Data protection officer person:
Hypnosis In Lot
+41 (0) 44 500 95 99
General / Introduction
In cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
By using this website, you consent to the collection, processing and use of data in accordance with the following description. In principle, this website can be visited without registration. Data such as pages accessed or names of files accessed, date and time are stored on the server for statistical purposes without this data being directly related to your person. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our pages, this is always done, as far as possible, on a voluntary basis. This data will not be passed on to third parties without your express consent.
Processing of personal data
Personal data is any information relating to an identified or identifiable individual. A data subject is a person about whom personal data are processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, erasure, retention, alteration, destruction and use of personal data.
We process personal data in accordance with the Swiss Data Protection Act (DSG).
We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.
With SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
Operating system used
Host name of the accessing computer
Time of the server request
This data cannot be assigned to specific persons. A combination of this data with other data sources is not made. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.
This website may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos.
These services of the US-based Google LLC use, among other things, cookies, whereby data is transferred to Google in the USA, although we assume that no personal tracking takes place in this context solely through the use of our website.
Google has undertaken to ensure adequate data protection in accordance with the EU-US and Swiss-US Privacy Shield.
If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.
After you have given your consent to the storage of the data, the e-mail address as well as their use for sending the newsletter, you can revoke this at any time, for example via the "unsubscribe link" in the newsletter.
Rights of the data subject:
Right to confirmation
Every data subject has the right to request confirmation from the website operator as to whether personal data concerning him or her are being processed. If you wish to exercise this right of confirmation, you may contact us at any time.
Right to information
Any person affected by the processing of personal data has the right to obtain from the operator of this website, at any time and free of charge, information about the data stored about him or her and a copy of this information. In addition, information may be provided about the following, if applicable:
Purposes of the processing
Categories of personal data processed
recipients to whom the personal data have been or will be passed on
if possible, the planned duration of the storage of the personal data or, if this is not possible, the criteria for determining this duration the existence of a right to rectification or erasure of the personal data concerning them or to restriction of processing by the controller or a right to object to such processing the existence of a right of appeal to a supervisory authority if the personal data are not collected from the data subject: Any available information about the origin of the data. In addition, the data subject has the right to be informed whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer. If you wish to make use of this right to information, you can contact us at any time.
Right to rectification
Every person affected by the processing of personal data has the right to demand the immediate rectification of inaccurate personal data concerning him or her. In addition, the data subject has the right, taking into account the purposes of the processing, to request that incomplete personal data be completed, including by means of a supplementary declaration. If you wish to exercise this right to rectification, you can contact us at any time.
Right to erasure (right to be forgotten)
Any person concerned by the processing of personal data has the right to obtain from the controller of this website the erasure without delay of personal data concerning him or her, where one of the following reasons applies and the processing is no longer necessary:
The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
The data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing.
The data subject objects to the processing on grounds relating to his or her particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and related profiling.
The personal data have been processed unlawfully.
The erasure of the personal data is necessary for compliance with a legal obligation to which the controller is subject.
The personal data have been collected in relation to information society services offered directly to a child.
If one of the aforementioned reasons applies, and you would like to arrange for the deletion of personal data stored by the operator of this website, you can contact us at any time. We will then arrange for the deletion request to be complied with immediately.
Right to restriction of processing
Any person concerned by the processing of personal data has the right to obtain from the controller of this website the restriction of processing if one of the following conditions is met:
The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data.
The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the assertion, The data subject has objected to the processing on grounds relating to his or her particular situation, and it is not yet clear whether the legitimate interests of the controller override those of the data subject.
If one of the aforementioned conditions is met, you may at any time contact us to request the restriction of the processing of personal data.
Right to data portability
Any person affected by the processing of personal data has the right to obtain the personal data concerning him or her in a structured, commonly used and machine-readable format. In addition, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
To exercise the right to data portability, you can contact us at any time.
Right of objection
Any person affected by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.
The operator of this website will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.
To exercise your right to object, you can contact us directly.
Right to revoke consent granted under data protection law
Every person affected by the processing of personal data has the right to revoke a given consent to the processing of personal data at any time.
If you wish to exercise your right to withdraw consent, you can contact us at any time.
The priority of the online platform is to provide patients with secure access to their data and to keep their data safe.
For this reason:
- Is the data hosted in Switzerland and stored encrypted
- Carry the label "Swiss made software, hosted in Switzerland".
- All information transmitted through your OneDoc account is encrypted end-to-end. It is also stored in encrypted form.
- If the video consultations offered by the specialists through OneDoc are not routed through our servers. The audio and video stream is encrypted and transmitted directly between you and your healthcare professional.
