Effective from: 28 March 2026

1. Data Controller

Company name: Onyx Line Kft.
Registered office: 1151 Budapest, Károlyi Sándor út 80., Hungary
Business premises / place of data processing: 1042 Budapest, Árpád út 90–92., ground floor 10., Hungary
Company registration number: 01-09-454935
Tax number: 23993682-1-42
Email: info@invictus-tattoo.hu
Phone: +36 20 349 8044

Onyx Line Kft. (hereinafter referred to as the “Data Controller”) provides tattooing and related services and operates this website.

2. Legal Background of Data Processing

Data processing is carried out in accordance with the following legislation:

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act)
Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services

3. Categories, Purposes and Legal Bases of Processed Data

3.1 Contact and Appointment Booking

Data processed:
name, email address, phone number, message content

Purpose of data processing:
communication, appointment scheduling, provision of services

Legal basis:
Article 6(1)(b) GDPR – performance of a contract
Article 6(1)(a) GDPR – consent of the data subject

Retention period:
up to 5 years, or up to 8 years where required by law

3.2 Newsletter

Data processed:
name, email address

Purpose of data processing:
sending information, promotions and updates

Legal basis:
Article 6(1)(a) GDPR – voluntary consent

Retention period:
until consent is withdrawn, meaning until unsubscribing

Unsubscribing is available with one click at the bottom of every newsletter.

3.3 Electronic Surveillance System / CCTV

Data processed:
video recordings

Purpose of data processing:
protection of life, physical integrity and property

Legal basis:
Article 6(1)(f) GDPR – legitimate interest

Retention period:
up to 72 hours, except in the case of official or legal proceedings

Cameras do not monitor changing rooms or restrooms and are not directed at directly monitoring employees’ work.

3.4 Consent Forms and Health Declarations

Data processed:
name, date of birth, signature, health declaration

Purpose of data processing:
lawful and safe provision of services and compliance with legal obligations

Legal basis:
Article 6(1)(c) GDPR – legal obligation
Article 9(2)(a) GDPR – explicit consent

Retention period:
5 years

4. Data Transfers and Data Processors

The Data Controller does not sell personal data and does not transfer it to unauthorised third parties.

Data processors may include, in particular:

hosting provider
email and newsletter service provider
accountant

Data processors act exclusively on the instructions of the Data Controller.

5. Cookies

The website uses cookies to ensure proper operation and to improve the user experience.

Types of cookies used:

essential cookies
statistical cookies, such as anonymous Google Analytics cookies

Cookies can be deleted or disabled at any time in the browser settings.

6. Rights of Data Subjects

The data subject has the right to:

request information about the processing of their personal data
request access to their personal data
request rectification
request erasure
request restriction of processing
object to data processing
request data portability

Requests may be submitted to: office@invictus-tattoo.hu

7. Legal Remedies

The data subject may contact the following authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1125 Budapest, Szilágyi Erzsébet fasor 22/C, Hungary
https://www.naih.hu

The data subject may also bring the matter before a court.

8. Final Provisions

The Data Controller reserves the right to amend this Privacy Policy.
The current version is always available on the website.