Privacy notice

1. Controller

2. Hosting and server logs

This website is delivered through Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When the website is accessed, Netlify processes technically necessary connection data, particularly the IP address, date and time, requested address, browser and device information and, where applicable, the referring page. Processing serves the secure, stable and efficient delivery of the website and is based on our legitimate interest under Article 6(1)(f) GDPR.

Netlify may process data in the United States and other countries. Netlify states that it uses safeguards including the European Commission’s Standard Contractual Clauses for international transfers and participates in the EU-US Data Privacy Framework. Netlify’s data processing agreement is incorporated into its terms. More information: Netlify Privacy Statement ↗.

3. Cookies and consent management

This website currently does not use first-party analytics, advertising or social-media trackers. There are no user accounts, newsletters or embedded contact forms. Technically necessary storage or access may take place without consent where it is required to provide the website expressly requested by you.

Before Google Analytics, Google Ads or a Meta tool such as the Meta Pixel is activated, we will implement a consent solution. Analytics and advertising technologies will then be loaded only after you have expressly consented. The legal bases are Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG. You will be able to withdraw consent at any time with future effect through the cookie settings provided at that time. The website will generally remain usable if consent is refused.

4. Fonts

Playfair Display, DM Sans and Plus Jakarta Sans are served directly from our own web storage. Loading these fonts does not establish a connection to Google Fonts.

5. Appointment booking through Salonkee

Salonkee is not embedded in this website. Selecting a booking link opens the external Salonkee website in a new tab. Salonkee then processes data under its own privacy notice. Booking data is not collected through this website. Open external Salonkee booking ↗

6. Contact by email, telephone or WhatsApp

If you contact us, we process the information you voluntarily provide to respond to your enquiry. Depending on the request, processing is based on pre-contractual steps under Article 6(1)(b) GDPR or our legitimate interest in responding under Article 6(1)(f) GDPR. Information is deleted once the enquiry has been completed unless statutory retention duties apply.

The WhatsApp link opens an external service. Its provider’s privacy terms apply and processing outside the EU or EEA may occur. You may contact us by telephone or email instead.

Joining the WhatsApp group for the Trans & Queer Community Night is voluntary. Depending on the group type, your settings and WhatsApp’s features, your profile name, profile picture, telephone number and posts may be visible to other group members. WhatsApp or Meta also processes usage and connection data under its own privacy terms. Our processing within the group is based on your consent under Article 6(1)(a) GDPR. You may withdraw it with future effect by leaving the group; confirmed event information will also be published on our website.

7. Internal content management

Website content is maintained internally through a private GitHub repository and Pages CMS, then published by Netlify. These editorial services are not part of an ordinary website visit and do not receive additional form or content data from you merely because you view the website.

8. Google Maps (only after activation)

On the About page, we offer an interactive Google map to help with directions. The map loads only after you select the “Load Google Maps” button. No connection to Google Maps is established before that point. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When the map is loaded, Google may process your IP address, technical browser and device information, the page viewed and other usage data and may store or access information on your device. Activation is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. The page remains fully usable without activation; you may alternatively use the external directions link. Processing by affiliated companies and service providers in the United States cannot be ruled out. More information: Google Privacy Policy ↗.

9. Google Analytics 4 (planned)

We plan to use Google Analytics 4 to measure reach and improve our offering. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics may process page views, interactions, approximate location data, technical browser and device information, the referring page and pseudonymous identifiers. Google states that IP addresses are used to derive general location information and discarded before they are logged in Analytics.

Google Analytics will be loaded on this website only after your express consent. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. A retention period of 14 months is intended for user-level and event-level data when the service is configured; aggregated reports may remain available for longer. We will not send directly identifying information such as names or email addresses to Google Analytics. More information: Google Analytics privacy information ↗.

10. Google Ads and conversion measurement (planned)

We plan to use Google Ads to advertise our services in Google Search and potentially the Google advertising network and to measure the success of that advertising. Following consent, this may involve the processing of advertising and click identifiers, pages viewed, technical device and browser data and actions defined by us, such as opening appointment booking or contacting us. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Conversion measurement, remarketing or personalised advertising will be activated on this website only after express consent. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. Your selection will be communicated to Google through the consent solution; without consent, the relevant tags will remain blocked. Consent may be withdrawn at any time through the cookie settings. More information: Google Privacy Policy ↗ and Google business data privacy information ↗.

11. Instagram and advertising through Meta

We plan to maintain a business presence on Instagram. For users in the European Economic Area, the operator is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. If you visit our Instagram profile, interact with content or send us a message there, Meta processes personal data under its own terms. We process publicly visible profile and interaction data and the content of messages in order to operate our presence and respond to enquiries. Depending on the interaction, this is based on Article 6(1)(b) or (f) GDPR or, where consent is required, Article 6(1)(a) GDPR.

A simple link to Instagram does not transmit data to Meta merely because you visit our website. You leave our website only when you select that link. Instagram content is not currently embedded and the Meta Pixel is not currently installed. If we later use the Meta Pixel, conversion measurement, remarketing or embedded Instagram content, this will occur only after express consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. The consent dialogue will then provide advance information about purpose, provider and storage duration. More information: Instagram and Meta Privacy Policy ↗.

12. Processing in third countries

When Google or Meta services are used, affiliated companies and service providers may process data outside the European Union and the European Economic Area, particularly in the United States. The providers state that they rely on applicable adequacy decisions, including the EU-US Data Privacy Framework, and/or the European Commission’s Standard Contractual Clauses for such transfers. Despite these safeguards, third countries may provide different government access powers and legal remedies.

13. Your rights

Subject to the statutory conditions, you have rights including access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with future effect; withdrawal does not affect the lawfulness of processing carried out before withdrawal. Please send requests to the controller listed above.

14. Right to lodge a complaint

You may lodge a complaint with a data protection authority. The supervisory authority particularly relevant to the company is:

15. Changes

We update this privacy notice when the website, services used, their specific configuration or legal requirements change. Before the planned analytics and advertising services are actually activated, we will compare this notice once more with the configured accounts, identifiers, retention periods and consent settings.