Privacy policy

Controller

Bartwerk Barbershops GmbH, Frankfurter Straße 128, 51147 Köln-Wahn, Germany. Telephone +49 2203 918440, email hallo@bartwerk.de. Represented by the managing directors Tobias Renner and Selin Aydın.

We have appointed a data protection officer voluntarily. You can reach them at datenschutz@bartwerk.de.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You may withdraw any consent you have given at any time with effect for the future.

An informal message to hallo@bartwerk.de is enough, or a word at the till in any of our shops. You also have the right to lodge a complaint with a supervisory authority; ours is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf.

Visiting this website (server logs)

When you open these pages your browser transmits technical data which our hosting provider stores in server log files: a shortened IP address, date and time, the address requested, the volume of data transferred, the referrer, browser type and operating system.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Logs are deleted after 7 days.

Cookies and consent

Necessary cookies store your language choice, the shop you last selected and your cookie decision. They are required for operation; the legal basis is § 25(2) TDDDG together with Art. 6(1)(f) GDPR.

Statistics and marketing cookies are set only with your express consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can change or withdraw your decision at any time using the "Cookie settings" link in the footer.

Bartwerk Pass — your cut notes

The Bartwerk Pass is the heart of our promise of "the same cut anywhere". It records your cut settings so that any barber in any of our seven shops can read them before your appointment instead of asking you again. Because this data is read across branches, we describe it here in unusual detail.

What is stored

A first name, an automatically generated pass number, nine cut settings (guard number for the sides, guard number for the back, top length, fade, parting, neckline, beard length, beard line, finish), an optional note of no more than 220 characters, and the shop, barber and date of your last appointment.

What is never stored

No photographs of you. No health data and no biometric data. No scalp or skin conditions, no surname, no address, no payment data. This is expressly not a special category of personal data within the meaning of Art. 9 GDPR.

Purpose

Preparing and carrying out your appointment to one consistent standard in any Bartwerk shop.

Legal basis

For sharing across branches, your consent under Art. 6(1)(a) GDPR, given with the switch "Any Bartwerk barber may read my chair card" and revocable at any time. For carrying out the appointment itself, Art. 6(1)(b) GDPR.

Who can read it

The barber taking your appointment and the shop lead of that shop — in any of the seven shops, for as long as sharing is switched on. Not other customers, no transfer to third parties, no use for advertising, no profiling and no automated decision-making.

Retention

In the shop system, 24 months after your last appointment, then automatic deletion. In this demonstration build the pass is held only in your browser’s local storage (localStorage) and lasts exactly as long as you leave it there.

Deletion

On the "My pass" page, the "Delete my pass" button removes every field immediately and irreversibly from this browser. In a shop, a word at the till or a message to hallo@bartwerk.de is enough; we delete within 72 hours and confirm the deletion.

Note on the demonstration build

This website is a demonstration. There is no cross-branch database behind the Bartwerk Pass here. Everything you enter into the pass stays in your browser’s local storage and is never transmitted to a server. If you clear your browser data, the pass is gone for good.

The retention periods and responsibilities described in the "Bartwerk Pass" section describe how a production shop system would operate.

Appointment booking

To make a booking we process your first name, email address, optionally your phone number, the shop you chose, the service, the appointment time and an optional note. Without these we cannot reserve a chair.

The legal basis is Art. 6(1)(b) GDPR. Booking data is kept for 12 months after the appointment for traceability; documents relevant for tax purposes are kept for 10 years under § 147 of the German Fiscal Code. If you switch off pass sharing for an individual booking, the chair card is not attached to that appointment.

Gift cards and cut cards

When you buy one we process your name, email address, the amount, the name of the recipient and an optional message. The legal basis is Art. 6(1)(b) GDPR; the records are subject to the 10-year commercial and tax retention period.

Franchise enquiries

For a franchise enquiry we process your name, email address, optionally your phone number, the region you named, your capital bracket, whether a master craftsman is on the team, and your message. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). We delete the data 24 months after the last contact.

Job applications

Application data (name, contact details, years of experience, start date, link to your work, message) is processed under § 26(1) of the German Federal Data Protection Act and Art. 6(1)(b) GDPR, solely for the selection process.

After the process ends we delete the data within 6 months at the latest, unless you have expressly consented to a longer retention for future vacancies.

Third-party maps and reviews

The interactive Google Maps map and the Google reviews widget are loaded only after you have accepted marketing cookies and actively requested the map. Until then we show a locally drawn location plan and no connection to Google is made.

After your consent the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address and usage data may then be transmitted to Google and transferred to the USA, on the basis of the EU-US Data Privacy Framework and your consent under Art. 6(1)(a) and Art. 49(1)(a) GDPR.

Hosting

This website is hosted with a service provider inside the European Union. A data processing agreement under Art. 28 GDPR is in place. The provider processes the server log data described above solely on our instructions.

Data security

This website is delivered over TLS encryption; you can see this from the padlock in your browser’s address bar. Access to customer data in the shops is limited to the staff working there and is logged. All staff are bound to confidentiality.