Privacy Policy

last updated: 2026.07.18

This Privacy Policy explains how [BUSINESS / BRAND NAME] (the "Controller", "we","us", or "our") collects, uses, and protects personal data in connection with the sale and delivery of our online course(s). We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the German Federal Data Protection Act (Bundesdatenschutzgesetz, "BDSG").

1. Data Controller

The controller responsible for the processing of your personal data is:
[BUSINESS / BRAND NAME]
[POSTAL ADDRESS]
Germany
Email: lasstattoo@gmail.com

2. Personal Data We Collect

2.1. We collect and process the following categories of personal data:
(a) your name;
(b) your email address; and
(c) payment confirmation data provided by third-party payment processors.

2.2. We collect only the data necessary to provide access to the course and toadminister your account.

3. Purposes and Legal Bases for Processing

3.1. We process your personal data for the following purposes and on the following legal bases under Article 6(1) GDPR:
    (a) to provide access to the course(s) you purchase and to manage your account — performance of a contract (Art. 6(1)(b) GDPR);
    (b) to process payments through third-party providers — performance of a contract (Art. 6(1)(b) GDPR);
    (c) to send important service communications relating to your purchase — performance of a contract (Art. 6(1)(b) GDPR);
    (d) to comply with our legal, accounting, and tax obligations — compliance with a legal obligation (Art. 6(1)(c) GDPR).
3.2. We do not sell, rent, or otherwise share your personal data with unrelated third parties.

4. Course Delivery and International Data Transfers

4.1. The course is delivered, and payments are processed, through third-party service providers, including Telegram (or Telegram-based systems) and Stripe.
4.2. Some of these providers are established outside the European Economic Area ("EEA"). Where personal data is transferred outside the EEA, such transfers are made on the basis of appropriate safeguards in accordance with Chapter V of the GDPR (for example, the European Commission's adequacy decisions or Standard Contractual Clauses), where applicable.
4.3. These providers process personal data under their own privacy policies. We are not responsible for the independent data-processing practices of third-party platforms.

5. Cookies and Similar Technologies

5.1. Where our website uses cookies or similar technologies that are not strictlynecessary for the operation of the site, we obtain your consent before they are storedor accessed, in accordance with § 25 of the German Telecommunications DigitalServices Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz,"TDDDG").

6. Data Security

6.1. We implement appropriate technical and organisational measures to protectpersonal data against unauthorised access, loss, misuse, alteration, or disclosure.However, no method of transmission or storage over the internet can be guaranteed tobe entirely secure.

7. Data Retention

7.1. We retain personal data only for as long as necessary to provide access to thecourse and to fulfil the purposes set out in this Policy.
7.2. Where we are subject to statutory retention obligations under German commercialand tax law, we retain the relevant data for the periods prescribed by those laws, afterwhich it is deleted or anonymised.

8. Your Rights

8.1. Subject to the conditions set out in the GDPR, you have the right to:
    (a) request access to the personal data we hold about you (Art. 15 GDPR);
    (b) request rectification of inaccurate data (Art. 16 GDPR);
2 / 3
    (c) request erasure of your data (Art. 17 GDPR);
    (d) request restriction of processing (Art. 18 GDPR);
    (e) data portability (Art. 20 GDPR);
    (f) object to processing (Art. 21 GDPR); and
    (g) withdraw any consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).
8.2. To exercise any of these rights, please contact us at lasstattoo@gmail.com.
8.3. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement (Art. 77 GDPR).

9. Changes to This Policy

9.1. We may update this Policy from time to time. The version in force is the onepublished on our website at the relevant time.

10. Contact

10.1. For any questions regarding this Policy or our processing of your personal data,please contact us at lasstattoo@gmail.com.