PRIVACY POLICY


INTRODUCTION

This Privacy Notice explains how we, STUDIO INSIGHT Sàrl (“we”, “us””), collect and process personal data about you in order to provide the services and products you use; provide the website you visit; operate our business; meet our contractual and legal obligations; protect the security of our systems and our customers; and/or fulfill our other legitimate interests.
At STUDIO INSIGHT we are committed to protecting your personal data.


IDENTITY OF DATA CONTROLLER

STUDIO INSIGHT is the data controller for the personal data we process about you. If you have any queries about this Privacy Notice, you can contact us either by mail or e-mail:

STUDIO INSIGHT Sàrl
Rue Du Pas-De-l'ours 5,
3963 Crans-Montana
E-Mail: breathe@studioinsight.ch


SUMMARY

At STUDIO INSIGHT, we value your privacy and are committed to keeping your personal data safe. Here’s a quick overview of the most important points from our Privacy Notice:
What data we collect: We collect basic information like your name, email, and phone number, as well as data about how you use our services (e.g., your membership information and payment history).

How we use your data: We use your personal data to provide you with our services, improve your experience on our website, and keep you informed about our offerings. For instance, we may use your data to confirm bookings, send reminders, or send newsletters (only if you’ve given your consent).

Third-party services: We work with trusted third parties, such as SimplyBook.me for booking services and Stripe for payment processing. These providers help us deliver our services but only process your data as necessary and in accordance with privacy laws.

Your rights: You have the right to access your data, request changes, ask for deletion, or object to certain uses (like marketing). You can contact us at any time to exercise these rights.

Data security: We take various technical and organizational measures to protect your data, but please remember that no system is 100% secure.

Cookies: Our website uses cookies to improve your browsing experience. You can control cookie settings through your browser.

If you have any questions or concerns, feel free to contact us at breathe@studioinsight.ch.


WHEN DO WE COLLECT PERSONAL DATA?

We collect your personal data when you:
  • Visit or browse our website. See below regarding Cookies.
  • Contact our member services support team through e-mail or contact form on the website
  • Send an e-mail to an @studioinsight.ch e-mail account
  • Complete an membership agreement
  • Ask us for more information about a product or service, or contact us with a question or complaint
  • Have an accident in our studio or there is an incident where you are a witness or personally affected
  • Book practices, rituals and inductions
  • Consent to be contacted regarding personal information
We may also collect, match or acquire personal data about you from third parties such as Google and Meta.


WHAT PERSONAL DATA DO WE COLLECT?

We collect the following personal data:
  • Name, date of birth, gender, e-mail address, postal address, telephone number
  • Your usage records and duration of visits, in the form of date, time, service name
  • Your preferences for particular products or services or interests when you tell us what they are – or when we assume what they are, depending on how you use our products and services
  • Other information you provide us with in the course of contacting us, such as in a note, an e-mail or another record of contact
  • Your membership information such as dates of payment owed and received, the services and/or products you use and any other information related to your account
  • Marketing preferences


FOR WHICH PURPOSES DO WE USE PERSONAL DATA?

We will use your personal data to provide you with the services, products or information that you have requested, for health, safety, security and administration purposes, to improve your website experience, and marketing. In particular, we may use your data to:
  • Provide and improve our website
  • Process your membership or service application and create your member account
  • Identify you and grant you access to the studio
  • Provide you with the services and products as requested
  • Bill you for using our services as part of your membership or service and enforce the collection of debt, if necessary
  • Keep you informed about our services and products including operational matters relating to your membership or services
  • Confirm your attendance to practices or rituals
  • Respond to any questions or concerns you might have about our services and products
  • Understand how you use our services and products, to help us develop relevant and updated services and products for your membership or services
  • Carry out research and analysis to understand how customers use our services and products
  • Operate our facilities in a safe and secure way


RETENTION

We will store your personal data for as long as it is necessary for the purpose of processing.
This means that we will generally keep your personal data for as long as you are a member or use services of STUDIO INSIGHT. Following cancellation or termination of your membership or service request, we will keep your personal data for as long as we have a legitimate interest and/or it is necessary to meet our legal requirements including health and safety.
We will store your personal data for no more than 10 years from the last activity on your account. An ‘activity’ can include access into a studio, a payment made on the membership or service request account or a comment added to the membership or service following contact with STUDIO INSIGHT.
We may contact you about STUDIO INSIGHT services during these 10 years unless you opted out of receiving marketing communications from us.


