Privacy policy

This is a translation for your convenience. Only the German version is legally binding.

Protecting your data matters to us – especially because a massage practice often deals with health information. In this privacy policy we explain which personal data we process, why we do so and what rights you have. It is based on the Swiss Federal Act on Data Protection (FADP).

Last updated: 28 September 2026

1. Controller

The controller responsible for processing your personal data is:

SADEA GmbH
Sanja Muncan
Schaffhauserstrasse 311
8050 Zürich
Switzerland
Phone: 076 412 31 11
Email: info@sadea.ch

If you have questions about data protection or wish to exercise your rights, you can reach us at this address.

2. Which data we process

We only process the data we need for scheduling appointments, treatment, billing and operating this website:

  • Contact data: name, phone number, email address and, if required, postal address.
  • Appointment data: requested treatment, duration, preferred date, language.
  • Health data: information you share with us about symptoms, previous illnesses, medication or a pregnancy, as well as our assessment and treatment records.
  • Billing data: details on the reimbursement receipt for your health insurer, payment information.
  • Technical data: data transmitted automatically when you visit the website (see section 4).

3. Health data and professional secrecy

Health data are considered sensitive personal data. We process them exclusively in order to treat you safely and effectively and to document and bill the treatment. We treat all information confidentially and do not pass it on without your consent unless we are legally obliged to do so.

Please only send the health information needed to arrange an appointment via the contact form or by email. We are happy to discuss details in person at the practice.

4. Visiting the website and hosting

This website is hosted by Netlify, Inc., San Francisco, USA. When you access the website, your browser automatically transmits technical data to the server, for example IP address, date and time of access, page visited, browser type and operating system. These data are stored in server log files and serve exclusively to keep the website secure and stable. We do not analyse them to identify you personally.

5. Contact form, email and phone

If you contact us via the “Request an appointment” form, by email or by phone, we process your details in order to answer your enquiry and arrange an appointment. Information from the contact form is transmitted and stored via Netlify’s form service and then forwarded to us by email.

Transmission via the website is encrypted (HTTPS). A normal email, by contrast, is not encrypted end to end on its way to us. For confidential health information we therefore recommend phoning or speaking with us in person.

6. Online appointment booking via OneDoc

For online booking on the “Book appointment” page we use the service of OneDoc AG, Switzerland. The booking calendar is loaded as an embedded window from OneDoc. In the process, your IP address is transmitted to OneDoc. When you book an appointment, OneDoc processes the details you enter there, for example name, date of birth, contact details, chosen treatment and appointment, and makes them available to us for appointment management. OneDoc may use its own cookies for this and send you appointment confirmations and reminders. The OneDoc privacy policy also applies. If you do not want this, you can arrange your appointment by phone or email.

7. Google Maps

On the “Home” and “Contact” pages we embed a map (satellite image) from Google Maps, a service of Google Ireland Limited, Ireland, and Google LLC, USA. The map is loaded directly when these pages are opened. Data such as your IP address are transmitted to Google, and Google may set cookies. We use the map so that you can find the practice easily. Further information can be found in Google’s privacy policy.

8. Google Fonts

For a consistent appearance we use the fonts “Fraunces” and “Sora” from Google Fonts. When a page is opened, your browser connects to Google servers and your IP address is transmitted to Google. According to Google, Google Fonts does not set any cookies.

9. Cookies and Google Analytics

If you consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Ireland, and Google LLC, USA. Without your consent, Google Analytics is not loaded and no analytics cookies are set.

Purpose: We want to understand how the website is used – for example which pages are visited, how visitors find us and whether they request an appointment – in order to improve content and usability.

Data processed: pages visited, time spent, source of the visit (for example a search engine), approximate location at country or city level, device and browser information, and a random identifier stored in a cookie. Google Analytics 4 does not store complete IP addresses. We do not link these data to your name or your health data.

Cookies: Google Analytics sets the cookies “_ga” and “_ga_…”, which are stored for up to two years. The analytics data are deleted by Google after 14 months.

Consent and withdrawal: On your first visit we ask for your consent in a notice window. We store your choice in your browser (local storage, without personal reference). You can withdraw your consent at any time via the “Cookie settings” link in the page footer. The Google Analytics cookies are then deleted.

The data may also be processed in the USA (see section 11). Further information can be found in Google’s privacy policy. You can also prevent data collection with the Google browser add-on.

This website does not set any other cookies of its own. The embedded services Google Maps (section 7) and OneDoc (section 6) may set their own cookies.

10. Disclosure to health insurers and third parties

After each treatment you receive a reimbursement receipt, which you submit to your supplementary insurer yourself. We do not pass your data directly to your health insurer unless you expressly wish us to. Beyond this, we only disclose your data where this is necessary to provide our services (for example to our hosting provider or to our fiduciary for accounting), where you have consented or where we are legally obliged to do so. We do not sell any data.

11. Disclosure abroad

Netlify and Google may also process data in the USA. For companies certified under the Swiss-U.S. Data Privacy Framework, the USA is considered a country with adequate data protection. Where this is not the case, we rely on the standard contractual clauses of the European Commission, which are recognised by the Federal Data Protection and Information Commissioner (FDPIC).

12. Retention period

We only keep personal data for as long as necessary for the respective purpose or as required by law. Enquiries via the contact form that do not lead to an appointment are deleted after twelve months at the latest. Treatment records and billing documents are kept for the statutory periods, generally ten years for business records.

13. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, for example encrypted transmission (HTTPS), access restrictions and the secure storage of treatment records at the practice.

14. Your rights

Within the framework of data protection law, you have in particular the right:

  • to request information as to whether and which personal data we process about you,
  • to have incorrect data corrected,
  • to request the deletion of your data, provided there is no statutory retention obligation,
  • to request the release of your data in a common electronic format,
  • to withdraw consent you have given at any time with effect for the future.

Please send your request to info@sadea.ch or by post to the address above. We may ask for proof of your identity. If you do not agree with our response, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

15. Changes

We may amend this privacy policy if our website, our processes or the legal requirements change. The version published on this page at any given time applies.

Book now