Data protection
1. introduction
This privacy policy is intended to inform you about how your personal data is collected, used and protected. It applies to the website of Helga Imhasly, eternalspring.ch and informs you about the type, scope and purpose of the collection and use of personal data by Helga Imhasly, eternalspring.ch.
Responsible party and scope of application
The controller for the collection and processing of personal data within the meaning of the General Data Protection Regulation of the European Union (EU GDPR) and the relevant data protection provisions of Switzerland is
Helga Imhasly, eternalspring.ch
Am Wasser 67
8049 Zurich
Please note that this privacy policy will come into force on September 1, 2023 and may be updated to reflect current data protection regulations and technological developments. We therefore recommend that you review this statement regularly.
2. collection of access data
We, Helga Imhasly, eternalspring.ch, attach great importance to the protection of your personal data and compliance with the applicable data protection regulations. This privacy policy informs you about how we collect, use and protect access data.
What is access data?
By access data, we mean information that is automatically collected when you visit our website or interact with our online services. This information may be of a technical nature and may include
The IP address of your device
Date and time of access
Type of browser used
Operating system of your device
Referral source (the website from which you came to us)
The pages visited on our website
Interactions on our website (e.g. clicks, dwell time)
Geographical information (if you provide it, e.g. through location services)
Why do we collect access data?
Access data is collected for various reasons, including
Operation and security: We use access data to keep our website secure and functional. This includes detecting and preventing security risks and ensuring the integrity of our services.
Analysis and improvement: We analyze access data to understand user behavior and improve our services. This helps us to better understand your needs and make our website more user-friendly.
Legal requirements: In some cases, we are required by law to collect and retain access data in order to comply with legal obligations.
Hosting provider and processing order (DPA / AVV)
This website is hosted by Hostpoint, a renowned hosting provider based in Switzerland. Hostpoint provides the infrastructure and technical operation of our website.
As a hosting provider, Hostpoint has access to certain access data that is collected in the course of website use. However, we would like to emphasize that Hostpoint may only process this data in accordance with our instructions and the applicable data protection regulations and does not pursue its own purposes with this data.
In order to guarantee the security of your data, we have concluded a processing agreement (DPA / AVV) with Hostpoint. This contract governs the processing of your personal data by Hostpoint and ensures that all data protection requirements are met in accordance with the applicable laws and regulations.
3. collection and processing of personal data
Below we inform you about the collection and processing of your personal data in accordance with the requirements of the EU GDPR and the data protection regulations of Switzerland.
Helga Imhasly, Eternal Spring, only collects, uses and passes on your personal data if this is permitted by law or if you have given your express consent.
Definition of personal data:
Personal data is all information that is used to determine your identity and that can be assigned to you. This includes, for example, your name, your e-mail address and your telephone number.
Use of Google Workspace and Acuity Scheduling with DPA-AVV contract and third country transfer
To ensure that your data is adequately protected, we use Acuity Scheduling for the online appointment booking process and Google Workspace for the storage and management of appointment data. We have concluded a DPA-AVV contract with Acuity Scheduling and with Google to ensure that your data is handled in accordance with the applicable data protection regulations. However, please note that both Google and Squarespace’s Acuity Scheduling are located outside the European Union and data transferred to the US may be subject to US national security laws.
We would like to emphasize that both Acuity Scheduling by Squarespace and Google Workspace may only process your personal data in accordance with our instructions and the applicable data protection regulations and do not pursue their own purposes with this data. However, we have taken measures to ensure that your data is adequately protected, including the use of DPA-AVV contracts.
Types of data stored
a. Contact form: We process data such as your name, your e-mail address, your telephone number and the content details from the contact form that you send us via the website under “Contact”. This information is sent to our e-mail address (Google Workspace account with a valid DPA-AV contract) via a secure SSL connection. The information is not stored in a database.
b. Online appointment bookings: We process first name, last name, e-mail address, telephone number, optionally your Skype ID, optionally your date of birth and content details such as the subject of the treatment for online appointment bookings. For online appointment bookings, we use the online service “Acuity Scheduling” from Squarespace, where the information you enter when booking is stored. This information can be deleted at any time at your express request. Further information can be found in Acuity Scheduling’s privacy policy. Your data will be used within the framework of our data protection agreement (Art. 6 EU GDPR) exclusively for processing your appointment. An entry in our Google Calendar (Google Workspace account with a valid DPA-AV contract) is created to reserve the appointment for you and prevent double bookings.
c. Data generated by us during the session: This data is stored anonymously. Session logs are sent either by encryption program (WhatsApp, Threema or Signal) or unencrypted by email, depending on your preference (see also our General Terms and Conditions regarding written communication).
