Marion Achleitner and Virgilio Goujon, operating Trail Tattoo, are the controllers of personal data processed directly by Trail Tattoo.
Marion Achleitner and Virgilio Goujon Chemin du champ-neuf 31955 Grugnay (Chamoson)Switzerland contact@trail-tattoo.comTrail Tattoo
Privacy Policy
Trail Tattoo processes personal data only where necessary to operate the website, create and fulfil orders, process payments, communicate with customers and comply with legal obligations.
Last updated: 18 September 2026
Data controller
Personal data we collect
When a customer places an order, Trail Tattoo may process the following personal data:
Customers do not need to create an account. Trail Tattoo does not operate a customer-account system.
- first name;
- last name;
- email address;
- telephone number;
- delivery address;
- country;
- order details;
- quantity and product or design ordered;
- order identifier and order status;
- price and payment status;
- information necessary to prepare and fulfil the order.
The organizer contact form also processes the name, email address, organization or event name, event date, estimated quantity, message and confirmation that Trail Tattoo may use those details to answer the request.
Tattoo design data
Customers can create a custom tattoo using the Trail Tattoo editor. Only the data required for the final purchased design is retained as part of the paid order. Trail Tattoo does not retain the original GPX file as part of the order, and draft or unpaid designs are not retained by Trail Tattoo.
The final paid tattoo design is retained for two years after purchase so Trail Tattoo can fulfil or reproduce the order where necessary, answer customer-service questions and deal with reasonable order-related issues.
After this period, the design is deleted unless continued retention is legally required.
Purposes and legal bases
Trail Tattoo processes personal data only for specific operational and legal purposes.
Order processing and contract performance
To receive, prepare, produce, ship and support customer orders. Where the GDPR applies, the legal basis is performance of a contract or steps taken at the customer’s request before entering into a contract.
Customer communication
To answer contact requests and send order confirmations, payment-related information and necessary communications concerning an order.
Payment processing
To initiate and confirm payments through Payrexx.
Legal and accounting obligations
To retain accounting and transaction records where required by Swiss law.
Website operation and security
To operate, secure, troubleshoot and protect the website and editor. Where legitimate interests are relied upon under the GDPR, they are limited to website security, fraud prevention and technical operation.
Payments
All payment processing is handled through Payrexx. Trail Tattoo does not directly collect or store customers’ full payment-card details.
Payrexx may provide different payment methods depending on country, currency and availability, including cards, TWINT and other methods supported by Payrexx. Information necessary to process the transaction is transmitted to Payrexx.
Payrexx and the payment providers involved in the selected method may process payment and transaction data under their own legal and regulatory obligations. Payrexx states that its services may involve systems located in Switzerland, the European Union and, depending on the selected payment service, other countries.
Payrexx AG Burgstrasse 203600 ThunSwitzerlandHosting and technical data
The Trail Tattoo website and editor are hosted by Infomaniak in Switzerland.
When the website is accessed, technical information may necessarily be processed to deliver the website, maintain security, detect errors, prevent abuse and troubleshoot technical problems. Infomaniak Web Hosting provides access and error logs. Depending on the hosting environment, technical server logs may include the visitor’s IP address and request-related technical information.
Trail Tattoo does not use hosting logs for behavioural tracking.
Infomaniak Network SA SwitzerlandEmail communication
Transactional email and email sent from the contact form are handled through Infomaniak.
Emails are used only to answer contact requests, send order confirmations, provide payment or order information and handle customer-service communications relating to an order.
Trail Tattoo does not operate a marketing newsletter and does not use customer email addresses for marketing.
Shipping
Trail Tattoo prepares orders itself and does not use an external fulfilment company. A customer’s name and delivery address may necessarily be communicated to postal or logistics providers used to physically deliver an order.
For international orders, delivery information may necessarily be processed by postal or logistics operators in the destination and relevant transit countries where required to deliver the parcel.
Data recipients and processors
Trail Tattoo does not sell personal data.
- Infomaniak, for website hosting and transactional email;
- Payrexx and the payment providers involved in the selected payment method, for payment processing;
- postal or logistics providers where necessary to deliver an order;
- competent public authorities where disclosure is required by law.
International data transfers
The primary Trail Tattoo hosting environment is located in Switzerland.
Payment processing through Payrexx may involve Switzerland, the European Union and potentially other jurisdictions depending on the selected payment method and the providers involved. International shipping may also require delivery information to be processed in the customer’s destination country and relevant transit countries.
Where applicable data-protection law requires safeguards for an international transfer, appropriate legal safeguards are used where required. Additional information about Payrexx processing is available in its privacy documentation.
Data retention
Trail Tattoo applies the following retention periods:
Final paid tattoo design
Two years after purchase, unless continued retention is legally required.
General operational order and customer-service data
Only for as long as necessary to fulfil the order and deal with order-related support, generally up to two years after completion of the order, unless longer retention is necessary for legal claims or legal obligations.
Accounting and transaction records
Records that qualify as accounting records or supporting accounting documents are retained for ten years from the end of the relevant financial year where required by Swiss law.
Order-related emails
Only for as long as reasonably necessary for order handling and follow-up, normally up to two years, except where particular correspondence must be retained longer for accounting, legal or evidentiary reasons.
Payment-card data
Not stored by Trail Tattoo.
Technical and server logs
Retained according to the applicable technical retention rules of Infomaniak and used only for technical, security and diagnostic purposes.
Analytics and marketing
Trail Tattoo does not use analytics, behavioural tracking, advertising pixels or marketing pixels.
Data security
Trail Tattoo uses reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss. Website communications use secure HTTPS. No method of transmission or storage can be guaranteed to be completely secure.
Data subject rights
Depending on the law applicable to the processing and the customer’s circumstances, individuals may have the following rights:
- access to their personal data;
- correction of inaccurate data;
- deletion where legally permitted;
- restriction of processing where applicable;
- objection to certain processing where applicable;
- data portability where applicable;
- withdrawal of consent where a processing operation is based on consent.
Certain data cannot necessarily be deleted immediately where Trail Tattoo is legally required to retain it, including qualifying accounting records.
People protected by the Swiss Federal Act on Data Protection may contact the FDPIC. Where the GDPR applies, individuals also have the right to lodge a complaint with the competent EU or EEA supervisory authority. Not every GDPR right applies in the same way to every customer worldwide.
Children
Trail Tattoo’s services are not specifically designed to collect personal data from children.
Automated decision-making
Trail Tattoo does not perform automated decision-making or profiling that produces legal or similarly significant effects on customers.
Changes to this Privacy Policy
This Privacy Policy may be updated when:
- the service changes;
- new payment or technical providers are introduced;
- analytics or marketing tools are introduced;
- customer accounts are introduced;
- legal requirements change.