Privacy policy

Privacy policy

Your privacy is important to us!

Thank you for visiting our website haarwerkberlin.de and your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is very important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practice is in accordance with the legal regulations of the EU Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfill the information obligations resulting from the DSGVO. These can be found, for example, in Art. 13 and Art. 14 ff. DSGVO.

Responsible person

The responsible person in the sense of Art. 4 No. 7 DSGVO is the person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the responsible person is:

HaarWerk OHG
Hochstrasse 33
60313 Frankfurt
Germany
e-mail: berlin@haarwerk.de
Phone: +49 (0) 30 88778333

Provision of the website and creation of log files

Whenever our website is accessed, our system automatically collects data and information from the device (e.g. computer, cell phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page contents) that were accessed on our website;
(7) Websites from which the user’s system reached our website (referrer tracking);
(8) notification whether the retrieval was successful;
(9) Volume of data transferred

This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors are not identified.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of data processing

Temporary (automated) storage of data is necessary for the course of a website visit to enable delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and troubleshooting. For this purpose, it is necessary to log the technical data of the retrieving computer in order to be able to react as soon as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, the data serves us to optimize the website and to generally ensure the security of our information technology systems.

Possibility of objection and cancellation

You may object to the processing of your data at any time in accordance with Art. 21 DSGVO and request the deletion of data in accordance with Art. 17 DSGVO. Which rights you are entitled to and how to assert them can be found at the bottom of this data protection declaration.

Special functions of the website

Our site offers you various functions, during the use of which personal data is collected, processed and stored by us. In the following we explain what happens with these data:

Kontaktformular(e)

  • What personal data is collected and to what extent is it processed?

The data you entered in our contact forms, which you entered in the input mask of the contact form.

  • Legal basis for the processing of personal data

Art. 6 para. 1 lit. a DSGVO (consent by unambiguous confirming act or conduct)

  • Purpose of data processing

We will only use the data collected via our contact form or via our contact forms to process the specific contact request received via the contact form. Please note that in order to fulfill your contact request, we may also be able to send you e-mails to the specified address. The purpose of this is so that you can receive confirmation from us that your inquiry has been correctly forwarded to us. However, the sending of this confirmation e-mail is not binding on us and is for your information only.

  • Duration of storage

After processing your request, the collected data will be deleted immediately, unless there is a legal retention period.

  • Revocation and deletion possibility

The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.

  • Requirement to provide personal data

The use of the contact forms is voluntary and is not required by contract or law. You are not obligated to contact us via the contact form, but you can also use the other contact options provided on our site. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information on the contact form, you will either not be able to send the request or we will unfortunately not be able to process your request.

Date booking form

  • Scope of the processing of personal data

The data you enter in our appointment booking form.

  • Legal basis for the processing of personal data

Art. 6 para. 1 lit. b DSGVO (implementation of (pre)contractual measures)

  • Purpose of data processing

We will use the data recorded via our appointment booking form only for the processing of appointment requests received via the appointment booking form.

  • Duration of storage

Your appointment booking will be deleted by us immediately after 12 months after the date was set, as far as there are no legal obligations to keep records. We reserve the right to delete your booking without giving reasons and without prior or subsequent information.

  • Possibility of objection and cancellation

You can object to the processing at any time in accordance with Art. 21 DSGVO and request the deletion of data in accordance with Art. 17 DSGVO. Which rights you are entitled to and how to assert them can be found at the bottom of this data protection declaration.

  • Requirement to provide personal data

Although the use of our appointment booking form is neither contractually nor legally required, it is necessary if you want to book an appointment with us online. To book online, you must provide certain mandatory information. If you do not fill out the mandatory fields completely, your appointment booking cannot be accepted or processed.

Integration of external web services and processing of data outside the EU

On our website we use active content from external providers, so-called web services. By calling up our website, these external providers may receive personal information about your visit to our website. It is possible that data may be processed outside the EU. You can prevent this by installing an appropriate browser plugin or by deactivating the execution of scripts in your browser. This can lead to functional restrictions on the Internet pages you visit.

We use the following external web services:

  • Doubleclick

On our website a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Doubleclick) is loaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Doubleclick. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest lies in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in Doubleclick’s privacy policy: https://policies.google.com/privacy

You can prevent Doubleclick from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser.

