Privacy Policy

Information on the Collection of Personal Data and Contact Details of the Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Melanie Conzelmann

Naturkosmetikstudio Wohlfühlraum

Kirchsteige 13

72393 Burladingen

Germany

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

Purpose of Data Storage

Your data is stored for the purpose of processing your order or inquiry, reserving your desired appointment, and enabling prompt telephone notification in the event of an appointment cancellation.

The following data is stored:

• Name and Email Address: Contact form, online shop, online courses, appointment reservation form.
• Address: Online shop.
• Phone Number: Appointment reservation form.
• For Color Analysis Services: Photos provided by you.

Legal Basis: The legal basis for processing is your consent (Art. 6 (1) (a) GDPR) or contract performance/pre-contractual measures (Art. 6 (1) (b) GDPR).

Disclosure of Personal Data to Third Parties

• Email Service Providers: The data you enter is sent via email and is therefore made accessible to the respective email service providers.
• Email Delivery and Transactional Emails via Brevo: We use the service Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) to send system and order notifications (e.g., order confirmations, WooCommerce account notifications) as well as our newsletter.
  • Scope & Purpose: When making a purchase in our shop or registering, the data you enter (in particular your email address, name, and, if applicable, order details) will be transmitted to Brevo’s servers to ensure the reliable delivery of technically and contractually required confirmation emails.
  • Legal Basis: Order and transactional emails are sent to fulfill our contract with you or to carry out pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.
• Newsletter & Double Opt-in Procedure: Our newsletter is sent exclusively on the basis of your explicit consent pursuant to Art. 6 (1) (a) GDPR. We use the double opt-in procedure for newsletter subscriptions. After signing up, you will receive an email containing a confirmation link. Your subscription is only complete once you click this link.
  • Storage Duration: Your data will be stored for the duration of your newsletter subscription and deleted within 30 days of unsubscribing, provided no statutory retention obligations apply.
  • Revocation: You can revoke your consent at any time by unsubscribing via the link included in every newsletter or by sending us a message (e.g., via the envelope icon in the footer of this page).
  • Data Processing Agreement: We have agreed to a Data Processing Agreement (DPA) with Sendinblue GmbH (Brevo) within the framework of their general terms of use. This guarantees that Brevo processes the data of our website visitors and customers strictly in accordance with our instructions and in compliance with the GDPR. Further information can be found at: https://www.brevo.com/en/legal/termsofuse/
• Shipping Companies: We pass on your data to the shipping company commissioned with the delivery solely to the extent necessary for contract fulfillment and the delivery of ordered goods.
• Payment Service Provider (PayPal): When paying via PayPal, credit card via PayPal, or direct debit via PayPal, we pass your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of the payment processing. PayPal reserves the right to conduct a credit assessment for certain payment methods. Further privacy details can be found in PayPal’s privacy statement: https://www.paypal.com/webapps/mpp/ua/privacy-full
• Amazon Pay: For payments via Amazon Pay, we pass on the following data to Amazon Payments to the extent necessary for contract fulfillment (Art. 6 (1) (b) GDPR): First name, last name, address, email address.
• Terminpanda (Appointment Booking): For online appointment bookings, we use Terminpanda, operated by Terminpanda GbR, Seminarstraße 15, 56564 Neuwied, Germany. Data provided during booking (e.g., name, phone number, email address, requested date) is transmitted to Terminpanda for scheduling (Art. 6 (1) (b) GDPR). A connection to Terminpanda is only established when you actively access the booking page. Use of this feature is voluntary; appointments can also be made by phone or email. More details: https://www.terminpanda.de/datenschutz

Data Retention Period

We store your data until you revoke your consent or request its deletion, but no longer than necessary to fulfill the purpose for which it was collected or as required by statutory retention periods.

Rights of the Data Subject

Under applicable privacy laws, you have the following rights:

• Right to access / information
• Right to rectification or erasure
• Right to restriction of processing
• Right to data portability
• Right to revoke your consent at any time (without affecting the lawfulness of processing based on consent before its revocation)
• Right to lodge a complaint with a supervisory authority

Provision of Data and Consequences of Non-Provision

The provision of your personal data is neither legally nor contractually required. However, providing your data is necessary for making an online appointment reservation, placing an order, or contacting us via the contact form.

Failure to provide your data will have the following consequences:

• Contact Form: You will not be able to contact us via the form.
• Online Shop: You will not be able to place an order or receive a color analysis service.
• Appointment Form: You will not be able to reserve an appointment online.

Automated Decision-Making

Automated decision-making or profiling does not take place.

Cookies & Storage Media

Our website uses cookies and similar technologies. Cookies are small text files stored on your terminal device that do not cause any damage and do not contain viruses.

• Essential Cookies: Some cookies are technically necessary to provide the core functions of our website (such as the shopping cart in WooCommerce, your login status for courses, or form security). Processing is based on § 25 (2) TDDDG and Art. 6 (1) (f) GDPR (legitimate interest in providing a fully functional service).
• Non-Essential Cookies: Other cookies (e.g., for analytics and marketing purposes) are only set with your explicit consent (§ 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR). You can adjust or revoke your cookie settings and consents at any time via our consent tool on the website (gear icon at the bottom left). Alternatively, you can restrict or prevent the storage of cookies through your browser settings.

Third-Party Cookies – Google Analytics 4

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

• Scope of Processing: Google Analytics uses cookies to analyze your use of the website. We use Google Analytics 4 with IP anonymization enabled by default. Your IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Google uses this data on our behalf to evaluate website usage and compile reports on website activity.
• Legal Basis & Revocation: Google Analytics is used exclusively on the basis of your explicit consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time with future effect by accessing the cookie settings via our consent banner.
• Data Transfer to Third Countries: Data transfers to the USA are based on the EU Commission’s adequacy decision (EU-U.S. Data Privacy Framework).

Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://policies.google.com/privacy

Details on the terms of use for Google Analytics are available at: https://marketingplatform.google.com/about/analytics/terms/us

Affiliate Links

Some pages of this website contain affiliate links. These are links to external providers where we receive a commission in the event of a purchase. This does not result in any additional costs for you as a user.

When you click on an affiliate link, the respective provider may set cookies or process personal data (e.g., IP address) to track the origin of the purchase. This data processing takes place under the responsibility of the respective provider. Further information can be found in the privacy policies of the linked websites.

The use of affiliate links is based on our legitimate interest in financing and operating this online offer pursuant to Art. 6 (1) (f) GDPR.