Data protection

Valid from 1 December 2024

1 Purpose of the privacy policy

1.1 The operator of the website www.pyramide.ch (hereinafter referred to as the "Website") is PSP Plastic Surgery Pyramide AG (hereinafter referred to as "Plastic Surgery Pyramide", "we" or "us"). Data protection is important to us and we comply with the applicable data protection laws and regulations.

1.2 This data protection declaration informs you in particular about how we collect personal data that becomes accessible to us via the website, for what purposes it is used, to whom it may be passed on and what your rights are in connection with the use of your personal data by us.

1.3 This data protection declaration does not extend to any external links that lead to third-party offers. The data protection provisions of the respective provider apply to these offers.

2. consent

By accessing the website and using the services and products we offer, you declare that you have read this privacy policy carefully and agree to the data processing described.

Any questions in connection with this privacy policy can be sent at any time by e-mail to datenschutz@pyramide.ch. If you do not agree with this declaration, you must refrain from using the website and our services and products.

3. personal data

Personal data is any information relating to an identified or identifiable natural or legal person, e.g. surname, first name, address, email address, date of birth in combination with postcode or telephone number. The controller within the meaning of data protection legislation is PSP Plastic Surgery Pyramide AG, Klausstrasse 10, 8008 Zurich, e-mail: datenschutz@pyramide.ch.

The Plastic Surgery Pyramid respects the privacy of users and will not collect any personal data (such as name, address, e-mail address) unless this is voluntarily provided by users:

• provided voluntarily by users (in particular first name, surname, address, mobile number, email address)
• or collected automatically and temporarily by cookies

Health data is only collected and processed with the express consent of the patient and is treated confidentially.

Plastic Surgery Pyramid determines the purposes and means of the processing of your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. If you have any questions or concerns about this Privacy Policy or the processing of your personal data, please contact us at any time by sending an e-mail to datenschutz@pyramide.ch.

We collect and process Personal Data carefully and for the purposes described in this Privacy Policy. In accordance with applicable law, we may also use your personal data in ways other than those described in this Privacy Policy. In this case, we will provide you with specific privacy statements or notices at the time of collection and, if necessary, obtain your consent. We always endeavour to collect information in anonymised or pseudonymised form as far as reasonably possible so that the identity of the user cannot be identified.

4 Collection and use of personal data

4.1 Users can contact us via the website in various ways and forms and retrieve or order information (in particular anonymised before/after pictures of former patients). In doing so, voluntarily entered personal data about users is transmitted to us.

Data transmitted by users to the Plastic Surgery Pyramid in this way is used by the Plastic Surgery Pyramid as follows

• to respond to the specific requests of Users
• to conduct business with users
• for marketing purposes, i.e. in particular to provide users with information about the services of Plastic Surgery Pyramid and its affiliated companies (e.g. via e-mail)
• for customer communication by post, telephone and electronic means of communication (email, newsletter)
• for analysis purposes. For the continuous improvement of our website and services, Plastic Surgery Pyramid regularly compiles statistical analyses based on anonymised user data. In addition, this data can be linked and analysed with other Plastic Surgery Pyramid data for marketing purposes
• to avoid unnecessary advertising and to address users with relevant information. For individualised and personalised marketing, we use the findings from the analysis of user behaviour.

In doing so, we may collect sensitive personal data about users if, for example, they voluntarily provide us with information about their state of health as part of an information request. In this case, we only use this information to respond to the respective enquiry.

By providing us with their sensitive personal data, users declare their consent to our processing of this data for the scope described in this privacy policy.

The processing of this data is therefore necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the implementation of pre-contractual measures or is in our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The data will be deleted up to a maximum of 60 days after collection.

4.2 Plastic Surgery Pyramid collects and stores information that your browser automatically transmits to us in "server log files" when you visit our website. The data collection is based on your will and interest in visiting our website and our legitimate interests in operating the website. This may include the following data

• Browser type and browser version;
• Operating systems used;
• Referrer URL (the previously visited website);
• Host name of the accessing computer;
• Date and time of the server enquiry;
• Internet Protocol address (IP address);
• Amount of data transferred;
• Other similar data and information used for security purposes in the event of attacks on our IT systems.

This personal data is not merged with other personal data and is stored separately from any other personal data transmitted by the user. It will be deleted after three months at the latest.

The Plastic Surgery Pyramid uses the automatically collected personal data to fulfil the following purposes:

• to enable the display, operation and functionality of the portal,
• to ensure the stability and security of the system
• to improve and protect our services
• for statistical purposes in the event of attacks on the network infrastructure on which the website is made available.

4.3 Our website is not intended for children and we do not knowingly collect personal data from children under the age of 16 unless we have the express consent of their parents. If we are notified or otherwise become aware that personal data relating to a child under the age of 16 has been improperly collected, we will take all reasonable steps to delete that personal data.

4.4 Plastic Surgery Pyramid may use auxiliary persons to process your personal data, who carry out the data processing on behalf of Plastic Surgery Pyramid. This applies in particular to the processing of commercial and administrative services and in connection with IT, marketing and telecommunication services.

