COOKIE INFORMATION As of: 16 July 2026 In this Cookie Information, we explain which cookies and similar technologies BeautySpaceBooking uses, what purposes they serve, and how you can manage their use. Supplementary information on the processing of personal data can be found in our Privacy Policy. 1. Controller The controller for the use of cookies and similar technologies on BeautySpaceBooking is: ID Partner GmbH Weyringergasse 15–17/2/2 1040 Vienna Austria Commercial Register number: FN 534464 b VAT ID: ATU75696702 Managing Director: Ihar Danilchyk E-Mail: support@beautyspacebooking.com Website: beautyspacebooking.com Also referred to below as "BeautySpaceBooking", "we" or "us". 2. What are cookies? Cookies are small text files that can be stored on or read from the device used when visiting a website. Cookies may in particular serve to: recognise a user during a session; enable secure login; store settings; technically carry out booking and payment processes; protect the platform against misuse and automated attacks. In addition to classic cookies, similar technologies may also be used, in particular: Local Storage; Session Storage; security and authentication tokens; technical device and session information; technologies of integrated payment or security services. The same basic principles apply to similar technologies as to cookies. 3. Categories of technologies BeautySpaceBooking distinguishes between: 1. technically necessary technologies; 2. optional analytics technologies; 3. optional marketing technologies. BeautySpaceBooking uses technically necessary technologies and – where expressly accepted – optional marketing technologies (Meta Pixel). Optional analytics or marketing technologies are only used if they have previously been technically implemented, described in this Cookie Information and – where required – expressly accepted by the user. 4. Technically necessary technologies Technically necessary cookies and similar technologies are required for the platform to function securely and properly. They may in particular be used for: registration and login; management of the user account; maintenance of a user session; protection against unauthorised access; security and fraud prevention; carrying out bookings; temporary storage of ongoing booking processes; payment processing; storage of the selected language; storage of cookie and privacy settings; protection against spam, bots and automated attacks; technical stability and error correction. Without these technologies, essential functions of the platform cannot be provided, or can only be provided to a limited extent. 5. BeautySpaceBooking's own necessary technologies BeautySpaceBooking may in particular use the following own technically necessary technologies: 5.1 Session cookie Purpose: user login; maintenance of the active user session; assignment of page views to the logged-in user account. Storage period: As a rule, until the end of the session or until the technically defined security period expires. 5.2 Authentication and security cookie Purpose: secure login; recognition of a logged-in user; protection of the user account; prevention of unauthorised access. Storage period: Until logout, until the user session expires, or until the end of the defined security period. 5.3 CSRF and security tokens Purpose: protection of forms; prevention of unauthorised requests; protection against manipulation and abusive submission. Storage period: As a rule, for the duration of the session or the respective form process. 5.4 Language setting Purpose: storage of the language selected by the user. Storage period: Until the language setting is changed, until the technically defined storage period expires, or until deletion by the user. 5.5 Cookie and privacy settings Purpose: storage of the selection made by the user; avoidance of repeated display of the same notice; documentation of consent or refusal, where optional technologies are used. Storage period: As a rule, for up to twelve months or until the setting is changed or deleted. 5.6 Booking and form status Purpose: temporary storage of a booking not yet completed; avoidance of loss of information already entered; technical execution of multi-step forms; prevention of multiple submissions. Storage period: Until completion or cancellation of the process, or for a limited technical period. 6. hCaptcha – protection against bots and misuse BeautySpaceBooking uses hCaptcha to protect the platform against automated access, spam, fraud and misuse. The provider is: Intuition Machines, Inc. 1065 SW 8th Street, No. 704 Miami, Florida 33130 USA hCaptcha may in particular be used for: registration; login; password reset; contact forms; creation of listings; booking forms; other security-relevant functions. The following data may in particular be processed in this context: IP address; date and time; browser information; device information; operating system; language settings; page accessed; mouse, keyboard and interaction data; technical security and verification data; information on suspicious or automated behaviour. hCaptcha serves in particular to protect against: bots; spam; automated attacks; abusive registrations; account takeovers; fraud attempts; other misuse. hCaptcha is only loaded on pages or for functions where corresponding protection is required. Where hCaptcha is used exclusively for necessary security functions, it is treated as a technically necessary technology. Further information on data processing by hCaptcha can be found in hCaptcha's privacy policy. 