Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Responsible Party" section of this privacy policy.

How do we collect your data?
Your data is collected when you provide it to us (e.g., data entered in a contact form or appointment booking). Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access).

What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data at any time free of charge. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances.

2. Responsible Party

The responsible party for data processing on this website is:

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

3. Data Protection Officer

We have appointed an internal data protection officer for our company:

The data protection officer is the contact person for all data protection inquiries. Responsibility for data processing remains with the responsible party.

4. Data Collection on This Website

Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them.

We use the following types of cookies:

• Necessary Cookies: These cookies are essential for the operation of the website. They enable basic functions such as page navigation and access to secure areas. The website cannot function properly without these cookies.
• Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting information anonymously. This helps us improve our website.These cookies are only set with your consent.
• Marketing Cookies: These cookies are used to display relevant advertisements.These cookies are only set with your consent.

You can configure your cookie preferences at any time via our cookie settings. The legal basis for the use of technically necessary cookies is Art. 6(1)(f) GDPR. For analytics and marketing cookies, the legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address (anonymized)

This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.

Contact Form / Email

If you contact us via the contact form or email, your details from the inquiry, including the contact data you provide, will be stored for the purpose of processing the request and in case of follow-up questions. We will not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).

5. External Services

Appointment Booking via Phorest

For online appointment booking, we use the external service Phorest (Phorest Salon Software Ltd., Ireland). When you book an appointment, the following data is processed:

• Name
• Email address
• Phone number
• Appointment details (date, time, service)
• Payment information (for deposit processing)

This data is necessary for appointment management and is processed on the basis of Art. 6(1)(b) GDPR (contract performance). The data is stored on Phorest's servers. By using the booking service, you also accept Phorest's privacy policy: https://www.phorest.com/privacy-policy/

Note: By completing a booking, you also agree to our Terms and Conditions, including the deposit and cancellation policy.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

IP anonymization: We have activated IP anonymization on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA.

Google Analytics is only used with your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time via our cookie settings.

AI Chat Assistant

Our website offers an AI-powered chat assistant for hair consultation. When using this service:

• Your questions and the AI's responses are processed in real-time
• No personal data is stored permanently from the chat
• The chat history is only stored locally in your browser during your session
• The AI service is hosted on secure servers with encrypted transmission

Important: The AI assistant is an advisory tool and does not replace a professional salon consultation. No personal health or medical data should be shared in the chat.

6. Your Rights

Under the GDPR, you have the following rights:

• Right to Information (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed.
• Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data concerning you.
• Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing of your personal data.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
• Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority (for Saxony: Sächsischer Datenschutzbeauftragter).

7. Data Retention

We store your personal data only for as long as necessary for the purposes for which it was collected, or as required by legal retention obligations. After this period, the data will be deleted or anonymized.

• Appointment data: Stored for the duration of the customer relationship plus statutory retention periods
• Invoice data: 10 years (commercial and tax law retention requirements)
• Contact inquiries: Until the inquiry is fully processed, then deleted
• Contact inquiries: Until the inquiry is fully processed, then deleted
• Cookie consent: 12 months

8. Data Security

We use SSL/TLS encryption for data transmission on this website. You can recognize an encrypted connection by the "https://" in the address bar of your browser. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.