Access to personal data is limited to those employees and contractual partners who need to know this data. The persons and companies concerned are obliged to maintain confidentiality and to comply with the applicable data protection laws. Personal data is always processed in Switzerland.

5 Security measures

5.1 The Plastic Surgery Pyramid provides security measures to prevent the loss, misuse or alteration of information and personal data.

5.2 Users are aware that transmissions over the Internet are not secure. We therefore advise users to be cautious when transmitting sensitive personal data over the Internet. Once Plastic Surgery Pyramid has received the transmitted information, it will secure it appropriately in its systems.

5.3 Disclosure of personal data
Users agree that their data may be transferred to and processed by other affiliated strictly selected companies (such as the Plastic Surgery Pyramid). This may be done to fulfil the purpose stated by the user, for accounting, reporting, optimisation of IT services and marketing purposes. Plastic Surgery Pyramid guarantees compliance with the principles of Swiss data protection law.

In addition, we may disclose personal data to third parties in order to use technical or organisational services that we require to fulfil the aforementioned purposes or for our other business activities. This applies in particular to the processing of commercial and administrative services and in connection with IT and telecommunications services.

Our service providers are contractually obliged to process personal data exclusively on our behalf and in accordance with our instructions.

We may also disclose personal data if we are obliged to do so in order to comply with applicable laws and regulations, in legal proceedings, at the request of the competent courts and authorities or due to other legal requirements, or if we consider it necessary to protect and defend our rights or property.

5.4 Transfer of personal data to countries outside the EEA

The personal data collected via our website is stored in Switzerland. In addition, we may transfer, store and process your personal data at data locations around the world, e.g. where our third-party providers or partners are located. Therefore, we may transfer your personal data outside the European Economic Area (EEA) if this is necessary for the data processing described in this Privacy Policy in accordance with applicable law.

If data is transferred to countries that do not ensure an adequate level of protection, we will ensure an adequate level of data protection by providing appropriate safeguards, such as

• contractual guarantees (e.g. on the basis of EU standard clauses)
• on the basis of binding corporate rules,
• the transfer of data in accordance with your express consent,
• for the conclusion or fulfilment of a contract with you, or
• in connection with the establishment, exercise or defence of legal claims.

For more information about our appropriate safeguards, please contact us by email at datenschutz@pyramide.ch

6 Deletion / duration of storage of personal data

In principle, we delete personal data from the point in time at which a contract is fulfilled or the purpose for the processing no longer applies.

In the event of an objection to processing on the basis of a legitimate interest or consent, we delete personal data from this point in time, unless another authorisation for processing continues to exist, for example in the case of statutory retention obligations, a legitimate interest in enforcing our own legal positions, etc.

However, we will retain personal data for at least as long as is necessary to fulfil any treatment contract. We also reserve the right to retain data for statutory retention periods, in particular under public health legislation, and for internal documentation purposes.

7 Rights of the user

Users may at any time request that Plastic Surgery Pyramid send them a copy of the personal data concerning them or provide them with information about its use. Furthermore, Plastic Surgery Pyramid will correct this data at any time at the user's request. Users have the right to erasure. Users can contact the responsible office as follows:

PSP Plastic Surgery Pyramide AG, Haus zur Pyramide, Klausstrasse 10, 8008 Zurich

datenschutz@pyramide.ch

The Plastic Surgery Pyramid is obliged to verify the identity of users who make such requests. Enquiries can therefore only be processed if they are accompanied by suitable proof of identity (copy of identity card or similar).

8 Cookies

8.1 When you access or use the website, we may place so-called cookies - small text files - or similar tools on your computer.

We use cookies to provide user-friendly functions on the website, for internal marketing purposes and to continuously improve the performance of the website.

We always endeavour to reduce the use of cookies and the collection and storage of user data to a minimum and to minimise or even prevent the transfer of data abroad. For example, all Google services such as YouTube, Google Maps, Google Font and Google tracking solutions such as Google Analytics or Google Tag Manager were removed from the website in August 2023.

Depending on their function and purpose, the cookies we use can be divided into the following categories Functional cookies, performance cookies and marketing cookies.

Functional cookies: These cookies serve a variety of purposes for the presentation, functionality and performance of a website and in particular to improve the experience and enjoyment of visitors to the website. They allow a website to remember information already provided (e.g. user name, location or language selection) and offer visitors improved, more personalised features. Functional cookies are used, for example, to remember things like your login details. These cookies cannot track your movement on other websites.

Performance cookies: These cookies are used to collect information about how a website is used - for example, how visitors arrived at our website, which pages a visitor opens most often, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors have come to our website. These cookies are used to monitor the level of website activity and improve the performance of the website.

Marketing cookies allow us to display adverts on our website or on third party websites with products that the user likes, so that the adverts the user sees may be more relevant to the user's preferences or interests (sometimes referred to as "targeting cookies"). They may also be used to evaluate the effectiveness of advertising and promotions.

