Privacy

Last updated: 20 August 2026

Protecting your personal data matters to us. This privacy policy explains how Andji’s Beauty Studio processes personal data on the website ab-studio.ch. The Swiss Federal Act on Data Protection (FADP) and the related Ordinance (DPO) apply.

1. Controller

The controller for data processing in connection with this website is:

Andji’s Beauty Studio
Andjela Randjelovic
Steinmaurstrasse 11c
8173 Neerach
Switzerland
Phone: +41 76 519 97 22
Email: info@ab-studio.ch

2. Data protection officer

For privacy questions, please contact the data protection officer:

Andjela Randjelovic
Steinmaurstrasse 11c
8173 Neerach
Phone: +41 76 519 97 22
Email: info@ab-studio.ch

3. Scope

This policy covers visits to and use of ab-studio.ch (including subpages), enquiries via the contact form, and the contact channels offered on the site (phone, email, WhatsApp and Instagram links).

For online appointment booking on booking.ab-studio.ch, only the privacy policy published on that booking website applies. When you follow «Book appointment» to the booking site, your data is processed under that booking system and its privacy terms.

4. Personal data we process

Depending on how you use the site, the following data may be processed:

Technical usage data when you visit the website: IP address, date and time of access, pages viewed, referrer URL, browser type and version, operating system and other server log data.

Contact data when you send an enquiry: name, email address, optional phone number, selected topic/treatment, message, site language and time of submission.

Communication data if you contact us by phone, email, WhatsApp or social networks.

Booking data is created on booking.ab-studio.ch and is governed by the privacy policy there.

5. Purposes and legal bases

We process personal data in particular to:

• provide, operate and secure the website
• answer contact enquiries and other correspondence
• prepare and deliver studio treatments/services
• protect the contact form against spam and abuse
• meet statutory retention and disclosure obligations

Depending on the case, processing is based on your consent (e.g. voluntary contact and the form consent checkbox), pre-contractual or contractual measures, overriding interests in the secure operation of the website, or legal obligations.

6. Website hosting and server logs

The website runs on a web server (hosting via Plesk). When pages are requested, the server stores technical access data in log files. These data support technical delivery, troubleshooting and protection against attacks. They are usually kept only briefly and are not combined with other personal profiles unless a security incident requires longer analysis.

7. Contact form

The contact form on /kontakt and /en/contact is for other enquiries (not online appointment booking). We collect the fields you enter and technical metadata for security (e.g. time, language).

The enquiry is sent to info@ab-studio.ch and also stored on the server for studio follow-up. Your address is set as Reply-To so we can reply directly. Without the required fields and your consent to storage for handling the enquiry, we cannot accept the form.

8. Email via Microsoft 365 / Microsoft Graph

Contact enquiries and system messages are sent and received via Microsoft 365 (Microsoft Graph) on behalf of info@ab-studio.ch. The provider is Microsoft Ireland Operations Limited and affiliated Microsoft entities. Personal data may be processed in Microsoft data centres, including outside Switzerland or the EEA. Microsoft uses appropriate safeguards (including standard contractual clauses and other contractual guarantees). More information: Microsoft Privacy Statement.

9. Google reCAPTCHA v3

The contact form is protected with Google reCAPTCHA v3 against spam and automated abuse. On submit, your IP address, browser information, interaction data and other technical attributes may be sent to and analysed by Google. Google may also use these data for its own purposes. The provider is Google Ireland Limited / Google LLC (USA). The Google Privacy Policy and Terms of Service apply. Transfers to the USA may involve a lower level of protection; Google uses appropriate safeguards for this.

10. Online booking (booking.ab-studio.ch)

Appointments are booked via the «Book appointment» button, which takes you to booking.ab-studio.ch. That booking website is a separate system. Collection and processing of personal data there (e.g. name, contact details, service, appointment time, payment details) is governed solely by the privacy policy published on booking.ab-studio.ch. Please read it before completing a booking.

11. WhatsApp and Instagram

The website includes links to WhatsApp and Instagram (Meta Platforms). Clicking them leaves our site; the providers’ privacy terms apply. Using these services may involve processing of device and usage data and possibly message content by Meta, including outside Switzerland. See WhatsApp Privacy Policy and Instagram Privacy Policy.

12. Cookies and similar technologies

The public website does not use advertising or analytics tracking cookies. Technically necessary browser or server mechanisms may still occur (e.g. session data for secure operation). Google reCAPTCHA may set its own cookies or local storage; see Google’s information for details.

The website admin area uses session cookies for login and security. That area is not intended for public use.

13. Disclosure to third parties and processors

Personal data is disclosed only as needed for the purposes above, where required by law, or with your consent. Recipients or processors may include:

• website hosting and infrastructure providers
• Microsoft (email via Microsoft 365 / Graph)
• Google (reCAPTCHA)
• the booking system operator on booking.ab-studio.ch (its own privacy rules)
• authorities where legally required

We do not sell personal data to third parties for advertising.

14. Retention

We keep personal data only as long as needed for the respective purposes or as required by statutory retention rules. Contact enquiries are usually deleted or anonymised after correspondence ends, unless longer retention is required or justified (e.g. evidence, legal defence). Server logs are deleted or overwritten according to normal hosting practice.

15. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure (including HTTPS encryption, access controls and server-side contact-form protections).

16. Your rights

Under applicable Swiss data protection law you may in particular request access, rectification, erasure or destruction, restriction of processing, data portability, and withdraw consent with effect for the future. You may also object to processing based on overriding interests.

To exercise your rights, contact us using the details in sections 1 and 2. You may also lodge a complaint with the Swiss supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.

17. No solely automated decisions

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. reCAPTCHA is used only to protect form submissions against spam.

18. Minors

The offering is aimed at adults or at bookings with the consent of a legal guardian. We ask minors not to submit personal data without parental consent.

19. Changes

We may update this privacy policy when the law, technologies or our processes change. The version published on this page applies.