We are pleased that you are visiting our website sandra-wood.com and are interested in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is an important concern for us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal regulations of the Swiss Federal Act on Data Protection (FADP). This Privacy Policy serves to fulfill the information obligations under the FADP, which can be found, for example, in Art. 19 et seq. FADP.

Owner The data controller within the meaning of Art. 5 lit. j FADP is the private individual or federal body that decides on the purpose and means of processing.

With regard to our website, the owner is:

www.sandra-wood.com Eigenackerstrasse 3b 8193 Eglisau Switzerland Email: info@sandra-wood.com Tel.: 0786064364

Provision of the Website and Creation of Log Files Each time our website is accessed, our system automatically collects data and information from the requesting device (e.g., computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed? (1) Information about the browser type and version used; (2) The operating system of the requesting device; (3) Hostname of the accessing computer; (4) The IP address of the requesting device; (5) Date and time of access; (6) Websites and resources (images, files, other page content) accessed on our website; (7) Websites from which the user’s system accessed our website (referrer tracking); (8) Notification of whether the access was successful; (9) Data volume transmitted.

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, meaning that individual website visitors cannot be identified.

Legal Basis for the Processing of Personal Data The processing of personal data is carried out in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 Swiss Civil Code).

Purpose of Data Processing The temporary (automated) storage of data is necessary for the website visit to proceed smoothly, ensuring the delivery of the website. The storage and processing of personal data also serve to maintain the compatibility of our website for as many visitors as possible, as well as for the prevention of misuse and troubleshooting. To achieve this, it is necessary to log the technical data of the requesting computer so that we can respond as quickly as possible to display errors, attacks on our IT systems, and/or functional errors on our website. Additionally, the data helps us optimize the website and generally ensure the security of our information technology systems.

Storage Duration The above-mentioned technical data is deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Right to Restriction, Objection, Correction, and Deletion You may request the correction or deletion of your data at any time. You can find which rights you have and how to exercise them in the lower section of this Privacy Policy.

Special Features of the Website Our website offers various features that require us to collect, process, and store personal data. Below, we explain what happens with this data:

Contact Form(s)

What personal data is collected and to what extent is it processed?
The data you enter into our contact forms, which you input into the entry fields of the contact form.

Legal basis for the processing of personal data
The processing of personal data is carried out in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 Swiss Civil Code).

Purpose of data processing
The data collected through our contact form(s) will only be used for processing the specific inquiry submitted via the contact form. Please note that, in order to fulfill your request, we may also send emails to the address you provided. This is intended to confirm that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory and serves only as additional information for you.

Storage duration
Once your request has been processed, the collected data will be deleted immediately, provided that no legal retention periods apply.

Restriction, objection, correction, and deletion rights
You may request the correction or deletion of your data at any time. You can find out which rights you have and how to exercise them in the lower section of this Privacy Policy.

Requirement to provide personal data
Using the contact forms is voluntary. You are not required to contact us via the contact form and may instead use any other contact options listed on our website. If you choose to use our contact form, you must fill in the fields marked as mandatory. If you do not provide the required information, you will either be unable to submit the request or we will be unable to process your inquiry due to insufficient information.

Newsletter Subscription Form

What personal data is collected and to what extent is it processed?
When you sign up for our newsletter on our website, we collect the email address you entered in the registration field, as well as any other contact details you may provide via the newsletter subscription form.

Legal basis for the processing of personal data
The processing of personal data is carried out in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 Swiss Civil Code).

Purpose of data processing
The data collected in the registration form for our newsletter is used exclusively for sending our newsletter, which informs you about our services and updates. After signing up, we will send you a confirmation email containing a link that you must click to complete your newsletter subscription (Double-Opt-In). By doing so, you give your consent for data processing under Art. 6 para. 6 FADP.

Storage duration
You can unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every newsletter. Your data will be deleted immediately upon unsubscribing, provided no legal retention obligations apply. Likewise, if your registration is not completed, your data will be deleted immediately. We reserve the right to delete your data at any time without providing reasons and without prior or subsequent notification.

