This is a courtesy translation. Only the German version of this page is legally binding.
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may be data you enter in a contact form or provide when booking an appointment.
Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour, provided you have given your consent.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data.
2. Hosting
We host the content of our website with the following provider:
IONOS SE
Elgendorfer Str. 57, 56410 Montabaur, Germany
A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with IONOS.
When you visit our website, the host automatically collects various information in so-called server log files. This includes:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Information about the controller
The controller responsible for data processing on this website is:
Jessica Lefèvre
VOILÀ cosmétique
Goldbekufer 30a
22303 Hamburg
Phone: +49 151 5357 9458
Email: bonjour@vc-beauty.de
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time about this and other questions on the subject of personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us about this at any time.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
Competent supervisory authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22
20459 Hamburg
Phone: +49 40 428 54 – 4040
Email: mailbox@datenschutz.hamburg.de
4. Data collection on this website
Contact form / booking form
If you send us enquiries via the contact form or booking form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.
Enquiries by email, phone or fax
If you contact us by email, phone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6(1)(f) GDPR).
Cookies and consent
This website only sets technically necessary cookies without your consent. This includes the cookie “voila_consent”, in which your choice in the cookie banner is stored for 12 months (§ 25(2) TDDDG, Art. 6(1)(f) GDPR). External content and, where applicable, statistics or marketing services are only loaded after your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).
You can change or revoke your consent at any time with effect for the future:
5. Online booking (Treatwell)
We use the booking service Treatwell for online appointment booking. On our “Book” page, the Treatwell booking calendar is only loaded when you expressly request it by clicking “Load calendar” (consent pursuant to Art. 6(1)(a) GDPR). Only then is data such as your IP address transmitted to Treatwell.
When you make a booking, Treatwell processes your details (e.g. name, email address, phone number, desired treatment and appointment) to carry out the booking (Art. 6(1)(b) GDPR). Further information can be found in Treatwell’s privacy policy. You can revoke your consent at any time by deleting the stored website data in your browser.
6. Plugins and tools
Google Fonts (local hosting)
This site uses so-called Google Fonts for the uniform display of fonts. The Google Fonts are installed locally. No connection to Google servers takes place.
7. Your rights
You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Last updated: January 2026
Further legal information can be found in our legal notice.