This is a translation for your convenience. Only the German version of the Datenschutzerklärung is legally binding.
1. Controller
The controller responsible for the processing of personal data on this website is:
Nathalie Tyrell
Removee – Dauerhafte Haarentfernung & Tattooentfernung
Mörfelder Landstraße 64H
60598 Frankfurt am Main
Germany
Phone: +49 (0) 69 870 065 10
Email: office@removee.com
2. Overview of data processing
We only process personal data to the extent necessary for operating this website, handling enquiries, arranging appointments or using optional services that you have expressly enabled. Personal data is any data relating to an identified or identifiable natural person.
Where we ask for your consent to individual processing operations, giving it is voluntary and you can withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.
3. Legal bases
Unless otherwise stated in this privacy policy, we process data on the following legal bases:
- Art. 6(1)(b) GDPR, where processing is necessary for pre-contractual measures or the performance of a contract;
- Art. 6(1)(c) GDPR, where there is a legal obligation;
- Art. 6(1)(f) GDPR, where processing is necessary to protect our legitimate interests and your interests or fundamental rights do not override them;
- Art. 6(1)(a) GDPR and § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), where we ask for your consent to store or access information on your device.
4. Hosting and server log files
When you visit our website, the web server processes technically necessary data. This may include in particular:
- the IP address of the accessing device;
- the date and time of access;
- the page or file accessed;
- the amount of data transferred and the HTTP status code;
- the previously visited page (referrer), if your browser transmits it;
- browser type, browser version, operating system and comparable technical information.
This processing serves to provide the website securely and reliably, to prevent and investigate technical attacks and to analyse errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security and functionality of our website.
The website is operated by a hosting provider in Germany. The provider processes data only in accordance with our instructions and, where necessary, on the basis of a data processing agreement.
Server log data is stored for a maximum of seven days and then deleted or anonymised, unless longer storage is necessary to investigate a security incident.
5. Consent management and cookies
We use a consent management tool (“Complianz”). On your first visit, it shows you a choice of optional categories and stores your decision so that it can be taken into account on further visits.
Necessary technologies are used so that the website, your chosen privacy settings and basic security functions work. Optional services for statistics or external Google services are only activated once you give the respective consent.
You can change or withdraw your choice at any time via the “Privacy settings” link in the footer of this website. Where necessary, your consent decision is stored on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR or to protect our legitimate interest in verifiable and technically effective consent management under Art. 6(1)(f) GDPR.
6. Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used for the technical management of website tags.
On this website, Google Tag Manager is only loaded after you have consented to the “Statistics” category. It is used here in particular to technically provide Google Analytics 4. Google Tag Manager itself does not create visitor profiles and does not process the content of your form messages.
Where personal data is stored on or read from your device or data is transmitted to Google as a result of this integration, this takes place exclusively on the basis of your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. A transfer of data to the USA cannot be ruled out. For more information, see Google’s privacy policy: https://policies.google.com/privacy?hl=en
7. Google Analytics 4
After you have consented to the “Statistics” category, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us understand how visitors use our website. In particular, pseudonymous usage data, technical data about the device and browser used, pages visited, interactions with the website, referrer information and a shortened or technically processed IP address may be processed. We use the analysis to improve the content, usability and technical quality of our website.
After consent, the measurement covers in particular page views and interactions with contact and booking calls to action, phone links and email links. Content from the contact form, in particular name, email address, subject and message, is not transmitted to Google Analytics as an analytics event.
The processing takes place exclusively on the basis of your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw this consent at any time via “Privacy settings”. Without consent, Google Analytics 4 is not loaded on this website.
Google may also process data outside the European Union; in particular, a transfer to the USA cannot be ruled out. According to Google, it relies on the appropriate safeguards available in each case for such transfers. More information: https://policies.google.com/privacy?hl=en
8. Google Maps
A Google Maps map may be embedded on our contact page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The map is only loaded after you have consented to the “Marketing” category. Only then may your IP address, technical device data and the information that you have visited the page in question in particular be transmitted to Google. Google may also process data outside the European Union; a transfer to the USA cannot be ruled out.