MARKETING

We can send notifications and messages such as newsletters, offers and supportive content by e-mail, SMS, and other communications channels including instant messaging.
Generally, you must give your consent to the use of your e-mail address and other contact details if it is for the purpose of advertising and marketing.
You can unsubscribe from notifications and messages at any time. A corresponding unsubscribe option is included in every marketing communication on email and SMS or alternatively you can contact us directly with your request.
We send notifications and messages using services provided by third parties or with the assistance of third parties. See below “Third Party Services”. Cookies may be used in this context.


DO WE USE COOKIES?

STUDIO INSIGHT may use cookies (small text files stored in your browser) and other similar technologies, such as web beacons (small, clear picture files used to follow your online activities) and server-side tagging. These collect information that tell us how you use our websites, web-related products and services. The use of cookies does not give us access to the rest of your computer. Cookies – our own cookies (first-party cookies) as well as third-party cookies whose services we use (third-party cookies) – are files that are stored in your browser. Such stored files do not have to be limited to traditional text cookies. Cookies cannot run programs or transmit malware such as Trojans and viruses.
This, in turn, helps us make our website relevant to your interests and needs. We may use a persistent cookie (a cookie that stays linked to your browser) to record your details so we can recognise you if you visit our website again.
Cookies can be temporarily stored in your browser when you visit our website as “session cookies” or for a certain period of time as so-called permanent cookies. Session cookies are automatically deleted when you close your browser. Persistent cookies have a certain storage period. In particular, they make it possible to recognise your browser the next time you visit our website and thereby measure, for example, the reach of our website. However, permanent cookies can also be used for online marketing, for example.
You can choose to refuse cookies, or set your browser to let you know each time a website tries to set a cookie.
You can deactivate and delete cookies in whole or in part at any time in your browser settings. Without cookies, our website may no longer be available in its entirety.
Please note however that if you disable our cookies you may not be able to access certain services or facilities on our sites and your use of our sites may be restricted. This could include joining or logging in to your members area.
In the case of cookies that are used for success and reach measurement or for advertising, a general objection (“opt-out”) is possible for numerous services via the NETWORK ADVERTISING INITIATIVE (NAI), YOURADCHOICES (Digital Advertising Alliance) or YOUR ONLINE CHOICES (European Interactive Digital Advertising Alliance, EDAA).


Server Log Files

We may collect the following information for each access to our website, provided that it is transmitted by your browser to our server infrastructure or can be determined by our web server: date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, accessed individual sub-page of our website including amount of data transferred, last accessed in the same browser window (referrer).
We store such information, which may also constitute personal data, in server log files. The information is required in order to provide our online offer in a permanent, user-friendly and reliable manner as well as to be able to ensure data security and thus in particular the protection of personal data – also by third parties or with the help of third parties.


Web beacons

We may use web beacons on our website. Web beacons are also known as pixel tags. Web beacons – including those of third parties whose services we use – are small, usually invisible images that are automatically retrieved when you visit our website. Web beacons can be used to collect the same information as in server log files.


KEEPING YOUR PERSONAL INFORMATION SECURE

We take appropriate technical and organizational measures to ensure that the personal data we collect and maintain is kept secure, accurate and up to date and kept only for so long as is necessary for the purposes for which it is used. However, we cannot completely rule out personal data security infringements; certain residual risks are unavoidable.
We ensure that the third parties that provide us with services and may have access to your personal data have appropriate security measures and only process your personal data in the way we have authorised them to. These third parties will not be entitled to use your personal data for their own purposes.
Security risks of a technical nature include the encryption and pseudonymization of personal data, record keeping, access restrictions, and the storage of personal data backups. Security measures of an organizational nature include instructions issued to our employees, confidentiality agreements, and audits.
Communications over the internet (such as emails) are generally not secure unless they have been encrypted. Your communications may go through a number of countries before being delivered to us – as this is the nature of the internet. We cannot accept liability or responsibility for any unauthorised access to or loss of your personal data that is beyond our control.
Our web offering is accessed via an encrypted connection (SSL/TLS, in particular using the Hypertext Transfer Protocol Secure, or HTTPS for short). Most web browsers identify encrypted connections by displaying a closed padlock in the address bar.