7. Stripe and payment processing For payment processing, payouts and fraud prevention, BeautySpaceBooking uses Stripe or Stripe Connect. In connection with payment and payout functions, Stripe may use cookies and similar technologies, in particular for: secure payment processing; authentication; fraud prevention; detection of suspicious transactions; protection against unauthorised use; technical execution of the payment process; storage of necessary session information; storage of selected payment options. Stripe is as a rule only loaded when a user accesses or uses a payment- or payout-related function. For the technologies used by Stripe, Stripe's privacy and cookie information apply additionally. 8. Hosting and server logs The platform is hosted via OVHcloud. When accessing the platform, technically required server information may be processed, in particular: IP address; date and time of access; page or file accessed; browser information; operating system; device information; error messages; security and server logs. This processing serves to: provide the platform; ensure technical stability; analyse errors; detect attacks; prevent misuse; ensure IT security. OVHcloud is not used as an analytics or advertising provider. Server logs are not necessarily cookies; however, they are mentioned here for transparency in connection with the technical use of the platform. 9. External analytics and marketing technologies BeautySpaceBooking may use optional marketing technologies where the user has previously given consent. Optional marketing technology currently used: Meta Pixel (Meta Platforms Ireland Limited) – measurement of page views and campaign-related events after consent. External analytics or marketing services currently not used: Google Analytics; Google Ads Conversion Tracking; TikTok Pixel; Hotjar; external remarketing services other than the consented Meta Pixel; comparable analytics or marketing services without consent. Optional marketing cookies and similar technologies are activated only after consent via Cookie settings. Consent given may be withdrawn at any time with effect for the future. 10. Local storage technologies In addition to classic cookies, BeautySpaceBooking may use local browser technologies. These include in particular: Local Storage; Session Storage; technical session information; security tokens. These technologies may be required for: storage of technical settings; storage of an ongoing form or booking process; management of a user session; protection against multiple submissions; technical stability of the platform. The principles described in this Cookie Information also apply to local storage technologies. 11. Storage period The storage period of a cookie or similar technology depends on the respective purpose. In particular, a distinction is made between the following types: Session technologies These are as a rule deleted or invalidated when: the browser is closed; the session is ended; the user logs out; the technically intended session period expires. Persistent technologies These remain stored for a defined period or until they are: deleted by the user; replaced by a new setting; automatically expired. Technically necessary technologies are not stored longer than is required for their respective purpose. 12. Browser settings Users can use their browser settings to: view cookies; block cookies; restrict cookies; delete cookies; prevent the storage of cookies altogether. If technically necessary cookies are completely blocked, the following functions may in particular be unavailable or only available to a limited extent: login; user account; booking process; payment processing; security functions; storage of language settings; storage of ongoing forms. The specific management of cookies depends on the browser and device used. 13. Cookie settings BeautySpaceBooking provides a permanently accessible function with the following designation: Cookie settings Via this function, users can: accept optional technologies; reject optional technologies; change a selection already made; withdraw consent at any time with effect for the future. Optional technologies are not activated before the required consent is obtained. 14. Legal bases The storage or reading of information on the end device without consent only takes place to the extent that this is strictly necessary for the provision of an expressly requested service or for the secure technical operation of the platform. The associated processing of personal data may in particular be based on the following legal bases: Art. 6(1)(b) GDPR, to the extent that processing is necessary for the performance of a contract or pre-contractual measures; Art. 6(1)(f) GDPR, to the extent that our legitimate interest in the secure and functional operation of the platform prevails; Art. 6(1)(a) GDPR, to the extent that consent is obtained for optional technologies. Our legitimate interest lies in particular in: the security of the platform; protection of user accounts; prevention of fraud and misuse; technical stability; secure execution of booking and payment processes. 15. Changes to this Cookie Information We may update this Cookie Information when: new cookies or similar technologies are used; new platform functions are introduced; the technical implementation changes; a new payment, security or hosting service is used; analytics or marketing services are added; statutory requirements change. The respective current version is published on beautyspacebooking.com. 16. Contact Questions regarding the use of cookies and similar technologies may be sent to: ID Partner GmbH Weyringergasse 15–17/2/2 1040 Vienna Austria E-Mail: support@beautyspacebooking.com Website: beautyspacebooking.com As of: 16 July 2026