Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

BeautyMasters GmbH
Maximilianstraße 36
80539 München
Germany

Email: info@beautymasters.com
Telephone: +49 89 55293446

Managing Director: Frederic Westerberg
Commercial register: Amtsgericht München, HRB 302666
VAT identification number: DE454967950

2. Data Protection Officer

We have not appointed a Data Protection Officer, as we do not meet the thresholds of Art. 37 GDPR or § 38 BDSG. For any question concerning the processing of your personal data, please contact us at info@beautymasters.com.

3. Scope of this policy

This policy applies to the website beautymasters.com.

It does not apply to our online course platform, operated on our behalf by Thinkific Labs Inc. and accessible at beautymasters.thinkific.com. When you follow the „Sign In“ link or purchase a course, you leave this website and enter a separate platform with its own privacy notice and its own processing operations, including payment processing. Please review the notice provided there.

4. Your rights

You have the following rights in relation to your personal data:

• Access (Art. 15 GDPR) — confirmation of whether we process your data, and a copy of it
• Rectification (Art. 16 GDPR) — correction of inaccurate or incomplete data
• Erasure (Art. 17 GDPR) — deletion, where the legal conditions are met
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR) — receipt of your data in a structured, commonly used, machine-readable format
• Withdrawal of consent (Art. 7(3) GDPR) — at any time, with effect for the future; the lawfulness of processing carried out before withdrawal is unaffected

To exercise any of these rights, contact info@beautymasters.com.

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. Where we process your data for direct marketing purposes, you have an unconditional right to object at any time; we will then cease processing your data for those purposes.

Right to complain

You may lodge a complaint with a supervisory authority. The authority competent for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany

5. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

When you access this website, our hosting provider’s servers automatically record information transmitted by your browser in log files:

• IP address of the requesting device
• Date and time of the request
• Name and URL of the file requested
• Referrer URL
• Browser type and version, operating system
• Volume of data transferred

Purpose: ensuring a stable and secure connection, system security, and technical administration.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of this website.

Retention: log data is deleted automatically after a maximum of 58 days.

We have concluded a data processing agreement (Auftragsverarbeitungsvertrag) with IONOS pursuant to Art. 28 GDPR. Data is processed on servers within the European Union.

6. Contact form and email enquiries

Our website provides a contact form on which you may select a category of enquiry (Request for Speaking, Request for Interview, Request for Scientific Inquiry, Request for Consultation) and submit your name, email address, telephone number (optional) and a free-text message.

Purposes: responding to your enquiry and any follow-up correspondence.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract; otherwise Art. 6(1)(f) GDPR, our legitimate interest in responding to enquiries addressed to us.

Retention: we retain enquiry correspondence until the matter is fully resolved and no legal retention obligations apply. Statutory retention periods under commercial and tax law (§ 257 HGB, § 147 AO) remain unaffected.

Health-related information in free-text fields

The message field is free text. Please do not include information about your own or any patient’s health, medical history or treatment. Such data constitutes a special category of personal data under Art. 9 GDPR and requires particular protection.

Where you nonetheless voluntarily provide such information, we process it solely for the purpose of responding to your enquiry, on the basis of your explicit consent within the meaning of Art. 9(2)(a) GDPR, which you give by submitting it. You may withdraw this consent at any time.

7. Email marketing — course date notifications (Klaviyo)

You can register on our website to be notified of upcoming BeautyMasters training dates.

Data collected: first name, last name, email address, country, profession, and the training you are interested in. We also record the date, time and IP address of your registration and of your confirmation, in order to document your consent.

Double opt-in procedure. After you submit the form, we send you an email asking you to confirm your registration. Your registration only becomes active once you click the confirmation link. If you do not confirm, your entry is deleted automatically after 30 days.

Purposes: sending information about upcoming BeautyMasters training courses, dates and locations, and content related to our training programme.

Legal basis: Art. 6(1)(a) GDPR — your consent. You may withdraw your consent at any time with effect for the future, by clicking the unsubscribe link in any email or by contacting info@beautymasters.com. Withdrawal does not affect the lawfulness of processing carried out before it.

Measurement of email engagement. Our emails contain a tracking pixel and individually coded links that allow us to record whether an email has been opened and which links were clicked. This information is linked to your profile and used to make our communications more relevant. This measurement is covered by the consent you give on registration; if you do not wish it, please unsubscribe.

Processor. Emails are sent using Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. Klaviyo processes your data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Transfer to the USA. Your data is transferred to servers in the United States. These transfers are safeguarded by the European Commission’s Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Please note that US authorities may under certain circumstances have access rights to data stored in the United States, and that legal remedies available to you there may not correspond to those under EU law.

Retention: we retain your data until you withdraw your consent or unsubscribe. Records evidencing your consent are retained beyond that point for the purpose of demonstrating compliance, on the basis of Art. 6(1)(f) GDPR.

Website interaction. Klaviyo’s script may set cookies and record your interaction with our website in order to display the registration form and to associate activity with your profile. This takes place only with your prior consent pursuant to § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR, which you may withdraw at any time via the consent settings.

8. Cookies and consent

Our website uses cookies and comparable technologies that store information on, or read information from, your device.

Technically necessary cookies are required for the basic operation of the site. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

All other cookies and technologies are used only with your prior consent. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You may withdraw or change your consent at any time, with effect for the future, via the consent settings. Withdrawing consent is as straightforward as giving it.

A detailed list of the cookies used, their providers, purposes and storage periods is available in the consent settings.

9. Our social media presence

We maintain profiles on Instagram (@beautymasters.aesthetics) and Facebook. These are linked from our website; the links are plain hyperlinks and no data is transmitted to the operators until you click them.

When you visit our profiles, the platform operator processes your data as a controller in its own right and under its own terms. In respect of the statistics the platform provides to us about our profile’s reach, we and the operator act as joint controllers pursuant to Art. 26 GDPR (see CJEU, C-210/16 — Wirtschaftsakademie). We have no influence over the platform’s own processing and only limited access to the underlying data.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in presenting our training programme and communicating with interested professionals.

Videos displayed in the Instagram section of our website are hosted on our own servers; no connection to Meta is established by viewing them.

10. External links

Our website contains links to external websites, including pavicic-muenchen.de and tatjanapavicic.com. We have no influence over the content or data processing practices of those sites and accept no responsibility for them. Please consult the privacy notices published there.

11. Automated decision-making

We do not use automated decision-making or profiling producing legal effects concerning you or similarly significantly affecting you within the meaning of Art. 22 GDPR.

12. Data security

We use TLS encryption to protect data transmitted between your browser and our servers. We maintain appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration and disclosure. No method of transmission over the internet is entirely secure.

13. Changes to this policy

We update this policy where changes to our processing operations or to legal requirements make it necessary. The version published on this page applies.

Version: 1.3 — 18.08.2026