Skip to content
Call Book now
Legal

Privacy Policy

The German version is authoritative. With this privacy policy we explain which personal data we process in connection with our activities and operations, including our eddine.ch website. In particular, we explain what we process which personal data for, how and where. We also explain the rights of the people whose data we process.

Further privacy policies as well as other legal documents such as general terms and conditions (GTC), terms of use or terms of participation may apply to individual or additional activities and operations.

1. Contact addresses

Responsibility for the processing of personal data:

Eddine Belaid Aveda exclusive Salon
aveda exclusive salon by Eddine Belaid
Alfred-Escher-Strasse 23
CH-8002 Zürich
Switzerland

buero@eddine.ch

We will point it out if, in an individual case, other parties are responsible for the processing of personal data.

Data protection officer

We have appointed the following data protection officer as the point of contact for data subjects and as the contact for supervisory authorities in matters of data protection law:

Eddine Belaid
Eddine Belaid Aveda exclusive Salon
Alfred-Escher-Strasse 23
8002 Zürich
Switzerland

buero@eddine.ch

2. Terms and legal bases

2.1 Terms

Personal data means all information relating to an identified or identifiable person. A data subject is a person whose personal data is processed.

Processing covers any handling of personal data, irrespective of the means and procedures applied, in particular the retention, disclosure, obtaining, collection, deletion, storage, alteration, destruction and use of personal data.

2.2 Legal bases

We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (OFADP).

3. Nature, scope and purpose

We process the personal data that is necessary in order to carry out our activities and operations in a lasting, user-friendly, secure and reliable way. Such personal data may in particular fall into the categories of inventory and contact data, browser and device data, content data, meta and peripheral data, usage data, location data, sales data as well as contract and payment data.

We process personal data for as long as is necessary for the respective purpose or purposes, or as required by law. Personal data whose processing is no longer necessary is anonymised or deleted.

We may have personal data processed by third parties. We may process personal data jointly with third parties or transfer it to third parties. Such third parties are in particular specialised providers whose services we use. We ensure data protection with such third parties as well.

We process personal data only with the consent of the data subject, unless the processing is permitted on other legal grounds. Processing without consent may be permitted, for example, in order to perform a contract with the data subject and for corresponding pre-contractual measures, to safeguard our overriding legitimate interests, because the processing is evident from the circumstances, or after prior information.

In this context, we process in particular information that a data subject transmits to us voluntarily when making contact – for example by post, email, instant messaging, contact form, social media or telephone – or when registering for a user account. We may store such information, for example, in an address book, in a customer relationship management system (CRM system) or with comparable tools. If we receive data about other people, the transmitting persons are obliged to ensure data protection towards those people and to ensure the accuracy of that personal data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources or collect in the course of our activities and operations, provided and to the extent that such processing is permitted on legal grounds.

4. Job applications

We process personal data about applicants insofar as it is necessary to assess their suitability for an employment relationship or for the later performance of an employment contract. The necessary personal data follows in particular from the information requested, for example as part of a job advertisement. We also process the personal data that applicants disclose or publish voluntarily, in particular as part of covering letters, CVs and other application documents as well as online profiles.

We may allow applicants to keep their details in our talent pool so that we can consider them for future vacancies. We may also use such details to stay in touch and to share news. If we believe that an applicant is a possible fit for a vacancy on the basis of the details provided, we may inform the applicant accordingly.

5. Personal data abroad

We process personal data as a rule in Switzerland. However, we may also disclose or export personal data to other countries, in particular in order to have it processed there.

We may disclose personal data to all countries and territories on earth, provided that the law there ensures an adequate level of data protection in the assessment of the Federal Data Protection and Information Commissioner (FDPIC) or according to a decision of the Swiss Federal Council.

We may disclose personal data to countries whose law does not ensure an adequate level of data protection, provided that suitable data protection is ensured on other grounds, for example through corresponding contractual agreements, on the basis of standard data protection clauses or with other suitable safeguards. In exceptional cases, we may export personal data to countries without adequate or suitable data protection if the special requirements under data protection law are met, for example the explicit consent of the data subjects or a direct connection with the conclusion or performance of a contract. On request, we are happy to inform data subjects about any safeguards or to provide a copy of them.