THIRD-PARTY SERVICES / DATA TRANSFER

We use third-party services in order to be able to provide user-friendly services permanently, and in a secure and reliable manner. Such services are also used to embed content into our website. Such services include hosting and storage services, video services, survey and payment services. In order to use such services, we share certain personal data (in particular your Internet Protocol (IP) address) with such third-party service providers. Not all of these third-party service providers are located in Switzerland; they may be located in the European Economic Area and the United Kingdom (together EEA).
Whereas the countries within the EEA provide for adequate data protection, some countries outside of Switzerland and the EEA (e.g., the US) do not. When we transfer your personal data to such countries that do not provide for adequate data protection, we provide adequate protection of your data for transfer to recipients in those countries by entering into data transfer agreements with those data recipients based on the European Commission’s standard contractual clauses as adapted for Switzerland.
Third parties whose services we use may also process personal data in connection with our offer as well as from other sources – including cookies, log files and tracking pixels – aggregated, anonymized or pseudonymized for their own security-related, statistical and technical purposes.
Digital Infrastructure
We use third-party services in order to be able to make use of the necessary digital infrastructure for our offer. These include, for example, hosting and storage services from specialized providers. To support our infrastructure and to create memberships or provide services we use SimplyBook and Stripe as third party providers.
Contact options
We use third-party services to better communicate with you and others.
We may use Mailchimp to distribute and manage our Marketing communications. Mailchimp is a service of The Rocket Science Group LLC based in the United States. Information about the nature and purpose of the personal data processing can be found in the PRIVACY POLICY, located on the “MAILCHIMP AND EUROPEAN DATA TRANSFERS” PAGE and in the MAILCHIMP “COOKIE STATEMENT”.


Social Media Features and Social Media Content

We use social plugins from Instagram, Inc. to embed Instagram functions and content into our website. We also use Telegram for the same reasons. Such functions are, for example, “Like” or “Share”. Cookies are also used for this purpose. Further information can be found on INSTAGRAM’S “SOCIAL PLUG-INS” PAGE and on TELEGRAM.
The social plugins are offered by Instagram, Inc. in Menlo Park, California. Further information on the type, scope and purpose of data processing can be found in INSTAGRAM’S PRIVACY POLICY.


Google Maps

We use Google Maps to embed maps on our website. Cookies are also used for this purpose. Google Maps is a service of the American Google LLC. For users in the EEA and Switzerland, the Irish GOOGLE IRELAND LIMITED is responsible. Further information about the nature, scope and purpose of data processing can be found in the Google PRIVACY AND SECURITY PRINCIPLES and PRIVACY POLICY. In addition, it is possible to use the “BROWSER ADD-ON TO DEACTIVATE GOOGLE ANALYTICS” and to object to PERSONALIZED ADVERTISING.


Payments

We use payment service providers to process our members’ payments securely and reliably. The terms and conditions of the relevant payment service providers, such as general terms and conditions (GTC) or data protection declarations, apply to the processing.
In particular, we use Stripe: Processing of payments; Sellers: Stripe, Inc.; Information on data protection: PRIVACY POLICY, “STATEMENT ON COOKIES AND TRACKING TECHNOLOGIES”.


Tax purposes

We may transfer personal data to our external auditors in relation to testing and tax filings.
When we transfer your personal data to external consultants, we provide adequate protection of your data for transfer to recipients by entering into data transfer agreements with those data recipients. These recipients are located in Switzerland.


Advertising

Google Analytics
We use Google Analytics to analyse how our website is used, which also allows us to measure, for example, the reach of our website and the success of third-party links to our website. It is a service provided by the American Google LLC. For users in the European Economic Area (EEA) and Switzerland, the Irish GOOGLE IRELAND LIMITED is responsible.
Google also tries to record individual visitors to our website if they use different browsers or devices (cross-device tracking). Cookies are also used for this purpose. Google Analytics requires your Internet Protocol (IP) address, but it will not be merged with any other data held by Google.
In any case, we have your Internet Protocol (IP) address anonymized before analysis by Google. As a result, your full IP address will not be transmitted to Google in the USA.
Further information about the nature, scope and purpose of data processing can be found in the Google PRIVACY AND SECURITY PRINCIPLES and PRIVACY POLICY. An addition, it is possible to use the “BROWSER ADD-ON TO DEACTIVATE GOOGLE ANALYTICS” and to object to PERSONALIZED ADVERTISING.

