Privacy Policy
This privacy policy describes how we process personal data under Art. 13 and 14 GDPR.
Personal data is processed only to the extent necessary for website operation, security, and service delivery.
1. Controller
- Salon Elen, owner Olena Dubrovska
- Lessingstr. 37, 06114 Halle (Saale), Germany
- Phone: +49 177 899 5106
- E-mail: elen69@web.de
2. Processing purposes
- Website operation and IT security
- Online booking and customer management
- Handling contact requests
- Payment processing for online payments
- Appointment/security notifications (e-mail, SMS, messenger)
- Optional AI chat/voice features
3. Legal bases
- Art. 6(1)(b) GDPR (contract or pre-contractual measures)
- Art. 6(1)(c) GDPR (legal obligations)
- Art. 6(1)(f) GDPR (legitimate interests, e.g., security)
- Art. 6(1)(a) GDPR (consent where separately obtained)
4. Server logs and technical data
When you visit the website, technical access data may be processed (e.g., IP address, date/time, URL, user agent, referrer).
This is required for stability and security under Art. 6(1)(f) GDPR.
5. Cookies and local storage
We use necessary cookies and local storage values (for example language settings such as locale and technical preferences).
Unless separate consent is requested, no non-essential marketing cookies are used.
6. Booking, communication, payment
For booking and communication we process contact and appointment data (e.g., name, phone, e-mail, selected service, appointment time).
For online payments, required data is transferred to payment providers (e.g., Stripe, PayPal).
For notifications we may use providers such as Resend, Zadarma, or Telegram.
7. AI features and external content
If AI chat/voice features are used, inputs may be transferred to external AI providers (e.g., OpenAI).
Please do not enter unnecessary sensitive information.
Google Maps may be loaded on the contact page; this may transfer technical usage data to Google.
8. Recipients, transfers, retention
Data may be shared with technical providers acting as processors or independent controllers.
If data is transferred to third countries, we rely on lawful safeguards (e.g., standard contractual clauses), where required.
Data is retained only as long as necessary for the purpose or legal retention duties.
9. Your rights
- Access, rectification, erasure, restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent for future processing
10. Complaints and final notes
You may lodge a complaint with a supervisory authority, especially at your place of residence or our registered office.
Supervisory authority in Saxony-Anhalt: State Commissioner for Data Protection Saxony-Anhalt (https://datenschutz.sachsen-anhalt.de).
No automated decision-making within the meaning of Art. 22 GDPR is carried out.