Privacy Policy

Provider and Controller

Permanent Make Up Artist Studio
Owner: Saskia Wegele
Ahornstraße 21
85774 Unterföhring

Types of Personal Data Processed

Depending on how you use this website, the personal data processed may include, in particular, contact and form data, technical usage data and data relating to gift voucher orders.

Personal data may either be provided voluntarily by you or collected automatically when you use this website.

The specific data processed depends on the service you use and is described in more detail in the sections below.

Where certain information is required in order to provide a service, process an enquiry or perform a contract, the relevant service may not be available without that information.

Please do not submit any special categories of personal data through forms or free-text fields – in particular information concerning health, religion, sexual orientation or similarly sensitive information – unless this is expressly required and intended for the relevant purpose.

Methods of Processing

Personal data is processed in accordance with applicable data protection legislation.

Appropriate technical and organisational measures are used to protect personal data, in particular against unauthorised access, unauthorised disclosure, alteration, loss or destruction.

Processing is carried out using electronic systems and organisational procedures designed for the respective purposes of processing.

Where necessary for the provision of this website or individual functions, external service providers may be involved in the processing of data either as processors or as independent controllers.

Website Hosting and Technical Provision by Wix

This website is operated using services provided by Wix.com Ltd. (“Wix”).

As part of operating the website, Wix may process technical usage data as well as data submitted through functions and forms used on this website.

Where Wix processes personal data of visitors to this website on behalf of the Controller, such processing is carried out in its capacity as a processor.

Wix.com Ltd. is based in Israel. Personal data may also be processed or stored in other countries in connection with the provision of Wix services.

Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers are made in accordance with the applicable data protection requirements.

Further information on data processing by Wix can be found in the Wix Privacy Policy.

Contact Enquiries and Website Forms

If you contact me using a form provided on this website, the data you enter will be processed for the purpose of handling your enquiry.

Depending on the form, this may include, in particular, your name, email address and any information you provide voluntarily.

Where your enquiry relates to a requested treatment, appointment booking or another contractual relationship, processing is based on Art. 6(1)(b) GDPR for the purpose of taking steps prior to entering into a contract or performing a contract.

For other enquiries, processing may be based on Art. 6(1)(f) GDPR. The legitimate interest lies in appropriately processing and responding to the enquiry.

The data submitted will be deleted once it is no longer required for handling the enquiry and provided that no statutory retention obligations prevent its deletion.

Gift Voucher Orders via the Website Form

If you order a gift voucher through this website, the information required to process the order will be collected using the form provided for this purpose.

This may include in particular:

First and last name
Email address
Information on whether the voucher is intended for you or another person
Where applicable, the name of the recipient
An optional personal message for the voucher

The data of the person placing the order is processed for the purpose of handling the gift voucher order, matching the order to the payment, and creating and sending the voucher.

The legal basis for this processing is Art. 6(1)(b) GDPR where processing is necessary in order to take steps prior to entering into a contract or to perform the contract.

If you provide the name of a recipient or other personal data relating to a third party, this information will be used solely to the extent necessary for the requested personalisation and processing of the voucher.

Please only provide personal data relating to third parties where you are authorised to disclose that information.

In particular, please do not enter sensitive or particularly protected personal data in the field “Personal message on the voucher”.

Data submitted via the gift voucher form will be stored only for as long as necessary to process and fulfil the gift voucher order. Where data forms part of transactions relevant for tax or commercial-law purposes, statutory retention obligations may require it to be stored for a longer period.

Payment Processing via PayPal

PayPal is used as the payment service provider for gift vouchers ordered online.

After submitting the gift voucher form, you will be redirected to PayPal to complete the payment. There, you enter the desired voucher amount and make the payment.

The payment service provider is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

Your payment and account details are entered and processed directly by PayPal.

In connection with payment processing, PayPal may provide me with information relating to the transaction, including in particular the payment status, amount paid, transaction information and other information required to identify and process the payment.

I do not receive the full bank or credit card details that you enter directly with PayPal.

PayPal is used to process the payment requested by you. The legal basis for processing data required for the performance of the contract is Art. 6(1)(b) GDPR.

PayPal processes personal data in connection with its own services in accordance with its own privacy provisions. This may include, in particular, identification and contact data, payment and financial data, transaction data, and technical device and usage data.

Further information can be found in the PayPal Privacy Statement.

Cookies and Similar Technologies

This website uses cookies and similar technologies (“trackers”).

Strictly necessary cookies may be used where they are required for the secure and functional operation of the website or for functions expressly requested by you.

Where cookies or similar technologies require consent, they will only be used after you have made the relevant selection in the cookie banner.

