Legal
Privacy policy
Protecting your data is important to us. The following information explains which data is processed when you visit this website. It is based on the Swiss Federal Act on Data Protection (FADP).
Controller
Cosmetic Institute Beauty Rocío, Rocío Furger
Zürichstrasse 69, 6004 Luzern, Switzerland
cosmetics@beauty-rocio.ch
Data we process
When you access this website, our hosting provider processes technically necessary access data: your IP address, the date and time of access, the page accessed, the volume of data transferred, and details of your browser and operating system. This data is used solely to operate the website securely and reliably and is not combined with other data sources.
Audience and advertising conversion measurement
On your first visit, we display a short, prominent notice. Privacy-conscious audience measurement with Google Analytics 4 is preselected under the Swiss opt-out model and starts automatically only once this notice is visibly available; no consent click is required. Google Ads call conversion measurement and Microsoft Ads conversion measurement are preselected too. The first-layer “Turn analysis off” button disables Microsoft Clarity only. Google Analytics and both Ads measurements remain active and can each be switched off under “Details”. Only security, page display and storage of your choice are technically essential. We treat Global Privacy Control and Do Not Track browser signals as an objection; when present, Google Tag Manager supplied by Google Ireland Limited, Ireland, is not loaded and no cookie-free Google measurement signals are sent.
Google Consent Mode v2 communicates your choices. Advertising storage and advertising user data are enabled for the preselected Google Ads call conversion measurement after the visible notice and are disabled when you switch that category off. Advertising personalisation and other personalisation remain disabled in every case. We do not use Google Signals, User-ID or user-provided data. According to Google, IP addresses for access from Switzerland are processed on servers in Switzerland or the EEA and discarded before logging unless another disclosed Google Ads purpose applies.
Google Ads call conversion measurement is a separate, preselected advertising category. After the visible notice, the Google Ads tag may store an advertising click identifier in cookies and replace our visible landline number with a temporary Google forwarding number after an eligible ad click. Calls are routed to our normal landline. Google Ads can then report the ad attribution, connection status, time and duration of the call and available caller-region or caller-number information. We do not transmit form entries or message contents and do not activate advertising personalisation.
Microsoft Clarity is enabled for cookie-free basic analysis by default and receives the official no-consent signal. It then sets no analytics cookies and can evaluate page views only as separate fragments that are not linked across pages. “Turn analysis off” disables Clarity completely. Full session analysis with connected recordings is enabled only when you explicitly activate the separate switch. Form entries remain masked in all cases. If you disable audience measurement overall, Clarity is not loaded either.
Microsoft Advertising UET is a separate, preselected advertising category. The UET script is loaded after the visible notice unless you switch “Microsoft Ads conversion measurement” off, and only when a verified UET tag ID has been configured. While it is enabled, we store the most recent 32-character Microsoft Click ID from the landing-page URL in local storage for up to 90 days and overwrite it after a newer Microsoft ad click. It is used to attribute calls, email, WhatsApp clicks and successfully delivered forms to that ad click. Names, telephone numbers, email addresses, message contents and destination URLs are not sent as UET event parameters. If you switch it off, no UET script is loaded and no Microsoft Click ID is stored persistently.
These services are configured:
- Google Analytics 4 (Google Ireland Limited, Ireland; audience measurement): measures page views, approximate origin, device type and use of the website.
- Microsoft Clarity (Microsoft Ireland Operations Limited, Ireland; usage analysis): records cookie-free basic interactions in no-consent mode; complete session context is enabled only after separate consent, and form entries remain masked.
- Google Ads call conversion measurement (Google Ireland Limited, Ireland; advertising measurement): after the visible notice, replaces the visible landline number for eligible Google Ads visits with a forwarding number and attributes connected calls to the ad click unless switched off.
- Microsoft Advertising UET (Microsoft Ireland Operations Limited, Ireland; advertising measurement): loads after the visible notice unless switched off and only with a configured UET ID; contact and form data are not sent as advertising event parameters.
