Privacy Policy

Information pursuant to Art. 13 & 14 of the General Data Protection Regulation (GDPR)

This is a translation provided for your convenience. The legally binding version is the German privacy policy.

1. Controller

The controller responsible for data processing on this website is:

Jony Beauty Lounge
Owner: Jony Ashy
Richartzstraße 12, 50667 Cologne
Phone: 0172 7060383
E-mail: jony.beauty.lounge@gmail.com

2. General information on data processing

The protection of your personal data is important to us. We process personal data only within the framework of the statutory provisions (GDPR, German Federal Data Protection Act – BDSG). This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website.

Legal bases

Depending on the case, processing takes place on the basis of your consent (Art. 6 (1) (a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR), or on the basis of our legitimate interest in a secure and functional web presence (Art. 6 (1) (f) GDPR).

3. Hosting and server log files

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When the website is accessed, the browser automatically transmits information to the provider's servers and temporarily stores it in so-called server log files:

IP address of the accessing device
date and time of access
page/file accessed and volume of data transferred
browser type and operating system used
referrer URL (previously visited page)

This data serves exclusively the technical provision, security and stability of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and reliable provision).

As Netlify is a US-based provider, this may involve a transfer of data to the USA. A data processing agreement pursuant to Art. 28 GDPR (Data Processing Addendum) is in place with Netlify. The data transfer to the USA is safeguarded by the EU Standard Contractual Clauses; Netlify is also certified under the EU-US Data Privacy Framework. Further information can be found in Netlify's privacy policy: netlify.com/privacy.

4. Cookies and tracking

This website uses no analytics or tracking services and does not create user profiles. Your data is not passed on for advertising purposes.

Online appointment booking takes place via a redirect to our booking providers Planity or Treatwell (see section 6); no cookies are set on this website itself.

5. Contacting us

If you contact us by phone or e-mail, your details (e.g. name, phone number, e-mail address and the content of your enquiry) are processed in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of an appointment) or Art. 6 (1) (f) GDPR (answering general enquiries). This data is deleted as soon as it is no longer required to achieve the purpose and no statutory retention obligations prevent deletion.

6. Online appointment booking (Planity & Treatwell)

For online appointment booking, we offer you a choice of two booking providers. When you click a "Book appointment" button, a choice between Planity and Treatwell appears. Depending on which provider you select, you are forwarded to that provider's external booking page. In each case this is a simple link – data is only transferred to the selected provider (in particular your IP address) once you click it and are on the respective booking page.

If you book an appointment there, the data you provide – name, contact details (phone, e-mail) and the appointment details (desired service, date and time) – is transmitted to the respective provider and processed there in order to arrange and carry out your appointment. The legal basis is Art. 6 (1) (b) GDPR (performance of pre-contractual measures or the contract) as well as Art. 6 (1) (f) GDPR (provision of a convenient appointment booking).

Provider Planity: Planity SAS, 50 Avenue des Champs-Élysées, 75008 Paris, France. Planity is responsible for the processing that takes place there; details in Planity's privacy policy: planity.com/de-DE/privacy-policy.

Provider Treatwell: Treatwell DACH GmbH, Greifswalder Straße 212, 10405 Berlin, Germany. Treatwell is responsible for the processing that takes place there; details in Treatwell's privacy policy: treatwell.de/info/datenschutz.

7. Google Maps

On the contact section we embed a map from the Google Maps service to make it easier for you to find our salon. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When the contact section is loaded, the map is loaded automatically. In doing so, technically necessary data – in particular your IP address – is transmitted to Google; this may involve a transfer to the USA. The legal basis is our legitimate interest in an appealing presentation of our offer and the easy discoverability of our location pursuant to Art. 6 (1) (f) GDPR.

You can prevent collection by Google Maps by deactivating JavaScript in your browser. Further information on how user data is handled can be found in Google's privacy policy: policies.google.com/privacy.

8. Fonts (web fonts)

For a consistent display of fonts, we use locally embedded fonts that are loaded directly from our server. In doing so, no connection is made to third-party servers (e.g. Google Fonts) and your IP address is not transmitted to third parties.

9. Link to Instagram

We link to our profile on the social network Instagram (Meta Platforms Ireland Limited). This is a simple link – only when you click it are you forwarded to Instagram, and Meta's privacy policy applies: privacycenter.instagram.com/policy.

10. Your rights as a data subject

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent given (Art. 7 (3) GDPR)

To exercise your rights, an informal message to the contact details above is sufficient.

11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de

12. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in your browser's address bar.

13. Currency and amendment of this privacy policy

This privacy policy is dated July 2026. As our website develops further, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.

Last updated: July 2026