Restriction, objection, correction, and deletion rights
You may request the correction or deletion of your data at any time. You can find out which rights you have and how to exercise them in the lower section of this Privacy Policy.

Requirement to provide personal data
If you wish to subscribe to our newsletter, you must complete the mandatory fields and confirm your email address by clicking the Double-Opt-In link. The details provided for the newsletter subscription are necessary to receive our newsletter. This information is used exclusively for sending the newsletter. If you do not fill in the required fields, we will be unable to provide you with our newsletter service.

Disclosure of Information to Third Parties

The processing of personal data is carried out in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 CC).

The disclosure of information to third parties is based on the scope of the activities or services described below on our website or within our business model.

As a general rule, we retain your information only as long as necessary and treat it confidentially. Exceptions include the transfer of personal data to debt collection service providers, public authorities, and private individuals who are entitled to it under legal provisions, court decisions, or official orders, as well as the transfer of data to authorities for the purpose of initiating legal proceedings or for law enforcement if our legally protected rights are infringed.

Statistical Analysis of Visits to This Website – Web Tracking

When accessing this website or individual files on the website, we collect, process, and store the following data: IP address, the website from which the file was accessed, file name, date and time of access, amount of data transferred, and notification of successful retrieval (so-called web logs). We use this access data exclusively in a non-personalized form to continuously improve our online offerings and for statistical purposes.

The processing of any personal data is carried out in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 CC). Additionally, we use the following web tracking services to analyze visits to this website:

Google

We use the service Google, provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (Email: support-deutschland@google.com, Website: https://www.google.com/). According to Swiss authorities, data processing occurs in secure third countries. The Swiss country list and further information can be found at: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html.

The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 FADP and Art. 31 para. 1 FADP, which you provided on our website.

We use Google to enable additional Google services on our website, such as data processing for streams, fonts, and relevant search content. This service is necessary to exchange visitor data between Google services and provide tailored content based on the visitor’s Google account.

For this purpose, the service or we collect the following data: background data stored in the Google user account or other Google services, background data for Google service provisioning (e.g., streaming data or advertising data), user interactions with Google search, information on the device used, IP address, browser details, and additional data from Google services related to our website.

When this service is enabled on our website, our site connects to Google Ireland Limited’s servers and transfers the required data. As part of data processing, personal data may also be transmitted to Google LLC servers, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Google may also share information from other Google services to provide background services for displaying and processing Google-provided services. This may include data transfers to Google Apis, DoubleClick, Google Cloud, Google Ads, and Google Fonts in accordance with Google’s privacy policy. You can review Google’s certification under the EU-US Data Privacy Framework at: https://www.dataprivacyframework.gov/list.

You may withdraw your consent to data processing at any time. Information on how to withdraw your consent can be found either in the consent settings or at the end of this privacy policy.

Further details on data handling can be found in Google’s privacy policy: https://policies.google.com/privacy.

Google offers an opt-out option at: https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

Google Maps

We use Google Maps, a service provided by Google Ireland Limited (same contact details as above). This allows users to find our location more easily and accurately than with a static map. Additionally, Google may link map usage with physical visits or interactions with other Google-listed contact information, enabling predictions of visitor traffic.

Data processed includes: IP address, Google background service information (Google Apis), search terms, coordinates, route planner data (start and destination locations), location data, Google advertising ID, Android advertising ID.

We have entered into a joint processing agreement with Google for Google Maps. You can find the agreement at: https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

Further details on data processing can be found in Google’s privacy policy: https://policies.google.com/privacy.

Opt-out option: https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

Gstatic

We use Gstatic, a background service from Google Ireland Limited, to optimize bandwidth usage and preload necessary catalog files, such as Google Fonts and Google Maps background data.

More information: https://policies.google.com/privacy.

