Privacy Policy

Data protection information (information duties according to Art. 13 GDPR)

General information

With this data protection information we would like to inform you on the one hand about

which personal data we collect and use from you
whether and, if so, to which third parties these may be passed on
how long we store the data
which rights you have

If you have any questions about the following privacy notices, you can contact us using the contact information below.

Name and contact details of the person responsible

Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

The person responsible for data processing is:

HAARFREI MÜNCHEN
Timuras Sahakyan
Lindwurmstraße 16,
80337 München

Telefon: 089 – 411 41 957
Handy: 0176 39-42-49-40
Telefax: 03212-1469857
E-mail: info@haarfrei-muenchen.de

Data protection:

We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
Various personal data is collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and for what we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Your rights as a data subject

In this section we would like to inform you in detail about the rights you are entitled to.
According to the applicable laws, you have various rights regarding your personal data. If you would like to assert these rights, please send your request by e-mail or by post, clearly identifying yourself to the above-mentioned person responsible for data processing.

You have the right to free information about your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the scope of the applicable legal provisions. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of personal data. You also have the right of appeal to the competent supervisory authority.

Below you will find a detailed overview of your rights.

Right to information

You have the right to ask us to confirm whether we are processing your personal data. If this is the case, you have a right of access to these data and to all details relating to these data (in particular processing purposes, recipients, storage period, rights of data subjects, the origin of the data if these were not collected directly from you). You can read the details about your right to information in Article 15 of the EU Data Protection Basic Regulation.

Right to correction and completion

In accordance with Article 16 of the Basic EU Data Protection Regulation, you have the right to request us to correct any inaccurate personal data concerning you and to complete any incomplete personal data without delay.

Right to cancellation

You have the right to request us to delete your personal data immediately if one of the reasons stated in Article 17 of the EU Data Protection Basic Regulation applies. Such a reason for the immediate deletion can be given, for example, if the personal data is no longer necessary for the processing of your request or if you have objected to data processing.

Right to limitation of processing

You have the right to request us to restrict the processing of your personal data if one of the conditions set out in Article 18 of the EU Data Protection Basic Regulation is met. For example, if we no longer need this data to process your complaint or inquiry, but you need it to assert, exercise or defend legal claims, you have the right to restrict processing.

Right to revoke consent

You have the right to revoke your consent to the processing of your personal data at any time in accordance with Article 7(3) of the Basic EU Data Protection Regulation. The revocation applies only to future data processing, i.e. the data processing that has taken place up to the revocation remains legal in this case.

Right to data transferability

You have the right to receive the personal data concerning you that you have provided to us in a structured, current and machine-readable format, and you have the right to transmit this data to another person in charge without our interference, provided that

processing is based on consent pursuant to Art. 6 para. 1 sentence 1 a) DSGVO or Art. 9 para. 2 a) DSGVO or on a contract pursuant to Art. 6 para. 1 sentence 1 b) DSGVO and
processing is carried out using automated methods.

When exercising your right to data transferability in accordance with paragraph 1, you have the right to request that the personal data be transferred directly by us to another person responsible, insofar as this is technically feasible.

Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Art. 6 para. 1 sentence 1 e) or f) DSGVO; this also applies to profiling based on these provisions. We no longer process personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

You have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, unless the processing is necessary for the performance of a task in the public interest.

Right of appeal to a supervisory authority

You have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the law, if you believe that the processing of personal data concerning you is unlawful.

The competent authority is:

The State Commissioner for Data Protection of Bavaria

Dr. Thomas Petri
Wagmüllerstr. 18
80538 München

Telefon: 089/21 26 72-0
Telefax: 089/21 26 72-50

E-Mail: poststelle@datenschutz-bayern.de

Data processing, general

Legal basis of the processing

Insofar as not already mentioned in the individual processing under the previous paragraphs, we will show below the legal bases on the basis of which we carry out the data processing.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 S 1 lit. c DSGVO serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d DSGVO serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f DSGVO) serves as the legal basis for processing.

Storage time

Your data will be stored for as long as it is absolutely necessary to achieve the respective purpose, but at the latest, however, as long as legal regulations require it.
As soon as the storage purpose ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted, unless there is a need for further storage of the data as a result of the conclusion or performance of a contract.

