Welcome to www.chicmakeupshot.com (operated by BALLSAAL Artist Management GmbH). We are committed to safeguarding your personal data in strict compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws (such as the Bundesdatenschutzgesetz – BDSG).

1. Data Controller Identification

The data controller responsible for the processing of personal data collected via www.chicmakeupshot.com is:

  • Company Name: BALLSAAL Artist Management GmbH
  • Commercial Brand: chicmakeupshot
  • Registered Office & Address: Friesenweg 14, 22763 Hamburg, Germany
  • Commercial Register: Register Court: AG Hamburg, Registration Number: HRB 194312
  • Email: shoot@chicmakeupshot.com
  • Telephone: +49 61315709820

2. Collection and Processing of Personal Data

We collect and process personal data only when legally permitted or when you have given your explicit consent. This includes information provided during booking inquiries, order submissions, and communication through our official channels. Data processed may include names, contact details, appointment specifications, and payment-related records.

3. Payment Processing via Stripe

To process financial transactions securely, we utilize Stripe as our third-party payment service provider. When you make a payment on www.chicmakeupshot.com, your payment details (such as credit card information or other payment credentials) are transmitted directly to Stripe. Stripe processes your data as an independent data controller in accordance with its own privacy policies and regulatory obligations. We do not store complete financial transaction credentials on our internal servers.

4. Data Retention Periods

In accordance with German and European statutory frameworks, personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, tax, and accounting retention mandates.

Specifically:

  • Commercial and Tax Records: In compliance with the German Commercial Code (HGB) and the German Fiscal Code (AO), booking documents, invoices, and relevant financial data are retained for a mandatory period of 10 years.
  • General Correspondence and Inquiries: Communications and operational records not subject to commercial retention mandates are deleted after 3 years upon completion of the respective matter, unless ongoing legal obligations require extended preservation.

5. Your Rights as a Data Subject

Under Chapter III of the GDPR, you possess specific rights regarding your personal data, including:

  • The right of access (Article 15 GDPR)
  • The right to rectification (Article 16 GDPR)
  • The right to erasure (Article 17 GDPR)
  • The right to restriction of processing (Article 18 GDPR)
  • The right to data portability (Article 20 GDPR)
  • The right to object to processing (Article 21 GDPR)

To exercise any of these rights, please contact us using the official email address provided above. You also maintain the right to lodge a complaint with a competent supervisory data protection authority in Germany or the European Union.