  • Google

On our website a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google) is loaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in a faultless function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in the Google data protection declaration: https://policies.google.com/privacy

You can prevent the collection and processing of your data by Google by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

  • Google Fonts

On our website a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Fonts) is loaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google Fonts. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest lies in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in the Google Fonts privacy policy: https://policies.google.com/privacy

You can prevent the collection and processing of your data by Google Fonts by disabling the execution of script code in your browser or by installing a script blocker in your browser.

  • Google Maps

  • What personal data is collected and to what extent is it processed?

On our site we use the map service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Maps). Google Maps is integrated on the website via the Google API to visualize location information and display it in the form of a map. To display the map, the processing of the IP address by Google Maps is technically necessary. The regulations in the respective section of this data protection declaration on Google Apis apply to the other web services integrated via Google Apis.

  • Legal basis for the processing of personal data

Art. 6 lit. f DSGVO (legitimate interest). Our legitimate interest lies in being able to provide you with a visual representation of the usual presentation of location information on the Internet.

  • Purpose of data processing

On our behalf, Google will use the information obtained via Google Maps to display the map for you. Using Google Maps you will find us faster and more accurate than with a mere non-interactive map.

  • Duration of storage

Google will store the data relevant for the function of Google Maps for as long as it is necessary to fulfill the booked web service. The data collection and storage is anonymous. If there is a personal reference, the data will be deleted immediately, unless they are subject to legal storage obligations. In any case, the data will be deleted after the expiration of the storage obligation.

  • Possibility of objection and deletion

You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the “Do Not Track” setting of your browser. The security and privacy policy of Google can be found at https://policies.google.com/privacy.

  • Joint processing

We have entered into a joint processing agreement with Google regarding Google Maps. You can find the content at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

  • Google APIS

On our website a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google APIS) is loaded. We use this data to ensure the full functionality of our website. In this context your browser may transmit personal data to Google APIS. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose for which they were collected has been fulfilled. Further information on the handling of the transferred data can be found in the Google APIS privacy policy: https://policies.google.com/privacy

You can prevent the collection and processing of your data by Google APIS by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

  • Gstatic

On our website a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Gstatic) is loaded. We use this data to ensure the full functionality of our website. In this context your browser may transmit personal data to Gstatic. Legal basis for the data processing is art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information about the handling of the transferred data can be found in the privacy policy of Gstatic: https://policies.google.com/privacy

You can prevent the collection as well as the processing of your data by Gstatic by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

  • Youtube

On our website, a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: YouTube) is loaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Youtube. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in the privacy policy of Youtube: https://policies.google.com/privacy

You can prevent the collection and processing of your data by Youtube by disabling the execution of script code in your browser or by installing a script blocker in your browser.

  • website-check.de

On our website, a web service of the company Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany (hereinafter referred to as website-check.de) is loaded. We use this data to ensure the full functionality of our website. In this context your browser may transmit personal data to website-check.de. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in the privacy policy of website-check.de: https://www.website-check.de/datenschutzerklaerung/

You can prevent the collection and processing of your data by website-check.com by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Information on the use of cookies

  • Scope of the processing of personal data

On various pages we integrate and use cookies to enable certain functions of our website and to integrate external web services. The so-called “cookies” are small text files that your browser can store on your access device. These text files contain a characteristic character string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as “setting a cookie”. Cookies can be set both by the website itself and by external web services.

  • Legal basis for the processing of personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest) or Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO (consent).

The relevant legal basis can be seen from the cookie table listed later in this section.

In general, in the case of cookies that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated into it (technically necessary cookies). It is also possible that the cookies increase their user-friendliness and enable a more individual approach. In this case we have weighed up your interests against ours.

With the help of cookie technology, we can only identify, analyse and track individual website visitors if the website visitor has consented to the use of the cookie in accordance with Art. 6 Para. 1 lit. a DSGVO.

  • Purpose of data processing

The cookies are set by our website or external web services to maintain the full functionality of our website, to improve the user-friendliness or to pursue the purpose stated with your consent. Cookie technology also enables us to recognize individual visitors by means of pseudonyms, e.g. an individual or random ID, so that we can offer more individual services. Details are listed in the following table.

  • Duration of storage

The cookies listed in the German data protection regulations are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details are listed in the German data protection regulation on our website.

