Privacy Policy

We take the protection of your personal data very seriously and treat your data confidentially in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and this privacy policy.

This policy explains which personal data we collect on curacap.ch, how we use it and what rights you have.

Personal data is any data that can be used to personally identify you (e.g. name, email address, IP address).

The controller for the data processing on this website is:

CuraCap Schweiz GmbH · Schänzlistrasse 37 · 2545 Selzach · Switzerland · represented by Dr. Holger Scheib · Phone +41 79 916 22 28 · Email kontakt@curacap.ch

Registered with the Commercial Register of the Canton of Solothurn, UID CHE-158.321.901 (not subject to VAT under Art. 10 Swiss VAT Act, annual turnover < CHF 100,000).

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Each request creates technical log data (IP address, date/time, requested URL, HTTP status code, transferred data volume, referrer, user agent).

Delivery is performed primarily through the Vercel Edge Network in Frankfurt am Main. In individual cases, transfers to third countries (in particular the USA) may occur.

Legal basis: legitimate interest in stable, secure provisioning of the website. A data processing agreement and EU Standard Contractual Clauses for the third-country transfer are in place with Vercel.

Retention period: maximum 30 days, then automatically anonymised.

We use only technically necessary cookies / local storage entries on this website and — only after your explicit consent — cookies and pixels for analytics and marketing purposes.

Strictly necessary storage (no consent required): language preference (local storage), consent status (local storage key curacap:tracking-consent).

Consent-based storage: Google Analytics 4 (cookies _ga, _ga_*, retention up to 14 months), Meta Pixel (cookies _fbp, _fbc, retention up to 90 days), Google Ads Conversion Tracking (cookie _gcl_au, retention up to 90 days).

You can withdraw your consent at any time with effect for the future. To do so, click the "Cookie settings" link in the footer or delete the local storage entry curacap:tracking-consent in your browser. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

After your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA).

Google Analytics uses cookies and similar technologies to analyse your use of the website (pages visited, time on page, scroll depth, interactions with controls, device and browser data, approximate location at city/region level).

We have enabled IP anonymisation (anonymize_ip); the IP is truncated before storage and not merged with other data. We use Google Consent Mode v2; before consent is granted, only aggregated, non-personal pings are transmitted to Google.

Transfers to the USA may occur. Google is certified under the EU-US Data Privacy Framework. Additionally, EU Standard Contractual Clauses and a data processing agreement are in place.

Retention period: 14 months (Google-side). You can also opt out of Google Analytics tracking using the browser add-on at https://tools.google.com/dlpage/gaoptout

After your consent, this website uses the Meta Pixel of Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

The Meta Pixel allows us to track user behaviour after they have clicked on a Facebook or Instagram ad and been redirected to our website, to measure the effectiveness of ads, and to build Custom Audiences and Lookalike Audiences.

Device and browser information, IP address, referrer, pages visited, scroll depth, time on page and interactions with call-to-action elements are processed and transferred to Meta in the USA. Meta is certified under the EU-US Data Privacy Framework.

We have entered into a Joint Controller Addendum with Meta, available at https://www.facebook.com/legal/controller_addendum.

Retention of cookies set: up to 90 days.

After your consent, we use Google Ads Conversion Tracking of Google Ireland Limited to measure the effectiveness of our advertisements (e.g. whether you reach a specific goal on the website after clicking on an ad).

Google Ads sets a cookie (_gcl_au) on your device. Conversion clicks, click ID, timestamp and a reference to the ad are recorded. We only receive statistical evaluations from Google; we cannot identify you personally.

Transfers to the USA may occur (see section 5).

Retention period: up to 90 days.

When you contact us by email or via a contact form, your details (in particular name, email address and content of the request) will be stored for the purpose of processing your request and for any follow-up questions.

Legal basis: pre-contractual measures or legitimate interest in efficient request processing.

We use HighLevel LLC (GoHighLevel, 400 N Saint Paul St, Suite 920, Dallas, TX 75201, USA) for contact form and newsletter processing. HighLevel is certified under the EU-US Data Privacy Framework; a data processing agreement and EU Standard Contractual Clauses are in place.

Retention period: your request data is deleted as soon as it is no longer required to handle your enquiry and any follow-up questions. Mandatory statutory retention obligations (in particular under commercial and tax law) remain unaffected.

If you subscribe to our newsletter, we process your email address and any further voluntarily provided data exclusively for sending the newsletter. Subscription is via double opt-in.

You can withdraw your consent at any time, e.g. via the unsubscribe link in every newsletter.

Mailing service provider: HighLevel LLC (see section 8). Mailing statistics (open and click rates) are evaluated on an aggregated level to optimise the newsletter.

When you place an order on curacap.ch, we process the data necessary to fulfill the contract (name, shipping address, email, optional phone number, order details). Legal basis: contract performance and statutory retention obligations.

Payment processing: Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe processes payment data directly; sensitive card/bank data never reaches our server. A data processing agreement is in place with Stripe. Stripe privacy notice: https://stripe.com/en/privacy

Shipping logistics: Swiss Post (Post CH AG, Wankdorfallee 4, 3030 Bern) from our warehouse in Switzerland.

Order confirmation and shipping notification emails are sent via Resend Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA). Transmitted: recipient email, order number and order details. Resend is covered by EU Standard Contractual Clauses.

Retention of order data: invoices and tax-relevant records are retained for 10 years pursuant to Art. 958f Swiss Code of Obligations. Other order-related personal data is deleted once it is no longer required for contract performance and any warranty or return handling, unless statutory retention obligations apply.

Recipients of your personal data are: Vercel Inc. (hosting + database), Stripe Payments Europe Ltd. (payment processing), Swiss Post (shipping), Resend Inc. (transactional email), Google Ireland Ltd. / Google LLC (Analytics, Ads), Meta Platforms Ireland Ltd. / Meta Platforms Inc. (Pixel), HighLevel LLC (contact form & newsletter).

Transfers to third countries (in particular the USA) take place exclusively on the basis of an adequacy decision (EU-US Data Privacy Framework) and/or EU Standard Contractual Clauses, and supplementary technical and organisational measures.

We do not sell your personal data.

You have the following rights vis-à-vis the controller: right of access (Art. 25 revFADP), right to data release and portability (Art. 28 revFADP), right to rectification (Art. 32 revFADP), right to erasure and destruction of your data.

Where processing is based on consent, you may withdraw that consent at any time with future effect. The lawfulness of processing carried out before the withdrawal remains unaffected.

An informal message to kontakt@curacap.ch is sufficient to exercise your rights.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern, Switzerland, www.edoeb.admin.ch).

For visitors with habitual residence in the EU/EEA, the EU General Data Protection Regulation (GDPR) additionally applies. The controller within the meaning of Art. 4 (7) GDPR is CuraCap Schweiz GmbH (see above).

You have the following rights: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on a legitimate interest (Art. 21), and the right to lodge a complaint with a supervisory authority at your place of residence or the place of the alleged infringement.

Where processing is based on consent, you may withdraw that consent at any time with future effect (Art. 7 (3) GDPR).

We use TLS encryption (HTTPS) for all data transmissions between your browser and our servers. Personal data is only stored for as long as necessary to achieve the stated purposes or as required by statutory retention obligations.

Specific retention periods can be found in the respective sections above.

We adapt this privacy policy in case of changes to our data processing or legal requirements. The current version published on this page is always authoritative.