KammzeitThis is a translation for convenience. The German version is legally binding. Deutsche Fassung lesen (read the German version).
1. Controller
Ben Oliver Mallow, Sickinger Straße 7, 55758 Sien, Germany, email kontakt@kammzeit.de. Further details can be found in our imprint.
2. Two roles
We are the controller for the websites kammzeit.de and kammzeit.com, for the accounts of salon owners and for Kammzeit news. For the data a salon manages with Kammzeit, the salon is the controller: bookings on its page (e.g. salonname.kammzeit.de or salonname.kammzeit.com), its customer records, its waiting list, its staff logins and the images it uploads. We process this data only on the salon's behalf and on its instructions (processing by a processor under Art. 28 GDPR, see our data processing agreement). Questions about a booking or the waiting list are best sent directly to the salon.
3. Hosting
Kammzeit runs on InstantNode's own servers in a data centre in Eygelshoven (Netherlands), i.e. within the EU. The data centre is operated by Skylink Data Centers B.V. Traffic to our servers is filtered against overload attacks by Tube-Hosting (Ferdinand Zink, Germany) using PletX technology. Only connection data such as IP addresses is processed for this, not content, because the connections are encrypted. Both service providers are based in the EU and act as processors.
Booking data, data from the customer records and the waiting list, and uploaded images do not leave the EU. The only exception relating to third countries is payment for the Pro plan via Stripe (section 9), which only concerns salons.
4. Visiting the website
When you visit the website, the server processes your IP address and the requested address because this is technically necessary to deliver the page (Art. 6(1)(f) GDPR). We do not keep access logs. The server's error logs may contain email addresses (for example if an email could not be delivered) and are deleted after 14 days.
To protect against misuse, we limit how often certain actions can be carried out within a short time, such as logins, sign-ups, bookings, joining a waiting list, invitations and image uploads. For this purpose, the server briefly keeps the IP address and, where applicable, the email address entered or the account identifier, together with the time, in memory. This information is not written to disk, not analysed and is discarded at the latest when the service restarts. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Kammzeit is available in German at kammzeit.de and in English at kammzeit.com. If your browser states German as its preferred language, we redirect you from the home page of kammzeit.com to kammzeit.de. For this, the server only reads the language setting that your browser sends with every request anyway (Accept-Language). We do not store it and do not set a cookie for it. If you come from one of our own pages or open kammzeit.com/?lang=en, there is no redirect. The legal basis is our legitimate interest in showing the website in your language (Art. 6(1)(f) GDPR). Which language we store for an account and a booking page is explained in section 6.
There are no tracking or analytics tools, no advertising and no third-party content or scripts on our pages.
5. Cookies and browser storage
We set two cookies, each only in a specific situation:
- kz_session: keeps you logged in to the dashboard, for owners and staff logins alike. It contains a random identifier, is only valid for the domain on which you log in (kammzeit.de or kammzeit.com, not for the booking pages), cannot be read by scripts (HttpOnly), is only sent over encrypted connections (Secure) and expires after 30 days. When you log out, we delete it immediately.
- kz_queue: only when you join a salon's waiting list on its page (section 13). It contains the random identifier of your entry and is only valid for that salon's waiting list. If you open the waiting list again on the same device, it takes you straight to your status page instead of adding you a second time. It cannot be read by scripts (HttpOnly), is only sent over encrypted connections (Secure) and expires after 12 hours.
In the dashboard, Kammzeit also stores the following in your browser's storage. None of it is sent to us:
- kz-pwa-hint (local storage, localStorage): remembers that you closed the "Kammzeit as an app" hint so that it does not appear again.
- kz-tour- followed by the number of your login (localStorage): remembers that the dashboard tour has already run in this browser so that it does not start again every time you log in.
- Service worker with cache: so that Kammzeit can be installed as an app on a phone or computer and shows a notice instead of an error message when there is no connection, the dashboard registers a service worker. It only stores Kammzeit's static files in the browser, such as styles, fonts, images, scripts and an offline page. It never stores pages containing customer or account data, login links or sessions; these always come directly from the server. With every new version of Kammzeit it replaces the old files.
The two localStorage entries only contain a flag, no customer data. You can delete them, the cache and the cookies at any time in your browser settings. The hint and the tour will then appear again.
The cookies, entries and cache are strictly necessary for us to provide the service you have expressly requested: the dashboard, its use as an app and the waiting list. No consent is required for them (§ 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act). For the dashboard, the associated processing serves the performance of the contract with the salon (Art. 6(1)(b) GDPR); for the waiting list, it serves the service you are asking the salon for (Art. 6(1)(b) GDPR, the salon is the controller). Anyone who only uses Kammzeit to book an appointment receives neither a cookie nor any entries in their browser's storage.
