Skip to content

Privacy policy

Last updated: 2 October 2026

This notice describes data processing on this website and in communication through our Instagram profile. The Swiss Federal Act on Data Protection (FADP) applies in particular. The GDPR applies additionally only where its territorial scope is met in a specific case.

1. Controller

Aesthetics Medical AG, Daniela Graci, Utoquai 37, 8008 Zurich, Switzerland
Phone: +41 44 251 20 20 · E-mail: info@aestheticsmedical.ch

2. Website delivery and hosting

When you visit, technically necessary connection data is processed, particularly IP address, time, requested URL, browser/device information and technical status data. This supports secure and reliable delivery, troubleshooting and abuse prevention, and it is stored only as long as necessary for these purposes.

We use the following service providers as processors to operate the website: Vercel Inc. (hosting, server location Frankfurt, Germany), Convex Inc. (database, server location Ireland), Resend Inc. (sending e-mail notifications about new enquiries) and Microsoft (the clinic's mailbox, Microsoft 365). They process personal data solely on our behalf and in accordance with our instructions.

Some of these providers are headquartered in the USA. Where personal data is transferred to the USA or another country without an adequate level of data protection, this is based on the Swiss-U.S. Data Privacy Framework or on the European Commission's standard contractual clauses as recognised by the FDPIC.

3. Contact and appointment enquiries

If you use the form, we process your name, e-mail address, phone number, optional preferred date, selected enquiry type and message to review and answer your enquiry. Please do not send unnecessary health information through the general form.

The form is submitted only after your express confirmation. If you provide information about your health or your skin, we process it on the basis of your express consent, which you give by submitting the form and can withdraw at any time with effect for the future. Recipients are Aesthetics Medical AG and the processors named in section 2.

Enquiries are deleted automatically 12 months after receipt. If your enquiry leads to a treatment, we transfer the required information into your patient record, which is subject to the statutory retention periods. E-mail notifications are deleted as soon as they are no longer required for handling the enquiry. Backups are stored encrypted and deleted after 12 months at the latest.

4. Local storage and consent

The website stores your privacy choice in your browser's local storage under am-privacy-preferences-v2. It contains only the selected analytics, marketing and external-media categories, version and time. This storage is required to implement your choice.

You can reject or allow optional analytics, marketing and external media with equal ease and change or withdraw your choice at any time through “Privacy settings” in the footer. Withdrawal applies for the future.

5. External media and links

A YouTube video loads only after you allow “External media”. Your browser then connects to youtube-nocookie.com; Google/YouTube may receive your IP address, device and usage data and may use further storage technologies. Without consent, the local preview remains active.

Links to Google Maps, Apple Maps or other external websites connect to the respective provider only after you click them.

6. Communication through Instagram

We run the Instagram profile @aestheticsmedical.ch. If you send us a message there, comment on a post or tag us, we process your profile name, profile picture and the content of your message in order to answer your enquiry and arrange an appointment.

Instagram is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Meta also processes this data for its own purposes under its own privacy policy and may transfer it to the USA and other countries. According to Meta, transfers to the USA are based on the Swiss-U.S. Data Privacy Framework and on standard contractual clauses. We have no influence on this processing by Meta. Where we use Instagram's statistics feature, we only receive aggregated information that does not relate to individual persons.

Please do not send us health information, photos of treatment areas or other confidential information through Instagram. Instagram is not intended for exchanging medical information. For a personal consultation we will call you or invite you to the clinic; you can also write to us by e-mail or through the form on this website.

We keep messages only as long as necessary to answer them and arrange an appointment. Your rights under section 9 also apply here; you can additionally exercise your rights towards Meta directly with Meta.

7. Analytics and marketing

After you consent to the “Analytics” category, Umami loads and measures page views, visits, sources, campaign parameters and aggregated browser, device and country information. Selected interactions in the treatment finder and enquiry journey are recorded as events.

Also after you consent to the “Analytics” category, Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is loaded. Google Analytics measures page views, sessions, sources and interactions; cookies may be set and data transferred to Google, including to the USA. We use Google Consent Mode so that no analytics cookies are set without your consent.

Names, email addresses, telephone numbers, messages and other form contents are not sent to Umami or Google Analytics. We do not create session replays, heatmaps, fingerprints or our own user identifiers. An enquiry is counted as a conversion only after the backend has accepted it.

After you consent to the “Marketing” category, we load tools that measure the success of our advertising campaigns: Google Tag Manager, Google Ads, Meta (Facebook/Instagram). They record page views and the submission of an enquiry, may set cookies and may transfer usage data and your IP address to the respective provider, including to countries without an adequate level of data protection such as the USA. This lets us see whether an advertisement led to an enquiry and show you relevant advertisements in advertising networks (remarketing).

Providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Ads, Google Tag Manager); Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (Meta Pixel). We use Google Consent Mode: without your consent, no advertising cookies are set and no advertising data is transferred. Form contents are never sent to these providers either; the conversion carries only language, form type and the selected treatment.

These services are integrated through Google Tag Manager. It loads only after you allow “Analytics” or “Marketing”, sets no cookies itself and triggers only the services in the categories you have consented to.

Cookies of the analytics and marketing services named above are stored for up to 2 years depending on the service, unless you delete them earlier or withdraw your consent.

8. Fonts and local media

Fonts, images and regular website videos are delivered by the website itself. Loading a page therefore does not directly connect to Google Fonts or an external video provider.

9. Your rights and contact

Within the limits of applicable law, you may request access, rectification, delivery or deletion of your data, object to processing and withdraw consent. Contact info@aestheticsmedical.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner.

10. Changes to this privacy policy

We may amend this privacy policy at any time. The version published on this website applies.

Request consultation+41 44 251 20 20