The services may process pages visited, date and duration, approximate region, device type, referrer, click and scroll interactions and, while the respective advertising measurement is enabled, the Google or Microsoft click ID, PII-free conversion events and Google call metadata described above. We do not transmit names, contact details or form data as analytics or advertising event parameters. Event and user data retention in GA4 is limited to two months. Clarity generally retains session recordings for 30 days and aggregated interaction data for up to nine months. Processing in the United States cannot be excluded. The providers rely on applicable safeguards for international transfers, in particular the Swiss-U.S. Data Privacy Framework for certified recipients and, additionally, suitable standard contractual clauses.
Your selection is stored locally in your browser. Only the privacy-setting version and true or false values for audience measurement, Microsoft Clarity, full Clarity sessions, Google Ads, Microsoft Ads and acknowledgement of the notice are stored. If Microsoft Ads is enabled after an attributable click, the most recent Microsoft Click ID and its expiry time are also stored for up to 90 days. Your name, contact details, visited URL and form data are not stored there. Technically necessary functions and security always remain active.
Disable analysis or change your settings
You can change your selection at any time through “Privacy settings” in the footer. “Turn analysis off” disables Microsoft Clarity, removes accessible Clarity cookies and leaves Google Analytics and both Ads measurements active. Each of these three measurements can be switched off separately under “Details”. Disabling Google Analytics applies to the future, blocks Tag Manager on subsequent page views and deletes accessible Analytics and Clarity cookies from this website. Withdrawing Google Ads permission sends a denied storage and advertising-user-data signal, deletes accessible Google Ads click and website-call cookies from this website, and prevents the Google Ads tag from loading on subsequent page views. Withdrawing Microsoft Ads permission sends UET a denied signal, deletes the locally stored Microsoft Click ID and accessible UET cookies, and prevents UET from loading on subsequent page views. Cookies on third-party domains can be deleted only by the respective provider or through your browser settings. More information is available in the Google Privacy Policy and the Microsoft Privacy Statement.
Fonts
All fonts used on this website are loaded from our own server. No connection is made to Google Fonts or any other external service.
Google Maps
The home page and contact page contain an embedded Google Maps map showing our institute. The map loads automatically when you open either page. Google therefore receives your IP address and other technical usage data even if you do not interact with the map. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to countries outside Switzerland and the EEA. Further information is available in Google’s privacy policy.
Contacting us
If you contact us by telephone, WhatsApp or email, we process the information you provide solely to answer your enquiry and arrange an appointment. WhatsApp Ireland Limited’s privacy provisions also apply when you use WhatsApp.
Contact form
When you use the contact form, we process the information entered there: your name, telephone number, optional email address and message. We use this information to answer your request and arrange an appointment on the basis of your consent. You can withdraw consent at any time, for example by emailing cosmetics@beauty-rocio.ch.
We use the delivery service Resend (Ireland (processing), United States (provider's registered office)) to send the message to our email inbox.
To prevent automated misuse, the form endpoint also evaluates the IP address, request origin, time taken to complete the form, technical request properties and a one-way hash used to recognise duplicate submissions. Bot-blocking log entries contain the reason for blocking, but not the form contents.
Each JavaScript submission is assigned a random lead ID before it is sent; the server creates one for submissions without JavaScript. The selected treatment is stored as a language-independent service ID. If you previously enabled Microsoft Ads conversion measurement and a valid Microsoft Click ID is available, that Click ID is attached as well. These technical identifiers are delivered with the enquiry to our inbox so that the lead can be exported and matched later. The Microsoft Click ID is omitted when Microsoft Ads measurement is switched off and is never written to the analytics data layer.
Retention
We retain your data only for as long as necessary for the purposes described above or as required by statutory retention periods.
Your rights
You have the right to request information about the personal data we process about you and to ask for inaccurate data to be corrected or for data to be deleted. To exercise these rights, contact cosmetics@beauty-rocio.ch.
Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the access data described above on our behalf.