Data integrity

We make every effort to ensure the security of your data in accordance with the applicable data protection laws and technical possibilities.

We use the SSL (Secure Socket Layer) coding system for the website, but point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
To secure your data, we maintain technical and organisational security measures in accordance with Art. 32 DSGVO, which we constantly adapt to the state of the art.

Furthermore, we do not guarantee that our offer will be available at certain times; disruptions, interruptions or failures cannot be ruled out. The servers we use are regularly and carefully secured.

Disclosure of data to third parties

In principle, we only use your personal data within our company.
If and insofar as we involve third parties within the scope of the fulfilment of contracts (e.g. in the IT area of hosting companies), this personal data is only received to the extent to which the transfer is necessary for the corresponding service.
In the event that we outsource certain parts of data processing (“order processing”), this is done on the basis of Art. 28 DSGVO. We contractually oblige contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in connection with the use of third-party services or disclosure / transfer of data to third parties, this will only take place to fulfil our (pre)contractual obligations, or on the basis of your consent, or on the basis of a legal obligation or on the basis of our legitimate interests.

If legal or contractual permissions are given, we process or leave the data in a third country only if the special requirements of Art. 44 ff. Process DSGVO.
Processing then takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

E-Mail Contact

If you contact us by e-mail, we will store your details for processing the request and in the event that follow-up questions arise.
This is also our legitimate interest pursuant to Art 6 para. 1 sentence 1 f) DSGVO.
We only store and use further personal data if you give your consent or if this is legally permissible without special consent.

Website

By using this website, you consent to the collection, use and transfer of your information in accordance with this Privacy Policy.

Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services that we use to operate the Site.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer according to art. 6 par. 1 p. 1 f) DSGVO in connection with art. 28 DSGVO.

Access data

When you visit our website, the web server collects usage data. This survey is necessary to technically enable the connection to our server and the use of our website. The following usage data is collected:

the page from which the file was requested,
Name of the retrieved file,
Date and time of retrieval,
the amount of data transferred,
Status of whether the retrieval was successful,
Description of the type of web browser used,
IP address of the requesting computer, which is shortened after the usage process in such a way that it is no longer possible to draw any conclusions about your person.

These log data are only stored anonymously. We do not store any IP address or other personal data that can be traced back to your person. Personal user profiles are therefore not created. No data or other information is passed on to third parties when you visit our website.

Cookies

We use session cookies on our website. Cookies are small text files that can be stored and read on your terminal device. We distinguish between session cookies, which are deleted again as soon as you close your browser and permanent cookies, which are also stored permanently after the respective usage process. Cookies can contain data that enable the recognition of the terminal device used. In some cases, however, cookies only contain information on certain settings that cannot be related to individuals. The session cookies we use do not contain any personal data. Furthermore, no techniques are used that make your usage behaviour comprehensible. The legal basis for the use of session cookies is our legitimate interest in using our website as required (Article 6(1)(f) of the Basic EU Data Protection Regulation).

You can make settings in your browser to be informed about the placement of cookies. This enables you to track the use of cookies. You can also delete cookies at any time via your browser settings and prevent the placement of new cookies. Please note that the use of our website may then be restricted and some functions will no longer be technically available.

Social media, analysis tools and third-party tools

When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.

You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google IrelandLimited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used and the origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this tool is based on your consent to cookies and further data processing such as tracking and analysis or transmission to the USA in accordance with Art. 6 para. 1 lit. a) or Art. 49 para. 1 lit. a) DSGVO. The consent can be revoked at any time for the future.

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
This website uses the “demographic characteristics” function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that include statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Objection to data collection”.

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de

For more information on how Google Analytics handles user data, please see Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de

We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Remarketing / Google Audiences

This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing analyzes your user behavior on our website (e.g. clicking on certain products) in order to classify you in certain advertising target groups and subsequently play suitable advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked with Google’s cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC).

For target group formation, we use, among other things, the customer matching of Google Remarketing. In this process, we transfer certain customer data (e.g., e-mail addresses) from our customer lists to Google. If the customers in question are Google users and logged into their Google account, they are shown matching advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).

