InferaPrivacy policy
Who is responsible
The controller responsible for data processing on this website is Elena Klassen, Friseursalon Infera, Luisenstraße 66, 80798 Munich, Germany, e-mail: [email protected], phone: +49 176 43557925.
Visiting the website and hosting
When you open the website, technically necessary data is processed: IP address, date and time, the page requested, browser type. The website is delivered through Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; the connection to our own server, which holds the website and the data entered on it, is routed in encrypted form through the Cloudflare network. Cloudflare processes connection data and, technically, the content of the requests it passes on to our server, as our technical service provider. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).
Transfers to third countries
Cloudflare is based in the USA and adheres to the EU-U.S. Data Privacy Framework; the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR). Should that certification lapse, Cloudflare relies on standard contractual clauses (Art. 46 GDPR).
Booking appointments
This website takes no bookings and collects no data for them. Bookings are made in our online booking system (https://infera-muenchen.com/); its own privacy notice says which data are processed there.
We send confirmations and replies by e-mail. Our mailbox is run by Gmail, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may also be transferred to Google LLC in the USA, which adheres to the EU-U.S. Data Privacy Framework. If you write to us, we process your details to deal with your request (Art. 6(1)(b) or (f) GDPR).
Online withdrawal
If you use the function “Withdraw from contract”, we process your name, your details of the contract, your e-mail address and the date and time your statement arrived, in order to handle the withdrawal and acknowledge its receipt. We are required to do so by law (Art. 6(1)(c) GDPR, § 356a BGB).
Payment
No payment data is collected on this website. You choose how to pay when you book in our online booking system; its own privacy notice applies to a payment made there.
Cookies
The website uses no cookies for advertising or analytics and includes no tracking services. Fonts are loaded from our own server.
Videos, maps and external links
Embedded videos from YouTube or Vimeo are loaded only after you press play; only then does the provider receive your IP address. Links to maps, Treatwell or social networks are plain links: data is transferred only when you follow the link, and the privacy policy of that provider then applies.
Recipients
Your data is received only by the technical providers named above and – as far as necessary – by tax advisers and tax authorities. We do not sell data and do not use it for advertising without your separate consent.
How long we keep data
We keep data for as long as it is needed to handle your request. Data on business transactions that is subject to retention duties under commercial and tax law (§ 257 HGB, § 147 AO) is kept for the period set there – six to ten years – and then deleted.
Your rights
You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of legitimate interests, you may object to the processing on grounds relating to your particular situation (Art. 21). You may withdraw a consent at any time with effect for the future. To do so, write to [email protected].
Right to complain
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the place where you live or where we are established.
Automated decisions
No automated decision-making, including profiling, takes place.