In the following we inform you about the collection of your personal data when using our website and our services on site in our studio. Personal data is all data that can be related to you personally, e.g., name, address, e-maill addresses, user behaviour.
1. Who is the controller of my personal data?
Beauty Privé OOD Zweigniederlassung Wien, Wollzeile 24, 1010 Vienna (“Beauty Privé” or “we”) is the controller within the meaning of Art 4(7) of the EU GeneralDataProtectionRegulation (“GDPR”) for the personal data about you that you receive via the website beautyprive.at as well as via the customer service on site in our studio.
2. How do we collect your personal data?
Beauty Privé processes your personal data in the following cases:
When you contact us directly via the Beauty Privé website via our telephone number to book appointments and receive information about our products and services.
When you respond to our direct marketing actions, e.g., by filling in a reply card or by entering data on our website.
Beauty Privé will collect, process and use your data in accordance with applicable data protection laws (mainly in its electronic database) for the purposes of Performance of contractual obligations between Beauty Privé and you (provision of services, billing, business accounting), Providing you with relevant business-related communications in the form of product information, marketing materials, newsletters, invitations to events by email, SMS, internet and postal mail (“CommunicationChannels”).
3. What personal data is collected?
Contact details ▶ Name, address, telephone numbers, email address, name of legal representative if applicable Personal details ▶ Date of birth, preferred contact channel Health data prior to the fulfilment of our treatments (e.g., information about certain medications, previous operations, lifestyle, etc.)
Website Use&Communications ▶ how you use our website and whether you open or forward our messages, including data collected via cookies and other tracking technologies (our Cookies Policy can be found here).
Sales and service data ▶ Data relating to care and service, including complaints and claims (e.g. satisfaction surveys)
4. How is your personal data used?
|Purpose of processing
|Legal basis for data use (and explanation thereof)
|Customer Care and Marketing
To process inquiries and to send you news and offers through your
preferred communication channel(e-mail, post, telephone/
|Consent, legitimate interest:
▶ Legitimate interest: If the use is justified by a legitimate interest and
▶ Consent: If you have given your consent to marketing, including
|Fulfilment of mandatory requests for information
to comply with our legal obligations to law enforcement, regulators
and the judiciary
|Legal obligation; Establishment, assertion or defence of legal claims
All controllers are subject to and must comply with the laws of the
5. To whom will your personal data be transmitted?
6. How is your personal data stored?
We use a number of safeguards, including encryption and authentication tools, to protect and maintain the security, integrity and availability of your personal information.
While there can be no assurance that data transmission over the Internet or the Website will be free from cyber-attacks, we and our subcontractors and business partners work hard to maintain physical, electronic, and procedural safeguards to protect your personal information in accordance with applicable data protection laws.
Among other things, we use measures such as:
severely limited personal access to your personal data on a need-to-know basis and only for the stated purpose, transmission of the collected personal data only in encrypted form,
Storage of particularly sensitive personal data only in encrypted form, segregation of functions in IT systems to prevent unauthorized access, e.g. by hackers, and Continuous monitoring of access to IT systems in order to detect and prevent the misuse of personal data.
7. How long will your personal data be stored?
We will only retain your personal data for as long as this is necessary for the purposes for which we collected it and any other permitted purpose (e.g. where relevant to defending against a claim against us). Therefore, if personal data is used for two purposes, we will retain it until the purpose expires at the later term; however, we will stop using the data set that was necessary for the purpose with the shorter duration).
Our retention periods are based on business needs. Your personal data that is no longer required will either be irreversibly anonymised (and the anonymised data may be stored) or securely deleted.
In particular, the following shall apply to:
Use for customer care and marketing purposes: We may retain your personal data used for customer care and marketing purposes for these purposes after the date we last received your consent or the date on which you last responded to a marketing communication from us, until withdrawn.
Use for the performance of the contract: We are entitled to store your personal data, which is used for the performance of any contractual obligations to you, during the term of the contract plus 7 years after the last contact in order to deal with subsequent inquiries or claims.
If a claim is to be made: in relation to any information that we reasonably believe will be necessary to defend or prosecute you, us or a third party, we may retain such personal data for as long as that claim can be pursued.
8. Further information on your data processing
There is no legal obligation to provide personal data. However, for the above-mentioned purposes, there is a contractual necessity to provide your personal data.
For contact and form fields: If you do not provide your data, the desired contact, the sending of information material and/or newsletter registration cannot be made. Furthermore, it may also happen that we cannot carry out the booked treatment because you have not disclosed all treatment-relevant data.
Automated decision-making does not take place.
9. Contact, your rights and complaint to the Data Protection Authority
If you have any questions regarding our use of your personal information, please contact:
E-mail: [email protected]
You have the right to:
require us to provide you with more details about our use of your personal data;
require us to provide you with access to your personal data and to provide you with a copy of the data provided to us;
to require us to provide personal data that you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to transmit this data to another controller without hindrance, if the processing of your personal data is based on your consent or contract and it is carried out automatically,
to demand that we correct data stored incorrectly by us,
require us to erase any personal data for which there is no legal basis;
that we stop processing if the processing is based on consent(including any processing for direct marketing purposes) and you withdraw your consent with effect for the future, object to any processing based on legitimate interests arising from your particular situation, unless our grounds for such processing outweigh any interference with your data protection rights;
require us to restrict the use of your personal data, e.g. during the handling of a complaint.
Your exercise of these rights is subject to certain exceptions to protect the public interest (e.g., preventing or investigating a crime), our interests (e.g., preserving legal privilege), or the rights and freedoms of others.
If you exercise any of these rights, we will review your entitlement and respond promptly, but no later than one month. In complex cases or if numerous requests are received, this period may be extended by a further two months, of which we will inform you.
If you are dissatisfied with our use of your personal data or our response to the exercise of these rights, you have the right to complain to your data protection authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, telephone: +431 52 152-0, e-mail: [email protected], https://www.dsb.gv.at/).