Data protection

Privacy Policy

Information on the processing of personal data in accordance with the General Data Protection Regulation (GDPR).

1. Responsible person

The entity responsible for data processing on this website is:

Estevita
Trentelgasse 2
45127 Essen
Germany
Email: info@estevita.de
Phone: +491786393944

2. Access data and hosting

When you access the website, technically necessary data is processed, such as IP address, date and time of access, pages accessed, browser type, operating system, and referrer URL. This processing is carried out for the provision, stability, and security of the website on the basis of Article 6(1)(f) GDPR.

3. Contact and analysis forms

When you use a contact form or the free hair analysis, we process the data you enter, such as your name, email address, phone number, preferred method of contact, interest, message, and information about your hair condition. This data is processed to handle your inquiry, to contact you, and to prepare for a possible consultation.

The legal basis is Art. 6 para. 1 lit. b GDPR for pre-contractual measures, Art. 6 para. 1 lit. f GDPR for the processing of legitimate requests and, insofar as you transmit health-related information, your consent pursuant to Art. 9 para. 2 lit. a GDPR.

4. Email, SMTP and communication

Form requests are submitted to Estevita via email. An SMTP service may be used for technical delivery. Data is processed only to the extent necessary for the transmission, processing, and follow-up of your request.

5. WhatsApp contact

If you contact us via a WhatsApp link, you will leave this website and use the WhatsApp service. WhatsApp may process your personal data in this process. Please do not use WhatsApp for particularly confidential information if you do not wish to do so.

6. Cookies and embedded services

The website may use technically necessary cookies and embedded services, for example, to display fonts, maps, media, or for website functionality. Where consent is required, processing is based on Article 6(1)(a) GDPR; technically necessary processing is based on Article 6(1)(f) GDPR.

7. Storage duration

Personal data will only be stored for as long as necessary for the stated purposes or as required by statutory retention periods. Inquiries can be deleted once they have been fully processed and no legal obligations prevent this.

8. Recipients of data

Your data will only be shared if this is necessary to process your request, if there is a legal obligation to do so, if you have given your consent, or if there is a legitimate interest. Technical service providers may be used as data processors.

9. Your rights

In accordance with the GDPR, you have, in particular, the right to information, rectification, erasure, restriction of processing, data portability, and the right to object to certain processing activities. You can withdraw any consent you have given at any time with effect for the future.

10. Right of appeal

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

WhatsApp