Privacy policy

1. Controller

Monika-Andreea Hondru
HYPNOKOSMETIK®
Rheingoldstr. 30, 10318 Berlin, Germany
Phone: +49 160 5615903
E-mail: info@hypnokosmetik.de

2. General principles

Protecting your personal data matters to me. This website is deliberately data-thrifty: it sets no cookies, uses no analytics or tracking services, loads no fonts or scripts from external servers and embeds no social media plug-ins. For that reason there is also no cookie banner on this site.

3. Server log files

When you visit this website, the hosting provider automatically collects information that your browser transmits (server log files): browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address.

This data is not merged with other sources. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in the technically error-free and secure operation of the website. Log files are deleted after seven days at the latest.

4. Contact form

If you send me a message through the contact form, the data you enter (name, e-mail address, telephone number where given, subject and message text) as well as your IP address and the time of submission are transmitted to me by e-mail for the purpose of processing your enquiry.

Legal basis: Article 6(1)(a) GDPR (your consent) and Article 6(1)(b) GDPR insofar as your enquiry is directed at concluding a contract.

Retention: your details remain with me until you ask me to delete them, withdraw your consent, or the purpose for storing them no longer applies. Mandatory statutory retention periods, in particular under commercial and tax law, remain unaffected.

Spam protection: The form uses hidden additional fields, a timing check, a simple security question and an automatic assessment of the message text in order to detect machine generated advertising. To limit repeated bulk submissions, a shortened, non reversible checksum of your IP address is stored together with the time of submission for no longer than one hour. The IP address itself is not stored, and the checksum does not allow any conclusion about your identity. No data is transmitted to third parties; in particular no services such as Google reCAPTCHA and no cookies are used. The legal basis is Article 6(1)(f) GDPR, the legitimate interest in protecting the form against misuse.

5. Contact by e-mail, telephone or WhatsApp

If you contact me by e-mail or telephone, your enquiry including all personal data arising from it is stored and processed for the purpose of handling your request (Article 6(1)(a) and (b) GDPR).

A note on WhatsApp: this website contains a link that opens a chat via the WhatsApp service. It is a plain link, simply visiting this website transmits no data to WhatsApp. Only when you click the link and use the chat does WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland) process your data as an independent controller. This may involve transfers to third countries, including the USA. Please see the WhatsApp privacy notice: whatsapp.com/legal/privacy-policy-eea. If you would rather avoid that, please use the contact form, e-mail or telephone.

6. Hosting

This website is hosted externally by:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

Personal data collected on this website is stored on IONOS SE servers. This generally includes IP addresses, contact enquiries, metadata and communication data as well as access data from the server log files.

Hosting is used in the interest of a secure, fast and efficient provision of this site by a professional provider (Article 6(1)(f) GDPR). Where consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and section 25(1) TDDDG.

A data processing agreement pursuant to Article 28 GDPR is in place with IONOS SE. The servers are located in Germany; no transfer to third countries takes place as part of the hosting.

Further information: ionos.de/terms-gtc/datenschutzerklaerung

7. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from „http://“ to „https://“. When encryption is active, the data you transmit to me cannot be read by third parties.

8. Special categories of personal data

In the course of a consultation you may share health data or other particularly sensitive information with me (Article 9 GDPR). I process such data solely on the basis of your explicit consent and treat it in strict confidence. Please do not send such information unencrypted by e-mail or messenger, for sensitive matters it is better to arrange a personal conversation.

9. Your rights

You have the right at any time to:

• access the data stored about you (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure of your data (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• object to processing (Article 21 GDPR)
• withdraw consent with effect for the future (Article 7(3) GDPR)

An informal message to the address above is sufficient.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority here is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany.

Last updated: August 2026