6. Rights of data subjects

Data subjects whose personal data we process have the rights under Swiss data protection law. These include the right to information as well as the right to correction, deletion or blocking of the personal data processed.

Data subjects whose personal data we process have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

7. Data security

We take suitable technical and organisational measures to ensure a level of data security appropriate to the respective risk. However, we cannot guarantee absolute data security.

Our website is accessed using transport encryption (SSL / TLS, in particular with the Hypertext Transfer Protocol Secure, abbreviated HTTPS). Most browsers indicate transport encryption with a padlock in the address bar.

Our digital communication is subject – as in principle all digital communication is – to mass surveillance without cause or suspicion as well as to other surveillance by security authorities in Switzerland, in the rest of Europe, in the United States of America (USA) and in other countries. We have no direct influence on the corresponding processing of personal data by intelligence services, police bodies and other security authorities.

8. Use of the website

8.1 Cookies

We may use cookies. Cookies – our own cookies (first-party cookies) as well as cookies from third parties whose services we use (third-party cookies) – are data that is stored in the browser. Such stored data need not be limited to traditional cookies in text form.

Cookies can be stored in the browser temporarily as "session cookies" or for a defined period as so-called permanent cookies. "Session cookies" are deleted automatically when the browser is closed. Permanent cookies have a defined storage period. Cookies make it possible, in particular, to recognise a browser on the next visit to our website and thereby, for example, to measure the reach of our website. Permanent cookies can, however, also be used for online marketing, for example.

Cookies can be disabled in whole or in part and deleted in the browser settings at any time. Without cookies, our website may no longer be available in full. We actively ask – at least if and to the extent required – for explicit consent to the use of cookies.

For cookies used to measure success and reach or for advertising, a general objection ("opt-out") is possible for numerous services via AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

8.2 Statistics, advertising and your choice (cookie notice)

We set statistics cookies (Google Analytics 4, section 13) from the first page view, without asking first. The basis is our legitimate interest in knowing which pages are read and where visitors drop off (Art. 31 para. 1 FADP; Art. 45c TCA). You can switch this off for your browser at any time: via "Cookie settings" at the bottom of the page or here: switch off statistics. Measurement then stops in this browser and Google Analytics no longer receives an identifier from you.

We set advertising cookies (Google Ads, section 11.10) only with your consent. Without your consent ("Accept all"), Google Ads receives only cookieless signals (Google Consent Mode).

The same applies to the OpenAI pixel with which we measure our advertising in ChatGPT (section 11.10). Reporting online bookings to OpenAI does not depend on this choice; it is described in section 11.10 under “ChatGPT advertising and booking measurement”, together with your right to object.

We store your choice in a cookie named "eb-einwilligung" for at most 365 days. It contains only the value "alle" or "notwendig", no name, no e-mail address and no identifier. The notice and this cookie run on our own web server (section 11.1) and do not themselves transmit anything to third parties. Without this cookie the default applies: statistics on, advertising off.

If you switch off, measurement stops immediately in this browser. Data transmitted beforehand remains with Google until Google deletes it under its own schedules (for Google Analytics at most 14 months, section 13). If you delete the "eb-einwilligung" cookie in your browser, the default applies again.

8.3 Server log files

For every access to our website we may record the following information, provided that it is transmitted by your browser to our server infrastructure or can be determined by our web server: date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, the individual sub-page of our website accessed including the amount of data transferred, the web page last accessed in the same browser window (referer or referrer).

We store such information, which may also constitute personal data, in server log files. The information is necessary in order to provide our website in a lasting, user-friendly and reliable way and to ensure data security and thus in particular the protection of personal data – including by third parties or with the help of third parties.

8.4 Tracking pixels

We may use tracking pixels on our website. Tracking pixels are also known as web beacons. Tracking pixels – including those of third parties whose services we use – are small, usually invisible images that are retrieved automatically when our website is visited. Tracking pixels can record the same information as server log files.

