{"id":28597,"date":"2026-08-31T13:02:35","date_gmt":"2026-08-31T11:02:35","guid":{"rendered":"https:\/\/tida-thai-massage.ch\/privacy-policy\/"},"modified":"2026-08-31T13:02:35","modified_gmt":"2026-08-31T11:02:35","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/tida-thai-massage.ch\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h1>Privacy Policy<\/h1>\n<p>Last updated: 31 August 2026<\/p>\n<p>We process personal data in accordance with the revised Swiss Federal Act on Data Protection (revFADP). This policy explains what data we process, why, who receives it and what rights you have.<\/p>\n<h3>1. Controller<\/h3>\n<p>Thai Style GmbH<br \/>Sumatrastrasse 25 (side entrance Sumatrasteig)<br \/>8006 Zurich, Switzerland<\/p>\n<p>Phone: +41 44 500 50 88<br \/>E-mail: <a href=\"mailto:bureau@tida-thai-massage.ch\">bureau@tida-thai-massage.ch<\/a><\/p>\n<p>Data protection matters are handled by Thomas Schildknecht.<\/p>\n<h3>2. Scope<\/h3>\n<ul>\n<li>the website tida-thai-massage.ch<\/li>\n<li>the booking system booking.tida-thai-massage.ch<\/li>\n<li>the gift voucher shop shop.tida-thai-massage.ch<\/li>\n<li>treatments at our practices Zurich HB and Zurich Schaffhauserplatz<\/li>\n<li>our communication with you by e-mail, SMS and telephone<\/li>\n<\/ul>\n<h3>3. What data we process<\/h3>\n<h4>3.1 When you visit our website<\/h4>\n<p>Each time a page is called up, our hosting provider records technical details in server logs: IP address, date and time, page requested, volume of data transferred, browser type and operating system. We need this for secure operation and to fend off attacks. We do not combine it with other data.<\/p>\n<p>We also record which pages are opened and which buttons are clicked, so that we can see where our pages are unclear. See section 4 for details.<\/p>\n<h4>3.2 When you book an appointment<\/h4>\n<p>For a booking we process:<\/p>\n<ul>\n<li>first name and surname<\/li>\n<li>e-mail address and mobile number<\/li>\n<li>the massage, duration, practice, time and any add-ons you select<\/li>\n<li>whatever you write in the notes field<\/li>\n<li>for couple bookings, the details of the second person<\/li>\n<li>payment method and amount<\/li>\n<li>whether and when you received confirmations and reminders<\/li>\n<\/ul>\n<p>We need this data to arrange, deliver and invoice the appointment. Without it we cannot accept a booking.<\/p>\n<h4>3.3 Around the treatment<\/h4>\n<p>We record which treatments you have received, together with notes that matter for the next treatment \u2014 preferred oils, pressure, areas to avoid, or health-related information you tell us.<\/p>\n<p>Health-related information constitutes sensitive personal data under Art. 5 revFADP. We record it only if you provide it yourself, keep it as brief as possible and use it solely for your treatment. Access is limited to the people treating you and to management.<\/p>\n<h4>3.4 Checking eligibility for reduced rates<\/h4>\n<p>For our reduced rates (among others for people of AHV retirement age, children and young people, and other eligible groups) we have to verify once that the conditions are met.<\/p>\n<ul>\n<li>As a rule we verify the document <strong>by looking at it<\/strong> and do not make a copy.<\/li>\n<li>We record <strong>only the date of birth<\/strong>, or the fact that the condition is met, together with the date of the check.<\/li>\n<li>In some cases the document is photographed for the purpose of the check, for instance where a second opinion is needed. The image is used solely for that purpose, is not circulated further internally, and is deleted once the check is complete, at the latest after 30 days.<\/li>\n<li>We do <strong>not<\/strong> record the AHV social security number. Under Art. 153c of the Swiss Federal Act on Old-Age and Survivors' Insurance it may only be used systematically by designated bodies; a massage practice is not one of them.<\/li>\n<li>The check is carried out <strong>once<\/strong>. Once it is recorded, we will not ask you again.<\/li>\n<\/ul>\n<h4>3.5 When you contact us by e-mail, SMS or phone<\/h4>\n<p>We process your contact details and the content of your enquiry. Confirmations, reminders and replies are logged so that we can establish whether a message was delivered. Since August 2026 we also store the text of SMS messages we send, and the subject line of e-mails.<\/p>\n<h4>3.6 Gift vouchers<\/h4>\n<p>When you buy a voucher in our online shop we process your order, invoicing and payment details and, where the voucher is sent to someone else, that person's details. Payment is handled by Stripe (cards and TWINT); we do not receive full card details.