Privacy Policy

We take the protection of your personal data seriously and treat your data confidentially, in accordance with the revised Swiss Data Protection Act (revFADP) and — for visitors from the EU/EEA — the GDPR.

This policy explains which personal data we collect on facetraining.ch, how we use it and what rights you have.

Personal data is any data by which you can be personally identified (e.g. name, email address, IP address).

The controller for data processing on this website is CuraCap Schweiz GmbH (FACE-Institut brand), Schänzlistrasse 37, 2545 Selzach, Switzerland, business ID CHE-158.321.901, email office@facetraining.ch.

Representative in the EU pursuant to Art. 27 GDPR: CuraCap GmbH, Semmelweisstrasse 19, 79576 Weil am Rhein, Germany, e-mail: office@facetraining.ch.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. On each request, technical log data is processed (IP address, date/time, requested URL, HTTP status code, data volume, referrer, user agent).

Delivery is primarily via the Vercel Edge Network. In individual cases a transfer to third countries (in particular the USA) may take place. Legal basis: Art. 6(1)(f) GDPR / overriding legitimate interest in stable, secure provision.

Without your consent we store only your language preference and consent status; individual functional third-party services (booking widget, map) run on the basis of overriding interests (see sections 3 and 7). Analytics and marketing services run only after you have agreed.

Technically necessary storage: language preference and consent status (Local Storage). This storage is required to operate the website and takes place without consent.

After consent: Google Analytics 4, Meta Pixel, Vercel Web Analytics and Speed Insights, and our own anonymised behaviour measurement (see section 5). You can withdraw your consent at any time for the future — via the "Cookie settings" link in the footer. After withdrawal, no further analytics data is collected.

Only after you have given consent do we measure how this website is used, in order to improve its content and structure. We do not pass on names, email addresses or any other contact data we hold to these services; however, they process technical data such as IP address and device and usage information, which may in individual cases relate to an identifiable person.

Services used: Google Analytics 4 (Google Ireland Ltd.; IP anonymisation active), Meta Pixel (Meta Platforms Ireland Ltd.), Vercel Web Analytics and Speed Insights (Vercel Inc.). These services may involve a transfer to third countries (in particular the USA). The legal basis is your consent (Art. 6(1)(a) GDPR; for Switzerland Art. 31(1) revFADP).

Our own behaviour measurement for offer optimisation: We additionally record anonymised interaction signals (page visited, language, scroll depth, visibility of individual page sections, dwell time, clicks on enquiry buttons and the successful submission of the enquiry form — without the form's content). For this we use a random identifier that rotates per session in your browser's session storage; no cross-session recognition (fingerprinting) takes place. The sole purpose is to improve and optimise this website.

This behavioural data is processed on our behalf by our optimisation platform (Online Marketing Empire, OME) as a processor. You can withdraw this measurement at any time via the cookie settings in the footer; the rotating identifiers are then discarded and no further behavioural data is sent.

If you contact us by email, your details (name, email address, content of the enquiry) are stored to handle your request and any follow-up questions. Legal basis: Art. 31(2)(a) revFADP / overriding legitimate interest; for EU visitors additionally Art. 6(1)(b) and (f) GDPR.

Enquiry form: If you use our enquiry form, we process the details you enter (name, email address, your message) to handle your enquiry and to prepare a contract. To organise our customer contacts, these details are stored on our behalf in our CRM system GoHighLevel (HighLevel Inc., Dallas, Texas, USA — “LeadConnector” platform) acting as a processor. A transfer to the USA takes place. Legal basis: Art. 31(2)(a) revFADP; for EU visitors Art. 6(1)(b) GDPR (pre-contractual steps).

Error diagnostics (Sentry): To keep our enquiry endpoint technically reliable we use the error diagnostics service Sentry (Functional Software, Inc., San Francisco, USA). In the event of technical errors, error messages and technical metadata are processed server-side; the service is configured not to transmit personal data by default. Legal basis: overriding legitimate interest in stable, error-free operation (Art. 31(2)(a) revFADP / Art. 6(1)(f) GDPR).

Retention: your enquiry data is deleted once it is no longer required. Mandatory statutory retention obligations (in particular Art. 958f CO) remain unaffected.

Scheduling (GoHighLevel / LeadConnector): On the booking pages we embed the booking widget of our CRM provider HighLevel, Inc. (1801 N. Lamar, Suite 600, Dallas, Texas 75202, USA; widget infrastructure “LeadConnector”, leadconnectorhq.com) so you can pick a slot for an initial consultation directly. When the widget loads, a connection to HighLevel/LeadConnector is established and your IP address and technical device information are transmitted; when you book, the details you enter (name, email address, selected slot, optional information) are processed in addition. A transfer to the USA takes place; HighLevel, Inc. and LeadConnector are certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection. The purpose is to arrange and manage appointments. Legal basis: Art. 31(2)(a) revFADP / overriding legitimate interest in straightforward scheduling; for EU visitors additionally Art. 6(1)(b) and (f) GDPR.

Map (OpenStreetMap/uMap): On the locations page we embed an interactive map from umap.osm.ch (uMap, operated by the Swiss OpenStreetMap association, Verein OpenStreetMap Schweiz). When the map loads, a connection to that service is established and your IP address and technical device information are transmitted in order to deliver the map tiles. The purpose is to display the locations of the FACE trainers. Legal basis: overriding legitimate interest in a clear presentation of locations (Art. 31(2)(a) revFADP / Art. 6(1)(f) GDPR).

Fonts: The fonts used on this website are stored locally on our server. No connection to servers of Google or other font providers is established when the page is opened.

Video (YouTube): We embed one video testimonial via YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). The embed uses a click-to-load solution: as long as you do not start the video yourself, only a preview image stored on our own server is shown and no connection to YouTube is established. Only when you click the play button is the video loaded in privacy-enhanced mode (youtube-nocookie.com). Your IP address and technical device information are then transmitted to Google; a transfer to the USA (Google LLC) may take place. The legal basis is the consent you give by clicking (Art. 31(1) revFADP or Art. 6(1)(a) GDPR). For further information see Google's privacy policy: https://policies.google.com/privacy

You have the right to information (Art. 25 revFADP / Art. 15 GDPR), data portability, rectification and erasure. Where processing is based on consent, you may withdraw it at any time for the future.

An informal message to office@facetraining.ch is sufficient. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern).

Where we transfer personal data to the USA or other third countries (see the sections above), we base the transfer on the respective provider's certification under the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework and/or on the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR; Art. 16(2)(d) revFADP).

We use TLS encryption (HTTPS) for all data transfers. Personal data is stored only as long as required for the stated purposes or by statutory retention obligations.

The version of this privacy policy published on this page at any given time is authoritative.