Privacy Policy

1. Responsible Entity

The responsible entity for the processing of personal data in accordance with Art. 5 lit. j revDSG and Art. 4 No. 7 GDPR is:

Company: Massage Praxis Salaviova
Owner: Valentina Salaviova
Industriestrasse 10
8157 Dielsdorf
Switzerland

Phone: +41 79 694 50 07
Email: kontakt@spa-sensuel.ch

For questions regarding data protection or to exercise your rights, please contact us via the email address listed above.

2. Data We Collect When Visiting the Website

2.1 Server Log Files

Whenever our website is accessed, technical data is automatically transmitted to the hosting provider and temporarily stored in server log files. This data includes:

• IP address of the accessing device (anonymized/truncated before storage)
• Date and time of access
• Accessed page and amount of transferred data
• Browser and operating system used
• Referring website (referrer)

Legal Basis: Legitimate interest in the technical provision and security of the website (Art. 31 para. 2 lit. f revDSG, Art. 6 para. 1 lit. f GDPR).

Storage Duration: Log files are generally deleted automatically after 30 days. In the event of suspected security incidents (e.g. brute-force attacks on the login page), individual data may be stored longer until the incident has been clarified.

2.2 Cookies

Our website uses cookies. Cookies are small text files stored on your device when visiting our website. When accessing the website for the first time, you will be informed about cookies via a cookie banner and asked for consent where required.

We distinguish between two categories of cookies:

• Technically necessary cookies: These are essential for the operation of the website (e.g. session management, storage of cookie preferences). They are set without consent.
• Statistics cookies: These help us understand how visitors use our website. They are only set after your explicit consent (see section 3 regarding Google Analytics).

You can delete cookies at any time in your browser settings or block future cookies. You can also revoke or adjust your consent at any time via the cookie banner on our website.

3. Web Analytics with Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service for analyzing the use of our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies and similar technologies to collect information about your use of the website. In particular, the following information is collected:

• IP address (shortened and anonymized)
• Visited pages and duration of stay
• Referring website (referrer)
• Device, browser and operating system used
• Approximate location (based on shortened IP address, city level)

IP Anonymization: The IP address is shortened before storage so that direct personal identification is no longer possible.

Legal Basis: Your explicit consent via the cookie banner (Art. 6 para. 6 revDSG, Art. 6 para. 1 lit. a GDPR). No analytics cookies are set without your consent.

Storage Duration at Google: 14 months from the last activity, followed by automatic deletion.

Withdrawal of Consent: You may revoke your consent at any time via the cookie banner on our website. You may also install Google’s browser add-on to disable Google Analytics.

4. Google Search Console

We use Google Search Console to monitor the visibility of our website in Google search results. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Through Search Console we receive aggregated data regarding search queries leading to our website as well as clicks and positions in search results. No personal data of individual website visitors is transmitted to us. The connection to Search Console is established exclusively through a verification meta tag within the HTML code of our website.

Legal Basis: Legitimate interest in the technical and content optimization of our website (Art. 31 para. 2 lit. f revDSG, Art. 6 para. 1 lit. f GDPR).

5. Data Transfer to Third Countries

In connection with Google services (GA4, Search Console), personal data may be transferred to the USA and other third countries where different levels of data protection may apply.

The transfer is based on the following legal grounds:

• Adequacy decision of the Swiss Federal Council under the Swiss-US Data Privacy Framework (DPF)
• Standard Contractual Clauses (SCC) of the European Commission for transfers to countries without an adequacy decision
• Your explicit consent for cookie-based transfers

Google LLC is certified under the DPF, which provides additional safeguards for an adequate level of data protection.

6. Contact by Phone or Email

If you contact us by phone or email, we process the information you provide (name, phone number, email address, content of the inquiry) solely for responding to your request and, if applicable, arranging appointments.

Legal Basis: Pre-contractual measures and contract fulfillment (Art. 31 para. 2 lit. a revDSG, Art. 6 para. 1 lit. b GDPR).

Storage Duration: Inquiries without a resulting contractual relationship are deleted after 12 months. If a contract is concluded, the statutory retention obligations pursuant to Art. 962 OR apply (10 years for business correspondence and accounting records).

7. External Links

Our website may contain links to external third-party websites (e.g. social media profiles or partner websites). The respective providers are solely responsible for the content and data processing of these external websites. We recommend reviewing the privacy policies of the respective providers.

8. Your Rights

You have the following rights regarding your personal data processed by us:

• Right of Access: You may request information at any time regarding which data we process about you (Art. 25 revDSG, Art. 15 GDPR).
• Right to Rectification: You may request correction of inaccurate data (Art. 32 para. 1 revDSG, Art. 16 GDPR).
• Right to Erasure: You may request deletion of your data unless statutory retention obligations prevent this (Art. 32 para. 2 revDSG, Art. 17 GDPR).
• Right to Restriction of Processing: You may request restriction of processing (Art. 18 GDPR).
• Right to Data Portability: You may request your data in a structured, commonly used and machine-readable format (Art. 28 revDSG, Art. 20 GDPR).
• Right to Withdraw Consent: If processing is based on consent (e.g. analytics cookies), you may withdraw your consent at any time with future effect.
• Right to Object: You may object at any time to processing based on legitimate interests (Art. 30 para. 2 lit. b revDSG, Art. 21 GDPR).
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the competent supervisory authority in your country.

To exercise your rights, an informal notification to the contact address listed in section 1 is sufficient. We will process your request within 30 days.

9. Data Retention Overview

• Server log files: 30 days
• Google Analytics: 14 months from last activity
• Contact inquiries without contract: 12 months
• Customer data with contractual relationship: 10 years (statutory retention obligation under Art. 962 OR)
• Cookie settings: 12 months (or until revoked)

10. Data Security

We implement technical and organizational security measures to protect your data against accidental or unlawful destruction, loss, alteration or unauthorized access. These measures include:

• Encrypted data transmission via HTTPS (TLS)
• Secure access credentials and regular software updates
• Restricted access to personal data within the business
• Regular security reviews of the website infrastructure

Despite all precautions, complete security for data transmission over the internet cannot be guaranteed. We recommend not sending sensitive data via unencrypted email.

11. Website Hosting

Our website is hosted by:

Provider: Infomaniak Network SA
Rue Eugène-Marziano 25
1227 Les Acacias / Geneva
Switzerland

The servers are located in Switzerland. Infomaniak is bound by Swiss data protection law and processes hosting-related data exclusively for the technical provision of the website.

12. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements change or if new functions are introduced on the website. The current version is always available on this page.

In the event of significant changes, we will additionally inform you in an appropriate manner.

Status: 2026