Privacy Policy

This privacy policy explains which personal data we collect on this website and how we use it. The Swiss Federal Act on Data Protection (nDSG) applies, as does the EU General Data Protection Regulation (GDPR) where relevant. We handle Your data with care and collect only what we genuinely need.

This website is served through Cloudflare Workers (Cloudflare, Inc., USA). For technical reasons, Cloudflare processes IP addresses to deliver content and protect against attacks. Cloudflare is certified under the EU-U.S. Data Privacy Framework.

Content is managed through a content management system (EmDash) running on Cloudflare Workers with a D1 database and R2 storage.

We use Alchemy Scribe, an in-house analytics system (server: opus.alchemy.zuerich), to evaluate how the website is used. The following is collected:

• Page views and time on page
• Anonymous visitor ID (session-based)
• Device information (browser, operating system, screen size)
• Referrer (where You came from)
• Scroll depth and click behaviour

Legal basis: Legitimate interest (Art. 31 para. 1 nDSG). Statistical tracking is active by default.

Personalisation (for example, linking to an email address or recognition across sessions) takes place only with Your explicit consent.

Fingerprinting: A browser fingerprint is created to merge sessions. This happens only when statistical consent is active. You may withdraw Your consent at any time.

For online appointment booking we embed the booking system from OneDoc (OneDoc SA, Switzerland). When You book an appointment through the embedded booking window, the data You enter (for example, name, email address, phone number, preferred appointment) is processed directly by OneDoc and stored on their servers in Switzerland.

The OneDoc privacy policy applies in addition. Legal basis: pre-contractual measures and contractual performance.

We use server-side conversion tracking (server-to-server). For certain actions (for example, booking an appointment), anonymised data is transmitted to the following platforms:

• Meta (Facebook/Instagram): Conversion API (CAPI). Processing in the USA. EU-U.S. Data Privacy Framework.
• Google Ads: Enhanced Conversions via Google Analytics 4 Measurement Protocol.
• LinkedIn: Conversions API (CAPI).

This transmission takes place only with Your consent (marketing consent).

You have the right to:

• Access the data stored about You
• Rectification of inaccurate data
• Erasure of Your data
• Objection to the processing
• Data portability (delivery in a machine-readable format)
• Withdrawal of consent given, at any time and without giving reasons

Contact for data protection requests: deinteam@dtl.zuerich

We may amend this privacy policy at any time. The current version applies from the date stated above.