Opt-out option: https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

Integration of External Web Services and Data Processing Outside the EU

We use active content from external providers (so-called web services). When you visit our website, these providers may receive personal information about your visit. Data processing outside of Switzerland may occur. You can prevent this by installing a browser plugin or disabling scripts in your browser, though this may limit website functionality.

Cloudflare

We use Cloudflare, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Contact: support@cloudflare.com, https://www.cloudflare.com/.

Your personal data may be transferred to unsafe third countries with insufficient legal data protection. Your data will only be shared if appropriate safeguards exist, such as:

• International treaties
• Contractual data protection clauses notified to the Swiss Federal Data Protection and Information Commissioner (FDPIC)
• Standard data protection clauses approved by the FDPIC
• Binding corporate data protection rules approved by the FDPIC or an equivalent authority in a country with adequate protection

If no such safeguards exist, your data will only be disclosed with your consent, for contract execution, or for legal enforcement.

Cloudflare acts as a content delivery network (CDN) and provides security functions and reverse proxy services for our website.

Cloudflare’s certification under the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/list.

More information: https://www.cloudflare.com/privacypolicy/.

Google Fonts

We use the Google Fonts service on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Email: support-deutschland@google.com, Website: https://www.google.com/. According to the assessment of Swiss authorities, processing takes place in secure third countries. The Swiss list of countries and further information can be found at the following link: https://www.edoeb.admin.ch/edoeb/en/home/data-protection/commerce-and-economy/transmission-abroad.html.

The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 1 DSG, which you have given on our website.

We use Google Fonts to embed attractive fonts on our website to enhance the visual presentation. The service may also be used if other Google services on our website require Google Fonts to function properly. This applies, for example, when our website utilizes Google services that depend on Google Fonts.

For processing, the service and/or we collect the following data:

• Font data
• IP address of the website visitor
• Statistics on font usage
• Other data from Google services related to our website

If the service is active on our website, it connects to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Google may also process information from other Google services to provide background services for the display and data processing of Google services. This may include data transfers to Google APIs, Google Cloud, and Google Ads, as outlined in Google’s privacy policy. You can check the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.

You can revoke the processing of your data at any time. More information on withdrawing your consent can be found either when providing consent or at the end of this privacy policy.

Further details on the handling of transmitted data can be found in Google’s privacy policy: https://policies.google.com/privacy.

The provider also offers an opt-out option at: https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

Google reCaptcha

We use the Google reCaptcha service on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Email: support-deutschland@google.com, Website: https://www.google.com/. According to the Swiss authorities‘ assessment, processing takes place in secure third countries. The Swiss list of countries and further details can be found at the following link: https://www.edoeb.admin.ch/edoeb/en/home/data-protection/commerce-and-economy/transmission-abroad.html.

The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 1 DSG, which you have given on our website.

If Google reCaptcha is active on our website, the data collected by Google reCaptcha is transmitted to the servers of Google Ireland Limited. As part of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. The service analyzes specific characteristics and user behavior to determine whether an input is made by a human or an automated program (bot).

The service operates on three levels:

1. It automatically detects whether the input is not from a bot.
2. It requires the user to check a captcha checkbox.
3. It presents small image, voice, or text challenges for verification.

Google reCaptcha is used on our website for security purposes to prevent bots from interacting with our site. It verifies on our behalf that only humans and not bots can use our site, particularly protecting features such as contact forms and login areas.

For processing, the service and/or we collect the following data:

• User behavior (e.g., mouse movements, input behavior)
• IP address
• Browser data
• Computer information

If you wish to use the input options protected by Google reCaptcha on our website, you must allow its use and complete the required captchas. If you do not fill out the captcha or do not allow the use of Google reCaptcha, you will not be able to use the captcha-protected form. Alternatively, you can use other contact options such as email or postal mail.

The provider’s certification under the EU-US Data Privacy Framework can be found at https://www.dataprivacyframework.gov/list.

You can revoke the processing of your data at any time. More information on withdrawing your consent can be found either when providing consent or at the end of this privacy policy.

Further details on the handling of transmitted data can be found in Google’s privacy policy: https://policies.google.com/privacy.

