1. Data Controller

HUG Medspa GmbH, Zürich, Switzerland is the controller responsible for your personal data collected through this website.

2. Data We Collect

We may collect the following personal data:

• Name and email address (when you register or make an inquiry)
• Booking details (service, date, time, notes)
• Usage data and cookies (pages visited, session duration)

3. Purpose of Processing

Your data is used exclusively for:

• Managing your bookings and membership
• Communicating about appointments and services
• Improving our website and user experience

4. Legal Basis

We process your data based on your consent (Art. 6(1)(a) GDPR), contract performance (Art. 6(1)(b) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR).

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above, or as required by applicable law.

6. Your Rights

You have the right to access, rectify, erase, or restrict processing of your personal data. You may also withdraw consent at any time. Contact us at hello@hug-medspa.ch.

7. Cookies

We use essential cookies to operate the website and optional analytics cookies to understand visitor behaviour. You may manage cookie preferences at any time.

8. Contact

For any privacy-related questions, contact us at hello@hug-medspa.ch.