Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Provider

StupidCat Beauty GmbH
Am Dreispitz 6
79589 Binzen

Represented by

Dainius Pelenis

Email

info@unlike-every.one

2. Your rights

You have the right to:

• Access
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Objection
• Withdrawal of consent with effect for the future
• Complaint to a data protection supervisory authority

Simply contact us at info@unlike-every.one.

3. Hosting

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, Friedersdorf, acting on our behalf (Art. 28 GDPR). When you visit, the server stores technically necessary data such as IP address, time, requested page and browser. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). The logs are deleted after seven days.

4. Cookies, analytics and advertising

We only use cookies and similar technologies where they are technically necessary or you have consented. We manage your consent with Cookiebot by Usercentrics A/S, Copenhagen. You can change or withdraw it at any time via “Cookie settings” at the bottom of every page. The legal basis for necessary cookies is Section 25 (2) TDDG, for all others your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDG).

With your consent we use, via Google Tag Manager, Google Analytics 4 for audience measurement and Google Ads to measure the success of our ads and for remarketing; the provider is Google Ireland Limited, Dublin. Without consent, Google only receives a signal without an identifier (Consent Mode). Analytics data is deleted after 14 months.

Also with your consent we use the Meta Pixel of Meta Platforms Ireland Ltd., Dublin, to measure the success of our ads on Instagram and Facebook; we are jointly responsible with Meta for this (Art. 26 GDPR). When you submit the enquiry form, the pixel transmits your name, email address and phone number in encrypted (hashed) form so that Meta can attribute the enquiry to an ad.

Google and Meta may transfer data to the USA. Both are certified under the EU-US Data Privacy Framework.

Cookies in use

5. Enquiries, appointments and client management

When you contact us via the form, by email, phone, WhatsApp or via our chat assistant on Instagram, WhatsApp or Facebook Messenger, we process your details – such as name, contact details, requested service, messages and reference images – to answer your enquiry and to arrange and carry out appointments. The legal basis is the performance of pre-contractual measures and of the contract (Art. 6 (1) (b) GDPR). We store the time and IP address when the form is submitted as proof of your consent.

For this we use service providers acting on our behalf (Art. 28 GDPR): Microsoft 365 of Microsoft Ireland Operations Limited, stored in the EU, for email, appointments and our client management including your client records such as reference images, photos and signed forms; ManyChat of Manychat, Inc., USA, certified under the EU-US Data Privacy Framework, for the chat assistant; Make of Celonis SE, Munich, with servers in the EU, for transferring chat data into our client management. If you write to us on WhatsApp, WhatsApp Ireland Limited additionally processes its own data such as your phone number; data may be transferred to Meta in the USA.

If you arrive via a link from our advertising, the form transmits the campaign identifier from the link without cookies. This shows us which advertising leads to enquiries (Art. 6 (1) (f) GDPR).

We only record information about your health in the client form before treatment, with your explicit consent given by your signature (Art. 9 (2) (a) GDPR).

We delete enquiries without a booking after twelve months, chat histories in the chat assistant six months after they have been transferred to our client management, and the backup copy of form enquiries on our web server after three months. We keep client data and records for as long as the client relationship exists and statutory retention and documentation obligations require.

6. Applications

We process applications sent to join@unlike-every.one only for the application process (Art. 6 (1) (b) GDPR). If we do not end up working together, we delete them six months after the process has ended, unless you agree to longer storage.

7. Newsletter

For the newsletter we need your email address and your confirmation via the link in our email (double opt-in); we store the times and IP address as proof. It is sent via Brevo of Brevo GmbH, Berlin, on our behalf; sub-processors are also located in the USA, safeguarded by EU standard contractual clauses. We measure whether the newsletter is opened and links are clicked. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time via the link in every email; afterwards your address remains only on a block list.

8. Prize draw

You take part in the prize draw with your booking; we assign the entries in our client management (Art. 6 (1) (b) GDPR). We only name winners publicly with their consent. Details are set out in the terms of participation.