Privacy Policy

Personal data (usually referred to as “data” below) is only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

per art. According to Art. 4 No. 1 of Regulation (EU) 2016/679, i. H. of the General Data Protection Regulation (hereinafter “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organizing, structuring, storage, adaptation, modification, retrieval, consultation, use, disclosure by transmission , disseminating or otherwise making available, matching or combining, restricting, deleting or destroying personal information, whether or not by automated means.

The following data protection declaration is intended to inform you in particular about the type, scope, purpose, duration and legal basis of the processing of this data by us or in cooperation with others. We also inform you below about the third-party components that we use to optimize our website and improve user experience, which may result in these third-parties also processing the data they collect and control.

Our privacy policy is structured as follows:

I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information on data processing

I. Information about us as controllers of your data
Responsible for this website (the “responsible person”) in terms of data protection law is:

AnaSpa
Forchstrasse 158
8032 Zurich
Switzerland
Tel:+41 76 566 0919
Email: info@anaspa.ch

II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, the users and data subjects are entitled to the rights

• for confirmation as to whether data relating to them is being processed, information about data processing, further information about the type of data processing and copies of the data (cf. also Art. 15 GDPR);
• for the correction or completion of incorrect or incomplete data (cf. also Art. 16 GDPR);
• immediate deletion of the data concerning them (cf. also Art. 17 GDPR), or if further processing pursuant to Art. 6 Para. 1 lit. 17 Para. 3 GDPR to restriction of processing pursuant to Art. 18 GDPR;
• to receive copies of the data relating to them and/or provided by them and to have these transmitted to other providers/responsible parties (cf. also Art. 20 GDPR); • to complain to the supervisory authority if they believe that the data concerning them is being processed by the person responsible in violation of data protection regulations (cf. also Art. 77 GDPR).

In addition, the person responsible is obliged to inform all recipients to whom he discloses data of such corrections, deletions or restrictions on processing in accordance with Art. 16, 17 Para. 1, 18 DSGVO. However, this obligation does not apply if the notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of their data by the person responsible in accordance with Art. 6 (1) lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, provided that the deletion does not conflict with statutory storage requirements or unless otherwise specified below.

Cookies
a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies that your browser stores on your computer. These cookies process certain specific information about you, such as your browser, location data or your IP address.

This processing makes our website more user-friendly, effective and secure, for example by being able to display our website in different languages or to offer a shopping cart function.

The legal basis for this processing is Article 6 Paragraph 1 Letter b) GDPR, insofar as these cookies are used to collect data for the initiation or processing of contractual relationships. If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6 Paragraph 1 Letter f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third party cookies

Our website may also use cookies from companies we work with for the purposes of advertising, analytics or improving the functionality of our website.

Details, in particular on the legal bases and purposes of the collection and processing of the data collected by cookies by third parties, can be found in the following information.

c) disable cookies

You can refuse the use of cookies by changing your browser settings. You can also delete cookies that have already been saved in your browser. However, the steps and measures required for this vary depending on the browser used. If you have any questions, please use the help function or consult the documentation for your browser or contact the manufacturer for assistance. Browser settings cannot prevent the setting of so-called flash cookies. Instead, you need to change the setting of your flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your flash player or contact the manufacturer for assistance.

If you prevent or restrict the installation of cookies, you may not be able to use all the functions of our site to their full extent.

Customer Account/Registration
If you create a customer account with us via our website, we will only use the data you entered during registration (e.g. your name, your address or your e-mail address) for services that are provided to you in advance of a possible order or other order, contractual relationship with us, to fulfill such orders or contracts and for customer service (e.g. to give you an overview of your previous orders or to be able to offer you a notepad function). We also store your IP address and the date and time of your registration. This data will not be disclosed to third parties.

For this processing of your data, your consent will be obtained during the registration process with reference to this data protection declaration. The data we collect will only be used to provide your customer account.

If you consent to this processing, Art. 6 Paragraph 1 lit. a) GDPR is the legal basis for this processing.

If the opening of the customer account is also intended to initiate a contractual relationship with us or to fulfill an existing contract with us, the legal basis for this processing is also Article 6 (1) (b) GDPR.

You can revoke your previously given consent to the processing of your personal data at any time in accordance with Art. 7 Para. 3 GDPR with effect for the future. All you have to do is inform us that you have revoked your consent.

