Privacy policy

1. Privacy at a glance

This notice explains what happens to personal data when you visit this website. Personal data is any information that can identify you personally.

The website is currently an informational service. No analytics, marketing or social media tracking services are used. When you submit the Salon Partner form, the information entered there is transmitted to LAVIQA to process your enquiry.

2. Controller

LAVIQA GmbH
Königsallee 92a
40212 Düsseldorf
Germany

Represented by Leyla Özer, Managing Director
Phone: +49 173 3823669
Email: info@laviqa.de

3. Hosting by IONOS

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When the website is accessed, IONOS may process server log files, including the IP address, time of request, requested resource, referrer, browser type and operating system.

Processing is based on Art. 6(1)(f) GDPR to provide the website securely, reliably and without technical errors. A data processing agreement pursuant to Art. 28 GDPR must be maintained with IONOS.

4. Contact

If you contact us by email or phone, we process the information you provide to respond to your enquiry and possible follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures. Otherwise, processing is based on Art. 6(1)(f) GDPR.

We retain enquiries only as long as necessary or as required by statutory retention obligations.

5. Pilot partner expression of interest

When you use the pilot partner expression-of-interest form, we process the salon or company name; the contact person’s full name and role; business email address and telephone number; business address; a brief salon description; hair extension experience; and information about your interest in the pilot phase. We also record the required confirmations concerning authority to represent the company and the participation terms, acknowledgement of this privacy information, and confirmation that no health data or other personal data relating to uninvolved third parties will be submitted.

Processing is carried out to review each submission, respond to it and, where appropriate, coordinate potential participation in the LAVIQA pilot project. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns pre-contractual measures. Otherwise, processing is based on our legitimate interest in handling business partnership enquiries pursuant to Art. 6(1)(f) GDPR. Acknowledging this privacy information is not consent to the processing necessary to handle the submission.

The information is transmitted to our server over an encrypted connection and sent through the IONOS mailbox salonpartner@laviqa.de to designated LAVIQA recipients authorised to handle it. An automatic acknowledgement is sent to the business email address provided. The website does not store the form data in an additional database. The information remains in the business mailboxes used to process the submission and is deleted once processing is complete, unless statutory retention requirements or legitimate reasons require further storage.

If you voluntarily consent to future contact, we store and use your contact details pursuant to Art. 6(1)(a) GDPR to inform you by email about future LAVIQA pilot, training or partner programmes. These details will be stored for no more than 24 months from the date of consent. You may withdraw consent at any time with future effect, for example by emailing info@laviqa.de. Withdrawal does not affect the lawfulness of processing carried out before it. Refusing or withdrawing consent has no effect on the processing of your current expression of interest.

6. Protection against form abuse

To protect the form and mailbox against automated or excessive submissions, the IP address is briefly converted into a pseudonymous checksum that cannot be directly attributed to an individual. Together with timestamps, it is used solely to limit the number of enquiries. Entries are considered only within the current checking period of 15 minutes and are deleted regularly.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is maintaining the security and availability of the form and protecting it from spam and abuse.

7. Cookies and local fonts

At the current stage, we do not use optional analytics or marketing cookies. The website font is delivered locally from our web server and does not connect to Google Fonts.

If optional services such as analytics, external media or the Shopify store are added later, this notice will be updated before activation and consent will be obtained where required.

8. Your rights

Subject to the applicable legal requirements, you have rights including access, rectification, erasure, restriction, data portability and objection. Consent can be withdrawn at any time with future effect.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

9. Security and status

This website uses SSL/TLS encryption.

Last updated: August 2026