Privacy policy

Last updated: 04.06.2026

Welcome to La Sirena/Hola Beauty (“we”, “us”, “our”). We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, purchase our handmade jewellery, book beauty treatments, or contact us.

1. Controller Information

The data controller responsible for processing your personal data is:

[La Sirena/Hola Beauty
Im Spaehenfele 51
44143 Dortmund
Germany

Tel.: 15145182369
E-Mail: hola.beauty.dortmund@gmail.com

If you have any questions regarding this Privacy Policy or your personal data, you can contact us at the details above.

2. Legal Basis for Processing

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

The legal basis for processing includes:

  • Article 6(1)(a) GDPR – Consent

  • Article 6(1)(b) GDPR – Performance of a contract

  • Article 6(1)(c) GDPR – Legal obligation

  • Article 6(1)(f) GDPR – Legitimate interests

Where special categories of personal data are processed (for example, health-related information relevant to beauty treatments), processing is based on explicit consent under Article 9 GDPR where required.

3. What Personal Data We Collect

We may collect and process the following personal data:

a) Contact Information

  • Name

  • Email address

  • Phone number

  • Postal address

b) Order Information

  • Purchased products

  • Billing details

  • Shipping details

  • Payment information (processed via payment providers)

c) Appointment Information

  • Booking details

  • Treatment preferences

  • Relevant health or skin information (if voluntarily provided)

d) Website Usage Data

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Date and time of access

e) Communication Data

  • Messages sent through contact forms

  • Emails

  • Customer service inquiries

4. How We Use Your Data

We use your personal data to:

  • Process and deliver jewellery orders

  • Manage appointments for beauty treatments

  • Communicate with you

  • Respond to inquiries

  • Process payments

  • Improve our website and services

  • Comply with legal obligations

  • Prevent fraud and abuse

5. Booking Beauty Treatments

When booking beauty treatments, we may ask for information necessary to safely provide services.

Any health-related information you voluntarily provide will only be used for treatment-related purposes and handled confidentially.

We will only collect information that is necessary.

6. Online Shop and Payments

When you purchase jewellery through our website, your payment may be processed by third-party payment providers.

We do not store full payment card details.

Payment providers process your payment data under their own privacy policies.

7. Contact Form

If you contact us through our website, we process your information solely for handling your request and follow-up communication.

The legal basis is either your consent or our legitimate interest in responding to your inquiry.

8. Sharing Data with Third Parties

We may share your personal data with:

  • Payment providers

  • Shipping providers

  • IT service providers

  • Booking system providers

  • Legal or tax advisors

  • Public authorities where legally required

We only share data where necessary.

9. Data Storage and Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy or as required by law.

For example:

  • Order data: up to 10 years (tax and accounting obligations under German law)

  • Inquiry data: up to 3 years

  • Marketing consent: until withdrawn

10. Your Rights

Under GDPR, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Delete your data

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

In Germany, you can contact your local data protection authority.

11. Data Security

We implement technical and organisational security measures to protect your data against loss, misuse, and unauthorised access.

However, no online transmission is completely secure.

12. Third-Party Services

Our website may contain links or integrations with third-party services (such as Instagram, booking tools, or payment services).

These third parties have their own privacy policies.

13. International Data Transfers

If personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on this website.