Your data, in plain words.

Dr. Desiree Schatzl, Austria. Email: hello@mykabeau.com. No data protection officer is appointed, as none is legally required.

When you open a page, our hosting processes technically necessary data such as IP address, time, page and browser information to deliver the site and protect it from abuse. Your country is also derived from the IP address so we can show you the right shop. It is not linked to you as a person. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

All fonts are served from our own server. Loading the site makes no connection to Google Fonts or any other font provider.

Only if you accept in the cookie banner do we use Google Analytics 4 with shortened IP addresses. It shows us which pages are read, for how long and on which devices. The provider is Google Ireland Ltd.; data may also reach Google LLC in the USA under the EU US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via Cookie Settings. Google's privacy policy.

As an Amazon Associate, KABEAU earns from qualifying purchases. Buy buttons lead to Amazon.de at the same price for you. Once you are on Amazon, Amazon sets its own cookies to attribute the purchase to our link. Amazon Europe Core S.à r.l. is responsible for that, see Amazon's privacy notice. We only receive aggregated sales figures from Amazon, never data about you.

When you click a buy button we store the time, product, retailer, your country, the page you came from and browser information. We do not store your IP address. This shows us which content actually helps and lets us filter out bot clicks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Entries are deleted automatically after 24 months.

What you type into the skin advisor, or the photo and text you give the scanner, is sent through Lovable to an AI model by OpenAI for analysis. KABEAU stores neither your inputs nor your photos. Please leave out names, health details or anything personal you would rather keep private. The legal basis is answering your request (Art. 6(1)(b) GDPR).

If you create an account to write a review, we store your email address, display name and your reviews, including skin type and concern if you add them. Reviews are only published after moderation. Your data is kept until you ask us to delete your account; a short email to hello@mykabeau.com is enough. The legal basis is Art. 6(1)(b) GDPR.

The website, database and sign in run on Lovable Cloud (Lovable Labs Incorporated) with Supabase in the EU and Cloudflare for delivery. AI requests go through Lovable to OpenAI. Data processing agreements are in place with these providers. Transfers to the USA rely on the EU US Data Privacy Framework or EU Standard Contractual Clauses.

You have the right to access, correction, deletion, restriction, data portability and objection, and to withdraw your consent. Email hello@mykabeau.com to use them. You can also complain to a supervisory authority; in Austria that is the Datenschutzbehörde (dsb.gv.at).

We link to brands, retailers and studies. Their operators are responsible for how they handle your data.