Privacy Policy
Protecting your personal data matters to us. This privacy policy explains which personal data we process at True Canvas, for what purposes, which services we use for this, and which rights you have.
1. Controller
The controller responsible for processing personal data on this website and in connection with the services offered by True Canvas GmbH is:
True Canvas GmbH
Weyringergasse 19/1-3, 1040 Vienna, Austria
Phone: +43 650 6070320
Email: info@truecanvas.at
Website: https://truecanvas.at
The tattoo artists at True Canvas are self-employed and are your contracting party for the tattoo service. Your data stays with True Canvas GmbH.
Your tattoo artist sees the information from your request and your consent form, including your health information, only to the extent needed for your appointment. The artist does not store it and is bound by confidentiality.
2. Which personal data we process
Depending on how you contact us, use our website or have a tattoo done with us, the following data in particular may be processed:
* first and last name
* email address
* phone number
* address
* details about your tattoo project
* details about your preferred artist, appointment and contact
* design, placement, approximate size and preferred style
* reference images
* information from the tattoo consent form
* required health information
* information about the briefing and consent
* data for documenting the tattoo
* technical data when you use our website
* cookie and consent settings
* name and email address when you subscribe to our newsletter
We only process personal data as far as this is necessary for the respective purpose or another legal basis exists.
3. Visiting our website
When you visit our website, technically necessary information is processed that is required to provide, secure and stabilize the website.
This may include:
* IP address
* date and time of access
* pages viewed
* browser type and version
* operating system
* technical information about the device used
* referrer URL
This processing takes place to provide and secure our website technically, based on our legitimate interest under Art. 6(1)(f) GDPR.
4. Cookies and similar technologies
Our website uses technically necessary cookies and similar technologies that are required to operate the website and store your settings. In addition, we use Google Analytics 4 (see section 5). It is only activated according to your choice in the cookie banner.
You can change or withdraw your consent at any time with effect for the future.
Non-essential cookies and similar technologies are used on the basis of your consent under Art. 6(1)(a) GDPR.
We developed the cookie banner ourselves and do not use an external provider for it. Your choice is stored only in your browser. You can change or withdraw it at any time using the “Cookie Settings” link at the bottom of every page.
5. Google Analytics 4
We use Google Analytics 4 (GA4), a web analytics service provided by Google.
Google Analytics helps us understand how visitors use our website and which content is particularly relevant. For example, information about page views, interactions, devices and browsers used and the origin of a website visit may be processed. IP addresses are not logged in Google Analytics 4.
Measurement for analytics purposes is based on your consent under Art. 6(1)(a) GDPR. If you have not consented, we do not set analytics cookies.
Google Analytics is only loaded after you have given your consent in the cookie banner. Before that, no data is transferred to Google.
Event data is stored for 2 months and user data for 14 months. After that it is deleted automatically.
You can withdraw your consent at any time through the cookie settings with effect for the future.
More information about data processing by Google is available in Google's privacy policy.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR).
For more information, see the Google Privacy Policy.
6. Tattoo inquiries and Jotform
We use Jotform for our online forms and tattoo inquiries.
When you fill out a form, we process the data you provide in order to handle your inquiry and prepare a possible tattoo.
This may include:
* first and last name
* email address
* phone number
* preferred artist
* description of the design
* placement
* approximate size
* preferred style
* reference images
* appointment preferences
* any further information you send us as part of your inquiry
This processing takes place to carry out pre-contractual measures under Art. 6(1)(b) GDPR or on the basis of our legitimate interest under Art. 6(1)(f) GDPR, as far as it is necessary to handle and organize your inquiry.
Jotform acts as a technical service provider for our online forms. Processing by Jotform is also subject to the privacy terms and the technical configuration of the Jotform service we use.
7. Health data and consent form
Before a tattoo, we have to ask about certain health circumstances, because they can be relevant for assessing possible contraindications and for carrying out the tattoo safely.
In particular, information about illnesses, medication, allergies, skin conditions and other health circumstances may be processed.
Health data belongs to the special categories of personal data under Art. 9 GDPR.
This data is processed in connection with the legally required briefing and documentation and on the basis of your explicit consent.
Asking about relevant contraindications and obtaining written confirmation of the briefing are required by law for tattooing.
Without the required information, we may not be able to carry out a tattoo.
8. Documentation of the tattoo
In connection with a tattoo, we process data for the necessary documentation.
This may include:
* identification data
* details about the tattoo
* date of the tattoo
* details about the artist
* details about the briefing and consent
* required information about health contraindications
* required information about the tattoo products used and their batch numbers
We keep these records for 10 years, as required by the Austrian regulation on rules for piercing and tattooing. You receive a copy of the consent and the briefing confirmation from us.
