- Data Protection Overview
MB SkinConcept & Beauty GmbH (trading as Velvetvibesalon, operating via operator@velvetvibesalon.com, located at An der Krimm 19B, 55124 Mainz, registered under HRB 50981, AG Mainz) respects your privacy and is committed to protecting your personal data in strict compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable European data protection laws. - Data Controller
The data controller responsible for the processing of your personal data in connection with our hair and beauty services and website operations is:
Company Name: MB SkinConcept & Beauty GmbH (Velvetvibesalon)
Registered Address: An der Krimm 19B, 55124 Mainz
Commercial Register: HRB 50981, AG Mainz
Contact Email: operator@velvetvibesalon.com
Telephone: +49 61312116328
- Collection and Processing of Personal Data
We process personal data that you provide to us directly when booking or utilizing our hair and beauty services, contacting our support team, or interacting with our website. This data may include your name, contact information (such as your email address and telephone number), and appointment or transaction history.
All data processing is conducted strictly on lawful bases pursuant to the GDPR, including the fulfillment of contractual obligations, compliance with legal retention requirements, or based on your explicit consent where applicable.
- Payment Processing via Stripe
To process payments securely for our salon services, we utilize Stripe as our third-party payment service provider. When you make a transaction, your payment details (such as credit card information or banking details) are transmitted directly to Stripe, Inc. and its affiliates.
Stripe processes your data as an independent data controller or processor in accordance with its own privacy policies and strict international data compliance standards (including PCI-DSS compliance). We do not store full credit card or sensitive financial credentials on our local servers.
- Data Retention Periods
In accordance with German and European statutory retention obligations (such as those stipulated under the German Commercial Code – HGB and the German Fiscal Code – AO), commercial documents, invoices, and transaction-related data are retained for statutory periods of 6 to 10 years.
Personal data collected for customer communication or appointment inquiries that do not result in a formal commercial transaction will be deleted or anonymized once the purpose of the communication has been fulfilled, provided no other statutory retention periods prevent deletion.
- Your Rights Under the GDPR
As a data subject residing within the European Economic Area (EEA), you possess robust rights under the GDPR concerning your personal data, including:
The right of access to your stored personal data.
The right to rectification of inaccurate or incomplete data.
The right to erasure (“right to be forgotten”), subject to statutory retention exceptions.
The right to restriction of processing.
The right to data portability.
The right to lodge a complaint with a competent supervisory data protection authority in Germany or your EU member state of residence.
For any inquiries or to exercise your rights, you may contact us at operator@velvetvibesalon.com.