Privacy Policy

This privacy policy informs you how Praxis Anzhelika Wyss collects, processes and protects personal data. We comply with the provisions of the Swiss Data Protection Act (DSG).

1. Responsible party

Praxis Anzhelika Wyss
Wallisellerstrasse 24
8152 Opfikon (Glattbrugg)
Switzerland

Owner: Anzhelika Wyss
E-Mail: info@anzhelikawyss.ch
Phone: 079 634 16 83

2. Collection and processing of personal data

We primarily process personal data that we receive from clients in the course of business or that arises from operating the website.

This includes in particular:

– Personal data (name, address, email, phone number)
– Booking data (desired treatment, date, time)
– Health data (for acupressure treatments with EMR billing and any details provided when booking)
– Billing data (health insurance information for EMR services)
– Technical data during website visits (IP address, browser type, access time)

In the context of EMR-certified acupressure treatments, we process health data, which is considered particularly sensitive personal data under Art. 5 FADP. Your details from the booking, such as wishes or questions about the treatment and the selected body zone, may also contain health data. We use this data for appointment management, treatment and billing with supplementary insurers and treat it confidentially. For appointment management, the details from the booking are also kept in the practice's online calendar (see section 4).

For EMR-certified acupressure treatments, we create a reimbursement receipt according to tariff 590 after each session. This contains name, date of birth, treatment date and treatment type.

The receipt is sent by default by email to the address provided at booking. Transmission is via our email service Google Workspace (contracting party Google Cloud EMEA Limited, Dublin, Ireland) with TLS transport encryption where the receiving mail server supports it. Google may also process the data in the USA; see «Third-party services». End-to-end encryption is not guaranteed. On request, the receipt can also be handed over in person or sent by post.

When booking EMR services online, you explicitly confirm in the booking form that the reimbursement receipt may be sent to you by email; without this confirmation, these services cannot be booked online. You can withdraw your consent at any time without formalities, by email, phone or WhatsApp. You will then receive the receipt by post or in person at the practice.

The confirmation in the booking form and the option to withdraw it record your agreement to delivery by email. We process the details on the receipt to perform the treatment contract and to issue the receipt for your insurance.

3. Purpose of data processing

We use your data for the following purposes:

– Appointment management and treatment delivery
– Sending appointment confirmations and reminders (email)
– Billing with supplementary insurance (EMR services only)
– Responding to contact inquiries
– Improving the website and services

4. Contacting us and online booking

If you contact us by email, WhatsApp or phone, we use your details to handle your enquiry and answer any follow-up questions. We handle emails via Google Workspace; Google is involved as a processor, and processing in the USA is possible. For WhatsApp, the information under «Third-party services» applies.

For online appointment booking, we use the WordPress plugin Amelia. The booking data is stored on the server of our Swiss hosting provider. The website sends confirmations and reminders via our email service.

Each confirmed appointment is also entered in the practice's online calendar: with your name, phone number and email address, the booked treatment, date and time, and your details from the booking, i.e. your wishes or questions about the treatment, the selected body zone and your notes. Only the practice has access to this calendar; the calendar service processes the entries as a processor. The booking uses the busy times from this calendar so that times already taken are not offered.

Which providers we use for hosting, email and calendar, and where they process data, is listed under «Third-party services».

5. Hosting and server log files

This website is hosted by Infomaniak Network AG, Rue Eugène-Marziano 25, 1227 Geneva, Switzerland. The provider automatically collects and stores information in server log files that your browser transmits (browser type, operating system, referrer URL, IP address, time). This data is not merged with other data sources.

6. Cookies

This website partly uses cookies. Cookies do not cause any damage to your computer and do not contain viruses. They serve to make the website more user-friendly, effective, and secure.

We only set cookies that are necessary for operation, for example for online booking, the customer area login and protecting the website. No consent is required for this, which is why no cookie banner appears. The YouTube video only loads when you click on it.

You can control and restrict the use of cookies via your browser. Previously stored cookies can be deleted at any time. Please note that some website functions may not be fully available without cookies.

To see which pages are read and how visitors find the website, this website keeps its own statistics. It counts page views, where a visit comes from (for example a search engine or a link with a campaign tag), the device type based on screen width, the language, and clicks on appointment booking, WhatsApp and the phone number. The statistics do not count bookings themselves. The customer panel and the staff area are not recorded, and while you are logged in to the customer panel, the statistics do not count any other pages either.

The statistics set no cookies and store nothing in your browser. Your IP address is not stored. To count visits approximately, a shortened checksum is formed from the IP address and the browser information together with a secret key that changes daily. To prevent misuse, a second checksum is formed from the IP address and the same daily key only; it limits the number of reports per address, even if the browser information changes. Both checksums are pseudonymous: they only make it possible to link reports from the same day. When the day changes, the key is replaced; the previous day's checksums are then deleted in the nightly run or with the first counted page view, whichever comes first. If your browser sends «Do Not Track» or «Global Privacy Control», nothing is counted.

