Privacy Policy

Vékony Massagen (sole proprietorship) Andrea Vékony Fliederstrasse 9, EG 5430 Wettingen, Switzerland E-mail: andrea.vekony@gmail.com

You can reach me at this address with any questions about data protection.

I process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, processing is based on the performance or preparation of a contract (Art. 6(1)(b) GDPR) and on my legitimate interest in operating the website securely (Art. 6(1)(f) GDPR). This website uses no analytics, tracking or advertising services and no AI services that process your personal data. Where AI was used to create the website is explained on the “AI Transparency” page.

When you visit the website, the hosting provider stores technically necessary access data (IP address, date and time, page requested, browser and operating system). This data is used solely for secure and stable operation, is not combined with other data and is deleted after a short period.

The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The servers are located in the European Union. Fonts and images are served directly from this server; no content is loaded from Google Fonts or other third parties.

The website was built by Engimation GmbH, Vordere Höhenstrasse 1, 5430 Wettingen, Switzerland, which also provides its technical support. For maintenance, security updates and troubleshooting, Engimation may access the web server and may come into contact with the data stored there (e.g. server log files). Engimation processes this data only on my behalf and according to my instructions (processing on behalf under Art. 9 FADP) and does not use it for its own purposes.

When you use the contact form or the appointment request, I process the details you enter: name, e-mail address, phone number (optional), requested offer, preferred date, your message and the selected language. This data is used solely to handle your request and any follow-up questions. After an appointment request, you automatically receive a confirmation of receipt at the email address you entered.

Contact messages and appointment requests are stored in the admin area on the web server (see section 4) so that I can answer, confirm or decline them; for appointment requests the time shows as booked in the calendar. By e-mail I only receive a notice without your details. Only I have access to them, via a login with password and a second factor (a code on my phone), and Engimation as part of its technical support. The public booking calendar only shows which times are booked – no names and no other details. Appointment requests are deleted automatically 180 days after the appointment, declined or cancelled requests after the day in question. Contact messages are deleted automatically 90 days after they arrive.

When I reply to you by e-mail, the correspondence runs through my mailbox. It is operated by Google (Google Ireland Limited, Dublin, Ireland); data may also be processed in the USA. Google LLC is certified under the Swiss-U.S. Data Privacy Framework.

I keep your request for as long as necessary to handle it and any resulting treatment, and delete it afterwards unless statutory retention obligations (e.g. for invoices) apply.

For a course registration I additionally process your address, your electronic signature (the typed name) and the time and wording of the course contract you accepted. This data is kept in the protected admin area on the web server; you receive a copy of the contract by e-mail. I keep course contracts and payments as business records for 10 years (art. 958f Swiss Code of Obligations). Registrations without payment (cancelled or never paid) are deleted 30 days after the course.

To protect the form against automated spam, your IP address is shortened and then made unrecognisable with a secret key (pseudonymised). Only this value and the time of the request are stored; entries are deleted automatically after 24 hours. When a form opens, your browser also receives a one-time time stamp signed by the server, containing no personal data. So that nobody can fill the calendar with fake requests, the number of open requests per e-mail address is limited; this only counts the requests already stored and creates no additional data. No external services such as reCAPTCHA are used.

Information about your health is sensitive personal data. Please only share in the form what is needed to prepare your session. I treat such information confidentially and use it solely for your treatment.

This website sets no tracking or advertising cookies. Only your chosen language and the fact that you closed the cookie notice are kept in your browser’s local storage. See the Cookie Policy for details.

The home page embeds a video from YouTube (Google Ireland Limited, Dublin, Ireland). It only loads after you actively click “Play video”. Only then is a connection made to YouTube in privacy-enhanced mode (youtube-nocookie.com), transmitting in particular your IP address to Google; processing in the USA is possible. More information: policies.google.com/privacy

The website contains links to other services (e.g. swissfluidart.com, the Healy partner shop, Google Maps and WhatsApp). When you click them you leave this website; the respective operators are responsible for data processing there.

The WhatsApp button is a simple link: nothing is sent to WhatsApp unless you tap it. If you message or call me on WhatsApp, WhatsApp (WhatsApp Ireland Limited, Dublin, Ireland; part of Meta) processes your data under its own terms; processing in the USA is possible. Please do not share detailed health information via WhatsApp.

I do not sell personal data or pass it on for advertising purposes. Data is only disclosed to the service providers named above (hosting, technical support, e-mail) where necessary for operation, or where I am legally obliged to do so.

You have the right to access your personal data, to rectification, erasure and restriction of processing, to object, and to data portability. Please contact the e-mail address above.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). Persons in the EU may contact the data protection authority of their country.

I update this privacy policy when the website or legal requirements change. The version published here applies.