Privacy Policy

Provider and Controller

Permanent Make Up Artist Studio

Owner: Saskia Wegele

Ahornstraße 21

85774 Unterföhring

Types of Personal Data Processed

Depending on how this website is used, contact and form data, technical usage data and data relating to gift voucher orders may in particular be processed.

Personal data may be provided voluntarily by you or collected automatically when you use this website.

The specific data processed depends on the service being used and is described in more detail in the sections below.

Where certain information is required to provide a service, process an enquiry or perform a contract, the relevant service may not be available without this information.

Please do not submit any special categories of personal data via forms or free-text fields – in particular information concerning health, religion, sexual orientation or similarly sensitive information – unless this is expressly required and intended for the respective purpose.

Processing Methods

Personal data is processed in accordance with the applicable data protection regulations.

Appropriate technical and organisational measures are used to protect personal data, in particular against unauthorised access, unauthorised disclosure, alteration, loss or destruction.

Processing is carried out using electronic systems and organisational procedures designed for the respective stated processing purposes.

Where necessary for the provision of this website or individual functions, external service providers may be involved in the processing of data as processors or independent controllers.

Website Hosting and Technical Provision by Wix

This website is operated using services provided by Wix.com Ltd. (“Wix”).

As part of the operation of the website, Wix may in particular process technical usage data as well as data submitted through functions and forms used on this website.

Where Wix processes personal data of visitors to this website on behalf of the Controller, this processing is carried out as commissioned data processing.

Wix.com Ltd. is based in Israel. Personal data may also be processed or stored in other countries as part of the provision of Wix services.

Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers are carried out in accordance with the applicable data protection requirements.

Further information about data processing by Wix can be found in the Wix Privacy Policy.

Contact and Website Forms

If you contact me using a form provided on this website, the data you enter will be processed for the purpose of handling your enquiry.

Depending on the form, this may in particular include your name, email address and any information that you voluntarily provide.

If your enquiry relates to a requested treatment, appointment booking or another contractual relationship, processing is carried out on the basis of Art. 6(1)(b) GDPR for the performance of pre-contractual measures or fulfilment of the contract.

For other enquiries, processing may be based on Art. 6(1)(f) GDPR. The legitimate interest lies in the appropriate handling and response to the enquiry.

The submitted data will be deleted once it is no longer required for processing the enquiry and there are no statutory retention obligations preventing deletion.

Gift Voucher Orders via the Website Form

If you order a gift voucher through this website, the information required to process the gift voucher order is collected using the form provided for this purpose.

This may in particular include the following data:

first and last name
email address
information as to whether the voucher is intended for you or another person
where applicable, the name of the recipient
an optional personal message for the voucher

The data of the person placing the order is processed for the purpose of handling the gift voucher order, allocating the order to the payment, and creating and sending the voucher.

The legal basis is Art. 6(1)(b) GDPR insofar as processing is required for pre-contractual measures or performance of the contract.

If you provide the name of a recipient or other personal data relating to a third party, this data will only be used to the extent required for the requested personalisation and processing of the voucher.

Please only provide personal data of third parties where you are authorised to disclose such information.

In particular, you should not enter sensitive or especially protected personal data in the “Personal message on the voucher” field.

Data submitted through the gift voucher form will only be stored for as long as required to process and complete the gift voucher order. Where data forms part of transactions relevant under tax or commercial law, statutory retention obligations may require longer storage.

Payment Processing via PayPal

PayPal is used to process payments for gift vouchers ordered online.

After submitting the gift voucher form, you will be redirected to PayPal for payment processing. There you enter the desired voucher amount and complete the payment.

The payment service provider is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.

22–24 Boulevard Royal

L-2449 Luxembourg

Your payment and account details are entered and processed directly by PayPal.

In connection with payment processing, PayPal may provide me with information about the transaction, in particular the payment status, amount paid, transaction information and other details required to allocate and process the payment.

I do not receive complete bank or credit card details that you enter directly with PayPal.

PayPal is used to process the payment requested by you. The legal basis for processing data required for contractual processing is Art. 6(1)(b) GDPR.

PayPal processes personal data as part of its own services in accordance with its own privacy policy. This may in particular include identification and contact data, payment and financial data, transaction data and technical device and usage data.

Further information can be found in PayPal’s Privacy Policy.

Cookies and Comparable Technologies

This website uses cookies and comparable technologies (“trackers”).

Technically necessary cookies may be used where they are required for the secure and functional operation of the website or for functions expressly requested by you.

