Last updated: 28 October 2026

This policy explains how Maison de Beauté Kleber (Carita Kléber) processes the personal data of visitors to the website www.mdb-kleber.fr, in accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act.

1. DATA CONTROLLER:

Kleber Beauty Salon – Carita Kléber
44 Rue de Longchamp, 75116 Paris
Telephone: 01 47 23 76 79
Email: contact@mdb-kleber.fr

2. DATA COLLECTED AND PURPOSES:

Contact form : name, email address and the content of your message, used solely to respond to your enquiry. Legal basis: legitimate interest in responding to enquiries addressed to us. Retention period: 3 years from the date of the last correspondence.

Book an appointment online : Bookings are made via the Shortcuts platform, which can be accessed via the «Book an appointment» button. The data you enter (personal details, contact details, services, deposit) is processed for the purpose of managing your appointments. Legal basis: performance of the contract. This service has its own privacy policy.

Audience measurement : If you accept this via the cookies banner, we use Google Analytics to compile visitor statistics. Legal basis: your consent, which you may withdraw at any time. The cookies in question are stored for a maximum of 13 months.

Interactive map : The Google Maps map on the Contact page is only loaded once you have given your consent.

Website security : IP addresses and technical logs are processed to protect the website against misuse and attacks (including anti-spam protection for forms via Cloudflare Turnstile). Legal basis: legitimate interests. Retention period: up to 6 months.

3. RECIPIENTS:

Your data is intended for authorised staff at the institute. It may be processed by our technical service providers, strictly within the scope of their remit: O2switch (website hosting, France), Agence MADI (website development and maintenance), Shortcuts (online booking), Google (website analytics and maps, only with your consent) and Cloudflare (anti-spam protection). Your data is never sold.

4. TRANSFERS OUTSIDE THE EUROPEAN UNION:

Some service providers (Google, Cloudflare) may process data outside the European Union. These transfers are governed by the safeguards provided for under the GDPR (the «Data Privacy Framework» adequacy decision or the European Commission’s standard contractual clauses).

5. COOKIES:

Details of the cookies used can be found in our cookie policy. You can change your preferences at any time via the «Manage consent» link.

6. YOUR RIGHTS:

You have the right to access, rectify, erase, restrict the processing of, object to and request the portability of your data, as well as the right to withdraw your consent at any time and to set out instructions regarding what should happen to your data after your death.

To exercise these rights, please write to us at contact@mdb-kleber.fr or by post to the address above. If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the CNIL (www.cnil.fr).

7. SAFETY:

We implement appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), regular updates, firewalls and website monitoring, and backups.

8. AMENDMENTS:

This policy may be updated. The date of the last update is shown at the top of the page.