Privacy Policy

Protecting your personal data matters to me. This privacy policy explains which personal data is processed when you visit this website and in connection with my work as a massage therapist. Swiss data protection law (DSG/FADP) applies. For visitors from the EU, I additionally observe the General Data Protection Regulation (GDPR). The German version of this policy is authoritative; this English text is provided for convenience.

1. Responsible entity

Zsófia Incze
Lomilomi Wädenswil (sole proprietorship)
Etzelstrasse 68
8820 Wädenswil, Switzerland
Phone: +41 79 738 38 56
Email: info@lomilomi-waedenswil.ch

2. General data processing when visiting the website

You can visit this website without providing any personal information. You only actively transmit personal data to me when you fill in the contact form or contact me by email or phone. For technical reasons, certain access data is processed when the website is loaded (see section 3). The legal basis is my legitimate interest in the secure and stable operation of the website.

3. Hosting and technical log data

This website is hosted by Vercel Inc. (USA), which acts as my processor. When the website is accessed, technical access data is processed, in particular:

the IP address of the accessing device,
the date and time of access,
the page visited / address (URL) requested,
browser type and operating system (user agent),
the previously visited page (referrer),
and any error and log data.

This data is necessary for the secure and stable operation of the website. As the hosting provider is based in the USA, this data may also be processed in the USA. The transfer is based on appropriate safeguards (e.g. standard contractual clauses).

4. Getting in touch and the contact form

A contact form is available on the contact page. The following information is processed:

name (required),
email address (required),
phone number (optional),
preferred language,
preferred contact channel (email, WhatsApp or phone),
your message (optional free-text field).

The information submitted via the form is stored in a Google Sheets spreadsheet that I use to manage enquiries (see also section 8). No automatic email is sent; I retrieve the enquiries and respond to them personally. I use this information solely to process your enquiry, to contact you and to arrange an appointment. The legal basis is processing in response to your request or to take pre-contractual steps.

If you choose WhatsApp as your preferred contact channel, the subsequent communication takes place via WhatsApp (Meta Platforms Ireland Ltd.); WhatsApp's terms and privacy notices then additionally apply. If you do not wish this, please choose email or phone.

5. Health data and particularly sensitive personal data

The contact form is not intended for collecting health data.

Where possible, please do not submit any particularly sensitive personal data via the contact form, in particular no detailed health data. If you nevertheless choose to share such information with us voluntarily, we will use it solely to process your enquiry and to prepare or carry out the treatment.

Health data is considered particularly sensitive personal data and is treated confidentially and with particular care.

6. Appointments, treatment and client documentation

As part of arranging appointments, the intake (anamnesis) and the treatment, health-related information may be collected and documented to the extent necessary for safe and professional massage treatment, client care, statutory retention obligations or billing with insurers.

This information is generally collected in person on site. It serves to identify contraindications, to tailor the treatment to your needs and to document the course of treatment. For reimbursement by supplementary insurance, corresponding receipts may be issued (ZSR no. A707665). The processing of this particularly sensitive personal data is based on your consent and on the performance of the treatment contract. You may withdraw any consent given at any time with effect for the future.

7. Email communication

If you contact me by email, I process your email address and the content of your message to respond to your request. My email mailbox is hosted by Infomaniak Network SA (Switzerland). Please note that unencrypted emails may be read by third parties in transit. Therefore, where possible, please do not send sensitive information, in particular health data, by unencrypted email.

8. Third parties and external services

I use as few external services as possible. Currently these are:

Vercel (Vercel Inc., USA): website hosting (see section 3).
Vercel Web Analytics: anonymous audience measurement (e.g. number of page views, approximate region, device/browser). This service does not use cookies and does not store IP addresses permanently; it does not identify individuals or track across websites. The legal basis is my legitimate interest in privacy-friendly audience measurement.
Google Sheets (Google): storage of enquiries submitted via the contact form (see section 4). Processing takes place via a Google account; the data may also be processed outside Switzerland, in particular in the USA.
Google Search Console (Google): analysing and improving this website's visibility in Google Search. Google provides me with aggregated data that cannot be traced back to individuals (e.g. search queries, impressions and clicks). No additional scripts, cookies or tracking technologies are used on the website itself for this; the link is established by verifying domain ownership via DNS.
Google Maps (link only): the contact page contains a link to Google Maps. No map is embedded directly on the website; Google only receives data once you actively click the link. Google's privacy policy then applies.

The fonts used on this website are served locally from our server; there is no connection to external providers such as Google Fonts for this. No Google Analytics, Facebook/Meta pixel or comparable tracking services are used.

9. Cookies and local storage

This website does not set its own cookies for analytics or advertising purposes and does not use local storage (localStorage/sessionStorage) for personal data. Language selection is handled via the address (URL) of the respective page. The audience measurement used (section 8) works without cookies.

10. Retention period

I retain personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations:

Enquiries via the contact form or by email are deleted once your matter has been dealt with and no further correspondence takes place, at the latest after 12 months – provided no treatment relationship arises from them.
Treatment and client documentation is retained for the duration of the care relationship and thereafter for as long as required by law or to assert or defend against claims (generally 10 years).
Accounting-related records are retained for 10 years (Art. 958f of the Swiss Code of Obligations).

11. Disclosure to third parties

I do not sell your personal data. Disclosure only takes place:

to the processors named in sections 3 and 8, who process data exclusively according to my instructions;
where necessary for billing with insurers and initiated or approved by you;
where I am legally obliged to do so or where this is necessary to protect my rights.

12. Rights of data subjects

Within the scope of applicable law, you have in particular the right to information, rectification, deletion or restriction of processing, objection to certain processing, data portability (where applicable) and the right to withdraw any consent given with effect for the future.

To exercise your rights, an informal message to the contact details listed in section 1 is sufficient. You also have the right to lodge a complaint with a supervisory authority – in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), and for data subjects in the EU with the competent data protection supervisory authority.

13. Data security

This website is delivered encrypted via HTTPS (TLS). I take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. Access to contact enquiries and treatment documentation is limited to the persons required to process them.

14. Validity and changes to this privacy policy

I may adapt this privacy policy if data processing or the legal framework changes. The current version published on this website applies in each case.

Last updated: 27 May 2026