Last updated: 24 October 2026
The data controller is Aria Tattoo Lab, located at Via Palermo 9/11, 00184 Rome (RM), Italy. Email: info@ariatattoolab.com.
We collect the following data: browsing data (IP address, browser, pages visited) through technical or analytics cookies (the latter only with your consent); data voluntarily provided through the contact or appointment request form (name, surname, email, project description); cookie preference data.
Personal data is processed for the following purposes: service provision and appointment request management; anonymous statistical analysis of web traffic (with consent); improvement of the browsing experience; compliance with legal obligations.
Processing is based on: user consent for analytics cookies (Art. 6.1.a GDPR); legitimate interest for technical cookies necessary for website operation; performance of a contract or pre-contractual measures for appointment request management (Art. 6.1.b GDPR).
Browsing data collected through analytics cookies is retained for a maximum of 26 months. Data provided through the contact form is retained for the time necessary to manage the request and subsequently deleted. The consent cookie is retained for 12 months.
With your consent, browsing data may be shared with: Google Analytics (Google LLC) for web traffic analysis; Microsoft Clarity (Microsoft Corporation) for site interaction analysis. Both services may also operate outside the EU with adequate safeguards (standard contractual clauses).
Under Articles 15-22 of the GDPR, you have the right to: access your personal data; rectify or update it; request its deletion; restrict processing; object to processing; receive your data in a structured format (portability); withdraw consent at any time; lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
Only with marketing consent, OpenAI ChatGPT Ads measures clicks on WhatsApp and directions, as well as email requests confirmed by the sending service. The Pixel and server delivery describe the same fact with a shared identifier to avoid duplicates. Server delivery can work even when the Pixel is blocked and includes, when available, the opaque advertising references __oppref and __obref and the public page address without parameters. A click does not prove a message was sent or a studio visit; these actions do not prove an appointment or sale.
When enabled for the source, automatic advanced matching in the Pixel detects supported customer data, normalizes it and sends it to OpenAI in hashed form. This Pixel feature is separate from server delivery. Site code does not manually pass first name, last name, email or description to the Pixel.
To improve conversion matching, only for new email requests accepted by the sending service and with valid marketing consent confirmed on this updated notice, the server normalizes the email address (trimming surrounding whitespace and converting letters to lowercase), computes its SHA-256 hash and sends it to OpenAI with the lead_created event. The hash is a pseudonymous identifier and does not make the data anonymous. The plain email address, first name, last name and description are not included in advertising server delivery. Server code does not add email hashes to WhatsApp or Maps clicks; neither the email nor its hash is added to GA4 events. Previous consent does not enable this addition and previous requests are not replayed.
The Pixel requests 30 days for __oppref, used for attribution, and 365 days for __obref, a browser reference. Browser restrictions can shorten these lifetimes. These periods describe cookies and do not establish data retention at OpenAI.
ariatattoolab_consent_v2 stores separate analytics and marketing choices for 12 months. Confirmation of the marketing choice on the updated notice is recorded in the same cookie to allow email hashing for new accepted requests. A previous choice is not upgraded automatically; the legacy compatibility cookie ariatattoolab_cookie_consent is no longer written.
You can change or revoke each choice in Cookie preferences. Revocation stops new events for the category and removes its cookies accessible to this site; the page reloads to stop tools already loaded. The Revoke Consent button declines both categories.
To exercise your rights or for any questions regarding the processing of personal data, you can contact us at info@ariatattoolab.com or at our premises at Via Palermo 9/11, 00184 Rome (RM), Italy.