9. Contact by email, phone and messenger
If you contact us by email, phone, WhatsApp or through social networks, we process the data you send us in order to handle your inquiry and for possible follow-up questions.
Which data is processed depends on the communication channel and the content you send.
This processing takes place to carry out pre-contractual measures under Art. 6(1)(b) GDPR or on the basis of our legitimate interest under Art. 6(1)(f) GDPR.
When you communicate through WhatsApp or other external services, the privacy terms of the respective providers also apply. If you prefer not to send messages through messengers, you can contact us by email or through our inquiry form at any time.
10. Newsletter with KlickTipp
If you subscribe to our newsletter, we use KlickTipp to manage and send it.
When you sign up, we collect your:
* name
* email address
Sign-up uses the double opt-in procedure. After signing up, you receive an email in which you have to confirm your subscription.
Your data for the newsletter is processed on the basis of your consent under Art. 6(1)(a) GDPR.
We use the data you provide exclusively for the newsletter and related communication.
KlickTipp acts as a technical service provider for managing and sending the newsletter and provides, among other things, a data processing agreement for this.
You can withdraw your consent at any time with effect for the future. To do so, use the unsubscribe link included in every newsletter.
After you unsubscribe, your data for sending the newsletter is deleted, unless another legal basis requires further storage.
11. Hosting
Our website is hosted by ALL-INKL.COM, Neue Medien Münnich.
When the website is operated, technically necessary data such as IP address, date and time of access and technical information about the device used may be processed in server log files.
This processing takes place to provide our website securely and reliably, based on our legitimate interest under Art. 6(1)(f) GDPR.
12. Recipients and service providers
To operate our website and handle your inquiries, we use various technical service providers.
These include in particular:
* Jotform for online forms and inquiries
* Google for Google Analytics 4
* WhatsApp for communication by messenger
* KlickTipp for our newsletter
* ALL-INKL.COM for hosting our website
Where these companies process personal data on our behalf, we conclude, where required, data processing agreements under Art. 28 GDPR.
For some services, processing of personal data outside the European Union or the European Economic Area cannot be completely ruled out. Where such a transfer takes place, the respective requirements under Art. 44 et seq. GDPR must be met.
Self-employed tattoo artists at True Canvas: Your tattoo artist is given access to the data from your request and your consent form to the extent needed for your appointment. The data stays with True Canvas GmbH.
13. External links
Our website contains links to external sites, for example to Google Maps or to social networks. Where our website only contains a link, data is transmitted to the respective provider only after you click it. The privacy terms of that provider then apply.
14. How long we store personal data
We generally store personal data only as long as necessary for the respective purpose or as long as statutory retention obligations apply.
Tattoo documentation: 10 years.
Tattoo inquiries: Data from tattoo inquiries that do not lead to an appointment is generally kept for up to three years, unless longer storage is required by a legal obligation or for establishing, exercising or defending legal claims.
Newsletter: Newsletter data is processed until you withdraw your consent or unsubscribe. After that it is deleted, unless another legal basis requires further storage.
Google Analytics: Event data 2 months, user data 14 months.
15. Obligation to provide data
Certain personal data is required to handle an inquiry or carry out a tattoo.
In particular, the information needed for the legally required briefing and documentation must be provided before a tattoo.
If required data is not provided, an inquiry may not be processed or a tattoo may not be carried out.
Providing data for the newsletter is voluntary. If you do not provide this data, you cannot receive our newsletter.
16. Your rights
Subject to the legal requirements, you have in particular the following rights:
* right of access
* right to rectification
* right to erasure
* right to restriction of processing
* right to data portability
* right to object
* right to withdraw consent given, with effect for the future
If you withdraw your consent, the lawfulness of the processing carried out before the withdrawal remains unaffected.
To exercise your rights, you can contact us at any time:
True Canvas GmbH
Weyringergasse 19/1-3, 1040 Vienna, Austria
Email: info@truecanvas.at
Phone: +43 650 6070320
17. Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you can contact the competent data protection authority.
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: https://dsb.gv.at
18. No automated decision making
Within the processing described in this privacy policy, we do not use automated decision making that has legal effects on you or similarly significantly affects you.
19. Updates to this privacy policy
We may update this privacy policy if our website, the services we use, our processing of personal data or the legal requirements change.
This is a translation for your convenience. The German version is legally binding.
Last updated: October 2026
1. Controller
The controller responsible for processing personal data on this website and in connection with the services offered by True Canvas GmbH is:
True Canvas GmbH
Weyringergasse 19/1-3, 1040 Vienna, Austria
Phone: +43 650 6070320
Email: info@truecanvas.at
Website: https://truecanvas.at
The tattoo artists at True Canvas are self-employed and are your contracting party for the tattoo service. Your data stays with True Canvas GmbH.