OneDoc places special emphasis on privacy, therefore:
- Is the entire team subject to medical confidentiality and the new Data Protection Act (revDSG).
- If the team does not have access to your medical records.
This website uses the offer of Google Maps. This allows us to display interactive maps directly on the website and enable you to use the map function comfortably. By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment to your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. For more information on the purpose and scope of data collection and processing by Google, as well as further information on your rights in this regard and settings options for protecting your privacy, please visit: www.google.de/intl/de/policies/privacy.
This website uses the remarketing function of Google Inc. The function is used to present website visitors with interest-based advertising within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when he visits websites that belong to the Google advertising network. On these websites, the visitor can be shown advertising that relates to content that the visitor has previously accessed on websites that use Google's remarketing function.
This website uses the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland "Google"). The query is used to distinguish whether the input is made by a human or by automated, machine processing. The query includes the transmission of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google. Your data may also be transferred to the USA in the process. For data transfers to the USA, there is an adequacy decision of Switzerland and the European Commission, the Privacy Shield. Google participates in the Privacy Shield and has submitted to the requirements. By pressing the query, you consent to the processing of your data.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller on this website is located outside the European Economic Area or Switzerland, the data processing of Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google".
The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under "My data", "Personal data".
The legal basis for the use of Google Analytics is the Swiss Data Protection Act. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. We would like to point out that on this website Google Analytics has been extended by the code "_anonymizeIp();" to ensure anonymized collection of IP addresses. This means that IP addresses are processed in shortened form so that they cannot be associated with a specific person. If the data collected about you can be assigned to a person, this is immediately ruled out and the personal data is immediately deleted.
Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US and Swiss-US Privacy Shield.
This saves a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that when you delete all cookies on your end device, these opt-out cookies are also deleted, i.e. you must set the opt-out cookies again if you want to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.
This website uses so-called WebFonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly. If your browser does not support web fonts, a default font from your computer will be used.
Google Tag Manager
The Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate, for example, Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data of the users. With regard to the processing of users' personal data, we refer to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.
This website uses the services of Active Campaign for sending newsletters. The provider is the US provider Active Campaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, US, USA.
Active Campaign is a service with which, among other things, the dispatch of newsletters can be organized and evaluated. If you enter data for the purpose of receiving newsletters (e.g. your e-mail address), this data is stored on Active Campaign's servers in the USA.
Active Campaign has certification under the EU-US and Swiss-US Privacy Shield. The Privacy Shield is an agreement between Switzerland, the European Union (EU) and the US to ensure compliance with appropriate data protection standards in the US.
Active Campaign allows us to analyze our newsletter campaigns. When you open an email sent with Active Campaign, a file contained in the email (a so-called web beacon) connects to Active Campaign's servers in the USA. In this way, it can be determined whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of the newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you do not want Active Campaign to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.
The data that you have provided to us for receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from Active Campaign's servers after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
Privacy Shield Certification link: https://www.privacyshield.gov.
We have entered into a so-called "Data Processing Agreement" with Active Campaign, in which we oblige Active Campaign to protect our customers' data and not to pass it on to third parties.
Functions of the "YouTube" service are integrated on this website. "YouTube" is owned by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.
This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries. Facebook is subject to both the EU-US and the Swiss-US Privacy Shield, with which Facebook has undertaken to ensure adequate data protection.
With the help of Facebook pixels, the behavior of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as a site operator.
You can also deactivate the "Custom Audiences" remarketing function in the settings for advertisements section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.
If you do not have a Facebook account, you can object to usage-based advertising from Facebook at http://optout.networkadvertising.org/ and http://www.youronlinechoices.com/ch-de/.
This website uses the services of Hotjar Limited (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta) to better understand the needs of our users and optimize our website. Using Hotjar's technology, we get a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and this helps us to tailor our offering based on our users' feedback.
Hotjar works with cookies and other technologies to collect data about our users' behavior and about their devices, in particular device IP address (collected and stored only in anonymized form during your website use), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), language preferred to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf. For more information, please visit: https://help.hotjar.com/hc/de/articles/115009334567-Was-ist-Hotjar-
On our website, you can also contact us via the instant messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc. with registered office at 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as "WhatsApp". Partial processing of user data takes place on WhatsApp servers in the USA.
However, through certification under the EU-US and Swiss-US Privacy Shield, WhatsApp guarantees that the data protection requirements of the EU and Switzerland are also complied with for data processing in the USA.
You can find more information here: https://www.whatsapp.com/legal?lang=de
To use WhatsApp, you need a WhatsApp user account. You can find out what data WhatsApp collects when you sign up in WhatsApp's privacy notices.