Only daily totals are kept, for no more than 25 months, so that each month can be compared with the same month of the previous year. The figures are stored in this website's database at Infomaniak in Switzerland. The practice receives a monthly summary by email via the email service listed under «Third-party services»; it contains totals only, no information about individual persons. The figures are not transmitted to analytics services.

We process the pseudonymous usage data necessary for these statistics to analyse the use of our website in a data-minimising manner, improve its content and prevent misuse. In doing so, we comply with the principles of the Swiss Federal Act on Data Protection (FADP).

Where the General Data Protection Regulation (GDPR) applies, we rely on our legitimate interests under Article 6(1)(f) GDPR in pursuing these purposes, provided these interests are not overridden by the interests or fundamental rights of the individuals concerned. You may object to processing based on this legal ground under Article 21 GDPR using the contact details provided. The simplest way is for your browser to send «Do Not Track» or «Global Privacy Control»; nothing is counted then.

7. Third-party services

Infomaniak

Purpose: Website hosting, database, SSL certificate
Data: IP address, access data (server logs), booking and customer data from Amelia, for EMR services also health data
Location: Switzerland
Privacy Policy: https://www.infomaniak.com/de/agb/datenschutzrichtlinie

Google Workspace (Google)

Purpose: Email and calendar of the practice and the website, for example booking confirmations, reminders, reimbursement receipts and appointment entries
Data: Name, email address, phone number, appointment, booked treatment, details from the booking (wishes or questions, body zone, notes) and content of the message
Location: Ireland (Google Cloud EMEA Limited); processing in the USA also possible. Basis: certification of Google LLC under the Swiss-U.S. Data Privacy Framework and standard contractual clauses in the contract with Google
Privacy Policy: https://workspace.google.com/terms/dpa_terms.html

Wordfence (Defiant Inc.)

Purpose: Protection of the website against attacks (firewall, login protection)
Data: IP address and request details for every page view; log of page views and login attempts no longer than 30 days, blocks for the configured block duration; details of detected attacks are sent to Wordfence, which according to Wordfence keeps them for 90 days, longer only while the address continues to behave suspiciously
Location: Firewall on our own server at Infomaniak (Switzerland); attack data to Defiant Inc., USA
Privacy Policy: https://www.wordfence.com/privacy-policy/

Amelia (TMS / Melograno)

Purpose: Online booking, client management
Data: Name, email, phone, booked treatment, health data (for acupressure)
Location: WordPress plugin – data on own server (Infomaniak CH)
Privacy Policy: https://wpamelia.com/privacy-policy/

Map links (Google Maps, Apple Maps)

Purpose: Directions links on the home page and the «About me» page
Data: None by this website; it does not embed a map. Only when you open a link does your browser call up Google Maps or Apple Maps, and their privacy policies apply.
Location: USA (Google LLC, Apple Inc.)
Privacy Policy: https://policies.google.com/privacy

YouTube (Google)

Purpose: Video about the icoone technology on the icoone page
Data: IP address and usage data, only after clicking the video (until then nothing is loaded from YouTube)
Location: USA (Google LLC)
Privacy Policy: https://policies.google.com/privacy

Complianz

Purpose: Management of cookie settings; currently without a consent banner, as only necessary cookies are set
Data: No personal data
Location: WordPress plugin – data local
Privacy Policy: https://complianz.io/privacy-statement/

WhatsApp (Meta Platforms)

Purpose: Client communication, appointment enquiries, consultation
Data: Phone number, message content, metadata. Communication is end-to-end encrypted, metadata is processed by Meta.
Location: USA (Meta Platforms Inc.)
Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

EMR (ErfahrungsMedizinisches Register)

Purpose: Therapist directory, quality assurance
Data: Therapist data (no patient data via website)
Location: Switzerland
Privacy Policy: https://emr.ch/datenschutz

Google Fonts

We do not use external Google Fonts. All fonts are hosted locally on the server. No data is transmitted to Google.

8. Data security

We employ appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and unauthorised third-party access. Our website is SSL-encrypted.

9. Retention and deletion

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Business records: 10 years (Art. 958f CO). Therapeutic documentation (acupressure/EMR): 10 years from last treatment. Booking data without treatment reference: deletion after 2 years of inactivity. Data is then securely deleted.

10. Your rights

Under applicable data protection law, you have the following rights at all times:

– Right to access your stored data
– Right to rectification of incorrect data
– Right to deletion of your data
– Right to restriction of processing
– Right to data portability

To exercise your rights, please contact us by email at info@anzhelikawyss.ch.

11. Changes

We reserve the right to amend this privacy policy at any time. The current version is published on the website.