Data protection

Leimer Hospitality Consulting (SWISS Beauty Travel brand)

Valid from 01.07.2025 | Version 1.0

Responsible body

Leimer Hospitality Consulting

Owner: Valentina Leimer

Zugerstrasse 32, CH-6032 Baar

Scope of application

This privacy policy applies to all collection and processing of personal data in connection with the use of the website www.swissbeautytravel.ch, consulting and agency services.

Definitions of terms

- Personal data: Information relating to an identified or identifiable person (Art. 3 GDPR / Art. 3 FADP Switzerland).

- Processing: Any operation carried out with or without the aid of automated procedures involving personal data (collection, storage, transmission, etc.).

Collection and use of personal data

4.1 Customer data

- Full name, address, email, telephone

- Date of birth, health details, insurance data

4.2 Usage data

- IP address, browser type, access time, referrer URL

4. 3 Communication data

- Content and metadata of emails, chat logs, telephone notes

Purposes of data processing

- Contract processing and brokerage services

- Risk and cost clarification, after-care service

- Communication, appointment organisation, payment control

- Compliance with statutory retention obligations (OR 957 ff.)

- Marketing and newsletter mailing (only with separate consent)

Legal bases for processing

- Necessity for contract fulfilment (Art. 6 para. 1 lit. b GDPR; Art. 13 para. 2 lit. b FADP Switzerland)

- Consent (Art. 6 para. 1 lit. a GDPR; Art. 13 para. 2 lit. a FADP Switzerland)

- Protection of legitimate interests (e.g. IT security; Art. 6 para. 1 lit. f GDPR) - Fulfilment of legal obligations (e.g. bookkeeping; Art. 6 para. 1 lit. c GDPR; Art. 13 para. 2 lit. f FADP Switzerland) e.g. IT security; Art. 6 para. 1 lit. f GDPR)

- fulfilment of legal obligations (e.g. accounting; Art. 6 para. 1 lit. c GDPR; Art. 13 para. 2 lit. c FADP Switzerland)

Disclosure of data to third parties

- Clinics and service providers (e.g. hotels, interpreters) for contractual purposes hotels, interpreters) for the fulfilment of contracts

- IT service providers, payment service providers, marketing partners (with consent)

- authorities and courts in the case of legal obligations to provide information

Data transfer to third countries

- clinics in Turkey, Bulgaria, Czech Republic (third countries)

- transfer only if there is an appropriate level of data protection or if there is an appropriate level of data protection, if there is an adequate level of data protection or suitable guarantees (EU standard contractual clauses)

Cookies and tracking technologies

- Technically necessary cookies (session and security functions)

- Functional cookies (settings, language)

- Marketing cookies (social media plug-ins, remarketing) - only after consent via cookie banner

Duration of data storage

- Contract and billing data: 10 years (OR 957 ff. )

- Communication data and logs: up to 2 years after completion

- Application documents: up to 6 months after completion of the selection process

Rights of data subjects

- Information about stored personal data (Art. 15 GDPR; Art. 8 FADP Switzerland)

- Correction of incorrect data (Art. 16 GDPR; Art. 9 FADP Switzerland)

- Erasure (‘right to be forgotten’, Art. 17 GDPR; Art. 10 FADP Switzerland)

- Restriction of processing (Art. 18 GDPR)

- Data portability (Art. 20 GDPR)

- Objection to processing (Art. 21 GDPR)

- Withdrawal of consent given at any time (Art. 7 para. 3 GDPR)

Withdrawal of consent

- Consent (e.g. newsletter, marketing cookies) can be withdrawn at any time by sending an email to info@swissbeautytravel.ch.

- Data processing that has already taken place until the revocation remains lawful.

Automated decisions

- No fully automated decisions or profiling within the meaning of the GDPR take place.

Security measures

- Encryption of sensitive data (SSL/TLS)

- Access controls, firewalls, antivirus, regular backups

- Access to personal data only by authorised employees

Reporting of data breaches

- Internal investigation in the event of an incident

- Notification of the competent data protection authority and data subjects within 72 hours in the event of reportable breaches (Art. 33 GDPR)

Integration of external services

- Google Analytics (with IP anonymisation) - opt-out possible

- Social media plug-ins (Facebook, Instagram) - only with cookie consent

- Sending newsletters via third-party providers (Mailchimp or similar) - with separate consent

Links to external websites

- Our website may contain links to external offers.

- The operators of these websites are solely responsible for their data protection practices.

Changes to this privacy policy

- We adapt this policy to new legal or technical requirements.

- Changes will be published on the website and the date updated accordingly.

Right to lodge a complaint with supervisory authorities

- Data subjects may lodge a complaint with the Federal Data Protection and Information

Commissioner (FDPIC) or the competent cantonal data protection authority.

Contact for data protection enquiries

Leimer Hospitality Consulting

Data Protection Officer: Valentina Leimer

E-mail: info@swissbeautytravel.ch

Phone: +41 78 300 20 26