The provider also offers an opt-out option at: https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

Gravatar

We use the Gravatar service on our website, provided by Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, D02 AY86 Dublin, Ireland, Email: privacypolicyupdates@automattic.com, Website: https://de.gravatar.com/. Processing takes place in secure third countries according to Swiss authorities. The Swiss list of countries and further information can be found here: https://www.edoeb.admin.ch/edoeb/en/home/data-protection/commerce-and-economy/transmission-abroad.html.

The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 1 DSG, which you have given on our website.

Gravatar is a service for providing avatars across websites.

The certification of Automattic Inc. under the EU-US Data Privacy Framework can be found at: https://www.dataprivacyframework.gov/list.

You can revoke the processing of your data at any time. More information on withdrawing your consent can be found either when providing consent or at the end of this privacy policy.

Further details on the handling of transmitted data can be found in the provider’s privacy policy: https://automattic.com/privacy/.

The provider also offers an opt-out option at: https://automattic.com/privacy/.

Legally ok

We use the Legally ok service on our website, provided by Legally ok GmbH, Heinz-Kühn-Straße 4, 51373 Leverkusen, Germany, Email: info@legally-ok.com, Website: https://www.legally-ok.com/.

The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 para. 6 DSG or Art. 31 para. 1 DSG.

We use Legally ok to ensure our website complies with applicable data protection regulations by integrating legally required notices and services.

For processing, the service and/or we collect the following data:

• Consent data (including date, time, and type of consent)
• Log data (IP address, browser data)

Further details on the handling of transmitted data can be found in the provider’s privacy policy: https://www.legally-ok.com/datenschutz/.

OpenJS Foundation

We use the OpenJS Foundation service on our website, provided by OpenJS Foundation, 1 Letterman Drive, Building D, Suite D4700, San Francisco, CA 94129, United States, Email: privacy@openjsf.org, Website: https://openjsf.org/.

According to the assessment of Swiss authorities, processing takes place in secure third countries. The Swiss list of countries and further details can be found at the following link: https://www.edoeb.admin.ch/edoeb/en/home/data-protection/commerce-and-economy/transmission-abroad.html.

The legal basis for the transfer of personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 1 DSG, which you have given on our website.

The provider’s certification under the EU-US Data Privacy Framework can be found at: https://www.dataprivacyframework.gov/list.

Further details on the handling of transmitted data can be found in the provider’s privacy policy: https://privacy-policy.openjsf.org/.

Trustindex

We use the Trustindex service on our website, provided by Trustindex Ltd., Kossuth Lajos stny. 7, H-1211 Budapest, Hungary, Email: info@trustindex.io, Website: https://www.trustindex.io/.

The legal basis for processing personal data is your consent pursuant to Art. 6 para. 6 DSG or Art. 31 para. 1 DSG, which you have given on our website.

Trustindex is used to integrate and display customer reviews on our website.

For processing, the service and/or we collect the following data:

• Review data
• User data (including IP address, browser information)

Further details on the handling of transmitted data can be found in the provider’s privacy policy: https://www.trustindex.io/privacy-policy/.

Vimeo

We use the Vimeo service on our website, provided by Vimeo, Inc., 555 West 18th Street, 10011 New York, United States, email: Privacy@vimeo.com, website: http://www.vimeo.com/. Your personal data is transferred to so-called unsafe third countries, which do not provide sufficient data protection under their legislation. Your data will only be shared if appropriate data protection is ensured. This can specifically be ensured through:

• International treaties
• Data protection clauses in a contract between the data controller or processor and its contracting party, which have been previously reported to the FDPIC
• Specific guarantees developed by the responsible federal authority and previously reported to the FDPIC
• Standard data protection clauses that have been previously approved, issued, or recognized by the FDPIC
• Binding corporate rules that have been previously approved by the FDPIC or a data protection authority in a country that provides adequate protection

If such guarantees are not available, your data may only be disclosed if you have given your consent, the disclosure is directly related to the conclusion or execution of a contract, or the disclosure is necessary for the enforcement of legal claims before courts and authorities or for the protection of public interests.