Your tattoo artist sees the information from your request and your consent form, including your health information, only to the extent needed for your appointment. The artist does not store it and is bound by confidentiality.
2. Which personal data we process
Depending on how you contact us, use our website or have a tattoo done with us, the following data in particular may be processed:
* first and last name
* email address
* phone number
* address
* details about your tattoo project
* details about your preferred artist, appointment and contact
* design, placement, approximate size and preferred style
* reference images
* information from the tattoo consent form
* required health information
* information about the briefing and consent
* data for documenting the tattoo
* technical data when you use our website
* cookie and consent settings
* name and email address when you subscribe to our newsletter
We only process personal data as far as this is necessary for the respective purpose or another legal basis exists.
3. Visiting our website
When you visit our website, technically necessary information is processed that is required to provide, secure and stabilize the website.
This may include:
* IP address
* date and time of access
* pages viewed
* browser type and version
* operating system
* technical information about the device used
* referrer URL
This processing takes place to provide and secure our website technically, based on our legitimate interest under Art. 6(1)(f) GDPR.
4. Cookies and similar technologies
Our website uses technically necessary cookies and similar technologies that are required to operate the website and store your settings. In addition, we use Google Analytics 4 (see section 5). It is only activated according to your choice in the cookie banner.
You can change or withdraw your consent at any time with effect for the future.
Non-essential cookies and similar technologies are used on the basis of your consent under Art. 6(1)(a) GDPR.
We developed the cookie banner ourselves and do not use an external provider for it. Your choice is stored only in your browser. You can change or withdraw it at any time using the “Cookie Settings” link at the bottom of every page.
5. Google Analytics 4
We use Google Analytics 4 (GA4), a web analytics service provided by Google.
Google Analytics helps us understand how visitors use our website and which content is particularly relevant. For example, information about page views, interactions, devices and browsers used and the origin of a website visit may be processed. IP addresses are not logged in Google Analytics 4.
Measurement for analytics purposes is based on your consent under Art. 6(1)(a) GDPR. If you have not consented, we do not set analytics cookies.
Google Analytics is only loaded after you have given your consent in the cookie banner. Before that, no data is transferred to Google.
Event data is stored for 2 months and user data for 14 months. After that it is deleted automatically.
You can withdraw your consent at any time through the cookie settings with effect for the future.
More information about data processing by Google is available in Google's privacy policy.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR).
For more information, see the Google Privacy Policy.
6. Tattoo inquiries and Jotform
We use Jotform for our online forms and tattoo inquiries.
When you fill out a form, we process the data you provide in order to handle your inquiry and prepare a possible tattoo.
This may include:
* first and last name
* email address
* phone number
* preferred artist
* description of the design
* placement
* approximate size
* preferred style
* reference images
* appointment preferences
* any further information you send us as part of your inquiry
This processing takes place to carry out pre-contractual measures under Art. 6(1)(b) GDPR or on the basis of our legitimate interest under Art. 6(1)(f) GDPR, as far as it is necessary to handle and organize your inquiry.
Jotform acts as a technical service provider for our online forms. Processing by Jotform is also subject to the privacy terms and the technical configuration of the Jotform service we use.
7. Health data and consent form
Before a tattoo, we have to ask about certain health circumstances, because they can be relevant for assessing possible contraindications and for carrying out the tattoo safely.
In particular, information about illnesses, medication, allergies, skin conditions and other health circumstances may be processed.
Health data belongs to the special categories of personal data under Art. 9 GDPR.
This data is processed in connection with the legally required briefing and documentation and on the basis of your explicit consent.
Asking about relevant contraindications and obtaining written confirmation of the briefing are required by law for tattooing.
Without the required information, we may not be able to carry out a tattoo.
8. Documentation of the tattoo
In connection with a tattoo, we process data for the necessary documentation.
This may include:
* identification data
* details about the tattoo
* date of the tattoo
* details about the artist
* details about the briefing and consent
* required information about health contraindications
* required information about the tattoo products used and their batch numbers
We keep these records for 10 years, as required by the Austrian regulation on rules for piercing and tattooing. You receive a copy of the consent and the briefing confirmation from us.
9. Contact by email, phone and messenger
If you contact us by email, phone, WhatsApp or through social networks, we process the data you send us in order to handle your inquiry and for possible follow-up questions.
Which data is processed depends on the communication channel and the content you send.
This processing takes place to carry out pre-contractual measures under Art. 6(1)(b) GDPR or on the basis of our legitimate interest under Art. 6(1)(f) GDPR.
