PRIVACY POLICY
for Melanie Vötter - Makeup Artist
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information by which you can be personally identified. Detailed information on data protection can be found in our Privacy Policy set out below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Information on the Controller" in this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us. This may include, for example, information that you enter into a contact form.
Other data is collected automatically by our IT systems, or after you have given your consent, when you visit this website. This mainly includes technical data (e.g. your internet browser, operating system, or the time at which you accessed the website). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze user behavior. If contracts can be concluded or initiated via this website, the transmitted data will also be processed for contract offers, orders, or other business inquiries.
What rights do you have regarding your data?
You have the right at any time to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.
If you have given your consent to the processing of your personal data, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
If you have any questions about data protection or the processing of your personal data, you are welcome to contact us at any time.
2. Hosting
We host the content of our website with the following provider:
WIX
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as "WIX").
WIX is a platform for creating and hosting websites. When you visit our website, WIX analyzes user behavior, traffic sources, the geographic region of website visitors, and visitor statistics. WIX stores cookies in your browser that are required for the proper display of the website and to ensure its security (essential cookies).
The data collected by WIX may be stored on servers located around the world, including servers in the United States.
For more information, please refer to WIX's Privacy Policy:
https://www.wix.com/about/privacy
According to WIX, data transfers to the United States and other third countries are based on the European Commission's Standard Contractual Clauses (SCCs) or comparable safeguards in accordance with Article 46 GDPR. Further details are available at:
https://www.wix.com/about/privacy-dpa-users
The use of WIX is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
The company is certified under the EU–U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing carried out in the United States. Every company certified under the DPF is committed to complying with these data protection standards. Further information is available from the provider at:
https://www.dataprivacyframework.gov/participant/5626
Data Processing Agreement
We have entered into a Data Processing Agreement (DPA) with the above-mentioned service provider. This is a contract required under data protection law, ensuring that WIX processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data is any information by which you can be personally identified. This Privacy Policy explains what data we collect, how we use it, and for what purpose. It also explains how and why this processing takes place.
Please note that data transmission over the Internet (e.g. communication by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.
Information on the Controller
The controller responsible for data processing on this website is:
Melanie Vötter
Wittelsbacherallee 45a
32427 Minden
Germany
Phone: +49 172 5659763
Email: melanievotter@ymail.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Data Retention
Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies.
If you submit a legitimate request for deletion or withdraw your consent to data processing, your personal data will be deleted unless we are legally entitled or required to retain it for other reasons (e.g. tax or commercial record retention obligations). In the latter case, the data will be deleted once those legal retention obligations no longer apply.
Legal Bases for Data Processing
Where you have given your consent to the processing of your personal data, we process your data on the basis of Article 6(1)(a) GDPR or, where special categories of personal data are processed, Article 9(2)(a) GDPR. Where you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. Where you have consented to the storage of cookies or to access to information stored on your device (e.g. through device fingerprinting), processing is additionally based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any time. Where your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation pursuant to Article 6(1)(c) GDPR. Furthermore, data processing may be based on our legitimate interests pursuant to Article 6(1)(f) GDPR. The specific legal basis applicable in each individual case is explained in the relevant sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with various external service providers. In some cases, this requires the transfer of personal data to those external parties. We only disclose personal data where this is necessary for the performance of a contract, where we are legally required to do so (e.g. disclosure to tax authorities), where we have a legitimate interest pursuant to Article 6(1)(f) GDPR, or where another legal basis permits such disclosure. When using data processors, we only transfer our customers' personal data on the basis of a valid Data Processing Agreement (DPA). Where processing is carried out jointly with another controller, a Joint Controller Agreement is concluded.
Withdrawal of Your Consent
Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of any data processing carried out before your withdrawal remains unaffected.
Right to Object to Data Processing and Direct Marketing (Article 21 GDPR)
Where your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to any profiling based on those provisions. The relevant legal basis for the processing can be found in this Privacy Policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defence of legal claims (Article 21(1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (Article 21(2) GDPR).
Right to Lodge a Complaint with a Supervisory Authority
In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive the data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format. You also have the right to request that this data be transferred directly to another controller where this is technically feasible.
Right of Access, Rectification and Erasure
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, its recipients, and the purpose of the data processing. You also have the right to request the correction or deletion of your personal data. If you have any questions regarding personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose.
The right to restriction of processing applies in the following cases:
-
If you contest the accuracy of your personal data stored by us, we generally require time to verify this. During the verification period, you have the right to request restriction of the processing of your personal data.
-
If the processing of your personal data is or has been unlawful, you may request the restriction of processing instead of deletion.
-
If we no longer need your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request restriction of processing instead of deletion.
-
If you have objected to processing pursuant to Article 21(1) GDPR, your interests and ours must be balanced. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
Where the processing of your personal data has been restricted, such data may, apart from being stored, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in your browser's address bar from "http://" to "https://", as well as by the padlock symbol displayed in your browser.
When SSL/TLS encryption is enabled, any data you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Cookies
Our website uses so-called "cookies." Cookies are small data files that do not cause any damage to your device. They are stored either temporarily for the duration of your visit (session cookies) or permanently on your device (persistent cookies). Session cookies are automatically deleted when you leave the website. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may be set by us (first-party cookies) or by third parties (so-called third-party cookies). Third-party cookies enable the integration of certain services provided by third parties within websites (e.g. cookies used to process payment services).
