Last updated on: 25.04.2024


We attach great importance to transparency in handling personal data. This privacy policy provides information on what personal data we collect, for what purpose, and to whom we disclose it. To ensure high transparency, this privacy policy is regularly reviewed and updated.


1. Services We Use

  • Google Analytics
  • BookingPress
  • Google My Business
  • Google Maps
  • WordPress


2. Contact Information

If you have any questions or concerns regarding the protection of your data by us, you can reach us anytime via email at info@tinyhandscreations.ch. Responsible for the data processing carried out through this website is:


Tiny Hands Creations GmbH
Limmattalstrasse 170
8049 Zurich
Switzerland


3. General Principles

3.1 What data do we collect from you and from whom do we receive this data

Primarily, we process personal data that you provide to us or that we collect while operating our website. Under certain circumstances, we may also receive personal data about you from third parties. These may include the following categories:

  • Personal master data (name, address, date of birth, etc.);
  • Contact details (mobile number, email address, etc.);
  • Financial data (e.g., account information);
  • Online identifiers (e.g., cookie ID, IP addresses);
  • Location and traffic data;
  • Audio and visual recordings;
  • Especially sensitive data (e.g., biometric data or information about your health).

3.2 Under what conditions do we process your data?

We treat your data confidentially and in accordance with the purposes defined in this privacy policy. We ensure transparent and proportionate processing.

If, in exceptional cases, we are unable to follow these principles, data processing may still be lawful because there is a legal justification. Justification may include:

  • Your consent;
  • Performance of a contract or pre-contractual measures;
  • Our legitimate interests, provided your interests do not outweigh ours.

3.3 How can you revoke your consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another legal justification.

You have the opportunity to revoke your consent at any time by sending an email to the address provided in the imprint. Data processing that has already taken place is not affected by this.


3.4 In which cases can we disclose your data to third parties?


a. Principle

We may need to use third-party services or services provided by affiliated companies and entrust them with the processing of your data (so-called data processors). Categories of recipients include:

  • Accounting, fiduciary, and auditing companies;
  • Consulting companies (legal advice, taxes, etc.);
  • IT service providers (web hosting, support, cloud services, website design, etc.);
  • Payment service providers;
  • Providers of tracking, conversion, and advertising services.

We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially.

Under certain circumstances, we may also be obliged to disclose your personal data to authorities.


b. Visiting our social media channels

We have embedded links to our social media channels on our website. This is visible to you (typically through corresponding symbols). Clicking on the symbols will redirect you to our social media channels.

In this case, the social media providers will be informed that you are accessing their platform from our website. The social media providers may use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the data transmitted or its use by the operators.


c. Transfer abroad

Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are obliged to comply with data protection to the same extent as we are. The transmission can take place worldwide.

If the level of data protection does not correspond to that of Switzerland, we conduct a prior risk assessment and contractually ensure that the same protection as in Switzerland is guaranteed (e.g., by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_en


3.5 How long do we keep your data?

We only store personal data for as long as necessary to fulfill the specific purposes for which the data was collected.

Data stored during your visit to our website is kept for twelve months. An exception applies to analysis and tracking data, which may be kept for a longer period.

We store contract data for a longer period as we are legally obliged to do so. We must, in particular, keep business communication, concluded contracts, and booking receipts for up to 10 years. If we no longer need such data from you to perform the services, the data will be blocked, and we will only use it for invoicing and tax purposes.


3.6 How do we protect your data?

We will securely store your data and take all reasonable measures to protect your data from loss, access, misuse, or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, we may need to forward your inquiries to affiliated companies. Even in these cases, your data will be treated confidentially.

We use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser within our website.


3.7 What rights do you have?


a. Right to information

You can request information about the data we store about you at any time. We ask you to send your request for information together with proof of identity to info@tinyhandscreations.ch.

You also have the right to receive your data in a common file format if we process your data automatically, and if:

  • You have given your consent to the processing of this data; or
  • You have provided data in connection with the conclusion or performance of a contract.

We may restrict or refuse the provision of information or data if this conflicts with our legal obligations, legitimate interests, or the interests of a third party.

Processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, legal or technical reasons, or because we need further information from you. You will be informed in writing of any extension of the deadline in good time.


b. Deletion and correction


You have the option to request the deletion or correction of your data at any time. We may reject the request if legal provisions require us to keep the data for a longer or unchanged period, or if there is a legal basis opposing your request.

Please note that exercising your rights may conflict with contractual agreements and may have corresponding effects on contract performance (e.g., early termination of the contract or cost consequences).


c. Legal recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch


3.8 Changes to the privacy policy

We reserve the right to change this privacy policy at any time. The changes will be published on www.tinyhandscreations.ch, and you will not be separately informed about them.


4. Individual data processing operations


4.1 Providing the website and creating log files


What information do we receive and how do we use it?

By visiting www.tinyhandscreations.ch, certain data is automatically stored on our servers or on servers of services and products we obtain and/or install, for the purposes of system administration, statistics, security, or tracking. These include:

  • Your internet service provider's name;
  • Your IP address (under certain circumstances);
  • The version of your browser software;
  • The operating system of the computer accessing the URL;
  • The date and time of access;
  • The website from which you visit the URL;
  • The search terms you used to find the URL.

Why are we allowed to process this data?

These data cannot be attributed to any specific person, and they are not merged with other data sources. The storage of log files is necessary to ensure the functionality of the website and to ensure the security of our information technology systems. This constitutes our legitimate interest.


How can you prevent data collection?

The data is only stored for as long as necessary to achieve the purpose of its collection. Accordingly, the data is deleted after the end of each session. The storage of log files is essential for the operation of the website, so you cannot object to it.



4.2 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"), on our website. Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.



4.3 BookingPress

Our website uses BookingPress, an online booking system and appointment scheduling plugin that allows users to book appointments for services directly through the website.

When you book an appointment or request a service via BookingPress, you will be asked to provide certain personal data, such as your name, email address, telephone number, and any other information relevant to the requested service. This data is necessary to process your booking, inform you about the status of your booking, and provide the requested service.

The data collected as part of BookingPress is stored on our servers and is only accessible to authorized persons responsible for processing your booking or request. This data will not be disclosed to third parties without your explicit consent, unless required by law or necessary for the performance of the contract.

BookingPress also uses cookies to improve the user experience and optimize the booking process. These cookies are technically necessary and are used to store your settings and preferences during the booking process.



4.4 Google My Business

On our website, we use features of Google My Business, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google My Business allows businesses to manage their presence on Google, including Google Search and Google Maps, and interact with customers.

By visiting our website or interacting with our Google My Business listing, such as leaving reviews or asking questions, data, especially your IP address and the content of your interactions, is transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries.

Google uses this information to provide Google My Business services, facilitate user interactions with businesses, and provide us with reports and analyses of interactions and performance of our business listing.



4.5 Google Maps

On our website, we use Google Maps, a mapping service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Maps allows us to embed interactive maps directly into the website and enables you to conveniently use the mapping function, for example, for location search or route planning.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, further data, especially your IP address, is transmitted to Google and stored on Google servers. These servers may be located in the USA or other countries. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists.

Google stores your data as usage profiles and uses it for purposes of advertising, market research, and/or customization of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising.

You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.



4.6 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage, and publish content.

When using our website based on WordPress, various data, including your IP address, date and time of access, and information about the browser you are using, may be collected and stored. This data is primarily used for administrative purposes and to ensure the smooth operation of the website.

Some WordPress features, such as comments or contact forms, may collect additional personal data when used.