Privacy Policy
Thank you for your interest in my website. The protection of your personal data is particularly important to me.
1. Controller
Bellamano by Nathalia
Porschestraße 30, 30827 Garbsen, Germany
Email: info@bell-a-mano.de
2. Collection and processing of personal data
Personal data (e.g. name, email, phone number) is only collected when you voluntarily provide it to me, e.g. as part of an enquiry or booking.
3. Purpose of processing
to respond to enquiries
to arrange and handle appointments
4. Cookies and analytics tools
My website uses technical cookies to ensure functionality. I do not use tracking or analytics tools such as Google Analytics.
No social media plugins are embedded on this website. No external fonts, map services or analytics services from third parties are loaded either. The reference to Instagram is a plain link: only when you click it is data transmitted to the provider, and that provider's privacy policy then applies.
5. Your rights
You have the right to access, rectification, erasure and restriction of the processing of your data, as well as the right to object and to data portability.
For data protection questions, please contact me at: info@bell-a-mano.de. You also have the right to lodge a complaint with the Lower Saxony Data Protection Authority (LfD Niedersachsen).
6. Storage period
Your data is only stored for as long as is necessary for the stated purposes or as required by statutory retention periods.
7. Contact via WhatsApp
If you contact me via WhatsApp, please note that WhatsApp processes personal data (e.g. phone number, profile picture). I use WhatsApp solely for communication and arranging appointments.
8. Legal bases for processing
Your data is processed on the basis of Art. 6(1)(b) GDPR where this is necessary to initiate or perform a contract (e.g. arranging an appointment, a treatment, buying a voucher). Where processing is based on your consent, for example an enquiry via the contact form, the legal basis is Art. 6(1)(a) GDPR; you may withdraw consent at any time with effect for the future. There is a legitimate interest in the secure and stable operation of the website under Art. 6(1)(f) GDPR. If you provide health-related information in the context of a treatment (e.g. allergies or intolerances), this is processed solely on the basis of your explicit consent under Art. 9(2)(a) GDPR.
9. Hosting and server log files
This website is operated by an external hosting provider that processes data on my behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with this provider.
When the website is accessed, the server automatically stores information in so-called server log files that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources and serves solely the secure and fault-free operation of the website. The legal basis is Art. 6(1)(f) GDPR.
10. Contact form
If you send me an enquiry via the contact form, I process the data you provide (name, email address, subject and message) solely in order to handle your enquiry. I do not pass this data on without your consent. The data remains with me until you ask me to delete it, withdraw your consent, or the purpose of storage no longer applies; mandatory statutory retention periods remain unaffected.