<\/p>\n<h4>3.7 Social media, Google Business Profile and reviews<\/h4>\n<p>Our website merely links to our pages on Facebook and Instagram. No plugins from these networks are embedded, so simply opening our pages transfers no data to them. Only when you click such a link do you reach the provider's site, where your data is then processed under their own terms. The same applies to our Google Business Profile. There we see your public posts, the messages you send us, and aggregated, non-personal statistics.<\/p>\n<p>On our website we display reviews that you have published publicly on Google yourself. We do not invite you by e-mail or SMS to leave a review.<\/p>\n<p>We do not send a newsletter.<\/p>\n<h3>4. Cookies, analytics and session recording<\/h3>\n<p><strong>Necessary cookies.<\/strong> These keep your session alive in the booking system and the shop. Booking and ordering do not work without them.<\/p>\n<p><strong>Google Analytics and Google Tag Manager<\/strong> (Google Ireland Limited). We measure how our pages are used in order to improve them. IP addresses are truncated. You can prevent collection using Google's browser add-on: <a href=\"https:\/\/tools.google.com\/dlpage\/gaoptout\">https:\/\/tools.google.com\/dlpage\/gaoptout<\/a><\/p>\n<p><strong>Session recording.<\/strong> In the booking system and on the website we record movement and click sequences in order to identify drop-offs and usability problems. What is recorded is mouse movement, clicks, scrolling and the page structure. <strong>Entries in form fields are not recorded in clear text.<\/strong> Recordings are deleted automatically: after 90 days in the booking system, after 30 days on the website.<\/p>\n<h3>5. Who we share data with<\/h3>\n<p>We do not sell data. We pass it on only where this is necessary to run our business or where we are legally obliged to. Our service providers are contractually bound to process data only on our instructions.<\/p>\n<table style=\"width:100%;border-collapse:collapse;margin:1em 0;\">\n<thead>\n<tr>\n<th style=\"text-align:left;border-bottom:2px solid #ddd;padding:6px 8px;\">Service provider<\/th>\n<th style=\"text-align:left;border-bottom:2px solid #ddd;padding:6px 8px;\">Purpose<\/th>\n<th style=\"text-align:left;border-bottom:2px solid #ddd;padding:6px 8px;\">Registered office<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Hohl IT e.U. (\"Alwyzon\")<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Hosting of website and voucher shop<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Vienna, Austria (EU)<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Multimedia Networks AG (\"Hoststar\")<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Domain administration<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Fraubrunnen, Switzerland<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Vercel Inc.<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Operation of the booking system, servers in Frankfurt<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">USA<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Supabase Inc.<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Booking system database, servers in Frankfurt<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">USA<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Google Ireland Ltd.<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">E-mail service, analytics, Business Profile<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Ireland (EU)<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Helpwise (SaaS Labs Inc.)<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">shared mailboxes for customer enquiries<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">USA<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Resend<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Sending the booking system's e-mails<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">USA<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">BulkGate s.r.o.<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Sending SMS<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Czech Republic (EU)<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Twilio Inc.<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Sending SMS (fallback)<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">USA<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Stripe<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Payment processing in the voucher shop<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">USA \/ Ireland (EU)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Beyond this we disclose data only where we are legally obliged to do so, for instance to public authorities.