What this covers
This privacy policy explains how your personal data is processed when you book an appointment with Demo Spa Basel through this page. Processing is governed by the Swiss Federal Act on Data Protection (FADP).
1. Controller
The business you are booking with (address above) is responsible for processing your data.
The technical platform is provided by Treffli, Basel (hallo@treffli.ch). Treffli processes your data only on this business's behalf and instructions (processor within the meaning of Art. 9 FADP).
2. What data we process
We process only the data needed for your appointment:
• Contact details: name, email address and phone number.
• Appointment data: the service, date and time, the team member you chose, and any notes you add in the booking form.
• If you explicitly opt in: your consent to receive occasional offers and reminders.
We do not use advertising or tracking cookies and we do not build personal profiles.
3. Purposes
We process your data to:
• arrange, carry out and manage your booked appointment;
• contact you about your appointment (confirmation, change, reminder);
• meet legal obligations;
• send you occasional offers or reminders – only with your consent.
Processing follows the principles of good faith, proportionality and purpose limitation (Art. 6 FADP). Name, email and phone number are required to make a booking; without them we cannot carry out the appointment.
4. Recipients of your data
Your data is accessible to the business's staff, as far as needed for the appointment, and to Treffli as the technical service provider.
Storage: your data is stored with our hosting provider in Switzerland (Zurich data centre).
We do not sell your data and do not pass it to third parties for advertising.
5. Transfers abroad
Your booking data is stored in Switzerland (Zurich data centre); email sending (Swiss provider) and SMS sending also take place in Switzerland.
The booking page itself is delivered by our hosting provider Vercel with servers in the EU (Frankfurt, Germany). EU/EEA countries provide an adequate level of data protection under the Federal Council's decision (Art. 16 para. 1 FADP).
If you use the chat assistant on this page, your chat messages are processed in the EU (AWS, EU data centres) to generate the reply. The same adequacy standard applies (Art. 16 para. 1 FADP). Using the chat is optional; you can complete a booking entirely without it.
If you use the voice assistant on this page, your voice data (what you say, including the details you provide) is transmitted to OpenAI in the USA for processing. The USA does not provide a generally adequate level of data protection; the transfer relies on contractual safeguards with OpenAI (Art. 16 para. 2 FADP). The voice assistant only starts when you actively open it and grant microphone access; using it is entirely voluntary, and you can book via the form or the chat without it.
No further disclosure abroad takes place.
6. Retention
We keep your data for as long as needed to manage your appointments and to meet legal retention duties. After that it is deleted or anonymised. You can request deletion at any time (see section 8).
7. Data security
Your data is transmitted encrypted (TLS). Access is limited to the business and the people needed to run the service. We take appropriate technical and organisational measures to protect your data (Art. 8 FADP).
8. Your rights
Under the FADP you have, in particular, the right to:
• obtain information about the data we process about you (Art. 25 FADP);
• have inaccurate data corrected;
• have your data deleted;
• object to the processing;
• receive or transfer your data (data portability, Art. 28 FADP);
• withdraw any consent given (e.g. for reminders or offers) at any time.
To exercise these rights, contact the business named above (hello@demo-spa-basel.ch). You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Bern.
9. Changes
We may update this privacy policy. The version published on this page applies.