Privacy policy

The controller responsible for data processing on this website is:

Name

Studio A, owner [full name or company name]

Address

Goethestraße 6, 10623 Berlin

Email

team@studio-a.berlin

Phone

+49 178 9764179

We are not legally required to appoint a data protection officer. For any privacy question, just write to team@studio-a.berlin.

The website is run by Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden, and delivered through the network of Cloudflare, Inc. (USA). Lovable processes the data on our behalf under a data processing agreement (Art. 28 GDPR).

Each visit involves technically necessary data: IP address, date and time, page requested, amount of data transferred, status code, referrer URL, and browser and operating system. This serves to deliver the site, keep it stable and protect it from attacks. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Log data is kept only as long as these purposes require.

The hosting infrastructure sets two strictly necessary cookies (__cf_bm for bot protection, __dpl to serve one consistent version). Details in the cookie policy.

Transfers to the USA are possible. Cloudflare is certified under the EU-US Data Privacy Framework; Lovable bases transfers to third countries on the EU Standard Contractual Clauses.

We use strictly necessary storage without consent (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR): your cookie choice, your language and your scroll position when you go back. Everything else only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

Your consent is voluntary and lasts 12 months. You can withdraw or change it at any time with effect for the future, under “Cookie settings” at the bottom of every page. The full list is in the cookie policy.

If you consent to “Statistics”, we use the visitor statistics of our host, Lovable. It records the page viewed, the referring page, browser, language, a country derived from your time zone, time on page and loading times. A cookie (session-id, 30 minutes) holding a random ID groups the page views of one visit. We only ever see aggregated figures, such as visitors per day or the most-read pages.

The purpose is to improve the website. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). The recipient is Lovable as our processor, which uses service providers such as Tinybird for this.

Without consent none of this is sent and no cookie is set. Only technical error reports (error message, affected page, browser) are transmitted then, so we can fix problems. They store nothing on your device. The legal basis is our legitimate interest in a working website (Art. 6(1)(f) GDPR).

Our server fetches the posts shown on the home page and the barber profiles through Meta's API and serves the images from our own domain. Viewing the website sends no data about you to Meta.

Only when you click a post or an Instagram link does Instagram open (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). From then on, the Instagram privacy policy (opens in a new tab) applies.

On the Visit page you can load a Google Maps map (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It only loads when you click “Show map” or have consented to “External media”. Google then receives your IP address and the page viewed, among other data, and may set cookies. Transfers to Google LLC in the USA are possible; Google is certified under the EU-US Data Privacy Framework.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). See Google's privacy policy (opens in a new tab). The “Open in Google Maps” link takes you straight to Google.

This website's fonts (Archivo and Inter Tight) are hosted on our own server. Loading the site makes no connection to Google Fonts or any other font provider.

When you contact us, we process what you send (e.g. name, contact details, message) to answer your request. For appointments the legal basis is Art. 6(1)(b) GDPR, otherwise our legitimate interest in replying (Art. 6(1)(f) GDPR). We delete the data once it's no longer needed and no statutory retention period applies.

If you message us on WhatsApp, WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland) also processes data, including your phone number and message metadata. Message content is end-to-end encrypted. Using WhatsApp is optional; you can reach us just as well by email or phone.

Online via Planity: “Book now” on this website opens our page on Planity in a new tab. This website sends no data to Planity. You enter your details there, and Planity processes them; the Planity privacy policy (opens in a new tab) also applies. We receive the data needed for the appointment (name, contact details, service, time) and use it to provide the appointment (Art. 6(1)(b) GDPR).

By phone or in the shop: we then process your details (name, contact details, service, time) ourselves, also to provide the appointment (Art. 6(1)(b) GDPR).

We keep personal data only as long as its purpose requires or statutory retention periods demand (e.g. six or ten years for business and accounting records under German commercial and tax law). After that it is deleted.

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw consent with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Just write to team@studio-a.berlin. You can also lodge a complaint with a data protection authority (Art. 77 GDPR); ours is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, datenschutz-berlin.de (opens in a new tab).

The website is only ever transmitted encrypted (HTTPS/TLS). There is no automated decision-making or profiling under Art. 22 GDPR. You are not obliged to give us any data, but without contact details we can't book an appointment for you.

We update this policy when the website or the law changes. The version published here applies.