Data protection

I. Name and address of the person responsible

Responsible within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as other data protection regulations for this website and the associated processing is:

Pedro Gimenez-Vergara

Pedro's Hair Expression & BEauty

Käthchen-Paulus-Strasse 260486 Frankfurt

Tel: 069/ 71448916

Email: info@hairexpression.de

II. Provision of the website and log files

1. Description and scope of data processing

Each time our website is accessed, data about the access to the server on which this service is located (so-called server log files).

The following data is collected here:

Browser type and browser version Operating system used Referrer URL Host name of the accessing computer Time of the server request IP address

2. Legal basis for data processing

The legal basis for the temporary storage of this data and the log files is Article 6 Paragraph 1 Clause 1 Letter f) GDPR (legitimate interest: provision of this website).

3. Purpose of data processing

The temporary storage of the user's IP address is necessary to enable the website to be delivered to the user's computer. For this purpose, the IP address of the user must be saved for the duration of the session.

The above data is stored in the log files to ensure the functionality of our website. In addition, we use this data to optimize the website and to ensure the security of our information technology systems (e.g. to detect attacks). An evaluation of the data for marketing purposes does not take place.

4. Duration of storage

As soon as the above data is no longer required to display the website, it will be deleted, at the latest when the respective session ends. Since the collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website, there is no possibility of objection. Further storage can take place in individual cases if this is required by law.

III. E-Mail-Contact

1. Description and scope of data processing

We can be contacted via the above email address. In this case, the sender's personal data transmitted with the request (ie your e-mail address, your name, the content of the message and, if applicable, your telephone number, address or other data provided voluntarily) will be stored.

2. Legal basis for data processing

The legal basis for the processing of this data, which is transmitted in the course of sending an inquiry, is Article 6 Paragraph 1 Clause 1 Letter f) GDPR (legitimate interests of us as the person responsible). If the request is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) sentence 1 lit. b) GDPR (performance of a contract).

3. Purpose of data processing

The processing of this personal data serves us solely to process the establishment of contact.

4. Duration of storage

The above data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by email, this is the case when the conversation with you has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.

5. Possibility to object

You have the option to object to data processing at any time. The objection must be sent to the above email address. All personal data that was saved in the course of making contact will be deleted in this case. Further storage can take place in individual cases if this is legally permissible or required.

IV. Appointment booking

1. Description and scope of data processing

With the button "BOOK NOW" you will be forwarded to the booking system of Studiobookr Deutschherrnstrasse 15-19Deutschherrn-Karree 90429 Nuremberg. You can book an appointment here. In addition to the desired service, you must also state your name, your e-mail address and your telephone number. You can also initiate payment via Treatwell. This data is then transmitted to us.

Further information on the processing of personal data when booking with Studiobookr can be found in Studiobookr's data protection declaration and further provider information on Studiobookr in the imprint. In addition, the terms of use of Studiobookr apply.

2. Legal basis for data processing

The legal basis for our processing of this data is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR (performance of a contract). The service provider Studiobookr is used on the basis of Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (legitimate interests of us as those responsible for uncomplicated electronic appointment booking).

3. Purpose of data processing

The processing of this personal data serves us solely for the execution of the contract.

4. Duration of storage

We store the data collected for contract processing for the duration of the contract and until the statutory or possible contractual warranty rights expire. After this period has expired, we will keep the information on the contractual relationship required under commercial and tax law for the periods specified by law. For this period, the data will only be processed again in the event of a review by the tax authorities.

V. Integration of Google Fonts

1. Description and scope of data processing

We integrate the fonts ("Google Fonts") from the provider Google. When a page is called up, the user's browser loads the required web fonts into its own browser cache in order to display text and fonts correctly. For this purpose, the user's browser must connect to Google's servers. This gives Google knowledge that our website was accessed from the user's IP address.

2. Legal basis for data processing

The legal basis for the integration of Google Fonts is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (legitimate interests of us as those responsible for the needs-based design of our website).

3. Purpose of data processing

Google Fonts are used for the uniform display of the fonts we have chosen.

4. Service Provider Information

Service provider is: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. For more information, see the Google Fonts website and Google's privacy policy. Google has a so-called EU-US Privacy Shield certification. The EU-US Privacy Shield Agreement is a data protection agreement intended to ensure an appropriate level of data protection for data transfers to certified US companies. The current status of Google's certification according to the EU-US Privacy Shield Agreement can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

VI. Your rights

Insofar as the legal requirements are met, you have the following rights:

1. You have the right to request confirmation from us as to whether personal data relating to you are being processed; if this is the case, you have a right to information about this personal data and the information listed in Art. 15 DS-GVO.

2. You have the right to demand that we immediately correct incorrect personal data concerning you and, if necessary, complete incomplete personal data (Art. 16 DS-GVO).

3. You have the right to demand that personal data relating to you be deleted immediately if one of the reasons listed in Art. 17 DS-GVO applies, for example if the data is no longer required for the purposes pursued (right to erasure).

4. You have the right to demand that we restrict the processing if one of the conditions listed in Art. 18 DS-GVO is met, for example if you have lodged an objection to the processing for the duration of the examination by us.

5. You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object at any time to processing carried out on the basis of Article 6 (1) sentence 1 lit. e) or f) GDPR for reasons that arise from your particular situation (Art. 21 GDPR). You will find additional information on the right to object in section 10 of this data protection declaration.

6. You have the right to revoke your consent at any time with effect for the future (right of revocation).

7. You have the right to receive from us the data that you have provided to us in a structured, common and machine-readable format. You can also transmit this data to other bodies or have it transmitted by us (right to data portability).

8. To exercise your rights, please contact us using the contact details above.

9. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).

10. Right to Object

a) You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object at any time to processing carried out on the basis of Article 6 (1) sentence 1 lit. e) or f) GDPR for reasons that arise from your particular situation (Art. 21 GDPR)

.

b) We will then no longer process the personal data for direct marketing purposes and otherwise only if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing for the establishment, exercise or defense of legal claims serves.

11. The provision of personal data for the use of our website is neither required by law nor by contract. You are also not obliged to provide us with personal data when using our website. However, in order to conclude a contract with us, it is necessary for you to provide us with personal data, which we must subsequently process. Failure to provide the personal data would mean that a contract could not be concluded with you.

12. We do not carry out automatic decision-making or profiling in accordance with Art. 22 GDPR.