Privacy Policy

We take the protection of your personal data seriously and treat your data confidentially, in accordance with the revised Swiss Data Protection Act (revFADP) and — for visitors from the EU/EEA — the GDPR.

This policy explains which personal data we collect on yourfacedesigner.com, how we use it and what rights you have.

Personal data is any data by which you can be personally identified (e.g. name, email address, IP address).

The controller for data processing on this website is CuraCap Schweiz GmbH (Your FACE Designer brand), Schänzlistrasse 37, 2545 Selzach, Switzerland, business ID CHE-158.321.901, email christine@yourfacedesigner.com.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On each request, technical log data is processed (IP address, date/time, requested URL, HTTP status code, data volume, referrer, user agent).

Delivery is primarily via the Vercel Edge Network. In individual cases a transfer to third countries (in particular the USA) may take place. Legal basis: Art. 6(1)(f) GDPR / overriding legitimate interest in stable, secure provision.

On this website we use only technically necessary storage, plus — after your explicit consent — cookies, pixels and anonymised reach/behaviour measurement for analytics.

Technically necessary storage: language preference and consent status (Local Storage). This storage is required to operate the website and takes place without consent.

After consent: Google Analytics 4, Meta Pixel and our own anonymised behaviour measurement (see section 5). You can withdraw your consent at any time for the future — via the "Cookie Settings" link in the footer. After withdrawal, no further analytics data is collected.

Only after you have given consent do we measure how this website is used, in order to improve its content and structure. We do not pass on names, email addresses or any other contact data we hold to these services; however, they process technical data such as IP address and device and usage information, which may in individual cases relate to an identifiable person.

Services used: Google Analytics 4 (Google Ireland Ltd.; IP anonymisation active) and Meta Pixel (Meta Platforms Ireland Ltd.). These services may involve a transfer to third countries (in particular the USA). The legal basis is your consent (Art. 6(1)(a) GDPR; for Switzerland Art. 31(1) revFADP).

Our own behaviour measurement for offer optimisation: We additionally record anonymised interaction signals (page visited, language, scroll depth, visibility of individual page sections, dwell time and clicks on consultation and booking buttons). For this we use a random identifier that rotates per session in your browser's session storage; no cross-session recognition (fingerprinting) takes place. The sole purpose is to improve and optimise this website.

This behavioural data is processed on our behalf by our optimisation platform (Online Market Empire, OME) as a processor. You can withdraw this measurement at any time via the cookie settings in the footer; the rotating identifiers are then discarded and no further behavioural data is sent.

If you contact us by email or via the contact form, your details (name, email address, enquiry content, language and enquiry source) are stored to handle your request and any follow-up questions. Legal basis: Art. 31(2)(a) revFADP / overriding legitimate interest; for EU visitors additionally Art. 6(1)(b) and (f) GDPR.

Form enquiries may be processed in our CRM system GoHighLevel so that we can reliably assign and respond to enquiries. Only the contact details you enter and your message are transferred.

Retention: your enquiry data is deleted once it is no longer required. Mandatory statutory retention obligations (in particular Art. 958f CO) remain unaffected.

Scheduling (GoHighLevel / LeadConnector): On the booking page we embed the booking widget of our CRM provider HighLevel, Inc. (1801 N. Lamar, Suite 600, Dallas, Texas 75202, USA; widget infrastructure LeadConnector, leadconnectorhq.com) so you can pick a slot for an initial consultation directly. When the widget loads, a connection to HighLevel/LeadConnector is established and your IP address and technical device information are transmitted; when you book, the details you enter (name, email address, selected slot, optional information) are processed in addition. A transfer to the USA takes place; HighLevel, Inc. and LeadConnector are certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection. The purpose is to arrange and manage appointments. Legal basis: Art. 31(2)(a) revFADP / overriding legitimate interest in straightforward scheduling; for EU visitors additionally Art. 6(1)(b) and (f) GDPR.

Video (YouTube): We embed video testimonials via YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). The embed uses a click-to-load solution: as long as you do not start a video yourself, only a preview image stored on our own server is shown and no connection to YouTube is established. Only when you click the play button is the video loaded in privacy-enhanced mode (youtube-nocookie.com). Your IP address and technical device information are then transmitted to Google; a transfer to the USA (Google LLC) may take place (see section 9). The legal basis is the consent you give by clicking (Art. 31(1) revFADP or Art. 6(1)(a) GDPR). For further information see Google's privacy policy: https://policies.google.com/privacy

Fonts: All fonts used on this website are served from our own server (self-hosting). No connection to Google servers is established and your IP address is not transmitted to Google for this purpose.

You have the right to information (Art. 25 revFADP / Art. 15 GDPR), data portability, rectification and erasure. Where processing is based on consent, you may withdraw it at any time for the future.

An informal message to christine@yourfacedesigner.com is sufficient. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern). Data subjects habitually resident in the EU/EEA may also contact their competent national data protection supervisory authority (e.g. CNIL in France, Garante in Italy, AEPD in Spain).

Where we transfer personal data to the USA or other third countries (see the sections above), we base the transfer on the respective provider's certification under the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework and/or on the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR; Art. 16(2)(d) revFADP).

We use TLS encryption (HTTPS) for all data transfers. Personal data is stored only as long as required for the stated purposes or by statutory retention obligations.

The version of this privacy policy published on this page at any given time is authoritative.