Privacy Policy

1. Introduction

At GrandSpaPro, protecting your personal data and privacy is our highest priority. This Privacy Policy transparently informs you about what data we collect, how we process it, and what control you have over your information, particularly in connection with our senior care services and wellness programs.

Our data processing practices comply with applicable Swiss data protection laws and the European General Data Protection Regulation (GDPR), where applicable to our activities in providing care services to our valued residents and guests.

2. Collection and Processing of Personal Data

The collection and processing of your data is strictly limited to providing, conducting, and personalizing our senior care and wellness services. This includes:

2.1. Data you actively provide to us:

  • Registration information such as name, email address, phone number, and relevant health information for care services
  • Payment information for booking care services and wellness programs
  • Medical history and care requirements necessary for personalized care planning
  • Emergency contact information and personal preferences for daily care

2.2. Automatically collected data:

  • Technical information such as IP address, device type, and browser version when using our website
  • Visit history and appointment records for care services
  • Communication preferences to optimize our care services

2.3. Cookies and Tracking Technologies: We use necessary cookies and, with your consent, analytics cookies to continuously improve our services. You can adjust your cookie settings in your browser at any time or use our website without optional cookies.

3. Purpose of Data Processing

We process your personal data for the following purposes:

  • Care Services – For organizing and providing personalized senior care services, wellness programs, and specialized care
  • Resident Management – For managing appointments, bookings, payments, and sending relevant care information
  • Care Assessment – To ensure the appropriateness of suggested care programs and create tailored recommendations
  • Quality Assurance – For continuous improvement of our care services and wellness programs

4. Legal Basis for Processing

Our data processing is based on the following legal grounds:

  • Contractual fulfillment in providing care services and managing resident data (Art. 6(1)(b) GDPR)
  • Legitimate interest in improving our care offerings and optimizing our services (Art. 6(1)(f) GDPR)
  • Compliance with legal obligations, particularly in healthcare documentation (Art. 6(1)(c) GDPR)
  • Your explicit consent for collecting certain preference data and for marketing measures (Art. 6(1)(a) GDPR)

5. Data Sharing with Third Parties

Your data is only shared with third parties in the following cases:

  • Payment Service Providers – For secure processing of payments for care services
  • IT Service Providers – For operating our care management software and website under data processing agreements
  • Healthcare Providers – When necessary for coordinating care services, with strict confidentiality
  • Legal Advisors – For complex care arrangements and legal compliance

We will never share your data with uninvolved third parties for advertising purposes and always maintain the highest level of confidentiality.

6. Data Security

To protect your data, we implement advanced security measures, including encrypted data transmission, secure storage, and strict access controls for our staff. We pay special attention to protecting sensitive health information and personal data requiring the highest confidentiality.

Physical documents containing personal data are stored in secure facilities and safely destroyed after legal retention periods expire. Our facilities are equipped with modern security systems.

7. Data Storage Duration and Deletion

Your data is stored only as long as necessary for the stated purposes:

  • Contact and contract data are stored for the duration of the care relationship plus legal retention periods.
  • Care preferences and requirements are kept for up to 5 years after the last activity.
  • Healthcare-related documents are stored according to Swiss law for up to 10 years after the end of care services.

You have the right to request early deletion of your data unless prevented by legal retention requirements.

8. Your Rights

As a resident or guest, you have the following rights:

  • Information about your stored personal data
  • Correction of incorrect or incomplete data
  • Deletion of your data under legally specified conditions
  • Restriction of processing under certain circumstances
  • Data portability in a structured, common format
  • Objection to processing based on legitimate interest

To exercise these rights, please contact us via email at privacy@grandspapro.com or personally at our facility.

9. GDPR-specific Provisions

As a Swiss company serving clients from the EU, we follow the principles of the General Data Protection Regulation (GDPR) and guarantee the following rights:

  • Cross-border Data Transfers – When transferring data outside the EU/EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
  • Data Protection Officer – Our Data Protection Officer is available for inquiries regarding the processing of your personal data at privacy@grandspapro.com.
  • Right to Complain – You have the right to lodge a complaint with a data protection supervisory authority, particularly in the EU member state of your residence, workplace, or place of alleged infringement.
  • Data Minimization – We only collect data necessary for the stated purposes and store it only as long as required and legally prescribed.

For EU citizens using our care services, additional special protection measures apply under GDPR, including extended information obligations and stricter consent requirements.

10. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy as needed to accommodate legal requirements or organizational changes. The current version will always be published on our website and displayed in our facilities.

For significant changes, we will inform our residents and guests via email or through notices in our facilities.

If you have questions about data protection, we are available at any time in person, by phone, or via email. Protecting your data is not just a legal obligation for us but an essential part of our professionalism and respect for our residents and guests in the sensitive area of senior care services.