3.1 Handling contact data
The contact details you provide in the contact form, such as your name, e-mail address and telephone number, will be used to process and respond to your request. This data will not be passed on to third parties without your consent.
3.2. Use of the data
We only process personal data with the express permission of the users concerned and in compliance with the applicable data protection regulations.
4. reach measurement & cookies
Our website uses cookies for pseudonymized reach measurement, which are transmitted to your browser either by our server or the server of a third party. Cookies are small files that are stored on your end device and accessed by your browser. They increase the user-friendliness and security of our website.
If you do not wish to have cookies for range measurement stored on your end device, you can object to the use of these files. Please note that deactivating cookies may impair the use of some functions of our website.
5. session cookies
We use so-called “session cookies” to facilitate your use of our website. These cookies are stored on your hard disk during your visit to the website and are deleted when you close your browser. They do not retrieve any information from your hard disk and do not affect your computer or your files. Most browsers accept cookies automatically, but you can deactivate the storage of cookies or be notified when cookies are sent.
6. use of Google fonts (Google Fonts)
This website uses Google Fonts to improve the visual presentation of texts. Google fonts are external resources provided by Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google fonts are integrated by retrieving the required fonts from a Google server, usually in the USA. During this retrieval, IP addresses and information about the browser used and the operating system of the end device are recorded. Google can store and analyze this information.
The use of Google fonts is in the interest of a uniform and appealing presentation of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Google LLC complies with European data protection law and is certified under the Privacy Shield Agreement, which guarantees an adequate level of data protection (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Further information on Google Fonts and data protection at Google can be found at: https://policies.google.com/privacy?hl=de
Please note that you can deactivate the use of Google fonts by changing your browser settings accordingly. In this case, the display of certain texts on the website may be impaired.
This text informs users that Google Fonts are used, why they are used and how Google handles the data. Note that this is a general template and you should customize the information according to your individual website requirements.
7. use of Google Analytics with IP anonymization
We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to analyze the use of our website. The IP anonymization function is activated. This means that your IP address will be truncated within the member states of the European Union and in other signatory states to the Agreement on the European Economic Area before it is transmitted to a Google server in the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google uses this information on our behalf to evaluate the use of our website, to compile reports on website activity and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: Deactivate Google Analytics
8. use of Google Tag Manager (GTM)
We use Google Tag Manager (GTM), a service provided by Google, to simplify the management and implementation of tracking codes and other website tags. GTM enables us to manage and update tags and scripts on our website more efficiently without having to change the website code every time. The GTM itself does not collect any personal data. The service merely facilitates the integration and management of third-party tags. Please note that the GTM may trigger other tags, which in turn may collect data. Further information on the use of data by Google can be found in Google’s privacy policy at https://policies.google.com/privacy. You have the option of deactivating the collection and processing of your data by GTM by making the appropriate settings in your browser. Further information on deactivation can be found at https://support.google.com/analytics/answer/7519794.
9. rights of the user
As a user, you have the right to information about the personal data stored about you, to rectification of incorrect data, to restriction or erasure of your personal data, to data portability and to object to the processing of your data. If you believe that your data has been processed unlawfully, you can lodge a complaint with the competent supervisory authority.
10. deletion of data
If there are no statutory retention obligations, you have the right to erasure of your data as soon as it is no longer required for the purposes for which it was collected. If erasure is not possible because the data is required for legal purposes, processing will be restricted.
11. right of objection
You can object to the processing of your personal data at any time.
For questions or concerns regarding your personal data, correction, blocking, deletion or to exercise your rights, you can contact the following e-mail address: helga{@)eternalspring.ch to
Yours sincerely,
Helga Imhasly
Eternal Spring