Massage Miguel

Privacy policy

This privacy policy informs you about which personal data is processed when you visit this website and when you contact me, for what purposes this happens, and which rights you have. It applies to the website massagemiguel.de.

In case of discrepancies, the German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Miguel Alonso Manzanilla Urich-Sass
Gottschalkstraße 2
13359 Berlin
Germany

Phone: +49 157 7428 6598
E-mail: info@massagemiguel.de

2. No data protection officer

A data protection officer has not been appointed, as the thresholds set out in Section 38 of the German Federal Data Protection Act (BDSG) are not reached.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the website, Vercel’s server automatically records the following data in server log files:

  • IP address
  • date and time of access
  • requested URL
  • HTTP status code
  • volume of data transferred
  • referrer URL (the page visited before)
  • user agent (browser type and version, operating system)

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure and stable operation of the website, the analysis of errors, and the defence against attacks. Log data is deleted or anonymised after a short period, usually within a few days.

Vercel Inc. processes the data as a processor; a data processing agreement pursuant to Art. 28 GDPR is in place with Vercel in the form of the Data Processing Addendum (https://vercel.com/legal/dpa), which forms part of my contract with Vercel. Vercel Inc. also processes data in the USA. This transfer to a third country is safeguarded by Vercel Inc.’s certification under the EU-US Data Privacy Framework (adequacy decision of the European Commission pursuant to Art. 45 GDPR) and, in addition, by the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).

4. Contact by phone and e-mail

When you contact me by phone or e-mail, I process the data you provide in doing so: in particular your name, your phone number or e-mail address, and the content of your request, such as preferred appointment times. The purpose of this processing is to answer your request and to arrange appointments.

The legal basis is Art. 6(1)(b) GDPR, as the processing serves the initiation or performance of a contract. Your data is deleted once your request has been fully dealt with and no statutory retention obligations stand in the way.

Please note that unencrypted e-mail is not confidential. Anything you prefer not to send by e-mail can be communicated to me by phone.

5. WhatsApp

This website contains a link that lets you send me a message via WhatsApp. When you use this link, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (a company of the Meta group), processes your data – such as your phone number, your messages and metadata – under its own privacy policy. This may involve transfers to third countries, in particular the USA. I have no influence over this processing. Further information is available in WhatsApp’s privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

Using WhatsApp is voluntary. Phone and e-mail are available to you as equivalent alternatives.

The legal basis for my processing of your message is Art. 6(1)(b) GDPR (answering your request and arranging appointments) and Art. 6(1)(a) GDPR. You give your consent by deliberately choosing this channel. You may withdraw your consent at any time with effect for the future by using a different contact channel.

Appointments at the studios can be booked through the external booking systems Fresha (Pankow) and Treatwell (Grunewald). These systems are only linked from this website, not embedded. Simply visiting this website does not transmit any data to Fresha or Treatwell.

Only when you click a booking link do you leave this website. Your data is then processed on the respective platform and under its privacy policy, over which I have no influence. If you book an appointment via Fresha or Treatwell, I process the data provided there in order to carry out the booked session (Art. 6(1)(b) GDPR).

On some pages I also link to other external services, such as Google Maps, my Google Business Profile, Instagram, TikTok, YouTube and the gift vouchers on Fresha. These are plain links without embedded content; no data is sent to these providers before you click. Once you click, you leave this website, and processing takes place under the responsibility of the respective provider and its privacy policy.

The recommendations page contains links to products on Amazon. As an Amazon Associate, I earn from qualifying purchases. These links contain an affiliate ID from the Amazon Associates programme.

When you click such a link, the affiliate ID is transmitted to Amazon (Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg). Amazon stores it in order to attribute purchases made via the link to my affiliate ID and to calculate a commission. Processing by Amazon takes place under Amazon’s privacy policy.

When you click an affiliate link, Amazon may use cookies or similar technologies to attribute purchases to my recommendation; data may also be processed on servers outside the EU. This processing is carried out solely by Amazon. No measurement, tracking or setting of cookies takes place on this website itself. The legal basis for providing the links is my legitimate interest in being compensated for recommendations (Art. 6(1)(f) GDPR).

8. Self-hosted fonts and media

Fonts, icons and images on this website are served exclusively from my own server. No web fonts are loaded from Google Fonts or other providers. No data is sent to Google or other font providers when the page loads.

9. No cookies, no analytics

This website does not set cookies, does not use local storage, and does not use any analytics or tracking services. No usage profiles are created.

As no information is stored on or read from your device, no consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is required. This is why there is no cookie banner on this website.

10. Your rights

With regard to the personal data concerning you, you have the following rights towards me:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (Art. 21 GDPR). I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise your rights, an informal message to the contact details given in section 1 is sufficient.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin, Germany
Phone: +49 30 13889-0
E-mail: mailbox@datenschutz-berlin.de
Web: https://www.datenschutz-berlin.de

You may also contact the supervisory authority at your place of residence, your place of work, or the place of the alleged infringement.

12. Retention periods

  • Server log files: deleted or anonymised, usually within a few days.
  • Requests by phone, e-mail or WhatsApp: deleted once the request has been fully dealt with. If a contract is concluded, statutory retention periods apply, in particular under Section 147 of the German Fiscal Code (AO).
  • Data processed by Fresha, Treatwell, WhatsApp or Amazon: according to the rules of the respective provider.

13. Provision of data

You are neither legally nor contractually obliged to provide me with personal data. Without your contact details, however, I cannot answer your request or arrange an appointment with you.

14. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

15. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar and by the padlock symbol. With encryption active, data you transmit to this website cannot be read by third parties.

16. Date of this privacy policy

Last updated: 25 September 2026

I reserve the right to amend this privacy policy if the legal situation, the website or the services used change. The version published here applies in each case.