Privacy policy
Cookie settings
Overview
1. What is this privacy policy about?
uniCKat aesthetics by Kaya GmbH (hereinafter also referred to as “we”, “us”) obtains and processes personal data concerning you or also other persons (so-called “third parties”). We use the term “data” here synonymously with “personal data” or “personal information”.
Personal data” refers to data relating to specific or identifiable persons, i.e. conclusions about their identity are possible on the basis of the data itself or with the corresponding additional data. “Particularly sensitive personal data” is a category of personal data that current data protection law provides special protection for. Personal data requiring special protection include, for example, data revealing racial and ethnic origin, health data, information on religious or ideological beliefs, biometric data for identification purposes and information on trade union membership. In para. 3 you will find information about the data we process within the scope of this privacy policy. “Processing” means any handling of personal data, e.g., obtaining, storing, using, adapting, disclosing and deleting.
In this Privacy Policy, we describe what we do with your information when you use https://unickataesthetics.ch, other of our websites or our apps (collectively, the “Website”), obtain our services or products, otherwise interact with us under a contract, communicate with us or otherwise deal with us. If applicable, we will notify you by timely written notice of additional processing activities not mentioned in this Privacy Policy. In addition, we may inform you separately about the processing of your data, e.g. in consent forms, contract terms, additional privacy statements, forms and notices.
When you provide or disclose information about other people, such as family members, co-workers, etc., we assume that you are authorized to do so and that the information is accurate. By submitting data via third parties, you confirm this. Please also ensure that these third parties have been informed of this privacy policy.
This Privacy Policy is designed to comply with the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (“DPA”) and the revised Swiss Data Protection Act (“revDSG”). However, whether and to what extent these laws are applicable depends on the individual case.
2. Who is responsible for processing your data?
For the data processing of uniCKat aesthetics by Kaya GmbH described in this data protection declaration, uniCKat aesthetics by Kaya GmbH, Luzernerstrasse 141 H, CH-6014 Lucerne is responsible under data protection law, unless otherwise communicated in individual cases.
You can contact us for your data protection concerns and to exercise your rights under sec. 11 achieve as follows:
uniCKat aesthetics by Kaya GmbH
Luzernerstrasse 141 H
CH-6014 Lucerne
info@unickataesthetics.ch
3. what data do we process?
We process different categories of data about you. The main categories are as follows:
Technical data: When you use our website or other electronic offerings, we collect the IP address of your terminal device and other technical data to ensure the functionality and security of these offerings. This data also includes logs recording the use of our systems. We usually keep technical data for 6 months. In order to ensure the functionality of these offers, we may also assign an individual code to you or your end device (e.g. in the form of a cookie, cf. 12). The technical data in itself does not allow any conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, they may be linked to other categories of data (and thus possibly to your person).
Technical data includes, among other things, the IP address and information about the operating system of your terminal device, the date, region and time of use, and the type of browser you use to access our electronic offerings. This can help us submit the correct formatting of the website or show you a website customized for your region, for example. Based on the IP address, we know via which provider you access our offers (and thus also the region), but we can usually not deduce who you are from this. This changes when you create a user account, for example, because personal data can then be linked to technical data (e.g., we see which browser you use to access an account through our website). Examples of technical data include logs that are generated by our systems (e.g., the log of user logins to our website).
Registration data: Certain offers and services (e.g. login areas of our website, newsletter dispatch, etc.) can only be used with a user account or registration, which can be made directly with us or via our external login service providers. In doing so, you must provide us with certain data and we collect data about the use of the offer or service. If you redeem a uniCKat aesthetics by Kaya GmbH voucher with us, we may require certain data from you when redeeming it. If we issue you a voucher for one of our contractual partners, we may transmit certain of your registration data to the respective contractual partner or receive such data (cf. Digit. 7). Access controls to certain facilities may generate registration data; depending on the control system, biometric data may also be generated. We usually keep registration data for 12 months after the end of the use of the service or the termination of the user account.
Communication data: If you are in contact with us via the contact form, by e-mail, telephone or chat, by letter or via other means of communication, we record the data exchanged between you and us, including your contact data and the marginal data of the communication. If we record or listen to telephone conversations or video conferences, e.g. for training and quality assurance purposes, we will specifically draw your attention to this. Such recordings may only be made and used in accordance with our internal guidelines. You will be informed whether and when such recordings take place, e.g. by a display during the video conference in question. If you do not wish to be recorded, please inform us or terminate your participation. If you simply do not want your image to be recorded, please turn off your camera. If we want or need to establish your identity, e.g. in the case of a request for information submitted by you, a request for media access, etc., we collect data to identify you (e.g. a copy of an ID). We usually keep this data for 12 months from the last exchange with you. This period may be longer insofar as this is necessary for reasons of evidence or to comply with legal or contractual requirements or for technical reasons. Emails in personal mailboxes and written correspondence are generally retained for at least 10 years. Recordings of (video) conferences are usually kept for 24 months. Chats are usually retained for 2 years.t.
Master data: We refer to the basic data that we require in addition to the contractual data (see below) for the processing of our contractual and other business relationships or for marketing and advertising purposes as master data, such as name, contact data and information e.g. about your role and function, your bank account(s), your date of birth, customer history, powers of attorney, signature authorizations and declarations of consent. We process your master data if you are a customer or other business contact or work for such a customer (e.g. as a contact person of the business partner), or because we want to address you for our own purposes or the purposes of a contractual partner (e.g. as part of marketing and advertising, with invitations to events, with vouchers, with newsletters, etc.). We receive master data from you yourself (e.g. when making a purchase or as part of a registration), from bodies for which you work, or from third parties such as our contractual partners, associations and address dealers, and from publicly accessible sources such as public registers or the Internet (websites, social media, etc.). We may also process health data and information about third parties as part of master data. We generally retain this data for 10 years from the last exchange with you, but at least from the end of the contract. This period may be longer insofar as this is necessary for reasons of proof or to comply with legal or contractual requirements or is technically required. For pure marketing and advertising contacts, the period is usually much shorter, usually no more than 2 years since the last contact.
Contract data: This is data that arises in connection with the conclusion or execution of a contract, e.g. information about contracts and the services to be provided or rendered, as well as data from the run-up to the conclusion of a contract, the data required or used for processing and data on reactions (e.g. complaints or information on satisfaction, etc.). This also includes health data and information about third parties, e.g. hereditary diseases in the family. We generally collect this data from you, from contractual partners and from third parties involved in the processing of the contract, but also from third-party sources (e.g. providers of creditworthiness data) and from publicly accessible sources. We usually keep this data for [10] years from the last contract activity, but at least from the end of the contract. This period may be longer insofar as this is necessary for reasons of proof or to comply with legal or contractual requirements or is technically required.
Behavioral and preference data: Depending on the relationship we have with you, we try to get to know you and better tailor our products, services and offers to you. For this purpose, we collect and use data about your behavior and preferences. We do this by evaluating information about your behavior in our area, and we may also supplement this information with information from third parties, including publicly available sources. Based on this, we can calculate, for example, the probability that you will use certain services or behave in a certain way. The data processed for this purpose is partly already known to us (e.g. when you use our services), or we obtain this data by recording your behavior (e.g. how you navigate on our website). We anonymize or delete this data when it is no longer meaningful for the purposes pursued, which may be between 2-3 weeks and 24 months (for product and service preferences) depending on the nature of the data. This period may be longer insofar as this is necessary for reasons of proof or to comply with legal or contractual requirements or is technically required. We describe how tracking works on our website in Ziff. 12.
Many of the items listed in this no. 3 you provide us with the data yourself (e.g. via forms, in the course of communication with us, when using the website, etc.). You are not obliged to do so, subject to individual cases, e.g. within the framework of binding protection concepts (legal obligations). If you wish to enter into contracts with us or claim services, you must also provide us with data, in particular master data, contract data and registration data, as part of your contractual obligation under the relevant contract. When using our website, the processing of technical data is unavoidable. If you wish to gain access to certain systems or buildings, you must provide us with registration information. However, in the case of behavioral and preference data, you generally have the option of objecting or not giving consent.
As far as this is not inadmissible, we also take data from publicly accessible sources or receive data from authorities and other third parties.
4. For what purposes do we process your data?
We process your data for the purposes we explain below. Further instructions for the online area can be found in para. 12 and 13. These purposes or their underlying objectives represent legitimate interests of us and, where applicable, of third parties. You will find further information on the legal basis for our processing in sec. 5.
We process your data for purposes related to communication with you, in particular to respond to inquiries and assert your rights (section 11) and to contact you in the event of queries. For this purpose, we use in particular communication data and master data and, in connection with offers and services used by you, also registration data. We retain this information to document our communications with you, for training purposes, quality assurance, and follow-up.
We process data for the establishment, administration and processing of contractual relationships.
We process data for marketing purposes and relationship management, e.g. to send our customers and other contractual partners personalized advertising on products and services from us and from third parties (e.g. from advertising contractual partners). This can take place, for example, in the form of newsletters and other regular contacts (electronically, by mail, by telephone), via other channels for which we have contact information from you, but also as part of individual marketing campaigns (e.g. events, competitions, etc.) and may also include free services (e.g. invitations, vouchers, etc.). You can reject such contacts at any time (see at the end of this section). 4) or refuse or revoke consent to be contacted for advertising purposes. With your consent, we can target our online advertising on the Internet more specifically to you (see section 12). Finally, we also want to enable contractual partners of ours to address our customers and other contractual partners for advertising purposes (see section 7).
We further process your data for market research, to improve our services and operations, and for product development.
We may also process your data for security and access control purposes.
We process personal data to comply with laws, directives and recommendations from authorities and internal regulations (“Compliance”).
We also process data for the purposes of our risk management and as part of prudent corporate governance, including business organization and corporate development.
We may process your data for other purposes, e.g. as part of our internal processes and administration or for training and quality assurance purposes.
5. On what basis do we process your data?
Insofar as we ask you for your consent for certain processing (e.g. for the processing of particularly sensitive personal data, for marketing mailings, for the creation of personalized movement profiles and for advertising control and behavior analysis on the website), we will inform you separately about the corresponding purposes of the processing. You may revoke consents at any time with future effect by written notification (by post) or, where not otherwise specified or agreed, by e-mail to us; our contact details can be found in para. 2. for the revocation of your consent for online tracking, see para. 12. where you have a user account, a revocation or contact with us may also be carried out via the relevant website or other service, if applicable. Once we have received notification of the withdrawal of your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Where we do not ask for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in doing so, such as, in particular, in order to fulfill the obligations set out above under section 2. 4 described purposes and related objectives and to be able to implement appropriate measures. Our legitimate interests also include compliance with legal requirements, insofar as this is not already recognized as a legal basis by the applicable data protection law in each case (e.g., in the case of the GDPR, the law in the EEA and Switzerland). But this also includes the marketing of our products and services, the interest in better understanding our markets, and the safe and efficient management and further development of our company, including its operations.
If we receive sensitive data (e.g. health data, information on political, religious or ideological views, or biometric data for identification purposes), we may also process your data based on other legal grounds, e.g. in the event of disputes due to the need for processing for a possible lawsuit or the enforcement or defense of legal claims. In individual cases, other legal grounds may come into play, which we will communicate to you separately where necessary.
6. What applies to profiling and automated individual decisions?
We may add certain of your Personal Characteristics to the list of Personal Characteristics set forth in sec. 4 on the basis of your data (section 3) (“profiling”), if we want to determine preference data.but also to identify misuse and security risks, to perform statistical evaluations, or for operational planning purposes. For the same purposes, we may also create profiles, i.e., we may combine behavioral and preference data, as well as master and contract data and technical data assigned to you, to better understand you as a person with your different interests and other characteristics
7. To whom do we disclose your data?
In connection with our contracts, the Website, our services and products, our legal obligations, or otherwise to protect our legitimate interests and the other interests set out in para. 4, we also transfer your personal data to third parties, in particular to the following categories of recipients:
Service providers: We work with service providers in Germany and abroad who process data about you on our behalf or in joint responsibility with us, or who receive data about you from us in their own responsibility.
Contractual partners including customers: First of all, this refers to customers (e.g. service recipients) and other contractual partners of ours, because this data transfer results from these contracts. You will receive, for example, registration data on issued and redeemed vouchers, invitations, etc. If you are working for such a contractual partner yourself, we may also transmit data about you to them in this context. The recipients also include contractual partners with whom we cooperate.
Authorities: We may disclose personal data to offices, courts and other authorities in Germany and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. The authorities process data about you that they receive from us on their own responsibility.
Other persons: This refers to other cases where the inclusion of third parties arises from the purposes pursuant to para. 4 results.
All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).
8. Does your personal data also end up abroad?
As described in para. 7, we also disclose data to other entities. These are not only located in Switzerland. Your data can therefore be processed both in Europe and in Switzerland; in exceptional cases, however, in any country in the world.
Where a recipient is located in a country without adequate data protection legislation, we contractually oblige the recipient to comply with the applicable data protection legislation (for this purpose, we use the European Commission’s revised standard contractual clauses, which are retrievable here , unless it is already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exemption provision. An exception may apply in particular in the case of legal proceedings abroad, but also in cases of overriding public interests or if the processing of a contract requires such disclosure, if you have given your consent or if it is a matter of data made generally available by you, the processing of which you have not objected to.
9. How long do we process your data?
We process your data for as long as our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes require or storage is technically necessary. Further information on the respective storage and processing duration can be found for the individual data categories in section 3 and for the cookie categories in section 3. If there are no legal or contractual obligations to the contrary, we will delete or anonymize your data after the storage or processing period has expired as part of our normal processes.
10. How do we protect your data?
We take reasonable security measures to maintain the confidentiality, integrity and availability of your personal information, to protect it against unauthorized or unlawful processing, and to protect against the risks of loss, accidental alteration, unauthorized disclosure or access.
11. What rights do you have?
Applicable data protection law grants you the right to object to the processing of your data in certain circumstances, in particular that for direct marketing purposes, profiling used for direct marketing and other legitimate interests in processing.
To help you control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:
The right to request information from us as to whether and what data we are processing from you;
the right to have us correct data if it is inaccurate;
the right to request the deletion of data;
the right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller;
the right to withdraw consent, insofar as our processing is based on your consent;
the right to receive, upon request, further information necessary for the exercise of these rights;
If you wish to exercise any of the above rights against us, please contact us in writing, at our premises or, unless otherwise stated or agreed, by e-mail; our contact details can be found in para. 2. so that we can exclude misuse, we must identify you (e.g. with a copy of your ID, if this is not possible otherwise).
In particular, we may need to process and store your personal data to fulfill a contract with you, to protect our own legitimate interests, such as asserting, exercising or defending legal claims, or to comply with legal obligations. To the extent legally permissible, in particular to protect the rights and freedoms of other data subjects and to safeguard interests worthy of protection, we may therefore also reject a data subject request in whole or in part (e.g. by blacking out certain content that relates to third parties or our trade secrets).
12. Do we use online tracking and online advertising techniques?
We use a variety of technologies on our website that allow us and third parties we engage to recognize you when you use our website and, in some circumstances, to track you across multiple visits. In this section we will inform you about it.
In essence, this is so that we can distinguish accesses by you (via your system) from accesses by other users, so that we can ensure the functionality of the website and carry out evaluations and personalizations. We do not intend to infer your identity in doing so, although we may do so to the extent that we or third parties engaged by us can identify you by combining it with registration data. Even without registration data, however, the technologies used are designed in such a way that you are recognized as an individual visitor each time you access the site, for example by our server (or the servers of third parties) assigning you or your browser a specific recognition number (so-called “cookie”).
We use such techniques on our website and allow certain third parties to do so as well. However, depending on the purpose of these techniques, we may ask for your consent before they are used. You can access your current settings. You can program your browser to block certain cookies or alternative techniques, deceive or delete existing cookies. You can also enhance your browser with software that blocks tracking by certain third parties. You can find more information about this on the help pages of your browser (usually under the keyword “Privacy”) or on the websites of the third parties that we list below.
The following cookies are distinguished (techniques with comparable functionalities such as fingerprinting are included here):
Necessary cookies: Some cookies are necessary for the functioning of the website as such or certain functions. For example, they ensure that you can switch between pages without losing information entered in a form. You also make sure that you stay logged in. These cookies exist only temporarily (“session cookies”). If you block them, the website may not work. Other cookies are necessary so that the server can store decisions or entries made by you beyond one session (i.e. one visit to the website), if you request this function (e.g. selected language, given consent, the function for an automatic login, etc.). These cookies have an expiration date of up to 24 months.
Performance cookies: In order to optimize our website and corresponding offers and to better adapt them to the needs of the users, we use cookies to record and analyze the use of our website, possibly even beyond the session. We do this through the use of third-party analytics services. We have listed these below. Before we use such cookies, we ask for your consent. You can revoke this at any time via the cookie settings. Performance cookies also have an expiration date of up to 24 months. Details can be found on the websites of the third-party providers.
We may also integrate further third-party offers on our website, in particular from social media providers. These offers are deactivated by default. As soon as you activate them (e.g. by clicking a button), the corresponding providers can determine that you are on our website. If you have an account with the social media provider, it can assign this information to you and thus track your use of online offers. These social media providers process this data under their own responsibility.
13. What data do we process on our pages in social networks?
We may operate pages and other online presences (“fan pages”, “channels”, “profiles”, etc.) on social networks and other platforms operated by third parties and use there the information described in para. 3 and hereinafter described data about you. We receive this data from you and the platforms when you come into contact with us through our online presence (e.g., when you communicate with us, comment on our content, or visit our presence). At the same time, the platforms evaluate your use of our online presences and link this data with other data about you known to the platforms (e.g., about your behavior and preferences). They also process this data for their own purposes under their own responsibility, in particular for marketing and market research purposes (e.g. to personalize advertising) and to control their platforms (e.g. which content they show you).
We process this data for the purposes described in para. 4, in particular for communication, marketing purposes (including advertising on these platforms, see section 12) and market research. For the relevant legal basis, please refer to sec. 5. content published by you yourself (e.g. comments on an announcement) may be redistributed by us (e.g. in our advertising on the platform or elsewhere). We or the operators of the platforms may also delete or restrict content from or to you in accordance with the usage guidelines (e.g. inappropriate comments).
For further information on the processing of the operators of the platforms, please refer to the privacy notices of the platforms. There you can also find out in which countries they process your data, which rights of access, deletion and other data subjects you have and how you can exercise these or obtain further information. We currently use the following platforms:
Facebook: Here we operate the site mentioned in the imprint. The responsible body for the operation of the platform for users from Europe is Facebook Ireland Ltd, Dublin, Ireland. Their data protection information can be found at www.facebook.com/policy. Some of your data will be transferred to the USA. You can object to advertising here: www.facebook.com/settings?tab=ads. With regard to the data collected and processed when visiting our site for the creation of “Page Insights”, we are jointly responsible with Facebook Ireland Ltd, Dublin, Ireland. As part of Page Insights, statistics are compiled about what visitors do on our site (comment on posts, share content, etc.). This is described at www.facebook.com/legal/. It helps us understand how our site is used and how we can improve it. We only receive anonymous, aggregated data. We have defined our responsibilities regarding data protection in accordance with the following information here.
Instagram: Social network; service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website; Privacy policy
14. Services and plugins used
We currently use offers from the following service providers:
Borlabs Cookie: Cookie consent management; Service provider: Borlabs; website; An individual user ID, language as well as types of consent and the time of their submission are stored on the server side and in the cookie on the user’s device.
Google Fonts: We integrate the fonts (“Google Fonts”) of the provider Google locally, whereby the user data is used solely for the purpose of displaying the fonts in the user’s browser. The integration is based on our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform display and taking into account possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website; Privacy Policy.
YouTube videos: Video content; YouTube is integrated via the domain https://www.youtube-nocookie.com in the so-called “Enhanced Privacy Mode”, whereby no cookies on user activities are collected in order to personalize video playback. Nevertheless, information about the user’s interaction with the video (e.g. remembering the last playback point) may be stored; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website; Privacy Policy.
Smash Balloon: We include the Smash Balloon plugin which allows you to turn cookies on or off on this website. All data is output by Smash Balloon in a DSGVO compliant manner. No data will be transmitted to the respective service providers without consent in the Borlabs Cookie Box.
Google Analytics: Measuring the success of email campaigns and building user profiles with a storage period of up to two years; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website ; Privacy policy; opt-out: Opt-out plugin, settings for display of ads; types of processing as well as data processed; data processing terms for Google advertising products and standard contractual clauses for third country transfers of data.
Google Tag Manager: Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate other services into our online offer (please refer to further information in this data protection declaration). The Tag Manager itself (which implements the tags) therefore does not yet create user profiles or store cookies, for example. Google only learns the user’s IP address, which is necessary to run the Google Tag Manager. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website; Privacy policy; Types of processing and data processed; Data processing terms and conditions for Google advertising products and standard contractual clauses for third country data transfers.
Google Ads and conversion measurement: We use the online marketing process “Google Ads” to place ads in the Google advertising network (e.g., in search results, in videos, on web pages, etc.) so that they are displayed to users who have a presumed interest in the ads. Furthermore, we measure the conversion of the ads. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page marked with a so-called “conversion tracking tag”. However, we ourselves do not receive any information with which users can be identified; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website; Privacy policy; Types of processing and data processedData processing conditions for Google advertising products: Information on services Data processing conditions between controllers and standard contractual clauses for third country transfers of data.
Google Ad Manager: Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website; Privacy policy; Types of processing and data processed; Data processing terms and conditions for Google advertising products: Information on services Data processing conditions between data controllers and standard contractual clauses for third country transfers of data; where Google acts as a processor, Data processing terms and conditions for Google advertising products and standard contractual clauses for third country data transfers.
15. Can this privacy policy be changed?
This privacy policy is not part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.
Last updated: 03.10.2023