This English translation is provided for convenience; only the German version is legally binding.
Controller
The controller responsible for data processing on this website is:
Slabowski Hair & Beauty
Owner: Dmitri Slabowski
Paul-Klee-Straße 40
36041 Fulda – Galerie
Phone: +49 661 90 19 125
Email: service@slabowski-friseur.de
Overview
This privacy policy explains which personal data (“data” for short) we process on this website, for enquiries and appointment bookings, and on our social media profiles, to what extent and for what purpose. What counts as “personal data” and its “processing” is defined in Art. 4 of the General Data Protection Regulation (GDPR).
We process master data (such as names), contact data (such as email addresses and phone numbers), usage data (such as pages visited and access times) and metadata and communication data (such as device information and IP addresses). The input fields on this website do not ask for special categories of data under Art. 9(1) GDPR, such as health data. The data subjects are visitors to this website, clients who contact us or book an appointment, and job applicants.
We process the data to provide the website and its content, to answer enquiries and to arrange appointments.
Legal bases
The legal basis on which we process data for a particular purpose is stated in the relevant section. In general: we obtain consent on the basis of Art. 6(1)(a) and Art. 7 GDPR. Data we need for our services, for contractual measures or to answer enquiries is processed under Art. 6(1)(b) GDPR; data needed to meet legal obligations under Art. 6(1)(c) GDPR; and data needed to protect our legitimate interests under Art. 6(1)(f) GDPR.
Hosting and server log files
This website is hosted on the servers of our hosting provider, STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Each time a page is accessed, the server automatically stores information that your browser transmits: IP address, date and time, the page accessed, the previously visited page, browser and operating system.
These server log files serve the secure and stable operation of the website (Art. 6(1)(f) GDPR) and are deleted after seven days at most. Data required as evidence to investigate misuse is kept until the incident has been resolved. This technology is needed for your browser to be able to retrieve the website at all. The website itself sets no cookies and uses no analytics or tracking tools.
Security
In accordance with Art. 32 GDPR, we take technical and organisational measures appropriate to the risk of processing to safeguard the confidentiality, integrity and availability of your data. These include, in particular, encrypted transmission between your browser and our server. We take the protection of your data into account from the outset when choosing software and procedures (Art. 25 GDPR).
Fonts, film and map
The website is set in Helvetica Neue, a typeface already installed on many devices. If it is missing, your browser loads the Geist typeface from our own server. The film on the home page and the map on the Location page are also stored on our own server; the map is an image made from OpenStreetMap data, not an embedded map from another provider. When displaying this content, the website does not connect to Google Fonts, a video platform or a map service. The access data this generates is covered by the section “Hosting and server log files”.
Enquiries by email or phone
When you contact us by email or phone, for example with a question or an enquiry about the Academy, we process your contact details and the content of your message to deal with your request. If it concerns a service, a course or an appointment you would like, the legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR; our legitimate interest is to be reachable and to answer your message. We delete your details as soon as we no longer need them for this and no statutory retention obligation applies.
Academy enquiry questionnaire
In the Academy questionnaire you can state what you would like to learn, how long you have been working in the profession and how big your team is, as well as your name, your email address and, optionally, your phone number. The website does not send these details to us or to our server, and it does not store them in your browser. The last step opens your email program with a ready-made message to us, which you can check, change or discard. Your enquiry reaches us only when you send it yourself; the section “Enquiries by email or phone” then applies.
If you use an email program in your browser, your email provider may process the draft even before it is sent; its privacy notice applies to this. You do not have to use the questionnaire: you can also reach us directly by email or phone.
Applications
If you apply to us, we process your contact details and the documents you send us, such as your cover letter, CV and references, in order to review your application, talk to you and decide on an employment relationship (Art. 6(1)(b) GDPR; § 26 of the German Federal Data Protection Act, BDSG). Your documents are seen only by the people who decide on the position. If we do not end up working together, we delete them as soon as we no longer need them to defend against possible claims arising from the application process (Art. 6(1)(f) GDPR).
Services in the salon
For our services, we process master data (such as names and contact details) and contract data (such as services used and payment information) to fulfil our contractual obligations (Art. 6(1)(b) GDPR).
Appointment booking via Timeglobe
For online appointment booking we use Timeglobe, a service of Time Globe GmbH, Bonn. “Book an appointment” leads to our booking page on timeglobe.app. The details you enter there, such as your name, contact details and preferred appointment, are processed by Time Globe on our behalf and according to our instructions (Art. 28 GDPR); we remain the controller for this data.
We use the booking data to arrange and carry out your appointment (Art. 6(1)(b) GDPR) and delete it as soon as we no longer need it for this and no statutory retention obligation applies. For more information, see Time Globe’s privacy notice. As long as you do not open the booking page, no data is transferred to Time Globe.
Service providers and third countries
If we pass data on to other companies, such as our hosting provider or Time Globe, we do so only with legal permission, with your consent, because of a legal obligation or on the basis of our legitimate interests. Service providers that process data on our behalf are bound by a data processing agreement (Art. 28 GDPR).
We process data in a country outside the European Union or the European Economic Area only if the specific conditions of Art. 44 et seq. GDPR are met, such as an adequacy decision of the European Commission or agreed standard contractual clauses.
Social media and external links
The website links to our profiles on Instagram and Facebook. These are simple links, not embedded plugins: visiting this website transfers no data to Instagram or Facebook.
The links to appointment booking, Instagram, Facebook and the route on Google Maps open pages of other providers. Only when you click such a link does your browser access the provider’s website; the provider then receives, among other things, your IP address and information about your browser. The privacy notice of the respective provider applies there.
On Instagram and Facebook we share information about our services and can be reached by clients and anyone interested. The terms and privacy policies of the respective operators apply there. If you send us a message or comment on a post there, we process this information in order to reply.
Deletion of data
We delete data or restrict its processing (Art. 17 and 18 GDPR) as soon as we no longer need it for its purpose and no statutory retention obligation stands in the way. If we must keep data for commercial or tax law reasons, we block it for any other use. Depending on the document, the periods are six, eight or ten years (§ 257(1) of the German Commercial Code, HGB; § 147(1) of the German Fiscal Code, AO).
Your rights
You have the right to information about the data we store about you, and to rectification, erasure, restriction of processing and data portability (Art. 15 to 18 and 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR); processing carried out on the basis of your consent until then remains lawful.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular the authority at your place of residence, your place of work or the place of the suspected infringement, and you do not have to contact us first. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit).
We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR that have legal effects on you or similarly significantly affect you.
Right to object
If we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You may object at any time, without giving reasons, to the processing of your data for direct marketing (Art. 21(2) GDPR).
Changes to this policy
We update this privacy policy whenever our data processing changes. If this requires action on your part, such as giving consent, or any other individual notification, we will inform you. Last updated: September 2026.
Contact for privacy questions
Please send questions about data protection and requests concerning your rights to service@slabowski-friseur.de or by post to the address above.