The use of this tool is based on your consent to cookies and further data processing such as tracking and analysis or transfer to the USA in accordance with Art. 6 (1) a) and Art. 49 (1) a) DSGVO. The consent can be revoked at any time.

If you have a Google account, you can object to personalized advertising at the following link:
https://www.google.com/settings/ads/onweb/

Further information and the data protection provisions can be found in Google’s privacy policy at:
https://policies.google.com/technologies/ads?hl=de.
https://policies.google.com/technologies/partner-sites

Google Conversion Tracking

This website may use Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google conversion tracking enables Google and us to recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently.

This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or similar recognition technologies for identification.

More information on Google conversion tracking can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de.
https://policies.google.com/technologies/partner-sites

Google Tag Manager

This website uses the Google Tag Manager. Through this service, website tags can be managed through an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

Google Web Fonts

This website uses so-called web fonts provided by Google to uniformly display fonts. When you call up a page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a default font is used by your computer.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Use of Google-Maps

We use the component “Google Maps” from Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.

Each time you access the Google Maps component, Google sets a cookie to process user settings and data when you view the page that includes the Google Maps component. As a rule, this cookie is not deleted when you close your browser, but expires after a certain time, unless you delete it manually beforehand.

If you do not agree to this processing of your data, it is possible to deactivate the “Google Maps” service and thus prevent the transfer of data to Google. To do this, you must deactivate the JavaScript function in your browser. However, we would like to point out that in this case you will not be able to use “Google Maps” or only to a limited extent.

The use of “Google Maps” and the information obtained via “Google Maps” is subject to the Google Terms of Use http://www.google.de/intl/de/policies/terms/regional.html and the additional terms and conditions for “Google Maps” https://www.google.com/intl/de_en/help/terms_maps.html.

E-Mail Contact

Facebook

We link on our website to our Facebook page of Facebook Inc. (1601 Willow Road Menlo Park, CA 94025).
If you follow the link or visit our fan page, you are on a Facebook page. From then on you use the services of Facebook. For more information about Facebook’s collection and use of the data, your rights and ways to protect your privacy, please see Facebook’s privacy policy (https://www.facebook.com/about/privacy).

Appointment booking via Terminland.de

Through our website, we offer appointment booking via Terminland.de as part of order processing. The service is provided by Schulz & Löw Consulting GmbH, Kreuzberger Ring 44a, 65205 Wiesbaden and the personal data is stored in high-performance data centers in Germany. The transmission runs over TLS encryption.

Storage time

We delete your personal data if the business purpose associated with the data has ceased to exist or if the relevant legal data protection regulations require this. At your request, we will block all or part of your personal data. For this purpose, please inform us to what extent and for how long the blocking is to take place. As far as technically possible, you can thus exclude the processing and use of your data for certain areas.

The storage time at the respective service provider can differ from this. Please contact the respective service provider for further information on the storage period.

The following data is collected:

Information about the appointment (desired treatment, date and time)
moniker
street address
telephone number
email address

The specific dates required for your appointment may require further information not included in this list. The data required for the appointment are not determined by Terminland.de, but by the respective service provider.

After completion of the appointment booking you will receive a confirmation e-mail to your e-mail address, via which you can change or cancel the booked appointment. When making the appointment booking, you can choose whether the confirmation mail is to be sent. The confirmation e-mail is sent unencrypted and contains recorded appointment data to the extent set by the service provider. The appointment data can be sent in plain text or partially anonymous.

Access

Only the respective service provider has access to the data you have entered for appointment booking. Terminland.de can only see that an appointment is blocked at a certain time.
Should the respective service provider have difficulties and require technical support from Terminland.de due to this, the respective service provider can release the data for technical support in the appointment country. Terminland.de will then have access to the data entered. The respective service provider can cancel this data release at any time.

Passing on to third parties

The data collected will not be passed on and will only be used for the purpose stated in each case.
Terminland.de will only pass on your personal data to third parties if there is a legal obligation to do so.

Revocation

The user can revoke his consent to the collection and use of his personal data at any time with effect for the future.
Please contact the operator of the website / service provider with whom you have booked your appointment.

Feedback and callback form

If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.