9. Notifications and messages

We send notifications and messages by email and via other communication channels such as instant messaging or SMS.

9.1 Measurement of success and reach

Notifications and messages may contain web links or tracking pixels that record whether an individual message was opened and which web links were clicked. Such web links and tracking pixels can also record the use of notifications and messages in a personally identifiable way. We need this statistical recording of use for the measurement of success and reach, in order to be able to send notifications and messages effectively and in a user-friendly, lasting, secure and reliable way, based on the needs and reading habits of the recipients.

9.2 Consent and objection

As a rule, you must explicitly consent to the use of your email address and your other contact addresses, unless the use is permitted on other legal grounds. For any consent we use, where possible, the "double opt-in" procedure, which means that you receive an email with a web link that you have to click for confirmation, so that no misuse by unauthorised third parties can occur. We may log such consent including Internet Protocol (IP) address as well as date and time for reasons of evidence and security.

As a rule, you can object at any time to receiving notifications and messages such as newsletters. With such an objection you can at the same time object to the statistical recording of use for the measurement of success and reach. Necessary notifications and messages in connection with our activities and operations remain reserved.

9.3 Service providers for notifications and messages

We send notifications and messages with the help of specialised service providers.

10. Social media

We are present on social media platforms and other online platforms in order to communicate with interested people and to provide information about our activities and operations. In connection with such platforms, personal data may also be processed outside Switzerland.

The general terms and conditions (GTC) and terms of use as well as privacy policies and other provisions of the individual operators of such platforms also apply in each case. These provisions inform in particular about the rights of data subjects directly towards the respective platform, which include, for example, the right to information.

11. Third-party services

We use services of specialised third parties in order to be able to carry out our activities and operations in a lasting, user-friendly, secure and reliable way. With such services we can, among other things, embed functions and content in our website. With such embedding, the services used record, for technically unavoidable reasons, at least temporarily the Internet Protocol (IP) addresses of users.

For necessary security-related, statistical and technical purposes, third parties whose services we use may process data in connection with our activities and operations in aggregated, anonymised or pseudonymised form. This concerns, for example, performance or usage data needed to be able to offer the respective service.

In particular, we use:

11.1 Digital infrastructure

We use services of specialised third parties in order to be able to use the digital infrastructure needed in connection with our activities and operations. This includes, for example, hosting and storage services from selected providers.

In particular, we use:

11.2 Ways to get in touch

We use services from selected providers in order to be able to communicate better with third parties such as potential and existing customers.

11.3 AI concierge "James" (ElevenLabs)

On our website you can write or speak with our AI concierge James. The function only starts once you explicitly agree in the conversation window; before that, nothing is loaded and nothing is transmitted. The provider is ElevenLabs Inc., New York, USA; processing takes place on servers in the USA. To answer you, your input, and in voice mode also your voice, is transmitted to ElevenLabs. For the answers, ElevenLabs uses a language model from Anthropic. What is processed is the content of the conversation, the page from which you start the conversation, and, for an appointment booking, your name and your telephone number; the booking ends up in our appointment system Phorest. Transcripts and recordings are stored for 90 days so that we can check the quality of the advice, and are deleted afterwards. To prevent misuse, we store a daily changing, non-reversible check value of your IP address. The legal basis is your consent (Art. 6 para. 6 FADP; Art. 6(1)(a) GDPR for people in the EEA); you can end the conversation at any time. A data processing agreement with standard contractual clauses is in place with ElevenLabs. If you would rather not use James, you can reach us by telephone on 043 317 11 31 or via online booking.

11.4 Appointment scheduling

We use services of specialised third parties in order to be able to arrange appointments online, for example for meetings. In addition to this privacy policy, any directly visible terms of the services used, such as terms of use or privacy policies, also apply in each case.

11.5 Audio and video conferences

We use specialised services for audio and video conferences in order to be able to communicate online. With these we can, for example, hold virtual meetings or run online lessons and webinars. For participation in audio and video conferences, the legal texts of the individual services, such as privacy policies and terms of use, apply in addition.

Depending on your situation, we recommend muting the microphone by default when taking part in audio or video conferences, as well as blurring the background or displaying a virtual background.

