Data Protection
1. Controller
The party responsible for data processing on this website is:
SHÆDE
Owner: Bianca Günther
Gutenbergstraße 91
14467 Potsdam
Email: info@shaede.de
Phone: 0177-1722384
2. General information on data processing
Protecting your personal data is important to me.
Personal data refers to any information that can be used to personally identify you—for example, your name, email address, phone number, IP address, booking details, or information you submit via forms.
Personal data is processed in accordance with applicable data protection regulations, particularly the General Data Protection Regulation (GDPR).
3. Hosting and website operation via Wix
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel, as well as affiliated companies and service providers of Wix.
When visiting the website, technical data in particular may be processed, for example:
IP address,
browser type & browser version,
device information,
pages visited,
date & time of access,
technical log & security data
Processing takes place to ensure the provision, security, and stability of the website.
The legal basis is Art. 6(1)(f) GDPR, insofar as the processing is technically necessary.
Wix may also process personal data outside the European Economic Area. Wix notes that it uses adequacy decisions, standard contractual clauses, or other permissible transfer mechanisms for this purpose. An adequacy decision by the European Commission exists for Israel.
You can find further information in Wix's privacy policy.
4. Cookies and consent management
This website uses cookies and similar technologies.
Some cookies are technically necessary for the website to function properly. Other cookies—particularly those for analytics, statistics, or external services—are only set if you have previously given your consent.
The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR.
For non-essential cookies and similar technologies, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You can change or revoke your consent at any time via the website's cookie settings.
5. Contacting me
If you contact me via email, telephone, contact form, or other contact methods offered on the website, your details will be processed in order to handle your inquiry.
This may include, in particular:
Name,
Email address,
Telephone number,
Date of birth,
Content of your message,
Details regarding a requested treatment or booking
The legal basis is Art. 6(1)(b) GDPR if your inquiry serves to prepare for or perform a contract.
In other cases, processing is based on Art. 6(1)(f) GDPR, reflecting my legitimate interest in handling inquiries.
6. Appointment bookings via Wix Bookings
I use Wix Bookings for online appointment bookings.
The following data, in particular, may be processed during the booking process:
First and last name,
Email address,
Telephone number,
Date of birth,
Selected service
Any additional information for appointment preparation
Date & time of the appointment
Processing takes place to carry out pre-contractual measures and to manage the booked appointment in accordance with Art. 6(1)(b) GDPR.
Where information is provided voluntarily, processing is based on Art. 6(1)(a) GDPR or Art. 6(1)(b) GDPR, provided the information is necessary for carrying out the treatment.
7. Tally Forms
I use the service Tally for certain online forms.
The provider is:
Tally BV, Sint-Pietersnieuwstraat 11, 900 Ghent, Belgium
Depending on the form, the following data in particular may be processed via Tally:
Name,
Contact details,
Date of birth,
Information regarding hair loss or treatment history,
Information regarding previous examinations or procedures,
Information regarding allergies, medications, medical conditions, or other health-related circumstances,
Other voluntary information.
Tally processes form data on my behalf as a data processor. Tally states that it stores form data in encrypted form and within Europe.
Where health data is processed via a form, this constitutes special categories of personal data within the meaning of Art. 9 GDPR.
Such data is processed only if you have given your explicit consent.
The legal basis is Art. 9 (2) (a) GDPR in conjunction with Art. 6 (1) (a) GDPR.
You may revoke your consent at any time with effect for the future.
Data is stored only for as long as is necessary for the respective purpose or as required by statutory retention obligations.
Further information can be found in Tally’s privacy policy.
8. Treatment of Minors
Where forms or declarations of consent are used for minors, personal data concerning the minor and their legal guardians is processed.
This may include:
Name,
Contact details,
Date of birth,
Information regarding legal representation,
Information regarding the planned treatment,
Health data (where applicable)
Where health data is processed, this is done only on the basis of explicit consent pursuant to Art. 9 (2) (a) GDPR.
9. Payment processing via PayPal
PayPal, among other options, may be offered for payments.
Personal data is transmitted to PayPal as part of the payment processing.
This may include, in particular:
Name,
Email address,
Billing and payment information,
Transaction data,
Amount and payment reference.
Data processing is carried out to process the respective contract or purchase in accordance with Art. 6(1)(b) GDPR.
Furthermore, PayPal processes personal data partly under its own responsibility, particularly for payment processing, fraud prevention, security, and compliance with legal obligations.
You can find further information in PayPal’s privacy policy.
10. Ticket purchases & SCALPVERSE
When booking or purchasing tickets for SCALPVERSE, personal data is processed to the extent necessary for the booking, payment processing, and organization of the event.
This may include, in particular:
Name,
Email address,
Billing address,
Ticket category,
Payment status,
Company or studio name,
Details regarding participation as an artist or speaker, if applicable.
The legal basis is Art. 6(1)(b) GDPR.
Where statutory retention obligations apply, further storage is based on Art. 6(1)(c) GDPR.
11. Newsletter
If you subscribe to my newsletter, I process your email address and, if applicable, your name in order to send you information about SHÆDE, treatments, events, or other offers.
Communications are sent only with your consent pursuant to Art. 6(1)(a) GDPR.
A double opt-in procedure may be used to verify the subscription. This involves receiving a confirmation email after signing up.
You may revoke your consent at any time via the unsubscribe link in the newsletter or by sending an email to info@shaede.de.
12. Google Analytics
This website may use Google Analytics for the statistical analysis of website usage. Google Analytics is activated only if you have previously given your consent via the cookie banner.
The following data may be processed in particular:
IP address,
device information,
browser information,
pages visited,
duration of visit,
interactions with the website,
technical usage data.
The legal basis is Art. 6(1)(a) GDPR.
No standard analysis of your user behavior via Google Analytics takes place without your consent. Google notes that relevant consent signals can be taken into account by Analytics.
You may revoke your consent at any time via the cookie settings.
16. Legal basis for processing
Depending on the purpose, the processing of personal data is based in particular on:
Art. 6(1)(a) GDPR
Art. 6(1)(b) GDPR
Art. 6(1)(c) GDPR
13. Google Maps
This website may embed Google Maps to display maps, location information, and reviews.
Google Maps is a service provided by Google.
When Google Maps loads, the following data, in particular, may be transmitted to Google:
IP address,
device information,
browser data,
location information (if applicable),
information regarding map usage.
Google notes that embedded Google Maps services are subject to its privacy policy.
You may withdraw your consent at any time via the cookie settings.
14. Social Media Content
Content from social networks may be embedded or linked on this website.
When embedded social media content is loaded directly, personal data—specifically your IP address and technical usage data—may be transmitted to the respective provider.
Where external content is loaded only after you have given your consent, processing is based on Art. 6(1)(a) GDPR.
Simple links to social media profiles only direct you to the respective platform when clicked.
15. Storage Period
Personal data is stored only for as long as is necessary for the respective purpose.
In addition, statutory retention obligations may apply, particularly under tax and commercial law regulations.
Once the respective periods have expired, the data is deleted unless there is another legal basis for continued storage.
Data processed on the basis of consent is deleted or ceases to be processed if consent is withdrawn and no other legal basis permits continued storage.