These cookies may be placed by us or by a third party on our behalf. You can find more information about cookies and their use at:http://www.allaboutcookies.org/.

The legal basis for data processing results from your consent (Art. 6 para. 1 lit. a GDPR) or our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR).

By continuing to use our website and/or agreeing to this privacy policy, you consent to cookies being set by us and thus to personal usage data being collected, stored and used, even beyond the end of the browser session. You can revoke this consent at any time by activating the browser setting to refuse third-party cookies.

8.2 Most browsers allow you to delete cookies, prevent their installation or generate a warning before a cookie is installed. Users can find further information on this in the browser instructions.

8.3 The Plastic Surgery Pyramid will use automatically stored information exclusively for statistical analyses and, in particular, will not associate it with any personal data provided to the Plastic Surgery Pyramid.

Privacy Settings

9 Use of third-party solutions / tools

9.1 Plastic Surgery Pyramid uses third-party solutions and tools to which personal data may also be transmitted in the course of using these services.

9.2 We use Friendly Analytics to analyse the use and reach of our website. Friendly Analytics is a service of Friendly GmbH from Switzerland, which enables web tracking without the processing and storage of personal data and without the setting of cookies.

Friendly Analytics stores all data collected and processed by us in Switzerland with providers headquartered in Switzerland. Information on the type, scope and purpose of data processing can be found in Friendly Analytics' privacy policy.

9.3 Pingdom: Our website uses Pingdom, a service of SolarWinds Worldwide, LLC 7171 Southwest Parkway, Bldg 400, Austin, Texas 78735 (hereinafter: "Pingdom"). Pingdom uses cookies that are stored on your computer to enable us to analyse the use of our website. This information is used to monitor service availability and user experience. This includes the use of measurements of usage time, page speed and geographical information of the user. No user-identifiable data is stored or transmitted. When a page is accessed, data such as the following is processed

• Browser type/version
• Operating system used
• Attributes that generate information about the context in which the page is viewed
• how the page behaves during loading and asynchronous reloading of page components
• the geographical region of the accessing computer
• Time of the server request

During use, data such as the user's country location and browser type/version may be transmitted to a Pingdom server and stored there. All cookies expire after 30 days. Further information on data protection when using Pingdom can be found at the following link: https://www.pingdom.com/security

9.4 Meta Pixel: Our website uses the visitor action pixel from Meta to measure conversions. The provider of this service is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected is also transferred to the USA and other third countries.

This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook or Instagram ad. This allows the effectiveness of the meta ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Usage Policy. This enables Meta to place adverts on Meta pages and outside of Meta. We cannot influence this use of the data.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum.

You can find further information on protecting your privacy in Meta's data protection information: https://de-de.facebook.com/about/privacy/. You can also deactivate the remarketing function "Custom Audiences" in the "Settings" section for adverts at https://accountscenter.facebook.com/ad_preferences. To do this, you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook and Instagram on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

10. online appointment booking

To enable you to make appointments with one of our doctors via our website, you have the option of using the booking system of the company Medicosearch, Gerberngasse 27-31, 3011 Bern, Switzerland. Appointments can be easily made online. The Medicosearch booking system is a software application integrated into our website that displays available resources (such as free appointments) and allows you to book directly online. As a rule, your personal data is also collected and stored in the process. As we have no view of who uses the services of Medicosearch, there is no order processing agreement between us and Medicosearch. If you use the services of Medicosearch, Medicosearch is responsible to you for compliance with data protection regulations. Further information about Medicosearch can be found in the privacy policy of this provider.

11. social media networks

You will find links to social media networks on our website. These are not plugins provided by the social media network, which transmit data to the provider as soon as the page is loaded without the user having any influence. The buttons for the social media networks merely contain a link to our presence on the social media network. No user data is transmitted from the website to the social media network.

When you click on a link to one of our social media profiles, a direct connection is established between your browser and the server of the social media network in question. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while you are logged into your account with the relevant network, the content of our site may be linked to your profile on the network, which means that the network can directly associate your visit to our website with your user account. If you wish to prevent this, you should log out before clicking on the relevant links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

12. data protection declarations of third-party providers

Please note that if you click on the link to a third-party website (e.g. social media or other website), you will be redirected to a website that we do not control and our privacy policy will no longer apply.

Your browsing and interaction on another website is subject to the terms of use and privacy policies and notices of those third party websites. Furthermore, we cannot guarantee the accuracy and timeliness of these links.

We recommend that you carefully read the terms of use and the privacy statements and notices of other websites before you submit any personal data via this website. We are not responsible or liable for the information content and data processing of such third-party websites.

13. data protection officer

Plastic Surgery Pyramid is the data controller and responsible for the collection, processing and use of your personal data within the meaning of data protection law.

Please direct any enquiries regarding our data protection declaration and other concerns in connection with data protection at our practice to the following address: datenschutz@pyramide.ch

14. adaptation of the privacy policy

Plastic Surgery Pyramid reserves the right to amend this privacy policy at any time in accordance with legal requirements.

15. accessing the privacy policy

Users can access this privacy policy online at any time.