Privacy policy

1. Who we are

This website is operated by the organisers of the International Brussels Tattoo Convention, the tattoo convention held at Tour & Taxis, Avenue du Port / Havenlaan 86c, B-1000 Brussels, Belgium.

For anything to do with your data — a question, a correction, or a request to be deleted — write to info@brusselstattooconvention.be. That address reaches the people who can act on it, and we answer within one month.

2. What this site stores on your device

There is no analytics, no advertising pixel and no tracking of any kind on this website. Two things are kept in your browser's local storage and never leave it:

• the language you chose (English, French or Dutch), so the site opens in the same language next time;
• whether you have already dismissed the cookie notice, so it is not shown on every page.

Neither is a tracking cookie and neither is shared with anyone. Clearing your browser data removes both.

3. Web fonts and images

Fonts are served from this website itself rather than from a font provider. Apart from the venue map described in section 4, loading a page makes no request to any third party. Artist photographs are supplied by the artists for promotion of the convention.

4. The venue map

The info page embeds an interactive Google map of the venue, so you can see where Tour & Taxis is and plan your route without leaving the site. The map loads by itself when you scroll to it. At that point Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4) receives your IP address, the page you are on and your browser details, and may set cookies in your browser under its own privacy policy. We do not receive anything from Google in return and we do not use the map to identify you. The legal basis is our legitimate interest in showing visitors where the venue is (Art. 6(1)(f) GDPR). If you would rather not load it, block third-party frames or cookies in your browser, or use a content blocker — the full address is written out on the same page and in the footer of every page, so you lose nothing but the map itself.

5. The recap video

The recap film on the home page is hosted on YouTube. Opening the home page does not by itself contact YouTube: the page first shows a still image served from this website. The player is loaded from youtube-nocookie.com when that section scrolls into view, and it starts muted. At that point Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4) receives your IP address, the page you are on and your browser details, and may set cookies under its own privacy policy. The legal basis is our legitimate interest in showing what the convention is like (Art. 6(1)(f) GDPR). If you never scroll to that section, nothing reaches Google; if you would rather it never loaded, block third-party frames or cookies in your browser, or use a content blocker.

6. Hosting

The site is served by Vercel (Vercel Inc., United States). Like every web host it processes technical request data — your IP address, the page requested, the timestamp and your browser's user-agent string — in order to deliver the page and to protect against abuse and attacks. We use this only in aggregate and for security. The legal basis is our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR). Vercel acts as our processor under its data processing agreement, which includes standard contractual clauses for transfers outside the EEA, and keeps request logs only for a short period under its own policy.

7. If you email us

When you write to us about a booth, a stand or a question, we keep your message and address to answer you and administer your request. The legal basis is either steps taken at your request before entering a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to enquiries (Art. 6(1)(f)). We keep correspondence for up to 24 months after our last exchange, then delete it.

8. Newsletter

If you subscribe, we store your email address so we can send you line-up, contest and ticket news. The legal basis is your consent (Art. 6(1)(a) GDPR). The list is held by us in a Supabase database hosted in the EU. You can withdraw consent at any time by mailing info@brusselstattooconvention.be, and we remove you and stop mailing. We keep addresses until you unsubscribe, or for 24 months after the last mail you opened, whichever comes first.

9. Who else processes data for us

• Vercel Inc. — website hosting (United States, standard contractual clauses).
• Supabase — the database behind the artist line-up and the newsletter list (EU region).
• Google Ireland Limited — the venue map embedded on the info page, which loads automatically (see section 4), and YouTube, only if you press play on the recap video (see section 5).

Nobody else receives your data, and we never sell it.

10. Photography at the convention

Photographers and film crews work the convention floor and the contest stage. Attending means you may appear in photographs or footage used to promote and document the event. If you would rather not appear, tell a member of staff or the photographer on the day, or write to us afterwards and we will remove the image.

11. Your rights

Under the GDPR you can ask us for a copy of the data we hold about you, have it corrected or erased, restrict or object to how we use it, and receive it in a portable form. Write to info@brusselstattooconvention.be and we will answer within one month. If you are not satisfied, you can complain to the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels — autoriteprotectiondonnees.be.

12. Changes

If this policy changes we update the date at the top of this page.