Privacy notice

1. Who is responsible

Meier Dynamics GmbH, Martackertenstr. 44, 79112 Freiburg, Germany, is responsible for this quiz (controller, Art. 4(7) GDPR). Managing director: Mark Meier.

Contact: the form at meierdynamics.de/contact or the e-mail address in our Impressum.

2. Your answers stay in your browser

The quiz calculates your MSL Skin Passport in your browser. Your answers, including sensitive ones such as heritage, hormonal phase, cycle phase and blood type, are not sent to us. When you close the page they are gone, unless you keep your passport yourself as a link, image or PDF.

Your browser stores only your language and, if you share for research, the key that lets you withdraw that share. Both are strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG). The quiz sets no cookies.

3. Optional: sharing your answers for research

Below your passport you can tick a box and share your answers with us. We then store on our server: your answers, your MSL code and colours, your language and the date. We do not store your name, e-mail address, IP address or the time of day.

We use these records only for statistics that improve the MSL method. Meier Innovation Lab in Istanbul receives anonymous totals only, never single records.

Legal basis: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). Sharing is open to adults (18+) only.

You can withdraw at any time: "Withdraw and delete" below your passport deletes your record at once (in the same browser), or write to us with the record ID shown there. We delete every record after 24 months at the latest.

4. Optional: skincare tips by e-mail

If you sign up, we store your e-mail address, your language, the time of sign-up and confirmation, and the version of the consent text. First we send one e-mail with a confirmation link (double opt-in). Tips follow only after you confirm. Your e-mail address is never linked to your quiz answers.

Legal basis: your consent (Art. 6(1)(a) GDPR, § 7(2) UWG). Sign-ups not confirmed within 7 days are deleted. You can unsubscribe at any time with the link in our e-mails or by writing to us; we then delete your address.

5. Server logs

Our web server records the IP address, date and time, the page requested (without anything after "?" or "#"), status, browser type and referring page. We need this to run the service securely. Legal basis: our legitimate interest in a secure service (Art. 6(1)(f) GDPR). Logs are deleted after 14 days.

6. Share links, images and PDF

Share links, images and PDFs contain your passport, and a share link also contains your answers. Anyone you give them to can read them. In a share link the answers come after "#", a part of the address that browsers never send to a server, so we do not receive them when someone opens the link.

7. Hosting and recipients

The quiz runs on a server in Frankfurt, Germany, rented from Hostinger International Ltd. (Cyprus), which also sends our e-mails. Hostinger processes data only on our instructions, under a data processing agreement (Art. 28 GDPR). We do not sell or pass on your data, and we use no analytics or advertising trackers. Fonts are served from our own server.

If the quiz is shown inside another website, that website's own privacy notice also applies.

8. Not a medical diagnosis

Your passport is a cosmetic skin profile, not a medical diagnosis. For a skin condition, see a dermatologist. No decision with legal or similarly significant effect is made about you (Art. 22 GDPR).

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw a consent at any time with effect for the future (Art. 7(3)). Write to us to use these rights.

You can also complain to a supervisory authority, for example: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

10. Visitors in Türkiye (KVKK)

This notice is also our information notice under Art. 10 of Law No. 6698 on the Protection of Personal Data (KVKK). We store special categories of personal data (Art. 6 KVKK) only with your explicit consent, given with the research box; this consent also covers their storage on our server in Germany. You can use your rights under Art. 11 KVKK by writing to us.