Privacy Policy

The protection of your personal data is very important to us. We process personal data exclusively in compliance with the relevant statutory regulations, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications-Digital-Services-Data-Protection-Act (TDDDG). This Privacy Policy informs you about the type, scope, and purpose of personal data collected and processed when visiting this website.

Controller within the meaning of the GDPR:

Antje Forgó
Heerweg 2
25926 Ladelund
Germany

Email: contact@4go-makeupandhair.com
Phone: +49 4666 9892980

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser's address line from "http://" to "https://" and the lock icon displayed in your browser address bar.

This website is hosted by:

1blu GmbH, Stromstraße 1–5, 10555 Berlin

When accessing our website, the web server automatically collects data in server log files. This includes:

• IP address of the requesting device

• Date and time of access

• Accessed pages / file names

• Transferred data volume

• Browser type and version

• Operating system used

• Referrer URL (previously visited page)

The processing of this data is necessary to ensure the error-free operation of the website, system security, and protection against cyber attacks.

• Legal basis: Art. 6 (1) (f) GDPR (Legitimate Interest).
• Storage period: Complete IP addresses in the server log files are automatically deleted or anonymized after a maximum of 7 days.
• Data Processing Agreement: We have concluded a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR with our hosting provider.

Our website uses exclusively technically necessary cookies (such as session cookies required for core CMS functionality, navigation, and security). These cookies are automatically deleted when you close your browser.

• Legal basis: § 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

    A dedicated cookie consent banner is not required for the use of these strictly necessary cookies.

To defend against cyber attacks, malicious bots, and brute-force attempts, we use a Web Application Firewall (Akeeba Admin Tools).

• Blocked and potentially malicious requests are recorded in an internal security log table. The storage period is dynamically limited via a maximum number of log entries (circular buffer / ring buffer), so older entries are continuously overwritten.
• In the event of repeated malicious requests, IP addresses are blocked temporarily (for 15 minutes) or added to an internal blocklist in severe recurring cases.
• Legal basis: Art. 6 (1) (f) GDPR (Legitimate interest in maintaining IT security and threat prevention).
  

If you contact us by email or telephone, the personal data you transmit (e.g., name, phone number, email address, inquiry content) will be stored and processed solely for the purpose of handling and responding to your inquiry. This data will not be shared with third parties.

• Legal basis: Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in processing user inquiries).
  
  The data will be deleted once your inquiry has been conclusively resolved and no statutory retention obligations apply.
  

All fonts (such as Google Fonts, Font Awesome) as well as script and design libraries (such as GSAP, CSS frameworks) on this website are loaded locally from our own web server. At no point is a connection established to external Content Delivery Networks (CDNs) or third-party servers.

This website does not use any web analytics, tracking, or marketing tools (such as Google Analytics, Meta Pixel, etc.). No user behavior analysis or profiling takes place.

We display customer reviews from our Google Business Profile on our website. This data is retrieved server-side via API and cached locally on our web server. When you visit our website, no direct connection is established between your browser and Google servers.

• Legal basis: Art. 6 (1) (f) GDPR (Legitimate interest in an authentic and appealing presentation of our services).

Under applicable data protection law, you have the right at any time to:

• Request information about your personal data stored by us (Art. 15 GDPR)
• Request rectification of incorrect or incomplete data (Art. 16 GDPR)
• Request deletion of your personal data (Art. 17 GDPR)
• Request restriction of data processing (Art. 18 GDPR)
• Request data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR.

To exercise any of these rights, simply send an informal message to the contact details provided in Section 2.

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.

This Privacy Policy is currently valid and was last updated on: August 19, 2026.

Due to the further development of our website or changes in legal/official requirements, it may become necessary to adapt this Privacy Policy.