General
Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the federal government (Data Protection Act, DSG), every person has the right to protection of their privacy and protection against misuse of their personal data. The operator of this site takes the protection of your personal data very seriously. Your personal data will be treated confidentially and comply with the statutory data protection regulations and this data protection declaration.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

By using this website, you agree to the collection, processing and use of data as described below. This website can generally be visited without registration. Data such as pages called up or names of files called up, date and time are stored on the server for statistical purposes, without these data being directly related to your person. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on the website, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.

Processing of personal data
Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. The processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, transfer, procurement, deletion, storage, modification, destruction and use of personal data.

Personal data is processed in accordance with Swiss data protection law. If and to the extent that the EU GDPR is applicable, personal data will also be processed on the following legal bases in connection with Art. 6 (1) GDPR:
lit. a) Processing of personal data with the consent of the data subject.
lit. b) Processing of personal data to fulfill a contract with the data subject and to carry out corresponding pre-contractual measures.
lit. c) Processing of personal data to fulfill a legal obligation to which the operator is subject under applicable EU law or under the applicable law of a country in which the GDPR is fully or partially applicable.
lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.
lit. f) Processing of personal data to protect the legitimate interests of the operator or third parties, provided that the fundamental freedoms and rights and interests of the person concerned do not prevail. The legitimate interests include, in particular, the business interest in being able to provide the website, information security, the enforcement of one's own legal claims and compliance with Swiss law.

Personal data will be processed for the duration necessary for the respective purpose or purposes.

Cookies
This site uses cookies. These are small text files that make it possible to store specific user-related information on the user's device while the user is using the website. In particular, cookies make it possible to determine the frequency of use and the number of users of the pages, to analyze behavioral patterns of page use, but also to make the operator offer more customer-friendly. Cookies remain stored beyond the end of a browser session and can be called up again when you visit the site again. If you do not want this, you should set your Internet browser so that it refuses to accept cookies.

A general objection to the use of cookies for online marketing purposes can be raised for a large number of services, in particular for tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.aboutads.info/choices/ /www.youronlinechoices.com/ are explained. In addition, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.

With SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries that you send to the site operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from ""http://"" to ""https://"" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to the operator cannot be read by third parties.

Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to the operator. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. The operator reserves the right to subsequently check this data if concrete indications of illegal use become known.

Contact form
If you send inquiries to the operator via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by the operator for the purpose of processing the inquiry and in the event of follow-up questions. This data will not be passed on without your consent.

Online appointment booking
The personal data collected as mandatory information as part of the online appointment booking is the basis for the treatments at Nicole Ferrari Cosmetics and is essential for using the service. All data collected is only stored for the purpose of processing appointments and contracts.

 

Rights of the data subject

Right to confirmation
Every data subject has the right to request confirmation from the operator of the website as to whether personal data relating to them is being processed. If you wish to exercise this right of confirmation, you can contact the operator at any time.

Right of providing information
Every person affected by the processing of personal data has the right to receive information from the operator of this website at any time free of charge about the data stored about them and a copy of this information. In addition, information may be given about the following:

- purposes of processing;
- categories of processed personal data;
- Recipients to whom the personal data have been or will be disclosed;
- planned duration of storage of the personal data or, if this is not possible, the criteria for determining this duration;
- the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;

In addition, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, the person concerned also has the right to receive information about the appropriate guarantees in connection with the transmission.
If you wish to make use of this right to information, you can contact the operator at any time.

Right to Rectification
Every person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. In addition, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary declaration.
If you wish to exercise this right to rectification, you can contact the operator at any time.

Right to erasure (right to be forgotten)
Any person affected by the processing of personal data has the right to demand the immediate deletion of personal data concerning them from the person responsible for processing this website, provided that one of the following reasons applies and the processing is no longer necessary:
- the personal data were collected for purposes or otherwise processed for which they are no longer necessary;
- The data subject withdraws the consent on which the processing was based and there is no other legal basis for the processing;
- The data subject objects to the processing for reasons arising from their particular situation, and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in the case of direct advertising and associated profiling processing egg;
- the personal data have been processed unlawfully;
- The erasure of the personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject;
- The personal data were collected in relation to information society services offered that are aimed directly at a child.
If one of the above reasons applies and you would like to have personal data stored by the operator of this website deleted, you can contact the operator of this website at any time. The operator of this website will comply with the request for deletion immediately.

