BeautyPrivacy policy
Last updated:
Courtesy translation. The German version (Datenschutzerklärung) is the legally binding one.
1. Privacy at a glance
This website currently uses no analytics or marketing services and no tracking cookies. I only process personal data as far as necessary to operate the website, play videos and handle your enquiries.
Personal data is any data that can be used to identify you personally. The following sections explain which data is processed, when and why.
2. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
[Full legal name — please complete]
[Street and number — please complete]
[Postal code — please complete] Berlin
Email: hey@mia-ugc.de
3. Hosting
This website runs on a virtual server (VPS) at Hostinger. Contracting party and address: [Hostinger contracting party and address — please confirm]. Server location: [Server location — please confirm]. When you visit the website, the server processes the data listed in the next section.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and reliable operation of the website). A data processing agreement under Art. 28 GDPR exists with the hosting provider [Conclusion of the agreement — please confirm]. More information: Hostinger privacy policy.
4. Server log files
When you visit the website, the web server automatically stores information that your browser transmits:
- IP address
- date and time of the request
- requested page or file
- referrer URL (the previously visited page)
- browser type, browser version and operating system
- amount of data transferred and HTTP status code
This data is required to operate and secure the website (error analysis, defence against attacks). It is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR. Retention period: [Retention period of the log files — please complete].
5. Content management with Sanity
The content of this website (texts, images, video references) is managed with the content management system Sanity (Sanity AS, Norway). The website server retrieves the content from Sanity and delivers it to your browser. As a rule, no visitor data is transmitted to Sanity in the process. Individual images may be loaded directly from Sanity servers (cdn.sanity.io); in that case your IP address is transmitted to Sanity.
The editing area (Studio) is only accessible to me as the operator. Sanity sets technically necessary cookies there for sign-in. Visitors of the website are not affected. The legal basis is Art. 6 (1) (f) GDPR. More information: Sanity privacy policy.
6. Videos (Mux)
Videos on this website are played through the streaming service Mux (Mux, Inc., USA). When a video is loaded or played, your browser connects to Mux servers (for example stream.mux.com and image.mux.com). Your IP address and technical information such as browser, device and playback state are processed so that the video can be delivered. Mux may also collect playback quality data [Use of Mux Data and its settings — please review].
The legal basis is Art. 6 (1) (f) GDPR (providing the video content). Basis for the transfer of data to the USA: [Basis of the transfer, for example Data Privacy Framework or standard contractual clauses — please review]. More information: Mux privacy policy.
7. Fonts
The fonts used (Inter and Bricolage Grotesque) are downloaded when the website is built with Next.js (next/font) and served from my own server. No connection to Google or other font providers is made when you visit the website.
8. Cookies and local storage
This website does not set cookies for analytics, audience measurement or advertising. A consent prompt (cookie banner) is therefore currently not provided. In the editing area, Sanity uses technically necessary cookies to sign in editors; visitors are not affected. [Whether the Mux video player stores an anonymous viewer ID in the browser — please review]
9. Contact by email
If you write to me by email, I process your details (email address, possibly your name and the content of the message) to answer your enquiry and for follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where a contract or pre-contractual measures are concerned, otherwise Art. 6 (1) (f) GDPR. I do not pass your data on without your consent. It is deleted once your enquiry has been dealt with and no statutory retention periods apply. Email provider of hey@mia-ugc.de: [Provider of the mailbox — please complete].
10. Contact form
[This section only applies once the contact form is enabled. Delivery method and service provider — please review]
If you use the contact form, I process the data you enter (for example name, email address and message) to handle your enquiry and for follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where a contract or pre-contractual measures are concerned, otherwise Art. 6 (1) (f) GDPR. The data is deleted once your enquiry has been dealt with and no statutory retention periods apply.
11. Links to social networks
This website only contains plain links to Instagram, TikTok and YouTube. No plugins or scripts of these providers are embedded. Data is only transmitted to the respective provider once you click a link. Their privacy policy then applies.
12. Retention
Unless a more specific retention period is stated in this policy, your personal data stays with me until the purpose of processing ceases to apply. If you make a legitimate request for deletion or withdraw consent, your data is deleted, unless statutory retention obligations apply.
13. Your rights
Within the scope of the statutory provisions you have the right at any time to:
- information about your stored personal data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure of your data (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
- withdraw consent you have given, with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, an email to hey@mia-ugc.de is enough.
14. Right to lodge a complaint with a supervisory authority
In the event of violations of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (datenschutz-berlin.de).
15. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the lock icon in your browser address bar.
16. Changes to this policy
I adapt this privacy policy when the website or the legal situation changes. The version published here applies.