<\/p>\n<h3>6. Transfers abroad<\/h3>\n<p>Some of the providers listed above are based outside Switzerland, mainly in the EU and the USA. For the EU, the Swiss Federal Council has recognised an adequate level of data protection. For the USA we rely on the Swiss-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the standard contractual clauses recognised by the FDPIC.<\/p>\n<p>Where data is held by a US company, access by US authorities under US law cannot be entirely ruled out, even when the data is stored in Europe.<\/p>\n<h3>7. How long we keep data<\/h3>\n<table style=\"width:100%;border-collapse:collapse;margin:1em 0;\">\n<thead>\n<tr>\n<th style=\"text-align:left;border-bottom:2px solid #ddd;padding:6px 8px;\">Data<\/th>\n<th style=\"text-align:left;border-bottom:2px solid #ddd;padding:6px 8px;\">Period<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Bookings and payments with accounting relevance<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">10 years (Art. 958f CO)<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Customer account and contact details<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">for the duration of the customer relationship, at the latest 5 years after the last appointment<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Treatment notes<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">for the duration of the customer relationship<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Proof of eligibility (date of birth, date of check)<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">for the duration of the customer relationship<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Content of SMS sent and e-mail subject lines<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">24 months<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Session recordings, booking system<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">90 days<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Session recordings, website<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">30 days<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">Server logs<\/td>\n<td style=\"border-bottom:1px solid #eee;padding:6px 8px;vertical-align:top;\">30 days<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>After that, data is deleted or anonymised so that it can no longer be linked to you.<\/p>\n<h3>8. Data security<\/h3>\n<p>All connections to our sites are encrypted (TLS). Access to the booking system is personal and role-based; staff see only what they need for their work. The database is backed up daily. Our staff are bound to confidentiality.<\/p>\n<h3>9. Your rights<\/h3>\n<p>You have the right<\/p>\n<ul>\n<li>to know whether and what data we process about you (right of access, Art. 25 revFADP),<\/li>\n<li>to have incorrect data corrected,<\/li>\n<li>to request deletion of your data, unless a statutory retention obligation applies,<\/li>\n<li>to object to processing,<\/li>\n<li>to receive your data in a common format (Art. 28 revFADP),<\/li>\n<li>to withdraw consent you have given at any time.<\/li>\n<\/ul>\n<p>Please contact us at the address given in section 1. We will respond within 30 days. We may ask you to prove your identity.<\/p>\n<p>You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.<\/p>\n<h3>10. Automated individual decisions<\/h3>\n<p>We do not take decisions about you that are based solely on automated processing and that would have legal effect or seriously disadvantage you.<\/p>\n<h3>11. Changes<\/h3>\n<p>We update this policy when our processing changes. The version published on this page, bearing the date given above, is the applicable one.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Last updated: 31 August 2026 We process personal data in accordance with the revised Swiss Federal Act on Data Protection (revFADP). This policy explains what data we process, why, who receives it and what rights you have. 1. Controller Thai Style GmbHSumatrastrasse 25 (side entrance Sumatrasteig)8006 Zurich, Switzerland Phone: +41 44 500 50 [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"class_list":["post-28597","page","type-page","status-publish","hentry","post-wrapper","thrv_wrapper"],"_links":{"self":[{"href":"https:\/\/tida-thai-massage.ch\/en\/wp-json\/wp\/v2\/pages\/28597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tida-thai-massage.ch\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/tida-thai-massage.ch\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/tida-thai-massage.ch\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/tida-thai-massage.ch\/en\/wp-json\/wp\/v2\/comments?post=28597"}],"version-history":[{"count":0,"href":"https:\/\/tida-thai-massage.ch\/en\/wp-json\/wp\/v2\/pages\/28597\/revisions"}],"wp:attachment":[{"href":"https:\/\/tida-thai-massage.ch\/en\/wp-json\/wp\/v2\/media?parent=28597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}