Privacy Policy
Last updated: May 2026 · Controller: Nataliya Melzer
1. Data Controller
Nataliya Melzer
Kirchengasse 23/1 · 2460 Bruck an der Leitha · Österreich
E-Mail: makeupmelzer@gmail.com
Telefon / WhatsApp: +43 676 541 82 19
Website: www.melzer-makeup.at
As a sole trader, Nataliya Melzer is the controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG 2018) for the processing of personal data on this website.
2. What Data We Process
We collect and process only the data you actively provide to us (e.g. via a contact form or WhatsApp) or that is technically generated when you visit the website (server logs). We use no tracking and no analytics tools (no Google Analytics, no Meta Pixel) and no advertising cookies.
| Data Source | Data Processed | Purpose |
|---|---|---|
| Contact form | Name, email address, message | Responding to your enquiry |
| Booking form | First & last name, email, phone, requested service, preferred date, message | Appointment scheduling and booking processing |
| Your WhatsApp number, message content | Direct communication at your request | |
| Server logs | IP address (anonymised), date/time, page accessed, browser type | Security & troubleshooting |
3. Contact & Booking Form
If you send an enquiry via the contact or booking form, your details are transmitted by email to makeupmelzer@gmail.com.
The submitted data is not passed on to third parties and is used exclusively to respond to your enquiry and process any resulting booking. Once the matter is concluded, the data is deleted, unless a statutory retention obligation applies.
Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures) and Art. 6(1)(a) GDPR (your consent given by submitting the form).
4. WhatsApp Contact
This website provides a link for direct contact via WhatsApp (wa.me/436765418219). By clicking this link, you leave our website and open the WhatsApp application operated by Meta Platforms Ireland Ltd.
The WhatsApp/Meta privacy policy applies to the use of WhatsApp. We have no influence on data processing by Meta.
Messages you send us via WhatsApp are used solely to respond to your enquiry and are not passed on to third parties.
Legal basis: Art. 6(1)(a) GDPR (consent given by actively using the link).
5. Instagram
This website contains links to our Instagram profile (@makeupmelzer). These links open Instagram in a new tab — no Instagram scripts or plugins are loaded on our website. You only leave our website once you actively click the link.
Instagram is operated by Meta Platforms Ireland Ltd. Data processing by Instagram is governed by the Meta/Instagram privacy policy.
No Instagram feed is embedded on this website and no Meta tracking scripts are used.
6. Web Hosting & Server Logs
This website is hosted on a web server. For technical reasons, the following data is stored in server log files whenever our website is accessed:
- Anonymised IP address of the requesting computer
- Date and time of the request
- URL accessed
- HTTP status code
- Amount of data transferred
- Browser type and operating system (user agent)
This data is used solely to ensure operation, diagnose errors and defend against attacks. It is not merged with any other data sources.
Storage period: Server logs are automatically deleted after 30 days at the latest.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
7. Local Storage (Cookies)
This website uses no tracking cookies and no third-party cookies. We store only technically necessary information in your browser's local storage (localStorage):
- nm_cookies_v1: Stores your confirmation of the cookie notice so that it does not appear again on every visit. This entry contains no personal data and is stored only locally in your browser.
You can delete this local storage at any time in your browser settings.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a user-friendly website).
8. Fonts & External Resources
All fonts used on this website (Playfair Display, Inter) are hosted locally on our server. No fonts are loaded from the Google Fonts CDN or any other external service. Accordingly, no requests are sent to Google servers when our website loads.
No external CSS or JavaScript libraries (Bootstrap, jQuery, etc.) are loaded from external CDNs. All code is hosted on our own server.
9. Legal Bases
We process personal data only on the basis of the following legal bases pursuant to Art. 6 GDPR:
- Consent (lit. a): When you actively contact us or agree to a service.
- Contract performance (lit. b): To process a booking or enquiry.
- Legal obligation (lit. c): E.g. statutory tax retention periods.
- Legitimate interests (lit. f): Secure and trouble-free operation of the website.
10. Storage Period
Personal data is stored only for as long as necessary for the respective purpose:
- Contact and booking enquiries: Up to 3 years after completion of the matter, then deleted. Longer where an ongoing business relationship exists.
- Accounting-relevant data: 7 years pursuant to the Austrian Federal Fiscal Code (BAO).
- Server logs: Maximum 30 days.
- Local storage (cookies): Until manually deleted by you in your browser.
11. Your Rights
You have the following rights with respect to us regarding your personal data:
Access
You may request information at any time about whether and which data we process about you.
Rectification
You have the right to have inaccurate or incomplete data corrected.
Erasure
You may request the deletion of your data, provided no statutory retention obligation applies.
Restriction
You may request the restriction of processing, e.g. if you dispute the accuracy of the data.
Data Portability
You may request your data in a common, machine-readable format.
Objection
You may object at any time to processing based on legitimate interests.
To exercise your rights, please contact: makeupmelzer@gmail.com
12. Supervisory Authority
If you believe that the processing of your personal data violates the GDPR or the Austrian Data Protection Act, you have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority (DSB)
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
However, we would appreciate it if you contacted us directly first with any concerns, so that we can help you quickly.