The legal basis is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via “Privacy settings”. If you do not consent, the map is not loaded.
More information: https://policies.google.com/privacy?hl=en
9. Google reCAPTCHA
To protect our contact form against abusive automated entries, we use Google reCAPTCHA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
On this website, reCAPTCHA is only loaded after you have consented to the “Marketing” category. Once activated, Google may process in particular your IP address, technical information about your browser and device, the page accessed and usage and interaction data in order to determine whether an entry was made by a human.
The processing takes place exclusively on the basis of your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the privacy settings. Without consent, the protected contact form remains technically disabled; in this case, you can contact us by phone or email.
Processing of data outside the European Union, in particular in the USA, cannot be ruled out. More information: https://policies.google.com/privacy?hl=en
10. Contact form and getting in touch
If you contact us via the contact form, we process the data you enter. This is usually your name, email address, subject and message. The same applies if you contact us by email or phone.
We process this data exclusively to handle your enquiry, to communicate with you and, where applicable, to prepare or carry out pre-contractual measures or a contract. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR for other enquiries. Our legitimate interest lies in properly answering incoming enquiries.
The data is deleted as soon as the enquiry has been fully dealt with and there are no statutory retention obligations or legitimate reasons for longer storage. If a contractual relationship arises from the enquiry, statutory retention obligations may apply.
11. Online appointment booking via Terminland
On our website, we link to Terminland’s external appointment booking system. The booking system is not embedded in our website. Merely visiting our website therefore does not automatically transfer any data to Terminland.
Only when you click the Terminland link do you leave our website and access the Terminland website. From that point on, Terminland’s privacy policy applies. Data entered there is processed by Terminland in accordance with its own privacy provisions.
Information on data protection at Terminland (in German): https://www.terminland.de/datenschutz/
12. Links to social networks and other external websites
Our website contains ordinary links to external services, in particular to Instagram and Facebook. These are not embedded social media plugins. Merely visiting our website does not establish a connection to these platforms via such links.
Only when you click a link is a connection established to the respective external provider. The respective provider is responsible for the processing of personal data on its website. Please refer to its privacy information.
13. Recipients of data and data transfers to third countries
Where necessary, we use carefully selected service providers, in particular for hosting, email communication and the technical services mentioned in this policy. Where these service providers process personal data on our behalf, this takes place – where legally required – on the basis of a data processing agreement.
With the Google services mentioned in sections 6 to 9, data may be processed outside the European Union or the European Economic Area, in particular in the USA. Where no adequacy decision applies, data is only transferred subject to the appropriate safeguards available in each case under Art. 44 et seq. GDPR, for example on the basis of standard contractual clauses. Details can be found in Google’s privacy information.
14. Storage period
We only store personal data for as long as is necessary for the respective purpose or as statutory retention obligations require. The specific period depends in particular on the type of data, the reason for processing, how long it takes to handle an enquiry, technical security requirements and legal obligations.
You can withdraw consent at any time with effect for the future. We keep the documentation of consent for as long as necessary to fulfil our obligations to provide evidence.
15. Your rights
Subject to the statutory requirements, you have the right:
- to access the data processed about you (Art. 15 GDPR);
- to rectification of inaccurate data (Art. 16 GDPR);
- to erasure of your data (Art. 17 GDPR);
- to restriction of processing (Art. 18 GDPR);
- to data portability (Art. 20 GDPR);
- to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR);
- to withdraw consent given with effect for the future (Art. 7(3) GDPR);
- to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
The data protection supervisory authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
https://datenschutz.hessen.de/
16. No automated individual decision-making
We do not make decisions based solely on automated processing – including profiling – that produce legal effects concerning you or similarly significantly affect you.
17. Updates and changes to this privacy policy
We update this privacy policy when the website, the services used or legal requirements change. The version published on this website at any given time applies.
