Privacy Policy

Welcome to our website. Thank you for visiting Korean Skin Heaven Zürich and for your interest in our clinic. Protecting your personal data — such as name, phone number and email — is important to us.

The purpose of this Privacy Policy is to inform you about how we process the personal data we collect when you visit this site. Our practice complies with the Swiss Federal Act on Data Protection (FADP), in particular the information duties in Art. 19 ff. FADP.

1. Controller

The controller of the data within the meaning of Art. 5 lit. j FADP is:

MD Group Swiss GmbH
Graben 5
6300 Zug
Switzerland
Email: info@skinheaven.ch
Tel.: +41 77 902 10 11

2. Provision of the website and log files

Every time our website is accessed, our system automatically records data and information from the requesting device (browser version, OS, host name, IP address, date and time of access, pages accessed, referring website, success/failure of the request, volume of data transferred).

These data are stored in log files. They are not stored together with any personal data of a specific user, so individual visitors cannot be identified from them. Storage period: at most 3 months after the site was accessed.

3. Booking form and form autosave

Our site offers a booking form for the K-Glow Facial Reset. The data you enter (name, phone, email, preferred date and time) are processed to prepare and manage your appointment.

Form autosave — important to know: so you don't lose your details if you close the tab or lose connection, the fields you type into the booking form are saved to our database as you type, before you press the final "Book" button. This lets us contact you if a booking is left incomplete. If you do not want this, please do not type into the form.

Legal basis: Art. 6 para. 1 FADP and good faith (Art. 6 para. 2 FADP / Art. 2 CC), for the pre-contractual exchange of information necessary to prepare a possible appointment contract.

Storage period: incomplete/autosaved leads are deleted automatically once you complete the booking, and otherwise after a reasonable follow-up window. Completed appointments are deleted after 12 months, unless statutory retention obligations require longer storage.

4. Disclosure to third parties

We treat your data confidentially and keep them only as long as necessary. We do not sell your data and do not share them with third parties for their own marketing.

5. Technical service providers we rely on

• Hosting and database: our cloud infrastructure provider (Supabase / Lovable Cloud) stores form entries, bookings and technical logs securely on our behalf.
• Email: the email tools we use to confirm appointments (Resend).
• Spreadsheets: Google Sheets, used as an operational mirror of bookings and leads for the team.

Some providers may process data outside Switzerland or the EU. When that happens we rely on recognised safeguards (Swiss adequacy decisions, EU Standard Contractual Clauses, or the EU–US Data Privacy Framework where applicable).

6. Cookies and local storage

This campaign site does not use advertising or cross-site tracking cookies. We use a small entry in your browser's localStorage to remember a random session identifier that links your autosaved form entries together. You can clear it any time from your browser settings.

7. Data security and email

Your personal data are protected by technical and organisational measures. In the case of unencrypted email communication, full data security on the transmission path cannot be guaranteed; for information with a high need for confidentiality, we recommend encrypted communication or postal mail.

8. Your rights (Art. 25 ff. FADP)

You have the right of access, rectification, erasure, restriction and data portability. Where processing is based on consent, you may withdraw it at any time. You can exercise your rights at any time by contacting:
MD Group Swiss GmbH · Graben 5 · 6300 Zug · Switzerland
Email: info@skinheaven.ch · Tel.: +41 77 902 10 11

9. Notifications to the FDPIC

Under Art. 49 FADP, affected persons may file a report with the Swiss Federal Data Protection and Information Commissioner (FDPIC) if there are sufficient indications that data processing may infringe data-protection provisions. See edoeb.admin.ch.