Privacy Policy

Draft: this policy is a starting point. The business details and the points marked for confirmation must be completed and reviewed by the owner before launch.

1. Controller

The controller responsible for processing data on this website under the General Data Protection Regulation (GDPR) is:

Hssocut
[To be added: full name of the owner or company name]
[To be added: postal address (street, number, postcode, city)]

Phone: +49 170 4067925
WhatsApp: +49 170 4067925
Email: [To be added: email address]

2. Overview

This website is for information only. It has no forms or accounts and uses no cookies, analytics, tracking or advertising. Fonts, images and videos are served from our own web space; nothing is loaded from third parties when you visit the site.

3. Hosting And Server Logs

This website is hosted by Netlify, Inc. (USA). Each time the site is visited, Netlify processes technical data that your browser sends automatically: IP address, date and time of access, the page requested, the referring URL and browser and operating system information (user agent). This data is used only to deliver the website, keep it secure and stable and analyse errors, and is not combined with other data.

The legal basis is our legitimate interest in operating the website securely and reliably (Art. 6(1)(f) GDPR). Netlify processes the data on our behalf (Art. 28 GDPR). Data may be transferred to the USA; this is based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on standard contractual clauses (Art. 46(2)(c) GDPR). Log data is kept only as long as needed for these purposes.

4. SSL/TLS Encryption

For security, this website uses SSL/TLS encryption, shown by "https://" in your browser's address bar.

5. Contacting Us And Booking

Appointments are arranged by WhatsApp, by phone or by direct message on Instagram. We process the details you give us, such as your name, phone number, preferred time and the content of your messages, and for the VIP service the agreed location (for example your home address or hotel). We use them only to answer you and to arrange and carry out your appointment.

The legal basis is taking steps before entering into, and performing, a contract (Art. 6(1)(b) GDPR); for general questions, our legitimate interest in answering them (Art. 6(1)(f) GDPR). We delete the data once it is no longer needed for these purposes, unless statutory retention periods apply (for example up to ten years for invoices under German commercial and tax law; Art. 6(1)(c) GDPR).

6. WhatsApp And Instagram

If you contact us via WhatsApp or Instagram, your messages are transmitted through the services of WhatsApp Ireland Limited and Meta Platforms Ireland Limited. These providers process data as independent controllers under their own privacy policies (WhatsApp, Instagram); data may be transferred to third countries such as the USA. Using these services is optional: you can always reach us by phone instead.

The links and buttons to WhatsApp, Instagram and Google Maps (directions) are plain links. No data is sent to these services until you click such a link and open the service.

7. Recipients

Your data is received by our hosting provider Netlify and, if you use them, WhatsApp or Meta. Beyond that, we only pass on data where we are legally required to. We do not sell your data or use it for marketing.

8. No Obligation, No Automated Decisions

You are not obliged to give us personal data, but without contact details we cannot arrange an appointment. We do not use automated decision-making or profiling (Art. 22 GDPR).

9. Your Rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have data erased (Art. 17 GDPR) or its processing restricted (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

Right to object (Art. 21 GDPR): where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your residence, place of work or the place of the alleged infringement. To make a request, use the contact details above.

10. Cookies And Local Storage

This website does not store or read any information on your device: no cookies and no local storage. No consent under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) is therefore needed, and there is no cookie banner. See our cookie policy.

11. Changes

We update this privacy policy when the website or the legal requirements change. The version published here applies.

Last updated 11 November 2026.