top of page

DATENSCHUTZ

1. Data Controller

The party responsible for data processing is:

ovelyn.beauty
Owner: Claudia Wilke
Address: Lohmeyerstraße 2, 10587 Berlin, Germany
Email: claudia@ovelyn-beauty.com
Phone: +49 151 4168 2168

​

2. General

I take the protection of your personal data very seriously. I process personal data exclusively in accordance with the GDPR and only in order to:

  • manage appointments

  • perform treatments safely

  • respond to enquiries

  • comply with legal requirements

Your data will never be passed on for advertising purposes.

​

3. Collection of Personal Data

a) When you get in touch (phone, email):

  • Name

  • Phone number

  • Email address

  • Message / enquiry

  • Appointment requests

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

b) When booking an appointment (by phone, email or WhatsApp):

  • Name

  • Contact details

  • Requested service

  • Preferred appointment time

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

c) When using the website (Wix / Google Analytics):

  • IP address (anonymised)

  • Date, time, browser data

  • Pages visited and time spent

  • Source of visit (e.g. search engine, direct access)

  • Device and operating system

  • Cookies (optional, depending on your settings)

Legal basis: Art. 6(1)(a) GDPR (consent) for analytics cookies; Art. 6(1)(f) GDPR (legitimate interest) for technically necessary cookies.

​

4. Health Data (Health Questionnaire)

In order to perform waxing treatments safely, I ask for certain health-related information. This health data falls under the "special categories of personal data" as defined by Art. 9 GDPR and is treated with the utmost sensitivity and confidentiality.

The following data may be collected:

  • Allergies (e.g. to wax, ingredients, latex)

  • Skin conditions (e.g. eczema, atopic dermatitis, psoriasis)

  • Acute skin irritations, inflammation or injuries

  • Medication use (e.g. blood thinners, retinol, isotretinoin)

  • Recent treatments (laser, peeling, dermaplaning, etc.)

  • Tendency towards ingrown hairs

  • Pregnancy

  • Hormonal factors

  • Menstrual cycle status (only if relevant and provided voluntarily)

  • Previous reactions to waxing

  • Any other information relevant to a safe treatment

I collect this data solely:

  • to assess whether the treatment can be carried out safely

  • to tailor the treatment to your individual needs

  • to fulfil my duty of care

How the data is collected:
The health questionnaire is handed to you in person at the studio on paper and completed there. It is not transmitted digitally. Please therefore do not send health data via WhatsApp or email.

Legal basis: Art. 9(2)(a) GDPR (consent). Your consent is given voluntarily — however, a treatment cannot be carried out without this information, as health risks may otherwise arise.

The data will not be stored if you do not consent, and will never be passed on to third parties.

​

5. Use of WhatsApp

If you voluntarily contact me via WhatsApp for general appointment arrangements, WhatsApp's privacy policy applies. I explicitly point out that health data or particularly sensitive information should not be transmitted via WhatsApp, as WhatsApp (Meta Platforms) pursues its own data processing purposes and cannot provide an adequate level of protection for data under Art. 9 GDPR.

Provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

​

6. Service Providers (Wix)

This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel. Wix is used exclusively for operating the website — no appointment bookings or forms are processed through Wix. Israel has been granted an adequacy decision by the European Commission under Art. 45 GDPR, ensuring an adequate level of data protection.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a functional website).

Further information: https://www.wix.com/about/privacy

​

7. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

What Google Analytics does:
Google Analytics uses cookies and similar technologies to analyse how visitors use this website. The information generated is transmitted to Google's servers. This website uses the IP anonymisation feature — your IP address is therefore truncated within the EU or EEA before transmission and can no longer be directly associated with you.

Data collected:

  • Truncated IP address

  • Pages visited and time spent

  • Source of visit (e.g. search engine, direct access, social media)

  • Device, operating system and browser type

  • Interactions on the website

Purpose of processing:
The data helps me understand how my website is used so that I can improve it.

Legal basis: Art. 6(1)(a) GDPR (consent). Analytics will only take place if you have consented via the cookie banner on this website.

Data transfer to third countries:
Google may transfer data to the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.

Retention period: Google Analytics data is automatically deleted after 14 months by default.

Further information:
https://policies.google.com/technologies/partner-sites

Opt-out:
You can prevent data collection by Google Analytics by:

​

8. Sharing of Your Data

I only share personal data:

  • if you have given your explicit consent

  • if it is necessary for processing your appointment

  • if required by law

No data is passed on to third parties for advertising purposes.

​

9. Retention Periods

Health data is stored only for as long as necessary (e.g. to document recurring skin reactions). Google Analytics data is automatically deleted after 14 months. Other personal data is deleted upon expiry of the statutory retention periods (generally 6–10 years for business records under German commercial and tax law).

​

10. Your Rights (GDPR)

You have the right at any time to:

  • Access (Art. 15 GDPR): You can find out what data I have stored about you.

  • Rectification (Art. 16 GDPR): You can have inaccurate data corrected.

  • Erasure (Art. 17 GDPR): You can request the deletion of your data, provided no statutory retention obligations apply.

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdrawal of consent (Art. 7(3) GDPR): You can withdraw any consent at any time without giving reasons.

  • Right to object (Art. 21 GDPR): Where data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to such processing at any time.

For all requests please contact: claudia@ovelyn-beauty.com

​

11. Right to Lodge a Complaint

If you believe that your data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority:

Berlin Commissioner for Data Protection and Freedom of Information
(Berliner Beauftragte für Datenschutz und Informationsfreiheit)
Friedrichstr. 219, 10969 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de

​

12. Data Security

I take technical and organisational measures to protect your data against loss, misuse and unauthorised access. Data transmission on this website is encrypted via HTTPS.

​

13. Updates

This privacy policy may be updated as required. The current version is always available on this website.

Last updated: May 2026

bottom of page