Privacy policy

1. Controller

The controller responsible for data processing on this website is: PRO.beauty, Anastasiia Berestenko Ringstraße 44, 2. Stock, 3500 Krems an der Donau, Österreich Email: [email protected] Phone: +43 6812 078494 9

2. Hosting and server log files

This website runs on a virtual server operated by the Zomro group (Podaon SIA, Riga, Latvia); the data centre is located in the Netherlands. Traffic is routed through the Cloudflare network (Cloudflare, Inc., USA), which receives, protects and accelerates requests. When you visit the site, technically necessary data (e.g. IP address, time, requested page, browser type) is processed in server log files by Zomro and Cloudflare. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with Zomro; Cloudflare processes data on the basis of standard contractual clauses or the EU-US Data Privacy Framework.

3. Online booking (Dikidi)

Appointments are booked through the Dikidi service (dikidi.net). As soon as you open a booking window, Dikidi is embedded and your IP address is transmitted to the provider. When you book, Dikidi processes the data you enter (e.g. name, phone number, selected service) to perform the contract (Art. 6(1)(b) GDPR). Dikidi's privacy policy applies.

4. Purchase of service memberships (Stripe, Resend, database)

When you buy a service membership, we process your name, phone number, email address, the selected services, the membership code, the time of purchase and the payment status. The legal basis is performance of the contract (Art. 6(1)(b) GDPR); statutory retention obligations (e.g. Section 132 BAO, 7 years) are based on Art. 6(1)(c) GDPR.

Payment is handled by Stripe Payments Europe Ltd. (Ireland). You enter your payment details (e.g. card number) exclusively on Stripe's page and we do not receive them. Stripe's privacy policy applies.

We send the confirmation email with your membership code via the Resend service (Resend, Inc., USA); the transfer to a third country is based on standard contractual clauses or the EU-US Data Privacy Framework. Membership data is stored in a database on our server at Zomro (data centre in the Netherlands).

To process your order, we notify the studio internally by email and via a Telegram channel (Telegram Messenger Inc.) with the membership code, selected services, amount, and your name, phone number and email address (legitimate interest, Art. 6(1)(f) GDPR: reliable order handling).

5. Google Maps

The map is only loaded after you click “Load map”. Data (including your IP address) is then transferred to Google. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR).

6. External links and messengers

Links to Instagram, WhatsApp and Telegram lead to third-party services. Data is only transferred to these providers when you click the link; their privacy policies apply.

7. Fonts

The fonts used are served locally from our server. No connection to Google servers is made.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent at any time with effect for the future.

You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.