Privacy Protection Statement
1. Introduction
This privacy statement is intended to inform you about how your personal data is collected, used and protected. It applies to the website of Helga Imhasly, eternalspring.ch and informs you about the nature, scope and purpose of the collection and use of personal data by Helga Imhasly, eternalspring.ch.
Person responsible and scope
The person responsible for the collection and processing of personal data within the meaning of the General Data Protection Regulation of the European Union (EU GDPR) and the relevant data protection provisions of Switzerland is:
Helga Imhasly, eternalspring.ch
At the water 67
8049 Zurich
Please note that this privacy statement will be effective as of September 1, 2023 and may be updated to reflect current data protection regulations and technological developments. We therefore recommend that you review this statement regularly.
2. Collection of access data
We,Helga Imhasly, eternalspring.ch, attach the utmost importance to the protection of your personal data and compliance with applicable data protection regulations. This privacy policy informs you about how we collect, use and protect access data.
What is access data?
Access data is information that is automatically collected when you visit our website or interact with our online services. This information may be technical in nature and includes:
The IP address of your device
The date and time of access
Type of browser used
Your device’s operating system
Referral source (the website from which you linked to us)
The pages visited on our website
Interactions on our website (e.g., clicks, time spent)
Geographic information (if you provide it, e.g., through location services)
Why do we collect access data?
Access data is collected for a variety of reasons, including:
Operations and Security: we use access data to keep our website secure and functional. This includes detecting and preventing security risks and ensuring the integrity of our services.
Analysis and improvement: we analyze access data to understand user behavior and improve our services. This helps us better understand your needs and make our website more user-friendly.
Legal Requirements: In some cases, we are required by law to collect and retain access data to comply with legal obligations.
Hosting Provider and Processing Order (DPA / AVV)
This website is hosted by Hostpoint, a reputable hosting provider based in Switzerland. Hostpoint provides the infrastructure and technical operation of our website.
As a hosting provider, Hostpoint has access to certain access data that is collected in the course of website use. However, we would like to emphasize that Hostpoint may only process this data in accordance with our instructions and the applicable data protection regulations and does not pursue its own purposes with this data.
To ensure the security of your data, we have concluded a processing agreement (DPA / AVV) with Hostpoint. This contract governs the processing of your personal data by Hostpoint and ensures that all data protection requirements are met in accordance with applicable laws and regulations.
3. Collection and processing of personal data
In the following, we inform you about the collection and processing of your personal data in accordance with the requirements of the EU-DSGVO and the data protection regulations of Switzerland.
Helga Imhasly, Eternal Spring, only collects, uses and discloses your personal data if this is permitted by law or if you have given your express consent.
Definition of personal data:
Personal data is any information that is used to establish your identity and that can be attributed to you. This includes, for example, your name, email address and telephone number.
Use of Google Workspace and Acuity Scheduling with DPA-AVV Contract and Third Country Transfer
To ensure that your information is appropriately protected, we use Acuity Scheduling for the online appointment booking process and Google Workspace for the storage and management of appointment data. We have entered into a DPA-AVV agreement with Acuity Scheduling and with Google to ensure that your data is handled in accordance with applicable data protection laws. However, please note that both Google and Acuity Scheduling of Squarespace are located outside the European Union and data transferred to the US may be subject to US national security laws.
We would like to emphasize that both Acuity Scheduling by Squarespace and Google Workspace may only process your personal data in accordance with our instructions and applicable data protection laws, and may not pursue their own purposes with such data. However, we have taken measures to ensure that your data is adequately protected, including the use of DPA-AVV contracts.
Types of Data Stored:
a. Contact Form: We process data such as your name, email address, phone number, and contact form content information that you send to us through the website under “Contact Us.” This information is sent to our email address (Google Workspace account with valid DPA-AV contract) via a secure SSL connection. The information is not stored in a database.
b. Online appointment bookings: We process first name, last name, email address, phone number, optionally your Skype ID, optionally your date of birth and content information such as the subject of the treatment for online appointment bookings. For online appointment bookings, we use Squarespace’s online service “Acuity Scheduling”, where the information you enter when booking is stored. Upon express request, this information can be deleted at any time. For more information, please see Acuity Scheduling’s privacy policy. Your data will be used within the framework of our data protection agreement (Art. 6 EU-DSGVO) exclusively for the processing of your appointment. An entry in our Google Calendar (Google Workspace account with valid DPA-AV contract) will be created to reserve the appointment for you and prevent double bookings.
c. Data created by us during the session: this data is stored anonymously. Session logs are sent either by encryption program (WhatsApp, Threema or Signal) or unencrypted by email, depending on your preference (see also our Terms and Conditions regarding written communication).
