Privacy Policy

Thank you for your interest in our studio. The protection of your personal data is of the highest importance to us. This Privacy Policy informs you about what personal data we collect when you use our website and booking system, the purposes for which we process it, and your rights under the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data is any data with which you can be personally identified. We treat your data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

The controller responsible for data processing on this website under the GDPR is:

Due to our business size, we are not legally required to appoint an official Data Protection Officer (§ 38 BDSG). For any privacy-related questions, you can contact us directly using the contact details above.

Payment for booked services takes place exclusively in person at the barber studio at the time of your appointment (in cash or by card terminal).

In our internal appointment management system, we only record whether and by which payment method (cash / card) the service was settled in the salon after completion. This serves solely to manage the booking status and satisfy commercial and tax bookkeeping requirements (e.g. under German HGB and AO).

We collect and process only the data necessary to provide our services, manage appointment bookings, and offer customer support:

• Basic Details: Your full name (first name and last name).
• Contact Details: Email address and telephone number (used for booking confirmations, 24-hour reminders, and urgent inquiries about your appointment).
• Booking & Appointment Data: Selected service, requested barber, appointment date and time, appointment status, and optional notes.
• Technical Usage Data (Server Logs): IP address, date and time of request, browser type and version, operating system, and accessed pages.
• Account & Login Credentials: Authentication identifier managed via our authentication provider Clerk for secure sign-in without storing passwords on our own servers.

We do not knowingly collect data from minors and do not collect any special categories of personal data (such as health data, biometric data, or religious beliefs).

We process personal data exclusively in compliance with the provisions of the GDPR:

To run our platform securely and reliably, we use specialized technical providers who act as data processors (Art. 28 GDPR) under Data Processing Agreements (DPA):

Where data is processed in the US, transfers are safeguarded by the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR) or EU Standard Contractual Clauses (Art. 46 GDPR).

Our website uses only technically necessary cookies and functional session storage.

These include session cookies from our authentication provider Clerk (to keep you signed in securely) and a cookie for remembering your language choice (NEXT_LOCALE).

We do not use advertising cookies, behavioral tracking mechanisms, or third-party web analytics (such as Google Analytics). Pursuant to § 25(2) TDDDG, consent banners are not required for strictly necessary functional cookies.

We retain your personal data only for as long as necessary to fulfill the respective purpose or as required by statutory retention laws.

Statutory retention periods: Records of completed services and appointments are subject to commercial and tax retention requirements of 6 to 10 years (§ 147 AO, § 257 HGB). After these periods expire, records are routinely erased.

Self-service account deletion: You can delete your customer account at any time in your profile under 'Account & Privacy'. Your login and profile data are immediately and permanently removed, provided no statutory retention obligations prevent deletion.

Under applicable GDPR regulations, you have the following rights at any time:

• Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed, and access to that data.
• Right to Rectification (Art. 16 GDPR): You have the right to obtain the rectification of inaccurate personal data or completion of incomplete data.
• Right to Erasure (Art. 17 GDPR): You have the right to obtain the erasure of your personal data, provided statutory retention obligations do not apply.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request restriction of processing of your personal data under certain conditions.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): Where processing is based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation.
• Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw previously given consent at any time with future effect.

To exercise your rights, you can contact us informally (e.g. via email at zyronstudio@gmail.com). To verify your identity, contacting us from your registered email address or account is sufficient; no copy of your passport or ID is required.

In the event of GDPR violations, you have the right to lodge a complaint with a competent supervisory authority (Art. 77 GDPR). The competent authority for our studio in Berlin is:

This site uses TLS/SSL encryption (HTTPS) for security reasons and to protect the transmission of confidential booking data.

We implement state-of-the-art technical and organizational security measures to protect your data against loss, destruction, alteration, or unauthorized access.