Privacy Policy
This policy explains how personal data is processed on this website, which is operated for the development of the DepilConcept Master Franchise in Germany.
1. Controller
Controller within the meaning of the GDPR: {DATA_CONTROLLER}, {LEGAL_COMPANY_NAME} {LEGAL_COMPANY_FORM}, {LEGAL_ADDRESS}, {LEGAL_COUNTRY}.
Email: {LEGAL_EMAIL} · Phone: {LEGAL_PHONE}
Contact for data protection matters: {DATA_PROTECTION_CONTACT}
2. Franchise dossier form
When you request the franchise dossier we process the data you enter in the form: full name, email address, phone number, city / region, available capital, timeline, participation profile and the language of the website you used.
Purpose: to send you the franchise dossier and to assess and discuss your interest in the Master Franchise opportunity. Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Providing this data is voluntary, but without it we cannot send the dossier or contact you. Retention: {DATA_RETENTION_FRANCHISE_LEADS}.
3. Spam prevention and abuse protection
To protect the form against automated abuse we use an invisible form field and store an irreversible cryptographic fingerprint of your network address. The network address itself is not stored.
Legal basis: our legitimate interest in the security and availability of this website (Art. 6(1)(f) GDPR).
4. Hosting and database
This website is hosted by {HOSTING_PROVIDER}. Form submissions are stored in a database operated on our behalf by Supabase, hosted in {SUPABASE_REGION}.
Server log data (including IP address, date and time, requested page, browser and referrer) is processed to operate and secure the service. Legal basis: Art. 6(1)(f) GDPR. These providers act as processors under a data processing agreement pursuant to Art. 28 GDPR.
5. Transactional email
Confirmation emails and the franchise dossier are sent via {EMAIL_PROVIDER}, acting as our processor. The data processed for this purpose is your name, email address and the language of your enquiry.
Legal basis: Art. 6(1)(a) and Art. 6(1)(b) GDPR.
6. Marketing communication (optional)
If you give the separate, optional marketing consent in the form, we may contact you with further information about the DepilConcept franchise opportunity. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future, by writing to {LEGAL_EMAIL}.
7. Analytics
Subject to your consent, we use Google Analytics 4 ({GA4_MEASUREMENT_ID}) to understand how this website is used. Analytics cookies and scripts are only loaded after you have consented in the cookie banner.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG). Data may be transferred to Google Ireland Limited and, where applicable, to the United States on the basis of the EU standard contractual clauses and the EU-US Data Privacy Framework. Further processors: {OTHER_PROCESSORS}.
8. Advertising
Subject to your consent, we use Google Ads ({GOOGLE_ADS_ID}) and the Meta Pixel ({META_PIXEL_ID}) to measure and optimise our advertising campaigns. Where a tag manager is used, it is {GTM_CONTAINER_ID}.
These services set cookies or similar technologies and may create pseudonymous usage profiles. They are only loaded after your consent. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG).
9. Cookies and consent management
Strictly necessary cookies and local storage entries are used to operate the website and to store your cookie choice. Non-essential cookies are only set after your consent, managed through {COOKIE_PROVIDER}.
You can change or withdraw your choice at any time via “Cookie Settings” in the footer. Details are set out in the Cookie Policy.
10. Recipients and international transfers
Personal data is shared with the processors named above and, within the DepilConcept / GrupoConcept network, with those persons involved in assessing franchise applications. Transfers outside the EU/EEA take place only on the basis of an adequacy decision or appropriate safeguards under Art. 46 GDPR.
11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future.
To exercise your rights, contact {DATA_PROTECTION_CONTACT} or {LEGAL_EMAIL}. You also have the right to lodge a complaint with a supervisory authority: {SUPERVISORY_AUTHORITY}.