The legal basis for the transfer of personal data is your consent pursuant to Art. 6 (6) DSG or Art. 31 (1) DSG, which you have provided on our website.

Videos from the Vimeo platform are embedded on our website through the Vimeo service.

The provider’s certification under the EU-US Data Privacy Framework can be accessed at https://www.dataprivacyframework.gov/list.

You can revoke the processing of your data at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.

For more information on how the transmitted data is handled, please refer to the provider’s privacy policy at https://vimeo.com/privacy.

The provider also offers an opt-out option at https://vimeo.com/privacy.

Wufoo

We use the Wufoo service on our website, provided by SurveyMonkey, Inc., One Curiosity Way, 94403 San Mateo, United States, email: records@surveymonkey.com, website: https://de.surveymonkey.com/. Your personal data is transferred to so-called unsafe third countries, which do not provide sufficient data protection under their legislation. Your data will only be shared if appropriate data protection is ensured. This can specifically be ensured through:

• International treaties
• Data protection clauses in a contract between the data controller or processor and its contracting party, which have been previously reported to the FDPIC
• Specific guarantees developed by the responsible federal authority and previously reported to the FDPIC
• Standard data protection clauses that have been previously approved, issued, or recognized by the FDPIC
• Binding corporate rules that have been previously approved by the FDPIC or a data protection authority in a country that provides adequate protection

If such guarantees are not available, your data may only be disclosed if you have given your consent, the disclosure is directly related to the conclusion or execution of a contract, or the disclosure is necessary for the enforcement of legal claims before courts and authorities or for the protection of public interests.

The legal basis for the transfer of personal data is your consent pursuant to Art. 6 (6) DSG or Art. 31 (1) DSG, which you have provided on our website.

This service is a plugin that we require to display all content on our website. The service may also be used for tracking and/or advertising purposes.

You can revoke the processing of your data at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy.

For more information on how the transmitted data is handled, please refer to the provider’s privacy policy at https://www.wufoo.com/privacy/.

The provider also offers an opt-out option at https://www.wufoo.com/privacy/.

Information on the Use of Cookies

Scope of Processing Personal Data

On various pages, we integrate and use cookies to enable certain functions on our website and to integrate external web services. „Cookies“ are small text files that your browser can store on your device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of storing a cookie file is also known as „setting a cookie.“ Cookies can be set either by the website itself or by external web services.

Legal Basis for Processing Personal Data

Relevant regulations include Art. 6 ff. DSG (Principles).

The specific legal basis is determined by the cookie table outlined in this section.

In general, cookies collected based on legitimate interests serve to ensure the functionality of our website and its integrated services (technically necessary cookies). Additionally, cookies may improve user-friendliness and enable more personalized interactions. In such cases, we have balanced your interests against ours.

Using cookie technology, we can identify, analyze, and track individual website visitors only if they have consented to the use of cookies under Art. 6 (6) DSG.

Purpose of Data Processing

Cookies are set by our website or external web services to maintain the full functionality of our website, improve user experience, or pursue the purpose specified in your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, such as unique or random IDs, enabling us to offer more personalized services. Details are provided in the following table.

Storage Duration

The cookies listed below are stored in your browser until they are deleted or, in the case of a session cookie, until the session expires. Details are provided in the following table:

Right to Object, Withdraw Consent, and Delete Data

You can configure your browser settings to prevent cookies from being set altogether. You can also decide on a case-by-case basis whether to accept cookies or reject them entirely. Cookies can serve different purposes, such as recognizing that your device has already connected to our website (persistent cookies) or storing recently viewed content (session cookies).

If you have explicitly allowed us to process your personal data, you may withdraw your consent at any time. Please note that the legality of processing data based on consent before its withdrawal remains unaffected.

For further details on data security, legal retention periods, your rights regarding data access, correction, deletion, withdrawal, and data portability, please refer to the full privacy policy.