Privacy notice

Who the controller is

The controller of your personal data is Pink Beauty Lounge, Bahnhofstraße 1, 94032. Contact: +49 172 6200817, info@pinkbeautyloungepassau.de.

What data we process

• the name, phone and e-mail you give when booking,
• bookings: services, times, prices, who served you and the note you write,
• the history of your visits, cancellations and no-shows included,
• the business's notes on your visits (the colour used, for example),
• the messages we send you (confirmations, reminders).

Why, and on what basis

• The booking, its confirmation, reminder and changes: performing the contract (Art. 6(1)(b) GDPR).
• The history of visits and notes, so the business can serve you well, and recording no-shows: the business's legitimate interest (f). You can object to it.
• News, offers and requests for a review: only with your consent (a). You withdraw it any time in your account or through the link in every such message.
• Accounting records of paid services: a legal obligation (c).

Who processes the data for the business

Lichio runs the booking system and this website for the business as a processor under a data processing agreement. The data is stored on servers in Germany (EU). Lichio uses only necessary providers (hosting, sending e-mails and text messages); they are listed in Lichio's privacy policy.

How long we keep data

• We keep data about you and your visits while you come to us. 36 months after your last visit we erase your name and contacts, and the visits stay only as anonymous statistics.
• Accounting records are kept as long as the law requires (usually 10 years).
• The text of a message is deleted right after it is sent.

Lichio account

If you create an account, it works at every business that uses Lichio. Lichio is responsible for the account (the sign-in e-mail and password); its privacy policy and account terms describe how. The business sees only the bookings with it.

Cookies and what the website loads

• The website uses only necessary cookies: after signing in, a session cookie (valid for 14 days). It uses no advertising or analytics cookies, so we do not ask for consent.
• Fonts, images and Instagram posts load from our servers; your browser sends nothing to Google or Meta for them.
• The map buttons open Google Maps only when clicked.

Your rights

• You have the right to access, correct, erase, restrict and port your data, to object, and to withdraw a consent.
• In your account you download your data yourself or erase it at the business; otherwise write to the business at the contacts above.
• You can also complain to a data protection supervisory authority.