1. Controller
Malina Fiedler – SKIN ATELIER by Malina
Breite Str. 23, 13187 Berlin, Germany
Phone: +49 160 95902220
Email: info@skinatelier.studio
2. The key points
This website does not use cookies, analytics or tracking services, advertising services, or externally loaded fonts or content. Personal data is only processed where this is technically necessary to deliver the website or when you contact me yourself.
3. Hosting and server log files
This website is hosted on GitHub Pages. The provider is GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA.
When you visit the website, the provider processes technically necessary data, in particular your IP address, the date and time of access, the page requested and browser and system information. This serves the secure and stable delivery of the website. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in a functional and secure website.
Data may be transferred to the USA in the process. Such transfers are based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR), insofar as the provider is certified under it. Further information: GitHub Privacy Statement.
4. Contacting me
If you contact me by email, phone, WhatsApp, Instagram message or Facebook Messenger, I process the information you provide (e.g. name, contact details, content of your message, preferred appointment) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a treatment or an appointment, and otherwise Art. 6(1)(f) GDPR.
Please do not send me any health data (e.g. pre-existing conditions, medication) through these channels. I am happy to discuss this with you in person at the studio.
The “Message on WhatsApp” button opens the WhatsApp app or website. The provider in the EU is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to the provider, messages are end-to-end encrypted; however, WhatsApp itself processes metadata (e.g. phone number, time), including on servers outside the EU. If you do not want this, please use email or phone. Information: WhatsApp Privacy Policy.
The “Message on Instagram” and “Instagram” buttons lead to Instagram. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta is responsible for data processing on Instagram: Instagram Privacy Policy.
Facebook and Messenger
The Facebook and “Message on Facebook” buttons lead to Facebook or Messenger. The provider is also Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta is responsible for data processing there: Meta Privacy Policy.
5. My Instagram and Facebook presence
I run the Instagram account @malina.skinatelier and a Facebook page. When you visit them, Meta processes your data under its own responsibility. I am jointly responsible with Meta for compiling statistics on their use (“Insights”) (Art. 26 GDPR). Meta only provides me with aggregated, non-personal evaluations. You can find the joint controller agreement here: Information about Insights data. You can exercise your rights both with me and with Meta. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in presenting my services and communicating with clients.
6. Links to Google, Trustpilot and Apple Maps
The buttons under “Reviews” and “Directions” are simple links. No content from these providers is loaded when you visit this website. Only when you click a link are you forwarded to:
- Google (Google Reviews or Google Maps): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – Google Privacy Policy
- Trustpilot: Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark – Trustpilot Privacy Policy
- On Apple devices, Apple Maps: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland – Apple Privacy Policy
From that point on, the respective provider is responsible for data processing.
7. Storage period
I only store your data for as long as is necessary to handle your enquiry or as required by statutory retention periods (e.g. under tax and commercial law).
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. An informal message to the contact details above is sufficient.
9. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.
This is a translation for your convenience. The German version is legally binding.
Last updated: October 2026