Privacy policy
This English version is a courtesy translation. The German version is legally binding.
Controller
Overview
We process personal data only where necessary to operate this website and handle your enquiries — sparingly, for defined purposes, and in line with the General Data Protection Regulation (GDPR).
Hosting and server log data
This website is hosted with Google (Firebase Hosting). When the site is accessed, technically necessary server log data (e.g. IP address, date and time of access, file requested) is processed to ensure delivery and security of the site. The legal basis is our legitimate interest in secure, uninterrupted operation (Art. 6 (1)(f) GDPR). The servers are located in the European Union.
Appointment booking
When you request an appointment via the booking form, we process the data you provide — name, contact (e-mail or phone), reason for the visit and optionally your preferred model — solely to handle your request and contact you. The legal basis is your consent (Art. 6 (1)(a) GDPR) and the performance of pre-contractual measures (Art. 6 (1)(b) GDPR). You may withdraw your consent at any time with effect for the future.
The data is stored in a database (Google Firestore, located in the European Union) and sent for appointment confirmation by e-mail via a Google service. We do not pass the data on to uninvolved third parties. Data-processing agreements pursuant to Art. 28 GDPR are in place with the service providers used.
Contact form (“Talk to us”)
When you send us a message via the contact form, we process your message, your optional contact detail (e-mail or phone) and the page you write from, solely to answer your enquiry. The legal basis is your consent (Art. 6 (1)(a) GDPR) and, where applicable, the performance of pre-contractual measures (Art. 6 (1)(b) GDPR). The message is stored in a database (Google Firestore, located in the European Union) and delivered to us by e-mail via a Google service. It is not passed on to uninvolved third parties.
Retention
We store your enquiry data only for as long as necessary to handle it, and delete it afterwards unless statutory retention obligations apply.
Cookies and tracking
This website uses no tracking, analytics or marketing cookies. Only technically necessary functions are used.
For reach measurement we count page views anonymously and without cookies (legal basis: legitimate interest, Art. 6 (1)(f) GDPR). We record only: the page viewed, where the visit came from (e.g. a search engine or linking domain), language and device class. IP addresses are not stored, no profiles are created and no data is shared with third parties. Browser privacy signals (Global Privacy Control / “Do Not Track”) are respected — in that case nothing is counted.
Embedded videos (YouTube): videos on this website only load when you actively click them (two-click solution, privacy-enhanced mode “youtube-nocookie.com”). Before the click, no connection to YouTube/Google is made. After the click, Google Ireland Limited processes data under its own responsibility; Google's privacy policy applies.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing. You may withdraw any consent given at any time. To do so, contact info@conflee.de.
You also have the right to lodge a complaint with a data-protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information.