6. Registration and salon account
When you create a salon account, we process the email address used for logging in, the name of the salon and the desired address of the booking page. In the dashboard you can add further information, such as the salon's address, phone number, website and imprint, services, the names and working hours of staff, and a logo, links to social networks and other design options for the booking page (section 11). Information intended for the booking page is publicly visible there. We also store when the account was created, when you last logged in and when you accepted which version of the terms and conditions and the data processing agreement.
For each login we store a language (German or English). It follows from the domain through which you sign up or last request a login link (kammzeit.de or kammzeit.com) and determines the language of our emails to you. You set the language of the booking page in the settings. Emails to the salon's customers are also sent in that language.
The purpose is to provide Kammzeit in accordance with our terms and conditions; the legal basis is Art. 6(1)(b) GDPR. Registration is not possible without an email address, because logging in only works via email. We also use the email address to send you notices relating to the contract, for example about changes to the terms and conditions, maintenance or payments. We only send advertising by email if you have expressly subscribed to and confirmed Kammzeit news (section 10).
7. Logging in with an email link
Kammzeit has no passwords. To log in, we send a link to the email address on file. The link is valid for 15 minutes and can only be used once. In the database we store it only as a cryptographic hash, and the same applies to the session identifier. We delete expired sessions. The legal basis is Art. 6(1)(b) GDPR.
8. Staff logins (Pro)
On the Pro plan, a salon owner can give staff members their own access to the dashboard. To do so, the owner enters the staff member's email address on the team page. We store it together with the link to the staff member in the team, the role (owner or staff), the language, the time of creation and the time of the last login. The owner can see on the team page whether and when the staff member last logged in. We send an invitation with a login link to this address and, afterwards, login links whenever the staff member requests them. Logging in works as described in section 7.
In the dashboard, staff members see the calendar, the customer records including notes and the waiting list, and maintain their own working hours. The plan, settings, images, services, team, export and deleting customers remain reserved for the owner.
The salon is the controller for this data; we process it on its behalf (section 2). If the owner removes the access or deletes the staff member, we immediately delete the login with all login links and sessions. If the salon no longer has a Pro plan or the staff member is not active in the team, the login is paused: it remains stored, but logging in is not possible and current sessions are ended. Kammzeit news is not available for staff logins.
9. Pro plan and payment via Stripe
You pay for the Pro plan via Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). To pay, you are redirected to a Stripe page. We do not embed any Stripe scripts on kammzeit.de or kammzeit.com.
Stripe processes the data required for payment, in particular name, email address, billing address, payment details (e.g. card details or IBAN), amount and time, as well as technical data such as the IP address for fraud prevention. We do not receive full card details or the IBAN. Stripe tells us whether and when payment was made and assigns identifiers for the customer and the subscription, which we store with the salon account. In Stripe's customer portal you can change the payment method and billing details, download invoices and cancel the plan.
The purpose is to handle the subscription. The legal basis is Art. 6(1)(b) GDPR and, for the retention of invoices, Art. 6(1)(c) GDPR in conjunction with § 147 AO (German Fiscal Code) and § 257 HGB (German Commercial Code). Stripe is an independent controller for payment processing, fraud prevention and compliance with its own legal obligations. Stripe's privacy policy applies.
Stripe may transfer data to Stripe, Inc. in the USA. Stripe, Inc. is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). In addition, Stripe uses the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).
10. Kammzeit news by email
Owners of a salon account can voluntarily subscribe to Kammzeit news: occasional emails with updates about Kammzeit, new features and tips for the salon. This is done with a separate checkbox when registering or later in the settings. The checkbox is never pre-ticked, and Kammzeit works without the news too.
Confirmation (double opt-in): After you subscribe, we send an email with a confirmation link to the account's email address. The link is valid for 7 days. Only when you open it and submit the confirmation on the following page do we add you. If you do not confirm, you will not receive any news. We store the link only as a hash.
Proof: With the account we store when you confirmed, how you subscribed (registration or settings), the exact wording of the consent in your account's language and, where applicable, when you withdrew it.
Withdrawal: You can unsubscribe at any time, in the settings or via the unsubscribe link in every news email. You do not need to log in to use the unsubscribe link. Withdrawal applies to the future; it does not affect the lawfulness of processing up to that point (Art. 7(3) GDPR). You will continue to receive emails about your account, such as login links, invoices and important notices.
The legal basis for sending the news is your consent (Art. 6(1)(a) GDPR). We keep the proof because we must be able to demonstrate consent (Art. 7(1) GDPR) and have a legitimate interest in being able to defend ourselves against allegations of unsolicited advertising (Art. 6(1)(f) GDPR). The information is kept for as long as the account exists and is deleted with it. We send the news via our own mail servers and without tracking (section 14).
11. Booking page design and images
Salons can design their booking page: with a logo, links to social networks (Instagram, TikTok, Facebook, Google, WhatsApp) and a box with opening hours, and on the Pro plan also with a cover image, design options and a photo gallery with up to 12 images.
