Privacy policy

The controller for data processing on this website is:

Sy Huy Ha
Hasi Nails
Körnerstraße 4
71634 Ludwigsburg

+49 7141 3874937 · info@hasi-nails.de

To book an appointment we collect your name, email address and phone number, along with the service booked, the appointment time, the studio and the technician chosen. We need this data to arrange, confirm and carry out the appointment. The legal basis is Art. 6(1)(b) GDPR (performance of a contract and pre-contractual steps). Without this information we cannot offer an appointment.

We store your WhatsApp number only if you provide it voluntarily and explicitly consent to being notified. The legal basis is Art. 6(1)(a) GDPR (consent). You can withdraw this consent at any time — a short message or a call is enough. Processing carried out before the withdrawal remains lawful.

We delete booking data 6 months after the appointment. This period lets us handle questions and complaints without keeping data indefinitely. Where statutory retention obligations apply — tax law, for example — we delete only after those periods expire.

We do not pass your data on for advertising purposes and we do not sell it. We use the following service providers, which process data solely on our behalf and on our instructions (processing agreement under Art. 28 GDPR):

• ·Brevo (Sendinblue SAS, France) — sends the booking confirmation by email. Name, email address and appointment details are transmitted. Processing takes place within the European Union.
• ·Vercel Inc. (USA) — operates this website. Technical access data arises in the process.
• ·Neon Inc. (USA) — storage of booking data. The data resides in a data centre in Frankfurt am Main (European Union); the company itself is based in the USA, so access from there cannot be ruled out.

The email provider processes data solely within the EU. Website hosting and the database may involve access from the USA; those transfers rely on standard contractual clauses under Art. 46(2)(c) GDPR together with the EU-US Data Privacy Framework.

When you visit this website our host records technical data: IP address, time of access, page requested, amount of data transferred, browser type and operating system. This data is necessary to operate and secure the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable, secure operation). It is not combined with other data.

This website uses no tracking cookies. Only two technically necessary items are stored: the language you chose (cookie, one year) and the fact that you dismissed the app-install hint (browser local storage). Both exist solely to preserve your own choice and require no consent under § 25(2) TDDDG. You can delete both at any time through your browser settings.

We use no analytics or tracking tools — no Google Analytics, no advertising pixels, no social media plug-ins. The fonts are hosted on our own server; loading this page opens no connection to Google or any other font provider. Images are also served from our own server, so your IP address is not exposed to third parties.

You have the right at any time to access the data stored about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). No automated decision-making or profiling takes place. For any request, simply use the contact details above.

Independently of the above, you may lodge a complaint with a data protection supervisory authority at any time (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart

We update this notice when the processing described here changes. The version available at the time of your booking applies to that booking.