3.1 Handling of contact data
Your contact data provided in the contact form, such as name, email address and phone number, will be used to process and respond to your request. This data will not be passed on to third parties without your consent.
3.2 Use of data
We process personal data only with the express permission of the users concerned and in compliance with the applicable data protection regulations.
4. Reach measurement & cookies
Our website uses cookies for pseudonymized reach measurement, which are transmitted to your browser either from our server or the server of a third party. Cookies are small files that are stored on your terminal device and your browser accesses them. They increase the usability and security of our website.
If you do not wish to have cookies for range measurement stored on your end device, you can object to the use of these files. Please note that disabling cookies may affect the use of some features of our website.
5. Session cookies
We use so-called “session cookies” to facilitate your use of our website. These cookies are stored on your hard drive during your visit to the website and are deleted when you close your browser. They do not retrieve any information from your hard drive and do not affect your computer or files. Most browsers automatically accept cookies, but you can disable the storage of cookies or be notified when cookies are sent.
6. Use of Google Fonts (Google Fonts)
This website uses Google Fonts to enhance the visual presentation of text. Google Fonts are external resources provided by Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google fonts are integrated by retrieving the required fonts from a Google server, usually in the USA. During this retrieval, IP addresses as well as information about the browser used and the operating system of the end device are recorded. Google can store and evaluate this information.
The use of Google fonts is in the interest of a uniform and appealing presentation of our website. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.
Google LLC complies with European data protection law and is certified under the Privacy Shield agreement, which ensures an adequate level of data protection (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
You can find more information about Google Fonts and data protection at Google at: https://policies.google.com/privacy?hl=de.
Please note that you can deactivate the use of Google Fonts through appropriate browser settings. In this case, the display of certain text on the website may be affected.
This text informs users that Google fonts are used, why they are used, and how Google handles the data. Note that this is a general template and you should customize the information according to your individual website requirements.
7. Use of Google Analytics with IP anonymization
We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to analyze the use of our website. In doing so, the IP anonymization function is activated. This means that your IP address within the Member States of the European Union and in other contracting states to the Agreement on the European Economic Area is shortened before it is transmitted to a Google server in the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Disable Google Analytics
8. Use of Google Tag Manager (GTM)
We use Google Tag Manager (GTM), a service provided by Google, to facilitate the management and implementation of tracking codes and other website tags. The GTM allows us to manage and update tags and scripts on our website more efficiently without having to change the website code each time. The GTM itself does not collect any personal data. The service only facilitates the integration and management of third-party tags. Please note that the GTM may trigger other tags, which in turn may collect data. For more information on Google’s use of data, please see Google’s privacy policy at https://policies.google.com/privacy. You have the option to deactivate the collection and processing of your data by the GTM by making the appropriate settings in your browser. For more information on how to deactivate, please visit https://support.google.com/analytics/answer/7519794.
9. Rights of the user
As a user, you have the right to information about the personal data stored about you, to correct incorrect data, to restrict or delete your personal data, to data portability and to object to the processing of your data. If you believe that your data has been processed unlawfully, you may lodge a complaint with the competent supervisory authority.
10. Deletion of data
Unless there are legal retention obligations, you have the right to have your data deleted as soon as it is no longer needed for the purposes for which it was collected. If deletion is not possible because the data is required for legal purposes, processing will be restricted.
11 Right to object
You may object to the processing of your personal data at any time.
For questions or concerns regarding your personal data, for correction, blocking, deletion or to exercise your rights, you can contact us at the following e-mail address: info{@)eternalspring.ch to
Yours sincerely,
Helga Imhasly
Eternal Spring