Images: We store uploaded images in Kammzeit's database on our servers in the EU. We only accept JPG, PNG and WebP, and we resize and re-save every image. In the process we remove all embedded metadata such as EXIF data, camera data and the GPS location. The images are publicly visible on the booking page; the logo also appears in the dashboard and in emails to the salon's customers. We deliver them without cookies. The salon can delete any image at any time; all images disappear with the account.
If an image shows people, for example staff or customers with their new hairstyle, the salon is responsible for it and needs their consent. We process such images on the salon's behalf. If you recognise yourself in an image and do not want this, it is best to contact the salon. We also accept notices at kontakt@kammzeit.de.
Social links are plain links. We do not embed any content, scripts or buttons of the networks, so no data flows to them before a click. Only when you click a link does your browser open the network's page. The network's privacy policy applies there.
12. Booking appointments
When you book an appointment, we process the following on behalf of the salon: name, email address, phone number if you choose to provide it, and the selected service, staff member and time. The salon can add notes about you to its customer records. The purpose is to carry out the appointment, including confirmation, reminder and cancellation link by email in the language of the booking page. The legal basis for the salon is Art. 6(1)(b) GDPR. The salon decides how long the data is kept. When the contract between the salon and Kammzeit ends, we delete the salon's data.
13. Waiting list
Salons on the Pro plan can switch on a waiting list for walk-in customers. If you join it via the QR code in the salon or via the salon's page, we process the following on behalf of the salon: your first name, if you wish your email address and the service you want, your number and the status of your entry (waiting, called, being served, done, did not show up or left) with the times of joining, being called and completion. The salon can also add you itself at the front desk, in that case with first name, service and, where applicable, staff member, but without an email address.
Your status page can only be reached via a random address and shows how many people are waiting ahead of you and roughly how long it will take. We use the email address only for a single email when the salon calls you ("It's your turn"). The salon sees the entries in the dashboard; the screen in the salon only shows numbers, no names. Waiting list entries are not added to the customer records. For the kz_queue cookie, see section 5.
The purpose is to serve customers in the order in which they joined; the legal basis for the salon is Art. 6(1)(b) GDPR. The salon only needs the entries for the day in question. We delete them automatically, at the latest on the following day.
14. Emails
We send confirmations, reminders, login links, staff invitations, the waiting list email and Kammzeit news via InstantNode's own mail servers in the EU. Our emails contain a text part and an HTML part. Your email program loads the images in them (the Kammzeit logo, our mascot and, where applicable, the salon's logo) from our server. The addresses of these images are the same for all recipients and contain no identifier. We do not use tracking pixels and do not redirect links through our servers, so we do not learn whether or when you open an email or click a link. When the images are loaded, our server technically processes your IP address in the same way as when you visit the website (section 4). If you do not want this, you can turn off loading images in your email program.
15. Contact
If you write to us, we process your details to answer your enquiry (Art. 6(1)(b) GDPR if it concerns a contract, otherwise Art. 6(1)(f) GDPR). We forward questions about a booking to the salon.
16. Google Calendar (in preparation)
In future, salons will be able to connect their staff members' Google Calendars. Only after this express authorisation does Kammzeit access the connected calendar via the Google Calendar API, and exclusively to
- query busy times so that only free slots are offered (no titles or content of other appointments are stored), and
- add appointments booked via Kammzeit to this calendar and change or delete them there.
We store the access keys in encrypted form. The connection can be removed at any time in Kammzeit or in the Google account settings; we then delete the keys. Kammzeit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not share this data, do not sell it and do not use it for advertising or for training AI models.
17. Retention periods
- Salon account: until you delete the account or the contract ends. We then delete the salon's data, including customer records, appointments, waiting list, staff logins and images. It disappears from our backups no later than 30 days after deletion.
- Staff logins: until the owner removes the access or deletes the staff member, at the latest with the salon account.
- Images: until the salon deletes them, at the latest with the salon account.
- Waiting list: entries at the latest on the following day. The kz_queue cookie expires after 12 hours.
- Kammzeit news: proof of consent and withdrawal for as long as the account exists. An unconfirmed confirmation link expires after 7 days.
- Login links: valid for 15 minutes. Sessions: at most 30 days, ended immediately when you log out.
- Browser storage (localStorage, the service worker's cache): on your device until you delete it in your browser. Every new version of Kammzeit replaces the cache.
- Error logs: 14 days.
- Rate limits: only briefly in memory, never on disk.
- Invoices and payment records: for as long as commercial and tax law requires (§ 257 HGB, § 147 AO), currently up to ten years (accounting records such as invoices eight years, books and records ten years). This concerns our accounting and the data held by Stripe.
18. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can withdraw consent, for example to Kammzeit news, at any time with effect for the future. For booking data, waiting list entries, staff logins and images, please contact the salon; we support it in this. You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz).
Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to kontakt@kammzeit.de is sufficient.
There is no automated decision-making, including profiling (Art. 22 GDPR).