Privacy Policy | Sala Thai Massage & Spa

1. Data Controller

Responsible for data processing on this website:

Sala Thai Massage & Spa
Nut Karch
Stievestr. 15, 80638 Munich, Germany
Phone: 089 / 926 585 60
Email: info@sala-thai-massage.com

2. General Information on Data Processing

We take the protection of your personal data very seriously and treat your personal data confidentially in accordance with statutory data protection regulations (GDPR, BDSG, TDDDG) and this privacy policy. The use of our website is generally possible without providing personal data. Where personal data is collected on our pages, this is always done on a voluntary basis and with your knowledge.

3. Hosting and Server Log Files

Our hosting provider automatically collects and stores information in server log files that your browser automatically transmits. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and optimisation of the website).

4. SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and the lock icon in your browser bar.

5. Contact Form

When you send us enquiries via the contact form, the following data is collected: name, email address, phone number (optional), your message. Your IP address is recorded in anonymised form (the last two octets are set to zero). The data is stored for the purpose of processing your enquiry and for follow-up questions. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). Data is deleted once it is no longer required for its purpose.

6. Online Booking (Salonized)

For online appointment booking, we use the Salonized service (Salonized B.V., Netherlands). The booking system is only loaded after you actively click on "Book Appointment". You are informed about the data transfer before loading. The following data is transmitted to Salonized:

Your IP address
Browser and device information
Data you enter in the booking form (name, contact details, desired service, appointment)

Legal basis: Art. 6(1)(a) GDPR (consent by active click). You can revoke your consent at any time by closing the booking overlay. Alternatively, you can book an appointment by phone at 089 / 926 585 60 or via WhatsApp at +49 176 576 270 86. More information: https://www.salonized.com/de/datenschutz

7. Google Maps

On our contact page, we offer the option to load a Google Maps map. The map is only loaded after you actively click, and you are informed about the data transfer beforehand. Only then is data transmitted to Google LLC (USA), in particular your IP address and location data. Legal basis: Art. 6(1)(a) GDPR (consent by click). Google is certified under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy

8. Fonts

All fonts used on this website (Cormorant, Nunito Sans) are hosted locally on our own server. No connection to external font services such as Google Fonts takes place. No data is transmitted to third parties for the purpose of font delivery.

9. Cookies

Our website exclusively uses technically necessary cookies required for the operation of the site (e.g. session cookies). These cookies are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. Analytics, tracking or advertising cookies are not used. A cookie consent banner is therefore not required (cf. § 25(2) No. 2 TDDDG).

10. No Analytics or Tracking Services

We do not use any analytics or tracking services on our website (no Google Analytics, no Matomo, no social media plugins, no advertising pixels). No user profiles are created and no data is transmitted to advertising networks or analytics providers.

11. Data Retention and Deletion

Personal data from the contact form is deleted once it is no longer required for its purpose, no later than 12 months. Archived contact enquiries are regularly reviewed and deleted. You may request deletion of your data at any time.

12. Your Rights as a Data Subject

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

13. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent supervisory authority for us is: Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, poststelle@lda.bayern.de.

14. Changes to This Privacy Policy

This privacy policy is current as of April 2026. Due to the further development of our website or changes in legal requirements, it may become necessary to amend this privacy policy.