Privacy policy
These notes explain which personal data we process when you use denehair.de and which rights you have. Personal data means any information that can identify you.
Controller
Gildene de Jesus König
Dene Hair & MakeUp
Hairdresser. Hair & make-up artist
Heugasse 19
73728 Esslingen am Neckar
Germany
- Phone:
- 0711 – 63 34 84 08
- Mobile:
- 0155 10 92 49 42
- Email:
- mail@denehair.de
Hosting
The website and database run on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in Germany. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in reliable hosting in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR). Hetzner’s notice: https://www.hetzner.com/legal/privacy-policy/
We may send confirmations of contact and appointment requests as well as invoices and reminders by email. We use Resend (Resend, Inc.) as a processor under Art. 28 GDPR. These are transactional messages, not a newsletter or advertising. Resend is based in the United States; transfers rely on appropriate safeguards under Art. 46 GDPR (standard contractual clauses). Resend’s notice: https://resend.com/legal/privacy-policy
Contact, appointment requests and client records
If you use the contact or appointment form, we process your name, phone number and, if provided, email address, requested service, preferred time and message in order to reply and plan appointments (Art. 6(1)(b) GDPR). The same details may be stored in the client record and with appointments in the salon backend once we continue the request.
Retention
We delete contact enquiries automatically after one year unless a matter is still open. We keep appointments and client records for as long as they are needed for care and bookkeeping. Issued invoices and reminders are kept for the statutory period, in particular section 147 of the German Fiscal Code (usually ten years).
Server logs and abuse protection
A visit generates technically necessary data such as IP address, time and the page requested. We use this to run the site, keep it secure and limit abuse, for example by throttling form and login attempts (Art. 6(1)(f) GDPR). Failed login attempts are stored for at most 30 days.
Cookies
The public website does not use tracking or advertising cookies. There is a technically necessary cookie NEXT_LOCALE that remembers the language you chose (Art. 6(1)(f) GDPR, section 25(2) TDDDG). The admin area needs a session cookie so sign-in works. No consent banner is required for that. Without the language cookie the site falls back to German.
Encryption and fonts
This website uses TLS encryption (HTTPS). You can recognise an encrypted connection by the padlock and https:// in the address bar. Data you send to us cannot be read in transit by third parties. Fonts are served from our server and are not loaded from Google.
WhatsApp, Instagram and Google Maps
If you open WhatsApp, Instagram or directions in Google Maps, those providers’ privacy notices apply (Meta or Google). We do not embed social plugins, tracking pixels or maps. Preview images of Instagram posts are stored on our server. Your browser connects to those services only when you use the link or button yourself.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will then check whether compelling legitimate grounds override your interests. You may lodge a complaint with a supervisory authority. The authority for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.