Privacy
Controller
ivilounge GmbH, Dufourstrasse 90, 8008 Zürich, Switzerland
Email: info@ivilounge.ch
Principle
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European General Data Protection Regulation (GDPR). Health data is particularly sensitive personal data and is additionally subject to medical confidentiality.
Appointment booking
Appointments are booked through our own form on the booking page and confirmed by us personally. No third-party booking system is loaded into this website, and booking does not contact any other website. What the form stores and for how long is described under "Request form" below.
Request form
On the booking page you book your appointment through our form, and on the contact page you can send us a message or a question. We process what you enter there (name, email address, phone number where given, the treatment or subject, a preferred day where given, your message, the location and the page you came from) for one purpose only: to answer your request and to arrange the appointment with you. The legal basis is your consent, which you give by ticking the box before sending, and which you can withdraw at any time by writing to info@ivilounge.ch.
Your request is transmitted in encrypted form (TLS) directly into the database of our practice software. It runs on our own server in a data centre in Zurich, Switzerland, operated for us by Akenes SA (Exoscale), Lausanne, as our processor under Swiss law. Requests that do not lead to an appointment are deleted as soon as they are no longer needed for this purpose. No cookie is set and no advertising or analytics tool is involved.
Recipients
Within the practice, your request is seen only by the team members who handle requests and appointments; all of them are bound by medical confidentiality. We use the following processors: Akenes SA (Exoscale), Lausanne, Switzerland, for the server of our practice software and its database (data centre in Zurich, backups in Switzerland); Cloudflare, Inc. (USA) for delivering the public pages of this website, which contain no patient data and do not store your requests; and the providers of embedded content named under "Hosting and embedded content" below. Your request is not disclosed to any other recipient.
Hosting and embedded content
The public pages of this website contain no patient data and are delivered by Cloudflare, Inc. (USA), which processes the technical data of every visit (IP address, requested page, browser) in server logs for a short time to run and protect the service. Our server in Zurich, which receives your requests, likewise records technical data of each connection (IP address, time, requested address) in server logs for security; these logs are rotated and overwritten automatically. We use no analytics or marketing tools and set no cookies of our own. The fonts come from Google Fonts (Google LLC, USA), which receives your IP address when the font files are loaded. The map on the contact and locations pages is an embedded Google Maps frame (Google LLC, USA); the Instagram posts on the homepage load from Meta Platforms (Ireland and USA) only after you click on them. When such content loads, the provider receives your IP address and technical browser data.
Your rights
You have the right to information about the data processed about you and to have incorrect data corrected. Please contact the address above.