In particular, we use:

11.6 Online collaboration

We use services of third parties in order to enable online collaboration. In addition to this privacy policy, any directly visible terms of the services used, such as terms of use or privacy policies, also apply in each case.

11.7 Maps

We use services of third parties in order to be able to embed maps in our website.

In particular, we use:

11.8 Fonts

We use services of third parties in order to be able to embed selected fonts as well as icons, logos and symbols in our website.

In particular, we use:

11.9 Payments

We use specialised service providers in order to be able to process payments from our customers securely and reliably. For the processing of payments, the legal texts of the individual service providers, such as general terms and conditions (GTC) or privacy policies, apply in addition.

In particular, we use:

11.10 Advertising

We make use of the possibility of showing targeted advertising for our activities and operations with third parties such as social media platforms and search engines.

With such advertising we want in particular to reach people who are already interested in our activities and operations or who could be interested in them (remarketing and targeting). For this we may transmit corresponding – possibly also personally identifiable – information to third parties who make such advertising possible. We can also determine whether our advertising is successful, that is, in particular, whether it leads to visits to our website (conversion tracking).

Third parties with whom we advertise and where you are signed in as a user may be able to assign the use of our online offering to your profile there.

On our website we can measure for Google Ads whether certain actions are carried out (conversion measurement): the click on "Book an appointment", the click on our telephone number, getting in touch by email or WhatsApp, the start of the checkout in the shop and the submission of a job application. What is transmitted is the type of action, the page on which it took place and, in the shop, the value of the basket. We do not transmit names, email addresses or telephone numbers to Google Ads; we do not use the "enhanced conversions" function.

For remarketing we also transmit to Google Ads which type of page you have viewed (product, category, basket) and, in the shop, the article numbers of the products viewed or placed in the basket as well as their value. This allows Google Ads to show people who have visited our website advertising for exactly these products or for our salon on other websites and in Google services (dynamic remarketing).

Both take place only with your consent. Without consent, Google Ads receives only cookieless signals (section 8.2). The legal basis is your consent (Art. 6 para. 6 FADP; Art. 6(1)(a) GDPR for people in the EEA); you can withdraw it at any time. Google also processes the data on servers in the USA (section 5). Which cookies Google Ads sets and how long they are stored is set out in the overview "Types of cookies and other technologies used by Google" (section 11).

For our advertising in ChatGPT, we use the OpenAI pixel to measure whether visitors open our website and click "Book an appointment". The data transmitted is the page visited, the type of action, browser and device data and the IP address. If you came via an ad in ChatGPT, the pixel also stores a click identifier so that OpenAI can attribute the visit to that ad. For this, the pixel sets the cookies "__obref" and "__oppref" (lifetime at most one year) and an entry in the browser's session storage. We do not transmit names, email addresses or telephone numbers to OpenAI via the pixel. This pixel measurement takes place only with your consent ("Accept all", section 8.2). You can switch it off at any time via "Cookie settings" (section 8.2); our website will then no longer load the pixel in your browser. OpenAI also processes the data on servers in the USA (section 5).

ChatGPT advertising and booking measurement

We use advertising in ChatGPT and measure whether it leads to appointment bookings. For this purpose, the time of booking, the booking value and technically hashed identification values may be transmitted to OpenAI. Email addresses and telephone numbers are not transmitted in plain text. The processing serves conversion measurement and the optimisation of our advertising on the basis of our overriding private interest. You can object to this use at any time by email to hair@eddine.ch.

In particular, we use:

  • Google Ads: search engine advertising; provider: Google; Google Ads-specific information: advertising based among other things on search queries, whereby various domain names – in particular doubleclick.net, googleadservices.com and googlesyndication.com – are used for Google Ads, "Advertising" (Google), "Why am I seeing a particular ad?".
  • OpenAI Ads: advertising in ChatGPT and conversion measurement as described above; provider: OpenAI (USA); data protection information: privacy policy.

12. Extensions for the website

We use extensions for our website in order to be able to use additional functions.

