Privacy Policy

1. Responsible persons and scope

Responsible for the processing of personal data described in this data protection declaration in connection with the LuXme Beauty Club is:

UNEW Beauty Couture AG
Sinserstrasse 8
6330 Cham
Switzerland

Email: info@unew.ch

This data protection declaration applies exclusively to the LuXme Beauty Club and its offer for private end customers in Switzerland.

2. Principles of data processing

We process personal data to the extent that this is necessary for the operation of our offering, the processing and management of appointment requests, the implementation of agreed services, communication, the security of our systems, the fulfillment of legal obligations or the protection and enforcement of legal claims.

We only process the data necessary for the respective purpose and treat it confidentially. We obtain consent where it is required by applicable law. Operational and contractual processing is not based solely on consent.

3. What personal data we process

Depending on the contact and usage, we process in particular master and contact data, address data, information on appointment requests and agreed appointments, treatment and service information, communication content, technical access and usage data, proof of consent and confirmation, security and authentication data and, if necessary, payment, invoice and accounting data.

We can also document price, duration, treatment, location and status information at the time of an appointment request and any changes thereto. Where this is necessary for professional assessment and treatment safety, treatment-relevant information can be added; Section 9 applies to this.

4. Website, hosting and technical data

Website, operational applications, databases, email transport and backups are operated on Hostpoint infrastructure. The primary hosting, database and email infrastructure is located in Switzerland.

When you access the website, technical data such as IP address, time of access, page accessed, browser and device information and other log data can be processed. This serves to provide the website, analyze errors, ensure security and prevent misuse.

5. Cookies and consent settings

LuXme uses its own consent system. The cookie luxme_consent stores for 365 days whether necessary functions and analytics are permitted. Necessary functions are required for the operation of the website. Analytics is rejected by default.

You can grant, reject or change your choices later via the cookie settings. Regardless of this, Google Maps and external Instagram/Meta content will only be loaded after a separate activation.

6. Google Analytics

With your Analytics consent, we use Google Analytics 4 from Google with the measurement ID G-37Y7KQLJFM to evaluate the use of the website. In particular, technical access, device and browser information may be transmitted to Google and processed by Google.

Google Analytics will only load after you agree to Analytics. You can change or revoke this consent at any time using the cookie settings with future effect.

7. Google Maps and external content

On the contact page we provide Google Maps as external content. The map does not load automatically. Only when you explicitly activate the card will a connection to Google be established; Technical query, device and access data can be transmitted to Google.

Posts in the news section may contain images or other content provided by Instagram or Meta. This content is not loaded automatically. Only after your explicit activation will a connection to Meta or Instagram be established; Technical query, device and access data can be transmitted.

With normal links to social networks, data is only transmitted to the respective provider when you follow the link.

8. Appointment requests and customer management

A request submitted online is initially an appointment request. A binding appointment only occurs with confirmation by LuXme.

For an appointment request, we can process information about the desired treatment and variant, any additional treatments, location, desired expert, date and time as well as name, email address, telephone number, postal address and a voluntary message. There are also technical request and session data, the IP address, information on price and duration at the time of the request as well as appointment status and change history.

When submitting, you accept the terms and conditions and confirm that you have read the privacy policy. We document the time and the versions that apply. Acknowledgment of the data protection declaration does not constitute general consent to all data processing.

9. Information relevant to treatment

Before or during treatment, we can inquire about circumstances relevant to the treatment if this is necessary for professional assessment, treatment safety or the recognition of contraindications. In individual cases, this may also include health-related information.

LuXme does not store such information electronically as a treatment or health record. Please do not submit any health data or information about allergies, medications or contraindications in the free message field when requesting an appointment.

10. Email and WhatsApp communications

We use email for one-time codes and security messages, for communication regarding appointment requests and appointments, for customer notifications and for internal appointment notifications. Appointment-related emails can contain contact, treatment, appointment, location and information about the desired expert. Email transport takes place via Hostpoint.

LuXme may use WhatsApp Business for appointment-related communications, such as confirmations, reminders or other transactional communications about an appointment. Name, telephone number, desired or agreed treatment, appointment time and appointment-related communication content may be processed. The phone number can be used as a recipient identifier. You can also start a WhatsApp communication yourself via the published link.

WhatsApp is provided by Meta. Meta can process personal data outside of Switzerland. The described use of WhatsApp is not marketing communication and does not include the automated transmission of information about contraindications, allergies, medications or diagnoses.

11. Video surveillance

The entrance area and publicly accessible customer areas are under video surveillance for security purposes. This is indicated at the entrance. Separate treatment rooms and treatment areas that are not open to the public are not monitored. The recordings are not monitored continuously.

The regular retention period is 72 hours. Recordings that are necessary to clarify an incident or for legal claims can be retained for longer. Access is limited to authorized persons and, if technically or operationally necessary, service providers. If necessary, relevant recordings can be disclosed, in particular, to legal representatives, insurance companies, responsible authorities or courts.

12. Service providers and recipients

We may disclose personal data to service providers to the extent this is necessary for the purposes described. This includes in particular Hostpoint for hosting, databases, email transport and backups as well as Google and Meta for the functions described in this data protection declaration. These service providers process data as part of their respective tasks.

Other recipients may include, in particular, legal representatives, insurance companies, auditing and accounting offices, authorities and courts, provided disclosure is necessary or provided for by law. There is no online payment integration for the appointment request submitted online. We only process payment and accounting data to the extent that this is necessary for payment, invoicing or legal accounting obligations.

13. Announcement abroad

Google and Meta or WhatsApp can process personal data outside of Switzerland. If personal data is disclosed to a country without an adequate level of data protection, we will use, where necessary, the guarantees or legal mechanisms provided for under applicable Swiss data protection law.

14. Retention and deletion

We retain personal data depending on its category and purpose:

• Relevant customer, contract, appointment, status, history and evidence data are generally retained for ten years.
• Message content and internal information about message processes are retained for 365 days.
• Unprocessed technical input data from WhatsApp is retained for 168 hours.
• One-time codes, sessions and temporary verification and security data are only retained for the short term.
• Video recordings generally last for 72 hours; in the event of relevant incidents, clause 11 applies.

After the applicable ten-year period has expired, personal identifiers will be deleted or irreversibly anonymized in accordance with the retention process used. Non-identifying contract or system information may be retained to the extent necessary for integrity or statistics. Legal obligations, ongoing proceedings or the securing of claims may require longer storage in individual cases.

15. Data Security

We take appropriate technical and organizational measures to protect personal data from loss, unauthorized access, misuse, alteration or unauthorized disclosure.

For relevant customer areas, we use email one-time codes and process temporary authentication, session and security data to verify identity, protect access and prevent misuse. Absolute security cannot be guaranteed.

16. Data Subject Rights and Complaints

Within the framework of applicable Swiss data protection law, you have the right, in particular, to request information about the processing of your personal data and to have incorrect personal data corrected. Depending on the legal requirements, you can also request the deletion or release of personal data, the restriction of processing or an objection to certain processing.

If processing is based on your consent, you can revoke it at any time with future effect. To exercise your rights, you can contact us using the contact details listed in section 1. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC).

17. Changes and Contact

We may adapt this privacy policy if our data processing or legal requirements change. The version published on this website is authoritative.

Please direct questions about data protection to:

UNEW Beauty Couture AG
Sinserstrasse 8
6330 Cham
Switzerland

Email: info@unew.ch