The entity responsible for the processing of personal data within the meaning of the Swiss Federal Act on Data Protection (FADP) and — where applicable — the EU General Data Protection Regulation (GDPR) is:

exedra beauty & lifestyle ag
Pernille Westergaard
Neustadtgasse 1
8001 Zurich
Switzerland

Email: zuerich@exedralifestyle.ch
Telephone: +41 43 531 00 11

For questions regarding data protection, please contact us at the above address with the subject line "Data Protection".

The following privacy policy informs you about the types of your personal data (hereinafter referred to as "data") that we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us in connection with the provision of our services and within our website www.exedralifestyle.ch.

Personal data is any information relating to an identified or identifiable natural person.

Im Rahmen der Geschäftstätigkeit und des Betriebs unserer Website bearbeiten wir insbesondere folgende Datenkategorien:

​

• Stammdaten: Name, Adresse, Telefonnummer, E-Mail-Adresse

• Vertragsdaten: Daten im Zusammenhang mit der Anbahnung, Durchführung und Abwicklung von Verträgen mit Kundinnen, Kunden und Talenten

• Buchungsdaten: Daten im Zusammenhang mit der Buchung von Kursen und Workshops (z. B. gewählter Kurs, Termin, Teilnehmerangaben)

• Zahlungsdaten: Angaben zur Abwicklung von Zahlungen (z. B. Rechnungsadresse, Zahlungsmethode, Transaktionsdaten). Vollständige Kreditkartendaten werden nicht bei uns, sondern direkt beim Zahlungsdienstleister verarbeitet.

• Bewerbungsdaten: Daten, die Sie uns im Rahmen einer Bewerbung oder Kandidaturmeldung zur Verfügung stellen (z. B. Lebenslauf, Bildmaterial, Massangaben, Sedcards)

• Kommunikationsdaten: Inhalte aus E-Mails, Kontaktformularen, Telefonaten

• Nutzungsdaten: Logfiles, IP-Adresse, besuchte Seiten, Verweildauer, Browsertyp, Betriebssystem, Referrer-URL

We process your data for the following purposes:

​

• Provision of our services and fulfillment of the contract

• Placement of talent with clients in the beauty and lifestyle sector

• Booking, execution and processing of courses and workshops at the exedra Academy

• Payment processing in connection with booked services

• Answering inquiries and communication

• Fulfillment of legal obligations (accounting, taxes, record keeping)

• Operation, maintenance and optimization of our website

• Direct marketing to existing customers

• Protection of legitimate interests, namely IT security and evidence preservation

Where the GDPR is applicable, we base the processing on Art. 6 para. 1 lit. a (consent), lit. b (contract and pre-contractual measures, in particular for course bookings), lit. c (legal obligation) or lit. f (legitimate interests) GDPR.

When you access our website, our hosting provider automatically and temporarily stores the following information in log files:

• Date and time of retrieval

• IP address of the requesting device

• Name of the retrieved file and amount of data transferred

• Notification of successful retrieval

• Browser type and version, operating system

• Referrer URL

This data is processed to ensure technically sound operation, IT security, and to prevent misuse. It is not combined with other data sources.

We use two service providers to operate our website:

​

Domain, DNS and forwarding: cyon GmbH

The domain exedralifestyle.ch is registered with cyon GmbH, Brunngässlein 12, 4052 Basel, Switzerland. Cyon manages the DNS records and the redirection to our website host. Data processing takes place exclusively in Switzerland. As part of DNS resolution and redirection, Cyon processes technical connection data (in particular IP addresses and requested hostnames).

Further information can be found in Cyon's privacy policy: https://www.cyon.ch/legal/datenschutz

​

Website hosting: Wix.com Ltd.

The website itself is operated on the Wix Studio platform, provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, and its affiliated companies in the EU (Wix.com Luxembourg S.à rl, Luxembourg) and in the USA. Wix processes, on our behalf, in particular log files, technical connection data, and content that you enter on the website.

Data processing by Wix is based on a data processing agreement. Data is transferred abroad (particularly to Israel and the USA); Israel has an adequacy decision from the EU Commission, while for the USA Wix relies on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.

For more information, please see Wix's privacy policy: https://de.wix.com/about/privacy

Our website uses cookies and similar technologies. Cookies are small text files that are stored in your browser when you visit our website and contain certain information. They serve to make our website more user-friendly, effective, and secure.

​

We are deploying:

Technically necessary cookies, which are required for the operation of the website (e.g., session management, security, language settings). These are set automatically and deleted after the visit ends or after a defined period.

Functional cookies by Wix Studio as part of platform operation (see section 6), including cookies for managing bookings and for the secure processing of payments via Wix Bookings (see section 12).

You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to block cookies in certain cases or entirely, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website—especially the booking of courses.

​

An overview of the cookies set by Wix can be found at: https://support.wix.com/de/article/cookies-und-ihre-website

When you contact us via contact form, email, telephone, or mail, the data you provide will be processed to handle your inquiry and stored in case of follow-up questions. Your data will not be shared with third parties without your consent. Data will be deleted as soon as it is no longer needed to fulfill the purpose for which it was processed, and at the latest after the statutory retention periods have expired.