If you log in via WhatsApp, the cell phone number you provided during registration will be processed by WhatsApp. In addition, your IP address and the date and time of your registration are stored.
Social media in general
Nowadays, social media channels such as Facebook, Instagram, LinkedIn, etc. are indispensable in areas such as marketing & analysis, customer acquisition, customer care and customer service. We therefore also rely on the offerings of various social networks.
When interacting with the social networks, the privacy policies of the respective operators must be applied, the most important ones are listed below:
Facebook: http://de-de.facebook.com/policy.php and https://www.facebook.com/about/privacy/, profile settings: https://www.facebook.com/settings?tab=ads
Twitter: http://twitter.com/privacy, opt out: https://twitter.com/personalization
There you will also find information on privacy settings in the respective user accounts.
Social media on our website
On our website you will find various places where you can interact with our social media channels and share content.
When you use the sharing functions and in particular when you are logged into your user account of the respective social network, various information is sent to the operator of the network or tapped by them and linked to your user account. The social media networks may also set cookies.
Communication on social media networks
In the context of marketing measures, customer loyalty and customer service, communication and possibly data exchange also takes place on various social networks.
Here, too, the data protection provisions of the respective networks apply. In the interest of your data protection, we ask you not to transmit any sensitive data to us within these channels, as we have no influence on how the individual social networks handle this data. Instead, we will be happy to contact you by e-mail or telephone.
If you provide us with information about you and your request (e.g. name, contact details, etc.) within the social networks, which is relevant for us and our business activities (e.g. for contacting and initiating a customer relationship, support requests, etc.), we process this as described in the section "Processing of personal data".
Online Shop / Webshop
We process the data of our customers in accordance with the data protection provisions of the Swiss Data Protection Act (DSG) as part of the ordering process in our online store to enable them to select and order the selected products and services, as well as their payment and delivery or processing.
The processed data includes master data (inventory data), communication data, contract data, payment data and the data subjects of the processing include our customers, prospective customers and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer service. In this context, we use session cookies, e.g. to store the shopping cart content, and permanent cookies, e.g. to store the login status.
In this context, the data marked as required are necessary for the establishment and fulfillment of the contract. We disclose the data to third parties only in the context of delivery, payment or in the context of legal permissions and obligations. The data is only processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the request of the customer for delivery or payment).
Users can optionally create a user account, in particular by viewing their orders. During the registration process, users are provided with the required mandatory information. User accounts are not public and cannot be indexed by search engines, e.g. Google. When users have terminated their user account, their data relating to the user account will be deleted. Information in the customer account will remain until its deletion with subsequent archiving in case of legal obligation. It is the responsibility of the users to save their data in case of termination before the end of the contract.
Within the scope of registration and new registration as well as the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the users in the protection against misuse and other unauthorized use. As a matter of principle, this data is not passed on to third parties unless it is necessary for the prosecution of our claims or there is a legal obligation to do so.
Deletion takes place after the expiry of legal warranty and comparable obligations; the necessity of retaining the data is reviewed at irregular intervals. In the case of legal archiving obligations, deletion takes place after their expiry.
For the provision of chargeable services, we request further data, such as payment data, in order to be able to execute your order. We store this data in our systems until the statutory retention periods have expired.
External payment service providers
This website uses external payment service providers through whose platforms users and we may conduct payment transactions. For example via
American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html)
Bexio AG (https://www.bexio.com/de-CH/datenschutz)
Payrexx AG (https://www.payrexx. ch/site/assets/files/2592/datenschutzerklaerung.pdf)
Apple Pay (https://support.apple.com/de-ch/ht203027)
Giropay (https://www.giropay.de/rechtliches/datenschutzerklaerung) etc.
In the context of contract fulfillment, we use payment service providers on the basis of the Swiss Data Protection Ordinance. In addition, we use external payment service providers based on our legitimate interests under the Swiss Data Protection Ordinance to provide our users with effective and secure payment options.
The data processed by the payment service providers includes, among other things, inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, sum and recipient-related information. The information is required in order to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. We, as the operator, do not receive any information about (bank) account or credit card, but only information to confirm (accept) or reject the payment. Under certain circumstances, the data is transmitted by the payment service providers to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. In this regard, we refer to the terms and conditions and data protection notices of the payment service providers.
Data transfer to the USA
Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of the Swiss Data Protection Act. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing operations.
The author does not guarantee the correctness, accuracy, timeliness, reliability and completeness of the information.
Liability claims regarding damage caused by the use of any information provided, including any kind of information which is incomplete or incorrect,will therefore be rejected.
All offers are subject to change. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without prior notice or to cease publication temporarily or permanently.