Privacy policy
Working draft. The marked points must be completed or checked before publication. Until then, this page is excluded from search engines.
1. Controller and contact
The controller responsible for the processing of personal data described in this policy is:
NP Aesthetics GmbH Brandschenkestrasse 45 8002 Zürich, Switzerland Phone: +41 77 503 39 07 Email for data protection enquiries: hello@npaesthetics-zurich.ch
This policy describes the processing of personal data when you visit our website, contact us or receive our newsletter. The Swiss Federal Act on Data Protection (FADP) is particularly relevant. Where applicable in a specific case, we also take account of the European Union General Data Protection Regulation (GDPR).
2. Website visits and hosting
Our website is provided through Lovable and delivered through Cloudflare’s server network. When you visit, technical data is processed, in particular your IP address, access time, pages visited and browser information. This serves to provide the website, ensure security and troubleshoot errors.
3. Cookies, browser storage and statistics
We do not use Google Analytics or Meta Pixel. Automatic Lovable visitor statistics are disabled.
Google Ads: we only load the Google Ads tag from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Google LLC (USA) if you consent to the “Advertising” category in the cookie settings. The purpose is to measure whether visits and consultation enquiries originate from our Google advertisements and to optimise those advertisements. Google may receive, in particular, the address and title of the page visited — including when it is a treatment page — as well as the referring website, your IP address, cookies, advertising click identifiers, browser and device identifiers and the time. After a callback request has been successfully saved, the website also reports a conversion to Google with a random measurement identifier. This measurement is not anonymous; Google may link this information to other data, for example if you are signed in to Google. Data may be transferred to the USA. Without consent or following rejection, no Google tag is loaded and no data is sent to Google. We never transmit names, email addresses, telephone numbers or form contents to Google; enhanced conversions and remarketing are disabled. No tracking takes place on internal team or sign-in pages. The legal basis is your consent, which you may withdraw at any time with effect for the future.
Your choice is stored locally in your browser together with the time and version of the notice displayed and remains valid for 180 days. You can change or withdraw it at any time using the in the footer.
4. Contact by phone or email
When you contact us, we process the information you provide, for example your name, telephone number or email address and the content of your enquiry. This serves to answer your enquiry, organise a consultation appointment or take pre-contractual or contractual steps.
For email communication, we use Proton Mail from Proton AG, Switzerland. When messages are sent to external email addresses, recipients’ providers may also be involved in transmission.
Please provide only the information necessary to handle a general contact enquiry. For medical records or particularly confidential information, we will arrange an appropriate transmission channel where necessary.
Further information: https://proton.me/de/legal/privacy
5. WhatsApp Business
You may choose to contact us via WhatsApp Business. We process your telephone number, your profile name where applicable, and the content and time of your message to answer your enquiry and coordinate appointments.
WhatsApp is an external service within the Meta group of companies. WhatsApp Ireland Limited is involved for users in the European region; data may also be processed in the USA and other countries. WhatsApp processes certain usage and connection data under its own privacy policy.
Our WhatsApp link opens the service only when you click it. Alternatively, you can contact us by phone or email at any time. Please do not send medical findings, intimate photographs or detailed health information via WhatsApp; arrange an appropriate transmission channel with us instead.
Further information: https://www.whatsapp.com/legal/privacy-policy-eea
6. Newsletter via Mailchimp
If you subscribe to our newsletter, we process your email address and any names you provide voluntarily. Registration uses a double opt-in procedure: after signing up, you receive an email with a confirmation link to activate your subscription. We document registration and confirmation as evidence of the subscription.
We use Mailchimp, a service provided by The Rocket Science Group LLC, part of the Intuit group of companies, USA. Mailchimp processes the data required for administration and sending on our behalf. Data may be processed in the USA.
Our newsletters currently use open and click tracking. Technical tracking pixels and specially configured links enable opens and clicked links to be recorded and, where applicable, associated with a recipient address. We use this information to evaluate and improve the newsletter. For technical reasons, open counts are not always reliable.
You can unsubscribe at any time using the unsubscribe link in each newsletter or by emailing us. After you unsubscribe, we no longer use your address to send newsletters. A necessary unsubscribe status and evidence may continue to be stored to prevent further unwanted messages and comply with legal obligations.
Further information: https://mailchimp.com/legal/privacy/ https://mailchimp.com/legal/data-processing-addendum/
7. Google Maps and social media links
Our website contains a link to route planning on Google Maps and links to our social media profiles. These services are not embedded as maps or feeds. You only visit the respective provider when you click; its privacy policy then applies. No externally provided icons or scripts are loaded for this purpose.
The fonts used are served locally. Loading fonts does not establish a connection to Google Fonts.
8. Recipients and processing abroad
We disclose personal data to service providers insofar as necessary for the purposes described, particularly hosting, communication and newsletter distribution. Authorities or other bodies may receive data where there is a legal obligation.
Data may be processed in Switzerland, Ireland and the USA in particular.
9. Retention
We retain personal data for as long as necessary for the relevant purpose, compliance with legal obligations or the protection of legitimate legal claims. It is then deleted or anonymised unless further retention is required.
Enquiries that become part of treatment may be subject to statutory documentation and retention obligations. Treatment and medical documentation are explained in separate patient information.
10. Your rights
Within the scope of applicable law, you may in particular request information about your personal data and its processing, and the correction of inaccurate data. Where applicable, you may request deletion, object to processing or withdraw consent with effect for the future. Where provided by law, further rights exist, in particular to the release or transfer of data and restriction of processing.
Please send your request to hello@npaesthetics-zurich.ch. To prevent unauthorised disclosure, we may request suitable proof of identity. Statutory retention obligations may prevent deletion.
You may contact the Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch, or another competent data protection supervisory authority.
11. Changes
We update this policy when our data processing or the services used change. The version published on this website is authoritative.
Last updated: 10 October 2026