Right to restriction of processing
Any person affected by the processing of personal data has the right to request that the controller of this website restrict the processing if one of the following conditions is met:
- The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- The processing is unlawful, the data subject objects to the deletion of the personal data and instead requests that the use of the personal data be restricted;
- The person responsible for processing no longer needs the personal data for the purposes of the processing, but the person concerned needs them for the assertion, The person concerned has lodged an objection to the processing for reasons arising from his or her particular situation, and it is not yet clear whether the legitimate interests of the controller outweigh those of the data subject.
If one of the above conditions is met, you can request the operator of this website to restrict the processing of personal data at any time. The operator of this website will arrange for the restriction of processing.

Right to data portability
Every person affected by the processing of personal data has the right to receive the personal data concerning them in a structured, common and machine-readable format. In addition, the data subject has the right to have the personal data transmitted directly from one controller to another controller, provided this is technically feasible and provided that the rights and freedoms of other persons are not affected .
To assert the right to data portability, you can contact the operator of this website at any time.

Right to object
Every person affected by the processing of personal data has the right to object at any time to the processing of personal data relating to them for reasons that arise from their particular situation.
The operator of this website will no longer process the personal data in the event of an objection, unless the operator can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert exercise or defense of legal claims.
To exercise your right to object, you can contact the operator of this website directly.
 

Right to withdraw consent under data protection law
Any person affected by the processing of personal data has the right to revoke consent given to the processing of personal data at any time.
If you wish to exercise your right to withdraw consent, you can contact the operator at any time.

Disclaimer
All information on the website has been carefully checked. The operator endeavors to ensure that the information provided is up-to-date, correct and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, so that the operator cannot assume any liability for the completeness, correctness and topicality of the information, including that of a journalistic and editorial nature. Liability claims relating to material or immaterial damage caused by the use or non-use of the information provided or by the use of incorrect or incomplete information are excluded as a matter of principle.
The publisher may change or delete texts at its own discretion and without prior notice and is under no obligation to update the content of this website. Use of this website or access to it is at the visitor's own risk. The publisher, its customers or partners are not responsible for any damages, such as direct, indirect, incidental or consequential damages, allegedly caused by visiting this website and accordingly accept no liability for such damages.
The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be reached via external links from this website. The operators of the linked pages are solely responsible for their content. The publisher therefore expressly distances himself from all third-party content that may be relevant under criminal or liability law or that offend common decency.

Google Maps
This website uses the offer of Google Maps. This enables the operator to display interactive maps directly on the website and to enable you to conveniently use the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage. This happens regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on the website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right. You can find more detailed information on the purpose and scope of data collection and processing by Google as well as further information on your rights in this regard and setting options for protecting your privacy at: www.google.de/intl/de/policies/privacy.

Facebook
This website uses functions of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit pages with Facebook plugins, a connection is established between your browser and the Facebook servers. Data is already being transmitted to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be linked to your Facebook account, please log out of Facebook before visiting. Interactions, in particular the use of a comment function or clicking a "Like" or "Share" button, are also forwarded to Facebook. You can find out more about this at https://de-de.facebook.com/about/privacy.

External payment service providers
This website uses external payment service providers, via whose platforms users and the operator can carry out payment transactions. As part of the fulfillment of the contract, the operator uses the payment service providers on the basis of the Swiss Data Protection Ordinance and, if necessary, Art. 6 Para. 1 lit. b. EU GDPR. In addition, the operator uses external payment service providers on the basis of its legitimate interests under the Swiss Data Protection Ordinance and, if necessary, under Article 6 Paragraph 1 lit. f. EU GDPR in order to offer its users effective and secure payment options.
The data processed by the payment service providers include inventory data such as name and address, bank details such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, total and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. The operator does not receive any information about (bank) account or credit card, but only information to confirm (accept) or refuse the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. In this regard, the operator refers to the terms and conditions and data protection information of the payment service provider.
The terms and conditions and data protection declaration of the respective payment service provider, which can be accessed within the respective website or transaction applications, apply to payment transactions. The operator also refers to this for the purpose of further information and the assertion of revocation, information and other data subject rights.