Further information on the cookies and trackers used on this website, their purposes, storage periods and respective providers can be found in the Cookie Policy or in the cookie banner settings.

You may change or withdraw any consent you have given at any time with effect for the future via the cookie settings.

Legal Bases for Processing

Personal data is processed only where there is a legal basis for doing so.

Depending on the processing activity, the following legal bases may apply in particular:

Art. 6(1)(a) GDPR: You have given your consent to the processing of your personal data for one or more specific purposes.

Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.

Art. 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation.

Art. 6(1)(f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the Controller or a third party, except where those interests are overridden by your interests or fundamental rights and freedoms.

Where a more specific legal basis applies to a particular processing activity, it is stated in the relevant section of this Privacy Policy.

Place of Processing and International Data Transfers

Personal data may be processed at the Controller’s place of business and by the respective service providers used.

Depending on the service concerned, personal data may also be processed outside Germany or outside the European Economic Area.

Where personal data is transferred to a country outside the European Union or the European Economic Area, this will only take place in accordance with the applicable legal requirements.

This may be based, in particular, on an adequacy decision by the European Commission or on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Further details are provided in the information relating to the respective service providers.

Storage Period

As a general rule, personal data is processed and stored only for as long as necessary for the relevant purpose.

Data processed for the performance of a contract or in order to take steps prior to entering into a contract may be stored until the relevant contractual relationship has been fully concluded.

In addition, statutory retention obligations under commercial, tax or other laws may require data to be stored for a longer period.

Data processed on the basis of consent may generally be processed until consent is withdrawn, unless another legal basis permits further processing.

Data processed on the basis of legitimate interests will be deleted once processing is no longer required for the relevant purpose and there are no overriding legitimate grounds or statutory obligations preventing deletion.

Once the applicable retention or storage periods have expired, the relevant personal data will be deleted unless there is a legal basis for further storage.

Your Rights under the General Data Protection Regulation

Right of Access

You have the right to request information as to whether and which personal data relating to you is being processed.

Right to Rectification

You may request the correction of inaccurate personal data and the completion of incomplete personal data.

Right to Erasure

Subject to the statutory requirements, you may request the deletion of your personal data.

Right to Restriction of Processing

Subject to the statutory requirements, you may request that the processing of your personal data be restricted.

Right to Data Portability

Where the statutory requirements are met, you may receive personal data concerning you in a structured, commonly used and machine-readable format or request that it be transmitted to another controller.

Right to Withdraw Consent

If you have given consent to the processing of personal data, you may withdraw that consent at any time with effect for the future.

The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

Right to Object

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time without giving reasons.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

In particular, you may exercise this right before the supervisory authority responsible for your habitual residence, your place of work or the place of the alleged data protection infringement.

Exercising Your Rights

Requests relating to the exercise of your data protection rights may be sent to:

Permanent Make Up Artist Studio
Owner: Saskia Wegele
Ahornstraße 21
85774 Unterföhring

Email: hello@sw-naturalpmu.de

Your request will be processed within the statutory time limits.

System Logs and Technical Usage Data

When you access this website, data required for the technical provision, security, error analysis and maintenance of the service may be processed.

This may include, in particular, your IP address, the date and time of access, pages or resources accessed, browser and device information, operating system, and technical status and error data.

Technically necessary data is processed in particular to ensure the stable and secure operation of the website.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, technically reliable and efficient provision of the website.

Legal Proceedings and Compliance with Legal Obligations

Personal data may be processed where necessary for the establishment, exercise or defence of legal claims.

Personal data may also be processed or disclosed to competent authorities where required by law or by a binding administrative or court order.

Third-Party Data

If you submit personal data relating to another person through this website, you are responsible for ensuring that you are authorised to provide that data.

This applies in particular to information relating to recipients of gift vouchers.

Please limit such information to what is necessary for the relevant purpose.

Further Information

If you have any questions about the processing of your personal data or require further information about a specific processing activity, you may contact me at any time using the contact details provided above.

Changes to this Privacy Policy

This Privacy Policy may be amended where changes to this website, the services used or legal requirements make this necessary.

The current version is available on this website.

Where a change affects processing based on your consent and renewed consent is required, such consent will be obtained accordingly.

Definitions

Personal Data

Personal data means any information relating to an identified or identifiable natural person.

Usage Data

Usage data means information that may be generated technically when using a website or digital service, such as an IP address, browser and device information, the time of access and pages viewed.

Data Subject

A data subject is the natural person to whom the personal data being processed relates.

Processor

A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of a controller.

Controller

A controller is the natural or legal person that, alone or jointly with others, determines the purposes and means of processing personal data.

Last updated: September 2026