit and appointment, and provide the requested service. This is based on steps taken at your request before a contract and performance of the service. Documents required for tax or legal purposes are retained to meet legal obligations. Do not enter identity documents, full bank details or medical information in the site form.

Keeping conversations and photos

Enquiries without an appointment are kept for no more than 12 months after the last conversation, then manually deleted from the studio’s records. For completed projects, necessary information is kept while useful for the service and subsequent enquiries; legal obligations or a dispute may require longer retention. Photos received on WhatsApp are not automatically used in the public portfolio. Publishing an image in which a person is identifiable requires separate consent; withdrawing that consent does not affect earlier lawful use.

Hosting, security and administration

The site is hosted through ChatGPT Sites and Cloudflare infrastructure. Technical providers may process IP addresses and request or browser information to deliver pages, secure the service and diagnose faults, under their own policies and retention periods. The studio has not installed visitor analytics, advertising pixels or automated profiling. The legitimate interest for technical data is operating and protecting the site.

The administrator account is reserved for the owner. We store the username, a cryptographic representation of the password, sessions and published media. The authentication cookie is necessary for administration and valid for 8 hours. Login attempt limiting uses a cryptographic representation of the IP address and a 15-minute interval. Files uploaded by the administrator are public in the gallery until deleted; this function does not receive private photos from the client form.

Your browser preferences

The DAY/NIGHT/AUTO theme and selected language are stored locally in your browser until you change them or clear site data. These preferences do not identify a client and are not sent to a studio database. The Inspiration Wheel requires no phone number, email or account and does not save results on the server. The summary downloaded through “Save my idea” remains on your device; you delete it yourself.

Maps and external services

The Google map loads only when you choose “Load Google map”. Google may then receive your IP address and device information and use its own cookies. Links to WhatsApp, Facebook, TikTok, Google Maps and Revolut lead to services with their own policies. These providers may also process data outside the European Economic Area under the safeguards described in their policies. You can use the displayed address and phone number without loading the map.

Your rights

Subject to the law, you may request access, correction or deletion, restriction of processing and portability; you may object to processing based on legitimate interests and withdraw consent. Contact Florin on 0771 185 872. We respond within the legal deadline, normally one month, and may request only information necessary to verify your identity. You may complain to ANSPDCP, the Romanian data protection authority. We do not sell client data.

Provider policies

OpenAI · Cloudflare · WhatsApp · Google · ANSPDCP