Google Tag Manager
We use the Google Tag Manager to integrate and manage analytics or advertising services from Google as well as third parties on our website. It is a service provided by the American Google LLC. For users in the European Economic Area (EEA) and Switzerland, the Irish GOOGLE IRELAND LIMITED is responsible. Cookies are not used, but cookies may be used as part of the services integrated and managed by them. We inform you about the processing of personal data by such services in this Privacy Policy.

Google reCAPTCHA – Extensions for the website
We use Google reCAPTCHA to protect input forms from bots and spam, but at the same time to reliably enable input from humans. Cookies are also used for this purpose. It is a service provided by the American Google LLC. For users in the EEA and Switzerland, the Irish GOOGLE IRELAND LIMITED is responsible. Further information on Google's privacy settings see above.

No-code platform
We administrate this website with the assistance of the Tilda Publishing Platform tool. The provider is the Tilda Publishing Platform, represented by:
Tilda Publishing Ltd. Republic of Ireland (Registration number 671800), if the User's location is a country in the European Union or the United States of America;
Individual entrepreneur Nikita Valentinovich Obukhov (OGRNIP 309732819400022), the sole and exclusive rightsholder of the Platform, if the User's location is the Russian Federation;
Tilda Publishing Bel Ltd. the Republic of Belarus (UNP 291748628), if the User's location is the Republic of Belarus;
Tilda Publishing Kaz LLC. Republic of Kazakhstan (BIN 220540034413), if the User's location is the Republic of Kazakhstan;
Tilda Platform Cloud Services Co. LLC, United Arab Emirates (reg. number 868196), if the User's location is any other country than the countries listed above.
Among other things, Tilda Publishing Platform ensures that we can monitor the security and performance of our website as well as generate automatic backups. Consequently, Tilda Publishing Platform has access to all of the website’s content, including our databases. Tilda Publishing Platform is being hosted on the provider’s servers. The use of Tilda Publishing Platform is based on Art. 31 (1) FADP. The website operator has a legitimate interest in a website(s) that work(s) as effectively and securely as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 31 (1) FADP, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting). This consent can be revoked at any time.DATA PROCESSINGWe have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the FADP.


Booking system

Use of SimplyBook.me
We utilize the SimplyBook.me platform to facilitate and manage service bookings. In this context, SimplyBook.me acts as a data processor, collecting and processing personal data, including but not limited to your name, email address, and phone number, strictly for the purposes of scheduling appointments, confirming bookings, and issuing reminders. All personal data processed through SimplyBook.me is handled in accordance with applicable data protection laws, including the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). SimplyBook.me ensures the secure storage and processing of your personal information, and the data will only be used as necessary to fulfill the services requested by you. Data retention and handling by SimplyBook.me are governed by its privacy policies and terms of service, which are incorporated by reference herein.


YOUR PRIVACY RIGHTS

If you wish to exercise one or more of the below rights, please contact us by writing an e-mail to breathe@studioinsight.ch providing your name and surname, in order for us to verify your identification.

You have the following rights in relation to your personal data:
Access. You have the right to ask for a copy of the personal data we hold about you.
Rectification. If you believe we are holding inaccurate personal data about you, or your personal details change, you have a right to have such personal data rectified.
Erasure. You have the right to the erasure of the personal data we hold about you.
Restriction. You have the right to ask us to place restrictions on processing your personal data in certain circumstances.
Notification. You have the right to be notified of any rectification, erasure or restrictions in relation to your personal data.
Portability. You have a right to receive the personal data we hold about you electronically in a format that allows it to be easily transferred to another data controller.
Transfer. You have the right to request the transfer of your personal data to another party.
Objection. You have the right to object to the processing of your personal data, in particular for direct marketing or profiling purposes.
Withdrawal. If STUDIO INSIGHT relies on your consent for the processing of personal data, you have the right to withdraw your consent to the processing of your personal data at any time.
Please note that conditions and exceptions may apply to the exercise of these rights. To the extent permitted or required by law, we may limit or deny requests to exercise these rights, for example, to protect third parties or trade secrets. As such, we may or must retain or otherwise continue to process personal data despite a request to delete the personal data or restrict processing based on legal obligations.
You also have the right to make a complaint at any time to the Federal Data Protection and Information Commissioner (FDPIC).


CHANGES TO THIS PRIVACY NOTICE

We will update this privacy notice from time to time, especially if we change our personal data processing activities or if new legal requirements become applicable.