The previously collected data will then be deleted as soon as the processing is no longer required. However, we must observe any retention periods under tax and commercial law.

Newsletter
If you register for our free newsletter, the data requested from you, i.e. your e-mail address and optionally your name and address, will be transmitted to us. We also save the IP address of your computer and the date and time of your registration. As part of the registration process, we obtain your consent to receive this newsletter and its contents with reference to this data protection declaration. The data collected will only be used to send the newsletter and will not be passed on to third parties.

The legal basis for this is Article 6 (1) (a) GDPR.
You can revoke your prior consent to receive this newsletter in accordance with Art. 7 Para. 3 GDPR with effect for the future. All you have to do is inform us about the revocation of your consent or click on the unsubscribe link contained in every newsletter.

Contact
If you contact us by e-mail or contact form, the data you provide will be processed for the purpose of processing your request. We need this data in order to be able to process and answer your request; otherwise we cannot answer them or not in full.

The legal basis for this data processing is Article 6 Paragraph 1 Letter b) GDPR.

Your data will be deleted as soon as we have finally answered your request and there is no further legal obligation to store your data, for example if this results in an order or a contract.

User Submissions, Comments and Ratings
On our website we offer you the opportunity to post questions, answers, opinions and ratings, hereinafter collectively referred to as “posts”. If you make use of this option, we will process and publish your contribution, the date and time of submission and any pseudonym used.

The legal basis for this is Article 6 (1) (a) GDPR. You can revoke your previously given consent in accordance with Art. 7 Para. 3 GDPR with effect for the future. All you have to do is inform us that you have revoked your consent.

In addition, we also process your IP address and email address. The IP address is processed because we may have a legitimate interest in taking or assisting in further action if your contribution infringes the rights of third parties and/or is otherwise unlawful.

In this case, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest consists in any legal defense by us.

Facebook
We maintain a presence on the Facebook platform to advertise our products and services and to communicate with interested parties or customers. We are jointly responsible for this social media platform with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The data protection officer of Facebook can be reached via this contact form:

https://www.facebook.com/help/contact/540977946302970

We have defined joint responsibility in an agreement on the respective obligations within the meaning of the GDPR. This agreement, which regulates the mutual obligations, is available at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sale and promotion of our products and services.

The legal basis can also be your consent in accordance with Art. 6 para. 1 lit. a GDPR granted to the platform operator. per art. 7 para. 3 GDPR, you can withdraw this consent from the platform operator at any time with effect for the future.

When you visit our online presence on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU, your data (e.g. personal data, IP address, etc.).

This user data is used for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. Deliver interest-based advertising on and off Facebook. If you are logged in to Facebook when you access our website, Facebook Ireland Ltd. this data to your user account as well. If you contact us via Facebook, the personal data you provide will be used to process the request. We delete this data after your request has been fully answered, provided there are no statutory storage requirements, for example for later fulfillment of a contract.

When processing your data, Facebook Ireland Ltd. set cookies.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions for this depend on the browser and system used. In the case of Flash cookies, the processing cannot be prevented by the settings of your browser, but by the corresponding settings of your Flash player. If you prevent

Instagram
We are present on the Instagram platform to advertise our products and services and to communicate with interested parties or customers. We are jointly responsible for this social media platform with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

Instagram’s data protection officer can be reached via this contact form:

https://www.facebook.com/help/contact/540977946302970

https://www.facebook.com/legal/terms/page_controller_addendum

When you visit our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU, your data (e.g. personal data, IP address, etc.).

This user data is used for statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. serve interest-based advertising on and off Instagram. If you are logged in to Instagram at the time you access our site, Facebook Ireland Ltd. this data to your user account as well. If you contact us via Instagram, the personal data you provide will be used to process the request. We delete this data after your request has been fully answered, provided there are no statutory storage requirements, for example for later fulfillment of a contract.

When processing your data, Facebook Ireland Ltd. set cookies.

Details on the processing operations, their suppression and deletion of the processed data by Instagram can be found in its data protection declaration:

https://help.instagram.com/519522125107875

It cannot be ruled out that the processing by Facebook Ireland Ltd. also in the USA by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.

Sample data protection declaration for the law firm Weiß & Partner