Legal
Privacy policy
Responsible party
Aurea Aesthetics AGTödistrasse 1
8002 Zürich
Switzerland
Principle
We process personal data in accordance with the Swiss Data Protection Act (DSG) and, where applicable, the General Data Protection Regulation (GDPR). The confidentiality of patient data is additionally subject to medical professional secrecy.
Hosting
This website is hosted by Hostinger International Ltd., Larnaca (Cyprus). The servers are located in Germany; backups are stored in France. With every page request, the server processes technically necessary information such as your IP address, the date and time, the page requested and the browser used. This is required to deliver the website and to protect it against attacks. We do not analyse this information or combine it with other data.
Data from the appointment booking
When you book an appointment online, we process your name, contact details and the information you provide to arrange the appointment. We do not pass this data on to third parties unless required by law. The one exception is the transfer to Google described under «External services», which takes place only with your consent.
Along with your appointment booking, we also transmit how you reached our website, for example through a Google ad (with the search keyword it was shown for), a search engine, Instagram or directly, and the page on which you arrived. Your browser keeps this information only for the duration of your visit (session storage); no cookie is set for it. It is transmitted only together with a submitted booking. We store it with your appointment in our appointment system and do not pass it on to third parties.
Please do not send medical findings or particularly sensitive health data via the form.
Social media and WhatsApp
We have profiles on Instagram, Facebook and TikTok. This website only links to them: no content, buttons or scripts from these platforms are embedded. The platform operator receives data only once you click one of these links. On the platforms themselves, the privacy policies of Meta Platforms Ireland Ltd. (Instagram, Facebook) and TikTok Technology Ltd. (Ireland) apply; data may also be transferred to the USA and other countries.
If you write to us on WhatsApp, we process your phone number, your name and your messages in order to answer your enquiry. The messages are end-to-end encrypted. The connection data, such as who writes to whom and when, is however processed by WhatsApp Ireland Ltd., a Meta company, including in the USA. Please do not send medical findings via WhatsApp. If you prefer not to use WhatsApp, you can reach us just as well by phone or email.
Retention
Request data is deleted once the purpose of processing has ceased and no legal retention obligations apply. Statutory retention periods apply to patient documentation.
Your rights
You have the right to information, rectification, deletion, restriction of processing, and data portability. For this, please contact the responsible party named above.
External services
This website embeds services provided by Google: Google Analytics for audience measurement, the Google advertising tag to measure how our ads perform, and a Google Maps map on the contact page. The controller for these is Google Ireland Limited, Dublin.
None of these services loads without your consent. Until you agree, no cookies are set and no data is transmitted to Google; the map remains replaced by a notice. If you agree, your IP address, technical details about your device and your behaviour on this website are transmitted to Google and analysed there. This involves transfer to the United States and other countries outside Switzerland and the EEA.
The «Google Signals» feature is enabled in Google Analytics. If you are signed in to a Google account and have permitted personalised advertising there, Google may attribute your visits to this website to that account across devices and use them for advertising purposes. As we are a clinic for aesthetic medicine, this also covers which treatment pages you viewed. You can prevent this at any time in your Google account settings.
To measure the success of our ads, we also use Google Ads «enhanced conversions». If you have given your consent and book an appointment, the Google advertising tag transfers your contact details from the form, in particular your email address and phone number, to Google. The data is hashed (SHA-256) in your browser beforehand, so it does not reach Google in plain text. Google matches these values against Google accounts to determine whether the booking resulted from one of our ads, and reports this to us only as an aggregated figure. If you have a Google account, Google thereby learns that someone with this account has booked an appointment at our clinic. Without your consent, this transfer does not take place.
Your consent is voluntary and can be withdrawn at any time with effect for the future — via «Privacy settings» in the footer of every page. Withdrawal prevents further collection; data already transmitted to Google is not affected.
Google privacy policy