We recommend that you do not send particularly sensitive information via unencrypted email.

Application and candidate documents are processed exclusively for the purpose of selection, placement, and potential future collaboration. Without your explicit consent, the data will be deleted after the process is completed, but no later than six months. If we include you in our talent pool, this will only happen with your consent; you can withdraw this consent at any time.

We will only share your data with third parties if:

• this is necessary for the fulfillment of the contract (e.g., mediation to the client)

• They have expressly consented

• a legal obligation exists

• Data is shared with processors who work on our behalf (hosting, IT, accounting, email). These processors are contractually obligated to comply with data protection regulations.

Your data will be transferred to countries outside of Switzerland and the EEA, particularly in connection with hosting (Wix, USA/Israel) and the integration of Instagram content (Meta, Ireland/USA). We ensure an adequate level of protection through:

• Adequacy decisions of the EU Commission or the FDPIC

• EU Standard Contractual Clauses

• the EU-US or Swiss-US Data Privacy Framework, provided the respective recipient is certified.

For booking and processing courses and workshops of the exedra Academy, we use the booking system Wix Bookings, which is provided by Wix.com Ltd. (see section 6).

Collected data

When you make a booking, we collect and process the following data in particular:

• First and Last Name

• Email address and telephone number

• Billing address

• selected course, date and number of participants

• Any additional information you voluntarily provide in the booking form

• Payment information (see below)

This data is processed for the initiation and fulfillment of the course contract and for compliance with legal retention obligations. The legal basis, where applicable under the GDPR, is Article 6(1)(b) and (c) GDPR.

Payment processing

We offer the following payment methods for processing payments:

Credit cards and other electronic payment methods — Wix Payments

The payment process is handled by Wix Payments, provided by Wix.com Ltd. or its affiliated companies. During the payment process, you will be redirected to a secure environment of the payment service provider to securely enter your payment details. We ourselves do not receive access to complete card data, but only information about the successful or failed transaction. Wix Payments may transfer data to the USA and other countries, relying on EU Standard Contractual Clauses and the EU-US Data Privacy Framework for this purpose.

Further information: https://de.wix.com/about/privacy

TWINT

For payments via TWINT, we use the service provided by TWINT AG, Konsumstrasse 12A, 3007 Bern, Switzerland. Technical processing is handled in cooperation with the Wix Payments payment gateway. During the payment process, the data necessary for the transaction (in particular, transaction amount, reference number, and payment status) is processed. TWINT's processing takes place in Switzerland.

Further information: https://www.twint.ch/datenschutz/

Storage duration

Booking and payment data are stored for the purpose of fulfilling the contract and complying with legal retention obligations (in particular Art. 958f OR, ten years for business books and booking documents) and are then deleted or anonymized.

Instagram feed

We embed a feed from our Instagram profile on our website. The provider is Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (for people outside the USA and Canada).

When you visit a page with an embedded Instagram feed, your browser establishes a direct connection to Meta's servers. In doing so, your IP address, browser information, and the URL of the visited page are transmitted to Meta. If you are logged into Instagram at the same time, Meta can associate the visit with your account.

We have no control over the data transmitted or its further processing by Meta. For more information, please see Instagram's privacy policy: https://privacycenter.instagram.com/policy/

Facebook

Our website contains a link to our Facebook profile. This is a simple hyperlink—no data is transferred to Facebook simply by viewing our website. Facebook's privacy policy only applies when you click the link and are redirected to Facebook: https://www.facebook.com/privacy/policy/

LinkedIn

Our website links to our LinkedIn profile. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This is a simple hyperlink—no data is transferred to LinkedIn simply by viewing our website. LinkedIn's privacy policy only applies when you click the link and are redirected to LinkedIn: https://www.linkedin.com/legal/privacy-policy

We process personal data only for as long as is necessary for the aforementioned purposes or as required by law (in particular, the ten-year retention period for business records and accounting documents according to Art. 958f of the Swiss Code of Obligations). After this period, the data is deleted or anonymized.

We take appropriate technical and organizational measures to protect your data against loss, manipulation, and unauthorized access. Our website uses an encrypted TLS/SSL connection ("https"). Our security measures are continuously adapted to technological developments.

Where provided for by law, you have in particular the following rights:

• Information about the data processed concerning you (Art. 25 DSG / Art. 15 GDPR)

• Correction of inaccurate data (Art. 32 DSG / Art. 16 GDPR)

• Deletion or restriction of processing

• Disclosure or transfer of data (Art. 28 DSG / Art. 20 GDPR)

• Objection to certain processing activities

• Revocation of granted consents with effect for the future

• Complaint to the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch , or to a competent EU data protection supervisory authority.

To exercise your rights, please contact us using the contact details provided in section 1. We reserve the right to verify your identity in an appropriate manner.

We reserve the right to amend this privacy policy at any time, for example, in the event of changes to our services or the legal situation. The version published on our website at the time of your visit applies.

As of June 2026