Privacy Policy

1. Introduction

This Privacy Policy explains how Ninkeartsy VOF collects, uses, and protects your personal data when you visit www.thelostoasis.com.

We are committed to protecting your privacy in accordance with:

The General Data Protection Regulation (EU) 2016/679 (GDPR)
The Belgian Data Protection Act of 30 July 2018

A privacy policy is legally required if you collect personal data and must clearly inform users about how their data is handled.

2. Data Controller

The data controller responsible for processing your personal data is:

Ninkeartsy VOF
Email: thelostoasistattoo@gmail.com or tattooninkeartsy@gmail.com
Company number: BE 0781 928 282

The “data controller” determines how and why your data is processed .

3. What Personal Data We Collect

We may collect the following categories of personal data:

a. Information you provide

Name
Email address
Phone number
Any information submitted via forms

b. Automatically collected data

IP address
Browser type and device
Pages visited and usage data

Personal data includes any information that can identify you directly or indirectly, such as your IP address .

4. Purpose of Processing

We process your personal data for the following purposes:

To provide and maintain our website
To respond to inquiries or requests
To improve user experience and website performance
To send newsletters or marketing (if consent is given)
To comply with legal obligations

Under GDPR, data must be processed for specific and legitimate purposes only .

5. Legal Basis for Processing

We process your data based on one or more of the following legal grounds:

Your consent
Performance of a contract
Compliance with a legal obligation
Our legitimate interests, where these do not override your rights

Consent must be freely given, specific, informed, and unambiguous.

6. Cookies and Tracking Technologies

We use cookies to improve your browsing experience.

Types of cookies we may use:

Essential cookies (required for functionality)
Analytical cookies (to understand usage)
Marketing cookies (only with consent)

Belgian law requires clear, granular consent for cookies, and users must be able to withdraw consent easily .

7. Data Sharing and Third Parties

We may share your data with:

Service providers (e.g. hosting, analytics)
Legal authorities if required by law

We ensure all third parties comply with GDPR and provide adequate protection.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described, or as required by law.

GDPR requires that data is not kept longer than necessary .

9. Data Transfers Outside the EU

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards such as:

EU-approved adequacy decisions
Standard contractual clauses

10. Your Rights (GDPR)

You have the following rights:

Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object
Right to withdraw consent at any time

These rights are guaranteed under GDPR and Belgian law .

To exercise your rights, contact us at: [email]

11. Data Security

We implement appropriate technical and organizational measures to protect your data against:

Unauthorized access
Loss or misuse
Data breaches

12. Data Breaches

In case of a data breach that poses a risk, we will:

Notify the Belgian Data Protection Authority within 72 hours
Inform affected users where necessary

This is a GDPR requirement .

13. Complaints

If you believe your data is not handled correctly, you can file a complaint with:

Belgian Data Protection Authority (APD/GBA)
Website: https://www.dataprotectionauthority.be

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised date.

15. Contact

If you have any questions about this Privacy Policy, contact us:

Email: thelostoasistattoo@gmail.com