{"id":167,"date":"2026-04-16T07:40:11","date_gmt":"2026-04-16T07:40:11","guid":{"rendered":"https:\/\/authentic-hair.com\/datenschutzerklaerung\/"},"modified":"2026-04-16T14:10:15","modified_gmt":"2026-04-16T14:10:15","slug":"datenschutzerklaerung","status":"publish","type":"page","link":"https:\/\/authentic-hair.com\/en\/datenschutzerklaerung\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In accordance with the statutory provisions of data protection law (in particular the new version of the German Federal Data Protection Act (BDSG) and the European General Data Protection Regulation (GDPR)), we inform you below about the type, scope and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. With regard to the definition of terms such as “personal data” or “processing”, we refer to Art. 4 GDPR. <\/p>

Name and contact details of the controller(s)<\/strong>
Our controller (hereinafter “controller”) within the meaning of Art. 4(7) GDPR is <\/p>

Authentic Hair Salon A by Angela K\u00fchling<\/span>
Cl. Castell d’Olimbroi, 10<\/span>
BA\u00b01<\/span>
03700 D\u00e9nia, Alicante, Spain<\/span>
Managing Director: Angela K\u00fchling<\/span>
E-mail address: info@authentic-hair.com<\/span><\/p>

Types of data, purposes of processing and categories of data subjects<\/strong><\/p>

Below we inform you about the type, scope and purpose of the collection, processing and use of personal data.<\/p>

1. types of data that we process<\/strong>
Usage data (access times, websites visited, etc.), contact data (telephone number, e-mail, fax, etc.), communication data (IP address, etc.),<\/p>

2. purposes of processing according to Art. 13 para. 1 c) GDPR<\/strong>
Optimize website technically and economically, optimization and statistical evaluation of our services, improve user experience, make website user-friendly, avoid SPAM and abuse, provide websites with functions and content, uninterrupted, secure operation of our website,<\/p>

3. categories of data subjects pursuant to Art. 13 para. 1 e) GDPR<\/strong>
Visitors\/users of the website, customers, interested parties, applicants,<\/p>

The persons concerned are collectively referred to as “users”.<\/p>

Legal basis for the processing of personal data<\/strong><\/p>

Below we inform you about the legal basis for the processing of personal data:<\/p>

  1. If we have obtained your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis. <\/li>
  2. If processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. <\/li>
  3. If processing is necessary to fulfill a legal obligation to which we are subject (e.g. statutory retention obligations), Art. 6 para. 1 sentence 1 lit. c) GDPR is the legal basis. <\/li>
  4. If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 sentence 1 lit. d) GDPR is the legal basis. <\/li>
  5. If the processing is necessary to protect our legitimate interests or those of a third party and your interests or fundamental rights and freedoms do not outweigh this, Art. 6 para. 1 sentence 1 lit. f) GDPR is the legal basis. <\/li><\/ol>

    Disclosure of personal data to third parties and processors<\/strong><\/p>

    We do not pass on any data to third parties without your consent. Should this nevertheless be the case, the data will be passed on on the basis of the aforementioned legal bases, e.g. when passing on data to online payment providers to fulfill a contract or due to a court order or due to a legal obligation to hand over the data for the purpose of criminal prosecution, to avert danger or to enforce intellectual property rights.
    We also use processors (external service providers, e.g. for web hosting of our websites and databases) to process your data. If data is passed on to the processors as part of an agreement on order processing, this is always done in accordance with Art. 28 GDPR. We select our processors carefully, monitor them regularly and have been granted the right to issue instructions regarding the data. In addition, the processors must have taken appropriate technical and organizational measures and comply with the data protection regulations according to BDSG n.F. and GDPR <\/p>

    Data transfer to third countries<\/strong><\/p>

    The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Your data is therefore primarily processed by companies to which the GDPR applies. However, if processing is carried out by third-party services outside the European Union or the European Economic Area, these must fulfill the special requirements of Art. 44 et seq. GDPR must be met. This means that the processing takes place on the basis of special guarantees, such as the EU Commission’s officially recognized determination of a level of data protection corresponding to that of the EU or compliance with officially recognized special contractual obligations, the so-called “standard contractual clauses”. In the case of US companies, submission to the so-called “Privacy Shield”, the data protection agreement between the EU and the USA, fulfills these requirements. <\/p>

    Deletion of data and storage duration<\/strong><\/p>

    Unless expressly stated in this privacy policy, your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies, unless its continued storage is required for evidence purposes or this conflicts with statutory retention obligations. This includes, for example, commercial law retention obligations for business letters in accordance with Section 257 (1) HGB (6 years) and tax law retention obligations for documents in accordance with Section 147 (1) AO (10 years). If the prescribed retention period expires, your data will be blocked or deleted, unless the storage is still required for the conclusion or fulfillment of a contract. <\/p>

    Existence of automated decision-making<\/strong><\/p>

    We do not use automated decision-making or profiling.<\/p>

    Provision of our website and creation of log files<\/strong><\/p>

    1. If you only use our website for information purposes (i.e. no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data: <\/li><\/ol>