Book an appointment

Privacy Policy

Responsible Authority

We are happy about you visiting our website. We would like to introduce you to the responsible authority in terms of data protection law as applicable:

Zweimal Store GbR
67 Steinstraße
81667 Munich
Phone: 089 24 60 54 42
E-mail: info@zweimalstore-styling.com

Consent

Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Your data will generally only remain stored for as long as the purpose of the relevant data processing requires it. Storage beyond that is mainly possible when it is still necessary for us to pursue our rights or for our other legitimate interests or if we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files, which is generally 6 years, but may last up to 10 years).

General Information

Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.

When you use our website, personal data about you will be collected. This may happen by you entering the data yourself, for example your e-mail address. But our system also collects your data automatically, for example whenever you visit our website. This happens irrespective of the device or the software that you use to visit our website.

All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services or to conclude contracts. Whenever such information is necessary, we will point it out to you.

On this website, the user’s personal data is only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.

The GDPR allows data processing in three cases in particular:

  • in accordance with Art. 6 para. 1 (a) and 7 GDPR, when you have consented to us processing your data; in this Privacy Policy and in the cases of consent pursuant to Art. 4 no. 11 GDPR, we will inform you in detail and each time for what purposes and under what circumstances your data will be processed by us;
  • in accordance with Art. 6 para. 1 (b) GDPR, when processing your personal data is necessary for negotiating, concluding or performing a contract;
  • in accordance with Art. 6 para. 1 (f) GDPR, if the balancing of interests leads to the conclusion that the processing is necessary to protect our legitimate interests; this means in particular our interests to analyse, optimise and secure the offers on our website – meaning primarily the analysis of user behaviour, setting up profiles for advertisement purposes and storage of access data as well as the use of third-party providers.

Inventory Data, Usage Data

We collect inventory data (for example name, address and e-mail address, possibly services used) insofar as they are required for establishing, defining or amending a contract between us and the user.

We also collect usage data (for example visits to the website, interest in products) to allow the user to use the services on our website and to invoice them. We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time. The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR. Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:

  • your IP address
  • type and version of your browser
  • host name
  • time of visit
  • the page from which you came to our page
  • name of the page opened
  • exact time of usage as well as
  • the amount of data transferred

This data will only be used for statistical purposes and do not allow us to identify you as a user.

Users‘ Rights - Information

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

The right to object to advertisement is governed by our text regarding consent:

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

You may request us to transfer the data stored about you in machine-readable form.

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency hier here you find a list of agencies).

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

Inventory Data

We collect inventory data as far as it is necessary to establish, negotiate or amend a contract (including one without remuneration) between us and the user.

This can be: customer data (for example name, address), contact data (for example e-mail address, phone number), service data (for example services ordered, duration, payment).

Upon establishing the user relationship, we will ask you for this data (for example name, address and e-mail address) and will also tell you which of the information is required to establish the user relationship.

Usage Data

We also collect usage data to allow users to use the services on our website. These may consist of: usage information (for example visited websites or parts, duration of visit, interest in services), content data (for example data, text, images, sounds, videos entered or uploaded by you), meta data (for example identity of your device, location, IP address).

We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.

The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the website and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.

Hoster

1&1 IONOS SE

Our Website is presented in the Internet by a service provider.

We use the service of 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

We have concluded a data processing agreement with our provider.

With this contract, our provider is obliged to process the data according to our instructions.

You can find more information on data processing at our provider in his privacy policy at https://www.ionos.de/terms-gtc/terms-privacy.

The legal basis for this data processing is on the one hand our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, and, on the other hand, our contractual or pre-contractual legal relationship in accordance with Art. 6 para. 1 (b) GDPR.

Furthermore, our provider stores information, the so-called server log files, each time the website is used; this is information which is automatically transferred by your browser. In detail, this data consists of:

  • your IP address
  • type and version of your browser
  • host name
  • time of visit
  • the page from which you came to our page
  • name of the page opened
  • exact time of usage as well as
  • the amount of data transferred

This data will only be used for statistical purposes and do not allow us to identify you as a user.“

Advertisements

Insofar as we send advertising, we do so exclusively within the scope of Section 7 (3) of the German Act Against Unfair Competition (UWG) or on the basis of your consent.

First Contact through Electronic Request

If you contact us in electronic form (for example by mail, fax, phone, messenger, etc.), we store and process the data which you have given us (for example name, contact information, content of the request). This is based on our legitimate interest in an effective communication with customers in accordance with Article 6 para. 1 (a) GDPR and, as far as it concerns a request to enter into or to perform a contract, also with Article 6 para. 1 (b) GDPR.

We will only pass on this data to third parties as far as required for the performance of the contract (in accordance with Article 6 para. 1 (b) GDPR), by the overwhelming interest in effective services (in accordance with Article 6 para. 1 (f) GDPR) or based on your consent (in accordance with Article 6 para. 1 (a) GDPR) or if there is another legal permission or obligation.