  • Right of objection, revocation of consent and deletion

You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or to accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save last viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this permission at any time. Please note that the legality of the processing carried out on the basis of the consent until revocation is not affected by this.

  • Data security and data protection, communication by e-mail

Your personal data is protected by technical and organizational measures during collection, storage and processing in such a way that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so that we recommend encrypted communication or by post for information requiring a high degree of secrecy.

Right to information and correction requests – Deletion & restriction of data – Revocation of consent – Right of objection

  • Right to information

You have the right to request confirmation as to whether we process personal data about you. If this is the case, you have the right to be informed about the information mentioned in art. 15 para. 1 DSGVO, as far as the rights and freedoms of other persons are not affected (see art. 15 para. 4 DSGVO). We are also happy to provide you with a copy of the data.

  • Correction claim

In accordance with Art. 16 DSGVO, you have the right to have any incorrectly stored personal data (such as address, name, etc.) corrected at any time. You can also request the completion of the data stored with us at any time. A corresponding adjustment will be made immediately.

  • Right to deletion

According to Art. 17 para. 1 DSGVO, you have the right to request that we delete the personal data collected about you if

  • the data is either no longer needed;
  • due to the revocation of your consent, the legal basis for the processing has ceased to exist without replacement;
  • you have lodged an objection to the processing and there are no legitimate reasons for the processing;
  • your data are processed unlawfully;
  • a legal obligation requires this or a collection according to Art. 8 para. 1 DSGVO has taken place.

The right does not exist according to Art. 17 para. 3 DSGVO if

  • the processing is necessary for the exercise of the right to freedom of expression and information
    your data have been collected on the basis of a legal obligation;
  • the processing is necessary for reasons of public interest;
  • the data is necessary for the assertion, exercise or defence of legal claims.
  • Right to limit processing

According to art. 18 para. 1 DSGVO, you have the right in individual cases to demand the restriction of the processing of your personal data.

This is the case if

  • the correctness of the personal data is disputed by you;
    the processing is unlawful and you do not consent to its deletion;
  • the data are no longer needed for the purpose of processing, but the data collected are used to assert, exercise or defend legal claims;
  • an objection has been filed against the processing in accordance with Art. 21 Par. 1 DSGVO and it is still unclear which interests outweigh the objection.
  • Right of revocation

If you have given us your express consent to process your personal data (Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO), you can revoke this consent at any time. Please note that the legality of the processing carried out on the basis of the consent until revocation is not affected by this.

  • Right of objection

Pursuant to Art. 21 of the Italian Data Protection Act, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6, Paragraph 1, Letter f (within the scope of a legitimate interest). You are only entitled to this right if there are special circumstances against the storage and processing.

  • How do you exercise your rights?

You can exercise your rights at any time by contacting the contact details below:

HaarWerk OHG
Hochstrasse 33
60313 Frankfurt
Germany
e-mail: berlin@haarwerk.de
Phone: +49 (0) 30 88778333

  • Right to data transferability

In accordance with Art. 20 DSGVO, you have a right to the transmission of personal data concerning you. We will provide the data in a structured, common and machine-readable format. The data can be sent either to yourself or to a person responsible designated by you.

We will provide you with the following data on request in accordance with Art. 20 Para. 1 DSGVO:

  • Data that have been collected on the basis of an explicit consent according to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO;
  • data that we have received from you in accordance with Art. 6 para. 1 lit. b DSGVO within the framework of existing contracts;
  • data which have been processed within the framework of an automated procedure.

We will transfer the personal data directly to a person in charge requested by you as far as this is technically feasible. Please note that we are not allowed to transfer data that interfere with the freedoms and rights of other persons according to art. 20 para. 4 DSGVO.

  • Right of appeal to the supervisory authority pursuant to Art. 77 para. 1 DSGVO

If you suspect that your data is being processed illegally on our site, you can of course obtain a judicial clarification of the problem at any time. In addition, every other legal possibility is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 Para. 1 DSGVO. The right of appeal pursuant to Art. 77 DSGVO is available to you in the EU member state of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority you are turning to from the above-mentioned places. The supervisory authority to which the complaint has been submitted will then inform you of the status and results of your submission, including the possibility of a judicial remedy in accordance with Art. 78 DSGVO.

This is a translation of the official privacy site https://haarwerkberlin.de/privacy-policy/.