Privacy policy

1 · Who is responsible

The party responsible for handling personal data on this website is Suri Massage & Spa, Herrengasse 17, 8853 Lachen SZ, Switzerland. Phone +41 77 209 68 00, email [To be added: the domain email address].

Swiss data protection law (DSG) applies. If you are in the EU or EEA and the European General Data Protection Regulation applies to you, you have the equivalent rights set out there.

2 · The principle first

We are a small studio with two masseuses. We handle the data needed for your appointment and your question and, with your consent, limited usage data for website statistics. We do not sell data or create advertising profiles. Details of these optional statistics are in section 7.

3 · When you visit the website

This website is hosted by [To be added: hosting provider and server location]. When you open a page, your browser sends technical details that the server records in a log: IP address, date and time, the address requested, the amount of data transferred, and your browser and operating system.

We need those logs to keep the site running and to spot faults and attacks. They are deleted after [To be added: how long the server logs are kept] and are not combined with any other data.

The connection is encrypted (TLS). Our fonts and studio images are served with the website. Only when you use the booking section does your browser connect to our booking service at Google Apps Script to retrieve available times. The Google map loads automatically as described in section 3a. Google Analytics is loaded only after your consent; see section 7 for details.

3a · Google Maps

The embedded map loads automatically without a click. Your browser may load it before the location section comes into view. It connects to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google receives technical connection data, including your IP address, and may use cookies. Data may also be processed in the United States.

The map loads independently of your statistics choice. Declining Google Analytics therefore does not prevent the connection to Google Maps. Links to our Google profile and to write a review open Google outside our website. The Google Privacy Policy applies.

4 · Booking an appointment

When you book online, we handle: the treatment you chose, the duration, the date and time, your name, your phone number and, if you write one, your note about what is troubling you.

When available times are retrieved, Google receives technical connection data such as your IP address, the date and time, and the chosen treatment, requested duration and day. Your name, phone number and note are not sent until you confirm the booking.

We enter these details as an appointment in one of two internal calendars at Google Calendar, one for each massage therapist. A Couple Massage is entered in both calendars. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; the data may also reach servers in the United States. Access is restricted to the studio.

We need these details to keep the appointment: without your name and phone number we cannot hold the time for you or reach you if something has to move. After 24 months we automatically remove appointment entries from our calendars; Google then keeps them in the bin for up to 30 further days before deleting them permanently. If you would rather we did so sooner, tell us and we will remove the entry.

The studio also receives a Telegram notification with your name, phone number, treatment, appointment, duration, price and booking reference. Your additional booking note is not forwarded to Telegram.

Nothing is paid online. We ask for neither card details nor prepayment.

5 · Contact form

Through the form on the contact section we handle: your name, your email address, your phone number if you choose to give it, and the text of your question.

Your message reaches us as a notification in a private Telegram chat belonging to the studio, so that we see it while we are out and can answer you quickly. The service is provided by Telegram FZ-LLC, Dubai, United Arab Emirates. Telegram is not a Swiss provider: please write only what your question needs.

Google Apps Script receives the enquiry and temporarily stores messages for delivery to Telegram. Message text is removed from this queue after confirmed delivery, and no later than seven days. Technical checksums used to prevent duplicate notifications remain for seven days for enquiries and until seven days after the appointment for bookings. These periods do not apply to the Telegram history or the calendars.

We handle these details in order to reply to you. Messages we have dealt with are deleted from the history regularly.

6 · Anything you tell us about your health

In the note field and in the contact form you may write something that says something about your health, such as a tense shoulder or an old injury. Under Swiss law such details count as sensitive personal data.

We use such information solely to prepare your treatment. It is handled only by us and by the technical service providers named in sections 4 and 5. Please do not enter health information online; we would rather discuss any concerns in person before the treatment at the studio.

7 · Browser storage and optional statistics

When you switch language on the website, the page leaves a technical entry in your browser so that the opening animation does not play a second time. It is called suri-sin-intro, contains nothing about you personally, and disappears as soon as you close the tab.

We store your statistics choice locally in your browser for 180 days so that we do not ask again on every visit. Through “Privacy settings”, you can change your choice or withdraw your consent for future collection at any time. Booking an appointment works without consent to statistics.

Only if you agree do we load Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use it to measure page views and general technical usage data to improve the website. This stores random identifiers in cookies for up to 60 days, without extending their lifetime on further visits. No data is sent to Google Analytics before you agree or if you decline.

We do not send names, phone numbers, email addresses, form contents, health information, or details of your treatment or booking to Google Analytics. The page addresses sent contain no query parameters or fragments, and the address of the previously visited page is not sent. Google Signals, advertising personalisation and automatic form-interaction tracking are disabled.

The retention period for event-level and user-level data in Google Analytics is set to 2 months and is not extended by further activity. Aggregated reports may remain available for longer. Data may also be processed in the United States, subject to the safeguards described in section 8. Further information: How Google uses information from sites or apps that use its services.

When you use the online booking, Google may process technically necessary information under its own privacy terms, as described in section 4. We use no advertising networks or social network buttons.

8 · Recipients and transfers abroad

Apart from the service providers named above, we pass your data to nobody. We do not sell data and we do not exchange it with third parties.

Google and Telegram also handle data outside Switzerland. For such transfers we rely on the safeguards those providers put in place, in particular the standard contractual clauses. If you do not want health information sent to these providers, do not put it in the online fields; discuss it directly with us at the studio.

9 · Your rights

You can ask at any time what data we hold about you, and require us to correct or delete it. You can object to our handling of it and ask for your data in a common format.

A call or a short message is enough: +41 77 209 68 00 or [To be added: the domain email address]. We answer as quickly as we can. If you are not satisfied with our answer, you can turn to the Federal Data Protection and Information Commissioner (FDPIC).

10 · Security

The website is encrypted throughout. We restrict access to the appointment calendars and the studio's Telegram chat to the people who need it to manage appointments and answer your message.

11 · Changes

If we change something on the website that affects how data is handled, we update this statement in the same round. The version published here is the one that applies.