When you communicate through WhatsApp or other external services, the privacy terms of the respective providers also apply. If you prefer not to send messages through messengers, you can contact us by email or through our inquiry form at any time.
10. Newsletter with KlickTipp
If you subscribe to our newsletter, we use KlickTipp to manage and send it.
When you sign up, we collect your:
* name
* email address
Sign-up uses the double opt-in procedure. After signing up, you receive an email in which you have to confirm your subscription.
Your data for the newsletter is processed on the basis of your consent under Art. 6(1)(a) GDPR.
We use the data you provide exclusively for the newsletter and related communication.
KlickTipp acts as a technical service provider for managing and sending the newsletter and provides, among other things, a data processing agreement for this.
You can withdraw your consent at any time with effect for the future. To do so, use the unsubscribe link included in every newsletter.
After you unsubscribe, your data for sending the newsletter is deleted, unless another legal basis requires further storage.
11. Hosting
Our website is hosted by ALL-INKL.COM, Neue Medien Münnich.
When the website is operated, technically necessary data such as IP address, date and time of access and technical information about the device used may be processed in server log files.
This processing takes place to provide our website securely and reliably, based on our legitimate interest under Art. 6(1)(f) GDPR.
12. Recipients and service providers
To operate our website and handle your inquiries, we use various technical service providers.
These include in particular:
* Jotform for online forms and inquiries
* Google for Google Analytics 4
* WhatsApp for communication by messenger
* KlickTipp for our newsletter
* ALL-INKL.COM for hosting our website
Where these companies process personal data on our behalf, we conclude, where required, data processing agreements under Art. 28 GDPR.
For some services, processing of personal data outside the European Union or the European Economic Area cannot be completely ruled out. Where such a transfer takes place, the respective requirements under Art. 44 et seq. GDPR must be met.
Self-employed tattoo artists at True Canvas: Your tattoo artist is given access to the data from your request and your consent form to the extent needed for your appointment. The data stays with True Canvas GmbH.
13. External links
Our website contains links to external sites, for example to Google Maps or to social networks. Where our website only contains a link, data is transmitted to the respective provider only after you click it. The privacy terms of that provider then apply.
14. How long we store personal data
We generally store personal data only as long as necessary for the respective purpose or as long as statutory retention obligations apply.
Tattoo documentation: 10 years.
Tattoo inquiries: Data from tattoo inquiries that do not lead to an appointment is generally kept for up to three years, unless longer storage is required by a legal obligation or for establishing, exercising or defending legal claims.
Newsletter: Newsletter data is processed until you withdraw your consent or unsubscribe. After that it is deleted, unless another legal basis requires further storage.
Google Analytics: Event data 2 months, user data 14 months.
15. Obligation to provide data
Certain personal data is required to handle an inquiry or carry out a tattoo.
In particular, the information needed for the legally required briefing and documentation must be provided before a tattoo.
If required data is not provided, an inquiry may not be processed or a tattoo may not be carried out.
Providing data for the newsletter is voluntary. If you do not provide this data, you cannot receive our newsletter.
16. Your rights
Subject to the legal requirements, you have in particular the following rights:
* right of access
* right to rectification
* right to erasure
* right to restriction of processing
* right to data portability
* right to object
* right to withdraw consent given, with effect for the future
If you withdraw your consent, the lawfulness of the processing carried out before the withdrawal remains unaffected.
To exercise your rights, you can contact us at any time:
True Canvas GmbH
Weyringergasse 19/1-3, 1040 Vienna, Austria
Email: info@truecanvas.at
Phone: +43 650 6070320
17. Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you can contact the competent data protection authority.
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: https://dsb.gv.at
18. No automated decision making
Within the processing described in this privacy policy, we do not use automated decision making that has legal effects on you or similarly significantly affects you.
19. Updates to this privacy policy
We may update this privacy policy if our website, the services we use, our processing of personal data or the legal requirements change.
This is a translation for your convenience. The German version is legally binding.
Last updated: October 2026
Contact form
If you send us enquiries via the contact form, the details you provide (including the contact data you enter) are stored by us in order to process your enquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR (steps prior to / performance of a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering your request). The data is deleted once it is no longer required to achieve the purpose. Your submission is additionally stored in our content management system and sent to us by e-mail.
Newsletter
To send our newsletter we use the service Klick-Tipp (KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, Vereinigtes Königreich). When you subscribe, the data you provide (e-mail address and, where applicable, first name) is transmitted to and stored by this provider. Subscription uses the double opt-in procedure: after signing up you receive an e-mail in which you must confirm your subscription. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every newsletter. A data processing agreement (Art. 28 GDPR) is in place with the provider.