You may ask us at any time and without any cost to provide information about the purpose of the processing, the origin and the recipient, if any, of your data. You may also request that we correct, delete or limit the processing of your personal data. You may object against the (further) processing of your data at any time and you have a right for the data to be made transferable as well as the right to file a complaint with the competent supervisory agency.

In general, your data will only remain stored as long as required by the purpose of the respective data processing. A longer storage is an option, in particular when required in order to pursue our rights, for other legitimate interests of ours or when there is a statutory duty to keep the data longer (for example record-keeping under tax law, statute of limitations).

Storage Period

Generally, your data will only remain stored as long as required by the purpose of the respective data processing. Storage beyond that is possible in particular if it is still required for pursuing our rights or for other legitimate interests of ours.

For your inventory data which were necessary to perform a contract (including one without remuneration), this means that we store this data until the complete performance or termination of the contractual relationship plus the limitation period (which is generally 2 or 3 years) plus an adequate extra time for potential interruptions of the limitation period.

For your usage data which was collected in the course of your use of the website, this means that we will store it only for the time still required for the proper functionality of our website and as long as we still have a legitimate interest. Statistical information will be primarily stored by us in pseudonymous form.

Beyond that, we still store your data for as long as we are required to do so by law. This concerns in particular the tax-law requirements to keep records, usually for 6 or even 10 years.

Cookies

Upon opening the website, we have asked you to consent to the storing of certain cookies which will be placed while you visit our website. Based on your consent pursuant to Art 6 para. 1 (a) GDPR, our website thus uses cookies, so that our offer can be used in a better, more effective and more secure way.

A cookie is a record of information that is stored on your terminal device (computer, tablet, smartphone, etc.). These can be “session cookies”, which are automatically deleted when you leave our website. Other cookies are stored on your computer permanently until you delete them. That allows us to recognize your browser when you visit our website again and to provide you with features or offers according to your previous usage.

Your browser allows you to prevent the use of cookies in general or in specific cases. Please check the instructions for your browser to find out more about this. You can also delete cookies following these instructions which we have listed for you:

for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en

for Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

for Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

for Edge: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

for Internet Explorer: https://support.microsoft.com/en-gb/help/278835/how-to-delete-cookie-files-in-internet-explorer

Blocking cookies may limit the functionality of our website and of other websites visited by you.

More information on this topic, in particular how you can administer, limit or completely disable third-party cookies and technologies with a similar purpose, can be found at:

https://www.aboutads.info/choices

https://www.youronlinechoices.eu

https://www.networkadvertising.org/choices

You can withdraw your consent at any time with effect for the future: Cookie-Einstellungen ändern.

Transfer of data

Transfer to Third Parties

We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law.

Transfer of customer data may either

  • be required for the performance of a contract and in that case be permitted according to Art. 6 para. 1 (b) GDPR, or
  • be permitted based on our legitimate interest in an effective service structure pursuant to Art. 6 para. 1 (f) GDPR, or
  • covered by your consent pursuant to Art. 6 para. 1 (a) GDPR, or
  • become necessary if we will be legitimately asked by a government or an agency to hand over your data pursuant to Art. 6 para. 1 (c) GDPR.

If your data are transferred to third parties, this is mentioned in this privacy policy.

Transfer to other countries, particularly USA

Insofar as we transfer personal data to countries outside the European Union, in particular the USA, in accordance with the provisions set out below, we will only carry out such a transfer where an adequate level of data protection, appropriate safeguards or your consent, and thus a transfer permitted under the GDPR, is in place.

Users‘ Rights

You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.

Deletion, Correction, Limitation

You may at any time demand from us that we correct (or complete) incorrect data as well as a limitation of the processing of data or deletion of your data. This applies in particular if the reason for processing the data is no longer valid, if a required consent has been revoked and there is no other legal basis or if our data processing is unlawful. We will then correct, block or even delete your personal data without delay as far as permitted by law.

Objection

The right to object to advertisement is governed by our text regarding consent:

Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time.

You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.

Data Transfer

You may request us to transfer the data stored about you in machine-readable form.

Complaint

If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).

Changes to the Privacy Policy

If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.

Social Media

Social Media Plugins

Instagram Feed

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use plugins of the social network Instagram, provided by Instagram LLC, now Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

The feed automatically displays the contents of our Instagram feed on our website. However, with the Shariff method, Facebook only learns of your IP address and your visit to our website once you have activated the display of the feed. If you confirm the plugin while being logged into Instagram, Instagram/Facebook may attribute your use to your user account.

Your data will be forwarded by Facebook Ireland on the ground of the standard contractual clauses to Facebook USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have neither knowledge of, nor any influence on the possible collection and processing of your data by Instagram. Further information can be found in Instagram's privacy policy at https://privacycenter.instagram.com/policy.

