Privacy

Data controller

Asmita Beauty Studio

Owner: Asmita Khadka

glowathome3@gmail.com
+49 152 3896 0980

Appointment requests

This website saves your selected services and packages in your browser’s local storage so your cart remains available as you browse. It does not save your name, address, preferred time or prepared message in the persistent cart storage. During a language change, form fields may briefly be held in this tab’s session storage; they are removed when the other language page loads, or when the tab closes. The website asks for neither an email address nor a phone number. Asmita receives the message only when you send it through WhatsApp or SMS yourself. You can also call. Remove selections or clear this site’s browser data to empty the cart.

Deleting messages

Deleting a WhatsApp or SMS chat on your device does not delete Asmita’s copy. Email the address above if you want Asmita to delete your messages. Asmita deletes routine appointment chats six months after the visit. An unresolved matter or a legal record-keeping duty may require longer retention.

Website and external services

This website is served through Cloudflare Pages (Cloudflare, Inc.). Requests pass through Cloudflare’s global network. Technical connection data such as IP address, requested page and time may be processed; connection metadata may also be processed in the United States and Europe. Cloudflare states no fixed retention period; by its own account it keeps this data only as long as needed for operation and security. The transfer to the United States relies on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR); as a fallback, Cloudflare has agreed Standard Contractual Clauses (Art. 46 (2) c GDPR). Fonts are served by this website. The website sets no cookies. Only if Cloudflare shows a security check can a technically necessary cookie be set (section 25 (2) no. 2 TDDDG).

Your rights

You can request access to, correction, deletion, restriction and portability of your data. Write to the email above. You can object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) f GDPR (Art. 21 GDPR). You may also complain to the Berlin data protection authority.

Legal bases

Appointment requests and contact: when you write to Asmita by WhatsApp, SMS, phone or email, she processes your details, for example name, address, preferred time and chosen services, to answer your request and carry out the appointment. The legal basis is Art. 6 (1) b GDPR. Asmita keeps records of her income, for example the date and amount of an appointment, for the legal retention periods (section 147 of the German Fiscal Code, Art. 6 (1) c GDPR).

Health details: if you mention allergies or skin conditions, Asmita processes this information only with your explicit consent (Art. 9 (2) a GDPR), to carry out the treatment safely. You can withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR).

Website: technical connection data is processed so the website runs safely and reliably. The legal basis is Art. 6 (1) f GDPR. The cart and the language switch use your browser’s local storage and session storage. This is needed for the function you asked for (section 25 (2) no. 2 TDDDG), so no consent is required.

You are not required by law or contract to give your details. Without a name, address and preferred time, however, Asmita cannot arrange an appointment. No automated decision-making takes place.

Recipients

Cloudflare, Inc. serves the website and acts as a processor (Art. 28 GDPR). Messages you send by WhatsApp, SMS or email pass through the provider you choose: WhatsApp Ireland Limited, the mobile carriers and Google Ireland Limited (Gmail). These providers also process data under their own responsibility and privacy terms. A transfer to the United States is possible.

Audience measurement

This website uses Cloudflare Web Analytics (Cloudflare, Inc.). The service measures page views and load times so we can see which pages are found and whether they load fast. By Cloudflare’s account, the service sets no cookies, uses no local storage in your browser for the measurement, creates no fingerprint and does not track individual visitors across websites. Cloudflare states it does not log parameters in the address. By its own account, Cloudflare keeps the raw data for 7 days and then aggregates it. The legal basis is Art. 6 (1) f GDPR (interest in improving the website). You can object to the processing (Art. 21 GDPR); write to the email above.