Where cookies or comparable technologies requiring consent are used, they will only be activated after you have made the corresponding selection in the cookie banner.

Further information about the cookies and trackers used on this website, their purpose, storage period and respective providers can be found in the Cookie Policy or in the cookie banner settings.

You can change or withdraw consent that you have given at any time with effect for the future via the cookie settings.

Legal Bases for Processing

Personal data is only processed where a legal basis exists.

Depending on the processing activity, the following legal bases may in particular apply:

Art. 6(1)(a) GDPR: You have given your consent to the processing of your personal data for one or more specific purposes.

Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.

Art. 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation.

Art. 6(1)(f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the Controller or a third party, except where your interests or fundamental rights and freedoms override those interests.

Where a more specific legal basis applies to an individual processing activity, this is stated in the respective section of this Privacy Policy.

Place of Processing and International Data Transfers

Personal data may be processed at the Controller’s place of business and by the respective service providers used.

Depending on the service used, personal data may also be processed outside Germany or outside the European Economic Area.

Where personal data is transferred to a country outside the European Union or European Economic Area, this is only carried out in accordance with the applicable legal requirements.

This may in particular be based on an adequacy decision of the European Commission or on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Further details can be found in the information relating to the respective service providers.

Storage Period

Personal data is generally only processed and stored for as long as required for the respective purpose.

Data processed for the performance of a contract or for pre-contractual measures may be stored until the relevant contractual relationship has been fully completed.

In addition, statutory commercial, tax or other retention obligations may require longer storage.

Data processed on the basis of consent may generally be processed until consent is withdrawn, unless another legal basis permits further processing.

Data processed on the basis of legitimate interests will be deleted once processing is no longer required for the respective purpose and no overriding legitimate grounds or statutory obligations prevent deletion.

After expiry of the applicable retention or storage periods, the relevant personal data will be deleted unless there is a legal basis for further storage.

Your Rights Under the General Data Protection Regulation

Right of Access

You have the right to request information as to whether and which personal data concerning you is being processed.

Right to Rectification

You may request the correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

You may request the deletion of your personal data where the statutory requirements are met.

Right to Restriction of Processing

You may request restriction of the processing of your personal data where the statutory requirements are met.

Right to Data Portability

Where the statutory requirements are met, you may receive the personal data concerning you in a structured, commonly used and machine-readable format or request that it be transmitted to another controller.

Right to Withdraw Consent

If you have given consent to the processing of personal data, you may withdraw this consent at any time with effect for the future.

The lawfulness of processing carried out before withdrawal remains unaffected.

Right to Object

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time without stating reasons.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

This right exists in particular with the supervisory authority responsible for your habitual residence, your place of work or the place of the alleged infringement.

Exercising Your Rights

Requests to exercise your data protection rights may be sent to the following address:

Permanent Make Up Artist Studio

Owner: Saskia Wegele

Ahornstraße 21

85774 Unterföhring

Email: hello@sw-naturalpmu.de

Your request will be processed within the statutory time limits.

System Logs and Technical Usage Data

When this website is accessed, data may be processed for technical reasons where this is required for the provision, security, error analysis and maintenance of the service.

This may in particular include the IP address, date and time of access, pages or resources accessed, browser and device information, operating system and technical status and error data.

Technically necessary data is processed in particular to ensure stable and secure operation of the website.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, technically reliable and efficient provision of the website.

Legal Measures and Compliance with Legal Obligations

Personal data may be processed where this is required for the establishment, exercise or defence of legal claims.

Personal data may also be processed or disclosed to competent authorities where there is a legal obligation or a binding administrative or court order requiring this.

Data Relating to Third Parties

If you submit personal data relating to another person through this website, you are responsible for ensuring that you are authorised to provide this data.

This applies in particular to information relating to recipients of gift vouchers.

Please limit such information to what is necessary for the respective purpose.

Further Information

If you have questions about the processing of your personal data or require further information regarding a specific processing activity, you may contact me at any time using the contact details provided above.

Changes to This Privacy Policy

This Privacy Policy may be updated where changes to this website, the services used or legal requirements make this necessary.

The current version is available on this website.

Where a change concerns processing based on your consent and renewed consent is required, such consent will be obtained accordingly.

Definitions

Personal Data

Personal data means any information relating to an identified or identifiable natural person.

Usage Data

Usage data means information that may arise technically when using a website or digital service, for example an IP address, browser and device information, time of access and pages visited.

Data Subject

The data subject is the natural person to whom the personal data being processed relates.

Processor

A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of a controller.

Controller

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Last updated: September 2026