Cookies serve various functions. Many cookies are technically necessary because certain website features would not function properly without them (e.g. the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies that are required to carry out electronic communications, to provide certain functions requested by you (e.g. the shopping cart function), or to optimize the website (e.g. cookies used to measure website traffic) (essential cookies) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing essential cookies to ensure the technically error-free and optimized provision of its services.
Where consent has been requested for the storage of cookies or similar recognition technologies, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). You may withdraw your consent at any time.
You can configure your browser to notify you when cookies are being set and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to enable the automatic deletion of cookies when closing your browser. Please note that disabling cookies may limit the functionality of this website.
Where additional cookies or services are used on this website, they are described in this Privacy Policy.
Contact Form
If you send us inquiries via the contact form, the information you provide in the form, including the contact details you enter, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the efficient handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.
The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your inquiry has been fully processed). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.
Inquiries by Email or Telephone
If you contact us by email or telephone, your inquiry, including all personal data arising from it (such as your name and the content of your inquiry), will be stored and processed for the purpose of handling your request. We will not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the efficient handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.
The data you send us through contact inquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your request has been fully processed). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.
5. Newsletter
Newsletter Data
If you would like to subscribe to the newsletter offered on this website, we require your email address as well as information that enables us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected unless provided voluntarily.
We use this data exclusively for sending the requested information and do not share it with third parties.
The data entered into the newsletter subscription form is processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent to the storage of your data, your email address, and its use for sending the newsletter at any time, for example by clicking the "Unsubscribe" link included in every newsletter. The lawfulness of any data processing carried out before your withdrawal remains unaffected.
The data you provide for the purpose of subscribing to the newsletter will be stored by us or our newsletter service provider until you unsubscribe from the newsletter. Once you unsubscribe or the purpose for storing the data no longer applies, your data will be removed from the newsletter distribution list.
We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion where this is necessary to protect our legitimate interests pursuant to Article 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.
After you unsubscribe from the newsletter, your email address may be stored in a blacklist by us or our newsletter service provider where this is necessary to prevent future mailings. The data contained in the blacklist is used exclusively for this purpose and is not combined with other data.
This serves both your interests and our legitimate interest in complying with the legal requirements for sending newsletters (legitimate interest pursuant to Article 6(1)(f) GDPR). The storage of the blacklist is not subject to any time limit. You may object to this storage if your interests outweigh our legitimate interests.
Newsletters for Existing Customers
If you order goods or services from us and provide your email address in the process, we may subsequently use your email address to send you newsletters, provided that we informed you of this in advance.
In such cases, the newsletter will only contain direct advertising for our own similar goods or services. You may unsubscribe from this newsletter at any time. Every newsletter contains a corresponding unsubscribe link for this purpose.
The legal basis for sending these newsletters is Article 6(1)(f) GDPR in conjunction with Section 7(3) of the German Act Against Unfair Competition (UWG).
After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist to prevent future mailings. The data contained in the blacklist is used exclusively for this purpose and is not combined with other data.
This serves both your interests and our legitimate interest in complying with the legal requirements governing the sending of newsletters (legitimate interest pursuant to Article 6(1)(f) GDPR). The storage of the blacklist is not subject to any time limit. You may object to this storage if your interests outweigh our legitimate interests.
6. eCommerce and Payment Providers
Processing of Customer and Contract Data
We collect, process, and use personal customer and contract data for the purpose of establishing, managing, and modifying our contractual relationships.
We collect, process, and use personal data relating to the use of this website (usage data) only to the extent necessary to enable users to access our services or to bill for their use.
The legal basis for this processing is Article 6(1)(b) GDPR.
The customer data collected will be deleted after the completion of the order or the termination of the business relationship and upon expiry of any applicable statutory retention periods. Mandatory statutory retention periods remain unaffected.
Payment Providers
To process payments for purchases made through our website, we use the following payment providers:
-
PayPal
-
Klarna
-
Apple Pay
-
Google Pay
-
Credit and debit cards (including all major card brands)
When you choose one of these payment methods, the payment data required to process the transaction will be transmitted to the respective payment provider. The processing of this data is carried out solely for the purpose of processing payments and in accordance with the applicable privacy policies of the respective payment providers.
7. Plugins and Tools
YouTube
This website embeds videos from YouTube. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our web pages that contains an embedded YouTube video, a connection to YouTube's servers is established. In doing so, the YouTube server is informed which of our pages you have visited.
Furthermore, YouTube may store various cookies on your device or use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube may obtain information about visitors to this website. This information is used, among other things, to compile video statistics, improve user experience, and prevent fraud. The collected data is also processed within Google's advertising network.
If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.
The use of YouTube is in the interest of presenting our online content in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting). Consent may be withdrawn at any time.
For more information about how YouTube handles user data, please refer to YouTube's Privacy Policy:
https://policies.google.com/privacy
The company is certified under the EU–U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing carried out in the United States. Every company certified under the DPF is committed to complying with these data protection standards. Further information is available from the provider at:
https://www.dataprivacyframework.gov/participant/5780
Source: