Privacy Policy

Privacy Notice WELLNESS WORLDWIDE

We, Wellness Worldwide AG («WELLNESS WORLDWIDE», «we»), are a company with our registered office in Chemin du Crozet 1c, 1260 Nyon Switzerland, who runs the online platforms wellness-worldwide and Humtastic (each a «Platform») for the purpose of enabling wellness practitioners («Practitioners») to provide their services via videoconferencing and in person to interested users and offers its platform services under the domains www.wellness-worldwide.com and www.Humtastic.com («Domains»)

  1. What is this Privacy Notice about?

    We collect and process personal data that concern you but also other individuals («third parties»). We use the word «data» here interchangeably with «personal data».

    «Personal data» means data relating to identified or identifiable individuals. «Processing» means any operation that is performed on personal data, such as collection, storage, use, alteration, disclosure and erasure.

    In this Privacy Notice, we describe what we do with your data when you use the Platform, our Domains, our other websites or apps (collectively «Website»), obtain services or products from us, interact with us in relation to a contract, communicate with us, are a shareholder / investor of ours or otherwise deal with us. In addition, we may inform you about the processing of your data separately (e.g. in forms, terms and conditions or additional privacy notices).

    If you disclose data about other persons (e.g. family members, work colleagues) to us, we assume that you are authorized to do so and that the relevant data is accurate. When you share data about others with us, you confirm that. Please make sure that these individuals have been informed about this Privacy Notice.

    This Privacy Notice is aligned with the Swiss Data Protection Act («DPA»), the revised Swiss Data Protection Act («revDPA»), the Ordinances associated with each of them and the EU General Data Protection Regulation («GDPR»). However, the application of these laws depends on each individual case.

  2. Who is the controller for processing your data?

    The Wellness Worldwide AG, Chemin du Crozet 1c, 1260 Nyon Switzerland («WELLNESS WORLDWIDE») is the controller for WELLNESS WORLDWIDE's processing under this Privacy Notice, unless we tell you otherwise in an individual case.

    You may contact us for data protection concerns and to exercise your rights as follows:
        Chemin du Crozet 1c
        1260 Nyon
        dataprivacy@wellness-worldwide.com

    We have appointed the following additional positions:

    • Data Protection Representative in the EU according to article 27 GDPR:

      Mr Ria Zeggari
      dataprivacy@wellness-worldwide.com

  3. What data do we process?

    We process various categories of data about you. The main categories of data are the following:

    • Master data: This is the basic data (e.g. name, contact details), additional information about you (e.g. your role and function) as well as details of your relationship with us (customer, supplier, visitor, service recipient or employee of such etc.), your bank details, your date of birth, photographs, copies of ID cards, customer history, and declarations of consent and information about third parties (e.g. contacts, representatives). This may also include health data (such as inter alia information about your preferences of wellness services etc.).
    • Registration data: This is data that is generated in the course of a registration (online or app) with us or that you provide to us in this context (e.g. user name, phone number, e-mail, password), but also data that is generated in the course of competitions or when redeeming vouchers and, if applicable, access data in the course of access controls (may also contain biometric data).
    • Contract data: This is data that is collected in connection with a contract concluded by us or in the context of the provision of our services, such as information about the type of contract, date of conclusion of the contract, duration of the contract, contractual services, data that was collected during the period leading up to the conclusion of the contract, information required or used for processing (e.g. information regarding invoicing or customer service), information about reactions (e.g. complaints, feedback about satisfaction, etc.), financial data (e.g. information about solvency/creditworthiness, about reminders and debt collection). This may also include health data, information about third parties (e.g. about hereditary diseases in the family).
    • Communication data: When you are in contact with us or with third parties (e.g. via the contact form, by e-mail, telephone or chat, or by letter or other means of communication) we collect the data exchanged between you and us (e.g. content of e-mails or letters), including your contact details and the metadata of the communication or if necessary the copy of an ID document. This includes audio and video recordings of calls.
    • Technical data: When you use our digital offerings (e.g. Website), we collect technical data e.g. the IP address, information about the operating system of your device, the location and the access time. Technical data in itself does not permit us to draw conclusions about your identity. However, technical data might be linked with other categories of data and thus possibly with your person.
    • Behavioral and preference data: This is data about your behavior and your preferences (e.g. your response to electronic communications, navigation on our website, interactions with our social media pages etc.) we may also supplement this information with third-party information, including from public sources.
    • Other data: This may include the following data: Data collected in connection with administrative or legal proceedings (e.g. actions, evidence, etc.), data collected on the basis of health protection (e.g. as part of protection concepts), photographs, videos or sound recordings that we produce or receive from third parties and in which you are recognizable (e.g. at events, through security cameras, etc.), access data or rights (e.g. visitor list, when you enter certain buildings or which access rights you have), participation in events or campaigns (e.g. sweepstakes), when you use our infrastructure and systems as well as data in connection with your status as a shareholder or investor of ours (e.g. information for various registers, the exercise of your rights and the holding of events such as general meetings).

  4. What is the source of the data?

    • From you: Much of the data set out in Section 3 is provided to us by you (e.g. when you communicate with us, in relation to contracts and our services, when you register or use the Website, etc.). You are not obliged or required to disclose data to us except in certain cases (e.g. because of legal requirements, legally required identification or health protection concepts). If you wish to enter into contracts with us or use our services, you must also provide us with certain data, in particular master data, contract data and registration data, as part of your contract. When using our Website, the processing of technical data cannot be avoided. If you wish to gain access to certain systems or buildings, you must also provide us with registration data.
    • From third parties: As far as it is lawful we can also collect data from public sources or receive data from public authorities and from other third parties (e.g. credit agencies, address brokers, practitioners, associations, contractual partners, internet analytics services, etc.). This includes the following categories of data: master data, contract data and other data according to Section ‎3 as well as data from correspondence and discussions with third parties. If you work for an employer, client or someone else who has a business relationship or other dealings with us, they may also provide us with information about you.

  5. For what purposes do we process your data?

    • Communication: In order to be able to communicate with you (e.g. to answer inquiries, in the context of consulting as well as the execution of a contract), we need to process data (in particular communication and master data, and registration data in connection with the services you use) from you. If we need or want to establish your identity, we collect additional data (e.g. a copy of an ID document). For this purpose, we use in particular communication data and master data and registration data in connection with the services you use.
    • Initiation, administration and execution of contracts: In connection with the use of the Website, the conclusion or execution of contracts with our customers, suppliers, subcontractors or other contractual partners (e.g. project partners), we process related personal data. For this purpose, we also process data for checking creditworthiness, for opening and managing the customer relationship, for consulting, for customer support and for providing and demanding contractual services (which also includes the involvement of third parties, such as advertising service providers or credit reference agencies, which may then in turn provide us with data). This also includes the enforcement of legal claims arising from contracts (debt collection, legal proceedings, etc.), accounting, termination of contracts and public communication. For this purpose, we use in particular master data, contract data and communication data, and possibly also registration data of the customer or of the persons to whom the customer provides a service, as well as technical data (e.g. in the case of digital offers).
    • Marketing purposes and relationship management: For marketing purposes and relationship management, we process data, for example, to send our customers, other contractual partners and other interested parties personalized advertising (e.g. in print, by e-mail, via app, on other digital channels or by telephone) about products, services and other news from us and from third parties (e.g. from product partners), in connection with free services (e.g. invitations, vouchers, etc.) or as part of individual marketing campaigns (e.g. events, competitions, etc.). You can refuse such contacts at any time or refuse or revoke your consent to be contacted for advertising purposes by notifying us (Section ‎2). With your consent, we can target our online advertising on the Internet more specifically to you (see Section ‎12). This also includes interaction with existing customers and their contacts, which can be personalized on the basis of behavioral and preference data. As part of relationship management, we may also operate a customer relationship management (CRM) system in which we store the data of customers and other business partners. Finally, we also enable contractual partners of ours to contact our customers and other contractual partners for advertising purposes (see Section ‎7). For marketing purposes and relationship management, we process in particular communication, registration, behavioral and preference data.
    • Market research, improvement of our services and operations, and product development: In order to continuously improve our products and services (including our Website) and to be able to respond quickly to changing needs, we analyze, for example, how you navigate through our website or which services are used by which groups of people and in what way, and how new products and services can be designed (for further details, see Section ‎12). This gives us an indication of the market acceptance of existing products and services and the market potential of new products and services. To this end, we process in particular master data, behavioral data and preference data, but also communication data and information from customer surveys, polls and studies and other information, e.g. from the media, social media, the Internet and other public sources. As far as reasonably practicable, we use pseudonymized or anonymized data for these purposes.
    • Registration and security purposes as well as technical and physical access controls: In order to use certain offers and services (e.g. Website), you must register (directly with us or via our external login service providers), for which we process data. Furthermore, we also collect additional personal data about you during the use of the offer or service. We continuously check and improve the appropriate security of our IT and our other infrastructure. We therefore process data, for example, for monitoring, controls, analyses and tests of our networks and IT infrastructures, for system and error checks, for documentation purposes and as part of security copies. Access controls include, on the one hand, controlling access to electronic systems (e.g. logging into user accounts), and on the other hand, physical access control (e.g. building access). For this purpose, we process registration data and technical data in particular, but also other data mentioned in Section 3.
    • Compliance with laws, directives and recommendations from authorities and internal regulations («Compliance»): We may process personal data as part of our compliance with laws (e.g. anti-money laundering, tax law obligations or for the implementation of health and safety concepts). In addition, data processing may take place in the course of internal investigations as well as external investigations (e.g. by a law enforcement or supervisory authority or an appointed private body). For this purpose, we process in particular master data, contract data and communication data, but under certain circumstances also behavioral data, technical data and data from other data categories. The legal obligations may be Swiss law, but also foreign regulations to which we are subject, as well as self-regulations, industry standards, our own «corporate governance» and official instructions and requests.
    • Risk management and corporate governance: We may process personal data as part of our risk management (e.g. to avoid becoming victims of crime and abuse) and corporate governance, including our business organization (e.g. resource planning) and corporate development (e.g. acquisition and sale of business units or companies). For this purpose, we process in particular master data, contract data, registration data and technical data, but also behavioral and communication data.
    • Further purposes: These other purposes include, for example, training and educational purposes, administrative purposes (e.g. master data management or accounting), safeguarding our rights, and evaluating and improving internal processes. We may record telephone or video conferences for training, evidence, and quality assurance purposes. In such cases, we will notify you separately (e.g. by displaying a notice during the video conference in question) and you are free to tell us if you do not want to be recorded or to terminate the communication (if you simply do not want your image recorded, please turn off your camera). In general, such recordings may only be made and used in accordance with our internal guidelines. The protection of other legitimate interests is also one of the other purposes, which cannot be named exhaustively. We also process data in connection with your position as a shareholder or investor of ours (e.g. information for various registers, the exercise of your rights and the holding of events such as general meetings).

  6. On what basis do we process your data?

    To the extent necessary and depending on the situation and processing purpose, we base the processing of your data on the following legal basis:

    • Contract: Insofar as we process data for the conclusion and execution of contracts that we conclude or have concluded for you or with you or your employer, client or other persons for whom you work, this is also the legal basis on which we process your data.
    • Legal Obligations: We may further process your data based on applicable legal, regulatory and professional requirements with which we must comply.
    • Legitimate interest: We may process your data based on our legitimate interest or a legitimate interest of a third party. This applies in particular in relation to the achievement of the purposes and objectives set out in Section ‎5 and for the implementation of related measures. Among other things, we have a legitimate (and overriding) interest in marketing our products and services and in gaining a better understanding of the markets relevant to us and our activities (in particular, in the efficient and secure handling of our processes and the further development of our activities), in the efficient and effective management of our company and in safeguarding the security of our systems and our interests vis-à-vis third parties.
    • Consent: If we ask for your consent to process data from you, this is the legal basis on which we process your data. In doing so, we will inform you of the purpose of the processing. You may revoke your consent at any time by notifying us in writing (by mail or, unless otherwise specified or agreed, by email), with effect for the future (see Section ‎2 regarding our contact details and Section ‎12 regarding revocation of your consent in the area of online tracking). Once we have received and processed your withdrawal, we will no longer process your data for the purposes to which you originally consented (unless further processing may be carried out on the basis of another legal basis).
    • Other legal bases: In specific cases, we may also carry out data processing based on other legal bases. If this is the case, we will inform you in each individual case.

  7. What applies in case of profiling and automated individual decisions?

    1. How do we conduct our profiling?

      «Profiling» means a process by which personal data is processed automatically to analyze personal aspects or make predictions (e.g. to analyze a person's personal interests, preferences and inclinations, or to predict likely behavior). For example, we perform profiling in connection with orders placed on our website (e.g. to determine which other products may be of interest to you based on your purchases). In particular, we use behavioral and preference data, technical data, and communication data (e.g. your response to advertisements and other communications) for this purpose. Profiling helps us to continuously improve and better tailor our offerings to your individual needs, plan our business activities, determine the likelihood that a transaction is fraudulent, and better assist you through our customer service. To improve the quality of our analysis and predictions, we may also profile, i.e., combine personal data from different sources to better understand you as an individual with your different interests and characteristics. In both cases, we ensure the proportionality and reliability of the results and take measures against possible abuse.

    2. Do we use automated individual decisions?

      «Automated individual decisions» are decisions that are made fully automatically, i.e., without significant human influence, and that have legal consequences for the data subjects or otherwise significantly affect them. If we make automated individual decisions, we will inform you separately. In such cases, however, you always also have the option of having the automated individual decision reviewed by a person if you do not agree with it.

    3. Do we analyse your communications?

      We may monitor and analyze communications sent through WW tools to ensure safety, prevent fraud, comply with laws, improve services, and support users based on WW's legitimate interests in ensuring compliance with the applicable laws and ensuring adequate performance of our Platform. This includes automated or occasional manual reviews for purposes such as masking sensitive information, investigating issues, or enhancing features. We will not use your messages for third-party marketing or sell related analyses. Messages may be blocked or reviewed if they pose risks like malicious content or spam. Communications may also be disclosed in response to legal requests or emergencies to protect users, comply with the law, or fulfill service requirements.

  8. With whom do we share your data?

    In relation to our contracts, the website, our services and products, our legal obligations or otherwise to protect our legitimate interests and the other purposes set out in Section ‎5, we may disclose your personal data to third parties, in particular to the following categories of recipients:

    • Service providers: We work with service providers locally and abroad (third parties) who process data about you (i) on our behalf, (ii) under joint responsibility with us or (iii) data they have received from us under their own responsibility (e.g. IT providers, the Practitioners, shipping companies, advertising service providers, cleaning companies, security companies, banks, insurance companies, debt collection companies, credit agencies, address checkers, consulting companies or lawyers). This may also include health data and any other data you provide to the Practitioners in the course of a Session with them For the service providers used for the website, see Section 13.
    • Contractual partners, including customers: This initially refers to customers and other contractual partners of ours where transfer of your data arises from the contract (e.g. because you work for a contractual partner or it provides services to or for you). This may also include health data. Recipients further include contractual partners with whom we cooperate or who advertise on our behalf. Contractual partners receive, for example, registration data on issued and redeemed vouchers, invitations, etc. The recipients process the data under their own responsibility.
    • Authorities: We may disclose personal data to offices, courts and other authorities locally and abroad if we are legally obliged or entitled to do so or if this appears necessary to protect our interests. This may also include health data. The recipients process the data under their own responsibility.
    • Other persons: This refers to other cases where the inclusion of third parties results from the purposes pursuant to Section ‎5. Other recipients are, for example, delivery addressees or third-party payees specified by you, third parties in the context of agency relationships (e.g. your lawyer or your bank) or persons involved in official or legal proceedings. In the course of business development, we may sell or acquire businesses, operations, assets or companies, or enter into partnerships, which may also result in the disclosure of information (including information about you, for example, as a customer or supplier or as their agent) to the persons involved in those transactions. In the course of communication with our competitors, industry organizations, associations and other bodies, data may also be exchanged which may affect you.
    All these categories of recipient may in turn involve third parties, so that your data may also become accessible to them. We can restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.). If you make use of our Website as an employee of one of our customers, we will generally not forward any data about you; however, we will forward information about the amount of sessions booked by employees of such customer, which might allow your employer to draw information about your frequency and content of use of the Platform. In any case no details about anything said or provided within the sessions will be provided.
    We also allow certain third parties to collect personal data from you on our Website (e.g. the Practitioners you may book). Insofar as we are not decisively involved in these data collections, these third parties are solely responsible for them. If you have any concerns or wish to assert your data protection rights, please contact these third parties directly. See Section 12 for the Website.
    However, please note that our Platform only assists in connecting between the Practitioners and Users. We have no control over any of these relationships and are not responsible for the protection and privacy of the data exchange between the Practitioners and Users, unless explicitly provided herein.

  9. Is your personal data disclosed abroad?

    We process and store personal data mainly in Switzerland and the European Economic Area (EEA). However, we may occasionally disclose data to service providers and other recipients (see Section 7) that are located or process data outside of this area, generally in any country in the world.

    If a recipient is located in a country without adequate statutory data protection, we require the recipient to undertake to comply with data protection (for this purpose, we use the revised European Commission’s standard contractual clauses, which can be accessed here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless the recipient is subject to a legally accepted set of rules to ensure data protection and unless we cannot rely on an exception. An exception may apply for example in the event of legal proceedings abroad, but also in cases of overriding public interest or if the performance of a contract requires disclosure, if you have consented or if the data has been made generally available by you and you have not objected to the processing.

  10. How long do we process your data?

    We process your data for as long as our processing purposes, the legal retention periods and our legitimate interests in processing for documentation and evidence purposes require or storage is technically required (e.g. in the case of backups or document management systems). If there are no legal or contractual obligations to the contrary, we will delete or anonymize your data after the storage or processing period has expired as part of our normal processes.

    If no legal retention requirements exist in individual cases, we generally process data for the duration of the business relationship or contract term and then, depending on the applicable legal basis, for a further five, ten or more years. This corresponds to the period during which we can assert legal claims against third parties or third parties can assert legal claims against us. Ongoing or anticipated legal proceedings may result in processing beyond this period. See section ‎12.2 for more information on the storage period of cookies.

    For example, we generally retain data for the periods listed below, although the retention period may vary (particularly for evidentiary reasons, as a result of legal or contractual requirements, or as a result of technical limitations).

    1. Master data: Usually 10 years from the last exchange with you, but at least from the end of the contract.
    2. Registration Data: Usually 12 months after the end of the use of the service.
    3. Contract data: As a rule, 10 years from the last contract activity, but at least from the end of the contract.
    4. Communication data: Usually 24 months from the last exchange with you. Emails and written correspondence are generally retained for at least 10 years.
    5. Technical data: Usually 6 months.
    6. Behavioral and preference data: Usually between a few weeks and 24 months, depending on the type of data.
    7. Other data: The retention period of this data depends on the purpose and is limited to what is necessary. Data about you as a shareholder or other investor is retained in accordance with company law requirements, but in any case for as long as you are invested.
    8. Cookies: See section 12

  11. How do we protect your data?

    We take appropriate security measures to protect the confidentiality, integrity and availability of your personal data, to protect it against unauthorized or unlawful processing and to protect it against the risks of loss, accidental loss or alteration, unauthorized disclosure or access. However, security risks cannot be completely eliminated in general - a certain residual risk is unavoidable.

  12. What are your rights?

    You have certain rights in connection with our data processing. In accordance with applicable law, you may, in particular, request information about the processing of your personal data, have incorrect personal data corrected, request the deletion of personal data, object to data processing, request the release of certain personal data in a standard electronic format or its transfer to other data controllers, or revoke consent, insofar as our processing is based on your consent.

    To help you control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:

    1. The right to request information from us as to whether and what data we process from you;
    2. The right to have us correct data if it is inaccurate;
    3. The right to request erasure of data;
    4. The right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller;
    5. The right to withdraw consent, where our processing is based on your consent;
    6. The right to receive, upon request, further information that is helpful for the exercise of these rights;

    If you wish to exercise any of the above rights against us, please contact us in writing, at our premises or, unless otherwise stated or agreed, by e-mail; you will find our contact details in Section ‎2. In order for us to rule out any misuse, we must identify you (e.g. by means of a copy of your ID card, if this is not possible by less extensive means).

    You also have these rights in relation to other parties that cooperate with us as separate controllers – please contact them directly if you wish to exercise your rights in relation to their processing. You will find information on our key partners and service providers in Section ‎7 and additional information in Section ‎12.

    Please note that conditions, exceptions or restrictions apply to these rights under applicable data protection law (for example to protect third parties or trade secrets). We will inform you accordingly where applicable.

    If you do not agree with the way we handle your rights or with our data protection practices, please let us or our Data Protection Officers (Section ‎2) know. If you are located in the EEA, the United Kingdom or in Switzerland, you also have the right to lodge a complaint with the competent data protection supervisory authority in your country. You can find a list of authorities in the EEA here: https://edpb.europa.eu/about-edpb/board/members_en. You can reach the UK supervisory authority here: https://ico.org.uk/global/contact-us/. You can also contact the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html.

  13. Do we use online tracking, online advertising and similar techniques?

    On our Website, we use various technologies (e.g. cookies, and similar technologies), with which we and third parties engaged by us can recognize you during your use and, under certain circumstances, track you over several visits.
    We use our own tools and sometimes third-party services, in particular to improve the functionality or content of our website (e.g. integration of videos or maps), to compile statistics and to display advertisements. This enables us and authorized third parties to provide you with a personalized web experience (e.g. personalized advertising, interactions on social media sites, etc.).

    1. What are cookies and similar techniques?

      A cookie is a small text file with an identifier (a sequence of letters and numbers) that is transmitted between the server and your system. This allows us and the third-party providers we engage or cooperate with to recognize visitors to our website and track them across multiple visits and across different websites. Cookies enable recognition of a specific device or browser and do not necessarily contain information that personally identifies a user. However, personal data that we or third-party providers contracted by us store from you (e.g. if you have a user account with us or these providers) may be linked to the information stored in and obtained from cookies and thus possibly to your person.

      In addition to cookies, there are other similar techniques such as pixel tags, fingerprints and social media plug-ins. Pixel tags are small, usually invisible images or a program code that are loaded by a server and provide the server operator with certain information (e.g. access to a website). Fingerprints consist of information collected during your visit to the website about the configuration of your terminal device or browser, which makes it possible to distinguish your terminal device from other devices. Social media plug-ins are small pieces of software that establish a connection between your visit to our website and a third-party social media platform. The social media plug-in tells the third-party provider that you have visited our website and may transmit cookies to the third-party provider that it has previously placed on your web browser. For more information about how these third-party providers use your personal data collected via their social media plug-ins, please refer to their respective privacy notices.

    2. What types of cookies and similar technologies do we use?

      The cookies and similar technologies we use on our websites serve the following purposes (similar technologies are included in each case):

      • Necessary cookies: Some cookies are essential for the use of the website and its functions. These cookies ensure the essential functionality of the website, for example, the ability to navigate from page to page without the disappearance of products placed in the shopping cart. They also ensure that you remain connected to the website. These cookies have an expiration date of up to 12 months.
      • Performance and analytics cookies: Performance and analytics cookies collect information about how our website is used and allow us to perform analytics about how the website is used, such as which pages are viewed most frequently and how visitors navigate our website. These cookies are used to make visiting the website easier and faster and generally improve user experience and comfort. For this purpose, we use third-party analytics services. These cookies have an expiration date of up to 24 months.
      • Marketing cookies: marketing cookies help us and our advertising partners to show you advertisements on our website for offers or services that may be of interest to you, or to display our advertisements if you continue to browse the Internet after leaving our website, i.e. to show you targeted advertisements. These cookies have an expiration time of a few days to 12 months, depending on the circumstances.

      If you wish further details about our third-party providers and advertising partners please send us an e-mail.

      Some of the third-party vendors we use may be located outside of Switzerland. For information on the disclosure of data abroad, please refer to section ‎8.

      If you consent to the use of cookies, you accept that your data may be transferred to a country that does not have an adequate level of data protection and accept the risk that your data may be exposed to access by foreign authorities in the country of the recipient, who may not adhere to adequate data protection regulations in doing so.

      We currently use offers from the following service providers and advertising contractors (to the extent that they use data or cookies from you for advertising purposes):

      • Google Analytics: Google Ireland Ltd. (located in Ireland) is the provider of the service «Google Analytics» and acts as our processor. Google Ireland relies on Google LLC (located in the United States) as its sub-processor (both «Google»). Google collects information about the behavior of visitors to our website (duration, page views, geographic region of access, etc.) through performance cookies (see above) and on this basis creates reports for us about the use of our website. We have configured the service so that the IP addresses of visitors are truncated by Google in Europe before forwarding them to the United States so they cannot be traced back. We have turned off the «Data sharing» option and the «Signals option». Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google may be able to draw conclusions about the identity of visitors based on the data collected, create personal profiles and link this data with the Google accounts of these individuals for its own purposes. In any event, if you consent to the use of Google Analytics, you expressly consent to any such processing, including the transfer of your personal data (in particular website and app usage, device information and unique IDs) to the United States and other countries, where your data may be accessible to authorities that are not subject to adequate data protection regulation. Information about data protection with Google Analytics can be found here https://support.google.com/analytics/answer/6004245 and if you have a Google account, you can find more details about Google's processing here[https://policies.google.com/technologies/partner-sites?hl=en].
      • Google Maps/Earth: We may use Google Maps/Earth mapping services, including Google Maps API(s), to provide location-based features and services on our platform. Your use of Google Maps/Earth is subject to the Google Maps/Google Earth Additional Terms of Service and Google's Privacy Policy, which can be found at https://policies.google.com/privacy.
      • Stripe: We make use of the online payment tool of Stripe Inc. and/or Stripe Payments Europe Limited («Stripe») in order to process your payments to WW and the Practitioners. Information about data protection with Stripe can be found here www.stripe.com/de-ch/privacy.
      • We use PayPal as our payment service provider to securely process payments. When you choose to make a payment through our platform, PayPal will collect and process your payment information. This includes credit card details, billing addresses, and other necessary data to complete the transaction. PayPal processes this information as a data controller under its own privacy policy. For more information on how PayPal handles your personal data, please refer to PayPal's Privacy Statement. By using our services and opting to pay via PayPal, you consent to the processing of your payment information by PayPal as described in their privacy policy at https://www.paypal.com/ch/legalhub/paypal/privacy-full?locale.x=en_CH.
      • Calendly: We make use of the online scheduling tool of Calendly LLC («Calendly») in order to book Sessions with Practitioners. Information about data protection with Calendly can be found here www.calendly.com/privacy .
      • Zoom, Meet, Team: We and/or the Practitioners make use of the online communication tool Zoom by Zoom Video Communications, Inc. («Zoom»), Meet and Team in which case your personal data may be disclosed to Zoom, Meet, Team. Information about data protection with Zoom can be found here www.explore.zoom.us/de/privacy/. Information about data protection with Team can be found here: https://privacy.microsoft.com/en-gb/privacystatement. Information about data protection with Meet can be found here: https://support.google.com/a/answer/7582940?sjid=839796574261329971-EU#top&privacy&encryption&counterabuse&secure&incident&&zippy=%2Cprivacy-compliance%2Cencryption%2Canti-abuse-measures%2Csecure-deployment-access-controls%2Cincident-management
      • Cloudways: We utilize the services of Cloudways Ltd., a managed cloud hosting platform provided by Cloudways Ltd., for hosting our data on the Platform. This allows us to ensure reliable and efficient communication within the platform. Cloudways may process certain technical and usage data to facilitate these services. For more information about data protection and privacy with Cloudways, please refer to their privacy policy at www.cloudways.com/en/terms#privacy.

  14. Can we update this Privacy Notice?

    This Privacy Notice is not part of a contract with you. We can change this Privacy Notice at any time. The version published on this website is the current version.
    Last updated: December 2024