For the general approach to cookies and their deactivation as well as regarding the passing of data to third parties, particularly to the USA, we refer you to our general information in this Privacy Policy.

Our website uses links to our presence in the social network of Facebook by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. It is just a normal link. Thus, when you open our site, Facebook will not learn of your visit to our website. But once you click on the link, you will be led to Facebook, allowing Facebook to learn that you have visited out site.

Your data will be forwarded by Facebook Ireland on the base of the standard contractual clauses to Facebook USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

The collection and use of your data which is possibly carried out by Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Facebook’s privacy policy at https://en-gb.facebook.com/policy.php.

Our website uses links to our presence in the social network of Instagram by Instagram LLC, now Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

It is just a normal link. Thus, when you open our site, Instagram will not learn of your visit to our website. But once you click on the link, you will be led to Instagram, allowing Instagram / Facebook to learn that you have visited out site.

Your data will be forwarded by Meta Platforms Ireland on the base of the standard contractual clauses to Meta Platforms USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

The collection and use of your data which is possibly carried out by Instagram/Facebook after clicking on the link is beyond our knowledge or control. You may find further information in Instagram’s privacy policy at

https://privacycenter.instagram.com/policy.

Social Media Videos

Youtube (Two Click)

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR we use YouTube, a service provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland in order to embed videos.

To protect your data, we have installed a two-click solution. That way, Google won't learn about your visit once you access our website, but only once you actually click the button. If you confirm the plugin while being logged in at YouTube, Google may attribute your use to your user account.

The data collected by Google may be transferred by Google to countries outside of the EU, in particular to the USA.

However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses. Furthermore this provider is certified according to the EU-US Data Privacy Framework. This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.

You may find further information in YouTube’s privacy policy at

https://www.google.de/intl/de/policies/privacy/.

Regarding the general approach to cookies and their deactivation, we refer you to our general information in this Privacy Policy.

Website Analysis

WP Statistics

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use WP Statistics, a web analysis tool provided by Veronalabs, 5460 West Main Street, Verona, NY 13478, USA.

We have hosted WP Statistics internally, hence no data will be passed on to third parties.

Nor does the WP Statistics Plugin use any cookies, so that we are not collecting more data than is produced anyway when you access a website on the internet.

This information will be collected in an anonymised form, so that we cannot attribute it to you personally.

In that way, we collect for example your usage data, i.e. IP address, referring site, your search engine, browser version or your country and your city.

Map services

Google Maps

Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use Google Maps API, a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”), in order to show an interactive map.

When using this provider, it may happen that your data is transferred to the USA. However, we have ensured that your data is only transferred to the USA on the basis of a contract in accordance with the standard contractual clauses.

According to the GDPR and the EuGH, this is a legal basis for the transfer of data to the USA. Furthermore this provider is certified according to the EU-US Data Privacy Framework.

This means that the transfer of data to the USA is possible in a legally secure manner on the basis of the adequacy decision concluded on 10.07.2023.

We have concluded an data processing agreement with this provider, according to which this provider will only process your data on our behalf within the scope of the GDPR and according to our instructions.

Google Maps is used on the basis of a contract on joint responsibility according to Art. 26 GDPR, which we have concluded with Google Maps and which can be accessed here https://privacy.google.com/intl/de/businesses/mapscontrollerterms.

To protect your data, we have installed a two-click solution. That way, Google won't learn about your visit once you access our website, but only once you actually use Google Maps.

By using Google Maps, particularly through active Java scripts, information about your use of this website (including your IP address) may be transmitted to a server of Google LLC in the USA and can be stored there on the basis of the standard contractual clauses.

Further information about the use of your data by Google can be found in the privacy policy of Google at https://www.google.de/intl/de/policies/privacy/ .

If you don't want your data to be transmitted, you can deactivate the execution of Java scripts in your browser or install a blocker, which will prevent the execution of Java scripts (e.g. https://noscript.net). But we do want to point out that this may impede the use of our or other websites.

Backup

ManageWP

Based on our legitimate interest in a technologically perfect online offering and its design and optimization in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, we use the data security service ManageWP, an offer by GoDaddy.com LLC, 2155 GoDaddy Way, Tempe, Arizona, United States.

As part of that process, the data of our website and thus possibly also data collected from you will be stored in a backup at our place. To be on the safe side, the data will also be transmitted to our data security service. But our data security service only carries out a system check with the data to find out if the backup is complete and functional. No individual data will be read, and the data will be deleted after the short-term functionality check.

You can find more information about the privacy policy of our data security service in the privacy policy of our data security service: https://www.godaddy.com/de-de/legal/agreements/european-supplemental-privacy-notice

We have also entered into a contract on data processing with our data security service, according to which our security service will only process your data according to our instructions.

With that your data may also be transferred to the USA. Our data protection service is an active member of the EU/US Data Protection Framework. This means that it is a US provider for which an equivalent level of data protection as in the EU has been established.