In particular, we use:

13. Measurement of success and reach

We use services and programmes in order to determine how our online offering is used. In this context we can, for example, measure the success and reach of our activities and operations as well as the effect of third-party links to our website. We can also, for example, try out and compare how different versions of our online offering or parts of our online offering are used ("A/B test" method). On the basis of the results of the measurement of success and reach, we can in particular fix errors, strengthen popular content or make improvements to our online offering.

When using services and programmes for the measurement of success and reach, the Internet Protocol (IP) addresses of individual users have to be stored. As a rule, IP addresses are shortened ("IP masking") in order to follow the principle of data minimisation through the corresponding pseudonymisation and thereby improve the data protection of users.

When using services and programmes for the measurement of success and reach, cookies may be used and user profiles may be created. User profiles include, for example, the pages visited or content viewed on our website, information on the size of the screen or browser window and the – at least approximate – location. As a rule, user profiles are created exclusively in pseudonymised form. We do not use user profiles to identify individual users. Individual services of third parties where users are signed in may be able to assign the use of our online offering to the user account or user profile with the respective service.

On our website we record, beyond the measurement of reach, how individual pages are used (behaviour measurement). This includes:

  • how far you scroll a page (in steps of 25, 50, 75 and 90 per cent) and how long it stays open (in steps of 10, 30, 60 and 120 seconds);
  • which sections of a page appeared in your viewport, whether a button was visible and whether it was clicked;
  • which questions in expandable areas you have opened;
  • which links you have clicked, for example to appointment booking, to the telephone number, to another language or to an external website;
  • which recommendation the style finder or the hair consultation in the shop produced;
  • whether you have opened the AI concierge James or started a conversation;
  • whether you have started and submitted the application form, with the position chosen, whether a CV was attached and whether your details match the requirements profile; we do not transmit the remaining details from the form to Google;
  • in the shop, the products viewed and the contents of the basket.

When you leave a page, we send a summary report with this information. We evaluate it in pseudonymised and aggregated form. In this way we can see at which point visitors leave a page and which content remains unclear. This recording runs from the first page view until you switch it off via "Cookie settings" (section 8.2).

In particular, we use:

  • Google Analytics 4: measurement of success and reach as well as behaviour measurement as described above; providers: Google Ireland Limited (Ireland) / Google LLC (USA); Google also processes the data on servers in the USA (section 5); the legal basis is our legitimate interest in audience measurement (Art. 31 para. 1 FADP; Art. 6(1)(f) GDPR for people in the EEA); you can object to the measurement at any time (section 8.2); Google Analytics-specific information: measurement with a randomly generated identifier in the cookies "_ga" and "_ga_*" (duration according to the overview "Types of cookies and other technologies used by Google", section 11), where applicable also across different browsers and devices (cross-device tracking); according to Google, Internet Protocol (IP) addresses are used only for approximate location determination and are not stored; Google Analytics keeps event data for us for a maximum of 14 months, after which only aggregated reports remain; we can link Google Analytics with Google Ads so that audiences for remarketing (section 11.10) can be formed from the events measured; "Data protection", "Browser add-on to deactivate Google Analytics".
  • Google Tag Manager: integration and management of other services for the measurement of success and reach as well as further services from Google and from third parties; provider: Google; Google Tag Manager-specific information: "Data collected by Google Tag Manager"; further data protection information can be found with the individual integrated and managed services.

14. Video surveillance

We use video surveillance to prevent criminal offences, to secure evidence in the event of criminal offences and to exercise our right as property owner.

We store recordings from our video surveillance for as long as they are necessary to secure evidence.

We may secure recordings on the basis of legal obligations, to enforce our own legal claims and where criminal offences are suspected, and transmit them to competent bodies such as, in particular, judicial or prosecution authorities.

15. Final provisions

We created this privacy policy with the data protection generator from Datenschutzpartner.

We may adapt and supplement this privacy policy at any time. We will provide information about such adaptations and supplements in a suitable form, in particular by publishing the current privacy policy on our website.

Questions about data protection? Write to us.

hair@eddine.ch or telephone +41 43 317 11 31

Legal noticeContact and directions
Book now Call