Privacy Policy (Datenschutzerklärung)

Privacy Policy (Datenschutzerklärung)
We take the protection of your personal data seriously. This privacy policy explains how we collect, process, and store your data when you use our website, book services, or contact us. We process your personal data exclusively on the basis of legal regulations, including the General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG 2003).

1. Data Controller (Verantwortlicher)
HomaCenter e.U.
Owner: Elminaz Ordibehesht

Franz-Josefs-Kai 27/11
1010 Vienna
Austria

Email: beauty@Skinbar.at
Phone: +43 660 952 5422

2. Data Collection and Processing
a) Contacting Us
When you contact us via our contact form, email, or phone, we store the data you provide (such as your name, email address, phone number, and message content) to process your inquiry and follow up on your request. We keep this data for six months unless longer storage is legally required. This data will not be shared with third parties without your consent.

b)For appointment management and online bookings we use the following booking platforms:

Treatwell
Fresha
Shore

When you book an appointment through one of these providers, your personal data (such as your name, telephone number, email address, selected treatment and appointment details) is processed by the respective booking provider for appointment scheduling and customer management.

Please refer to their privacy policies:

Treatwell:
https://www.treatwell.com/info/privacy-policy/

Fresha:
https://www.fresha.com/privacy-policy

Shore:
https://www.shore.com/en/privacy/

The legal basis is Art. 6 (1) lit. b GDPR.

c) Booking and Contract Data
When you book treatments or purchase products, we collect personal information necessary to fulfill the contract, including:
Name, address, phone number, and email address
Payment details (processed securely through authorized payment providers)
We only share this data with:
Payment providers and banks: To process your payment securely.
Shipping companies: If product delivery is required.
Tax authorities/accountants: To comply with tax regulations.
Data related to transactions is stored for seven years (as required by tax law) and for 10 years for product liability reasons. Data processing occurs under Art. 6 (1) lit. b GDPR (contract performance) and Art. 6 (1) lit. c GDPR (legal obligations).

d) Cookies and Cookie Consent Banner
Our website uses cookies to improve your experience. Cookies are small text files stored on your device. They help us recognize your browser on future visits and provide personalized website experiences.
When you visit our website, you are prompted to accept or manage cookies through our cookie consent banner. You can manage cookie settings through your browser at any time or reject non-essential cookies. Disabling cookies may limit some website features.
We use cookies based on Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. f GDPR (legitimate interest) to ensure proper website functionality.

e) SSL/TLS Encryption
To ensure secure data transmission, our website uses SSL/TLS encryption. This protects sensitive data such as contact forms, login credentials, and payment information by encrypting the connection between your device and our servers.

f) Google Fonts
Our website uses Google Fonts for consistent and visually appealing typography. This service is provided by:
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
When you access our website, your browser downloads fonts from Google servers, which may process personal data such as your IP address. This data may be stored on servers in the USA.
We use Google Fonts under Art. 6 (1) lit. f GDPR (legitimate interest) to provide a visually appealing web design. Further information can be found here:
https://policies.google.com/privacy

g) Google Maps
We use Google Maps to display our clinic’s location and help customers find us more easily. This service is provided by:
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
When you use the map function, Google processes your IP address and transmits data to servers in the USA. We have no control over this data processing. The use of Google Maps is based on Art. 6 (1) lit. f GDPR (legitimate interest) to improve user experience and make our clinic easier to find.
More information on Google’s privacy policy is available at:
https://policies.google.com/privacy

h) Server Log Files
Our website’s server automatically collects certain data when you access the site. This data includes:
IP address
Browser type and version
Operating system
Referring URL
Date and time of access
Pages visited
This information is used solely for technical troubleshooting, website security, and performance optimization. This data is not linked to specific individuals unless required for legal investigations. Data processing is based on Art. 6 (1) lit. f GDPR (legitimate interest).

i) Newsletter Subscription
You can subscribe to our newsletter on the website. For this, we require your email address and consent. You can unsubscribe at any time by clicking the “unsubscribe” link in the newsletter or contacting us directly.
Data processing is based on Art. 6 (1) lit. a GDPR (consent).

3. Data Security
We implement technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. However, please be aware that internet-based data transmission may have security vulnerabilities beyond our control.

4. Your Rights as a Data Subject
You have the following rights regarding your personal data under GDPR:
Access: Request details about your stored personal data.
Correction: Request corrections if your data is incomplete or inaccurate.
Deletion: Request deletion of your personal data unless required for legal reasons.
Data Portability: Request transfer of your data to another service provider.
Objection: Object to data processing based on legitimate interests.
Restriction: Request restricted processing under certain conditions.
If you believe that data processing violates privacy laws, you may file a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):
Austrian Data Protection Authority (Datenschutzbehörde)
Wickenburggasse 8-10
1080 Vienna, Austria

This Privacy Policy is updated regularly to comply with legal regulations. Last updated: 20.12.2024

Privacy Policy (Datenschutzerklärung)

"Beauty is a Right, not a Priviledge"