Privacy policy
This privacy policy informs you, in accordance with Art. 13 GDPR, about which personal data are processed when you visit this website and when you contact me. The German version is the legally binding one.
1. Controller
Olesia Shydych, ALESIA ÄSTHETIK
Augsburger Str. 1, 80337 München, Germany
Phone: +49 151 20045360 · Email: alesia.aesthetik@gmail.com
No data protection officer has been appointed, as there is no legal obligation to do so.
2. Hosting and server log files
This website runs on the content management system WordPress on servers operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the website, technically necessary data are processed, in particular your IP address, the date and time of access, the page requested, the referrer URL and the browser and operating system used (server log files).
The purpose is to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and error-free operation of the website. IONOS processes these data on my behalf (Art. 28 GDPR). The log files are deleted automatically once the period set by the hosting provider has expired, unless they are needed for longer to investigate a specific security incident.
3. Cookies and storage on your device
No cookies are set and no information is stored on your device when you visit this website. The language selection (German/English) also works without any storage, using only the page address. No analytics, tracking or advertising services are used.
Technically necessary cookies are used only in the password-protected WordPress administration area for logged-in users; visitors to the website are not affected.
4. Fonts, images and videos
Fonts, photos and videos are loaded directly from my own web space. No third-party content (e.g. Google Fonts, YouTube, Instagram or Google Maps) is embedded. Videos are loaded only when you click on them. This website has no contact forms, no online shop and no online payment function.
5. Contact by email and telephone
If you email or call me, I process the information you provide (e.g. your name, email address, telephone number and the content of your enquiry) in order to deal with your request and arrange appointments. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or steps prior to entering into one, and otherwise Art. 6(1)(f) GDPR (responding to your enquiry).
For email I use the Gmail service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your emails are stored and processed on Google’s servers. A transfer to Google LLC in the USA cannot be ruled out (see section 9).
6. Appointment requests via WhatsApp Business
I offer WhatsApp for appointment requests. When you tap a WhatsApp button, WhatsApp opens with a pre-written message; no data are transferred to WhatsApp before that. If you send me a message, your telephone number, profile name, the content of the message, its time and other connection data are processed by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. I use the WhatsApp Business app on my mobile phone for this communication.
The legal basis is Art. 6(1)(b) GDPR (arranging appointments) and Art. 6(1)(f) GDPR (simple and quick communication). If you prefer not to use WhatsApp, you can also reach me by telephone or email.
Please do not send detailed health information via WhatsApp; we will discuss this in person at the studio.
7. Links to Instagram and the route planner
This website contains simple links to my Instagram profile and to Google Maps (“Get directions”). No content from these providers is embedded. You are only redirected to the respective provider when you click a link; their privacy policies then apply (Meta Platforms Ireland Limited or Google Ireland Limited).
8. Storage period
I store personal data only for as long as is necessary for the respective purpose. Enquiries by email, telephone or WhatsApp are deleted once they have been fully dealt with, unless statutory retention obligations (in particular under commercial and tax law) apply. In that case, the data concerned are kept for the duration of the statutory periods and deleted afterwards.
9. Recipients and transfers to third countries
Recipients of personal data are the service providers named above: IONOS as hosting provider, Google (Gmail) for email and WhatsApp for messages sent via WhatsApp. Data are not passed on for advertising purposes.
When Gmail and WhatsApp are used, data may be transferred to their parent companies Google LLC and Meta Platforms, Inc. in the USA. Both companies are certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may withdraw any consent you have given at any time with effect for the future.
Right to object: Where processing is based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
11. Obligation to provide data, automated decision-making
You are not obliged to provide me with personal data; without contact details, however, I cannot answer your enquiry. There is no automated decision-making, including profiling.
Last updated: November 2026
← Back to the homepage