Data privacy

Data Protection Information of MTR – Health & Spa AG

As of: July 1, 2026

The protection of your personal data is important to us. In this privacy information, we explain how MTR – Health & Spa AG processes personal data when you use our website, our online shop, our social media pages, or our other offers.

 

1. Responsible Party

Responsible for data processing is:

MTR – Health & Spa AG
Fällmisstrasse 64
CH-8832 Wilen b. Wollerau
Switzerland

Phone: 044 787 70 80
E-Mail: info@mtr-ag.ch

For questions regarding data privacy, access, correction, or deletion of your data, you can reach us using the contact details provided above.

 

2. What personal data we process

We process the following categories of personal data in particular:

• Contact details such as last name, first name, address, email address, and phone number
• Order details such as purchased products, order history, shipping address, billing address, and payment status
• Customer data such as customer account, industry, company, customer number, and customer history
• Communication data from emails, contact forms, phone calls, or social media messages
• Technical data such as IP address, browser, device type, operating system, time of access, pages visited, and log files
• Usage and tracking data, e.g., click behavior, shopping cart contents, conversion data, and interactions with advertising
• Marketing data such as newsletter sign-ups, interests, campaign assignments, and advertising interactions
• Payment and transaction data insofar as they are necessary for the processing of orders

We fundamentally only process personal data that is necessary for the respective purpose.

 

3. Purposes of Data Processing

We process personal data for the following purposes in particular:

• Provision and operation of our website and online shop
• Processing of orders, payments, deliveries, and returns
• Creation and Management of Customer Accounts
• Responding to inquiries via email, phone, contact form, or social media
• Customer service and consulting
• Sending information, offers, and newsletters
• Execution of marketing measures and advertising campaigns
• Analysis and Improvement of Our Website, Products, and Services
• Measuring the effectiveness of advertising, particularly via Google Ads and social media advertising
• Remarketing and interest-based advertising, where permitted and to the extent you have consented
• Security, abuse prevention, and technical error analysis
• Compliance with legal obligations, in particular accounting and record-keeping obligations
• Enforcement or defense of legal claims

4. Use of our Website and Server Log Files

When you visit our website, technical data is automatically collected. This includes, in particular:

• IP address
• Access date and time
• Pages and files accessed
• browser used
• Operating system
• Referrer URL
• Access status
• Transferred data amount

This data is processed to technically provide the website, ensure security, analyze errors, and improve our offering.

Server log files are only stored for as long as is necessary for security, analysis, and auditing purposes. As a general rule, log files are deleted or anonymized after a maximum of 30 days, unless longer retention is required due to security incidents or legal claims.

 

5. Contact Forms and Inquiries

If you contact us via a contact form, email, telephone, or social media, we will process the data you provide to handle your request.

This includes, in particular:

• First name and last name
• Company
• Email address
• Phone number
• Message content
• Time of request
• any further information you wish to provide

We store inquiries for as long as is necessary for their processing, traceability, and any follow-up questions. Business-related communication may be stored for longer periods in accordance with legal retention obligations.

 

6. Customer Account and Orders in the Online Shop

When you order in our online shop or create a customer account, we process the data required for contract processing.

This includes, in particular:

• First name and last name
• Billing and shipping address
• Email address
• Phone number
• Company and industry, if specified
• ordered products
• Order and Delivery Status
• Payment status
• Customer story
• Returns, complaints, and support cases

We use this data to process your order, for delivery, invoicing, payment processing, customer service, and to fulfill legal obligations.

Business and accounting records must generally be kept for 10 years in Switzerland.

 

7. Payment Processing

For payment processing, we can use payment service providers. Depending on the payment method offered, payment and transaction data may be transmitted to the respective provider.

Possible payment service providers include, in particular:

• TWINT
• PayPal
• Stripe
• Credit card provider
• Invoice purchase / debt collection service provider

The payment service providers process the data partly on their own responsibility. Their own data protection regulations also apply to the data processing by these providers.

 

8. Shipping and Logistics

For the delivery of ordered products, we pass on the necessary data to shipping and logistics service providers.

These can include:

• First name and last name
• Shipping address
• Phone number or email address for delivery notifications
• Order and Shipping Information

Recipients can include, but are not limited to:

• Swiss Post
• DHL
• DPD
• Freight forwarder

9. WordPress, Hosting, and Technical Service Providers

Our website is based on WordPress. We use technical service providers to operate the website and online shop.

These can include:

• Hosting provider
• Web agency
• WordPress maintenance provider
• Plugin provider
• Backup and Security Services
• Form Plugins
• Shop Plugins
• Spam and bot protection services
• Analysis and Marketing Services

These service providers only receive access to personal data to the extent necessary for the respective service. If service providers process personal data on our behalf, we oblige them to process it confidentially and for specific purposes.

Hosting Provider
Metanet

Important WordPress plugins with potential data processing:
WooCommerce, Elementor Pro, Wordfence, Advanced Custom Fields, Advanced Product Fields, Code Snippets, Contact Form 7, Essential Addons, Flamingo, Redirection, Send, Smush, String Locator, TranslatePress, UpdraftPlus, Variation Swatches, WPCode Lite, YITH WooCommerce, Yoast SEO

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies. These include in particular:

• Cookies
• Pixel
• Tags
• Local Storage
• Session Storage
• Device identifiers
• similar tracking technologies

 

Cookies may be required to technically provide the website, enable shopping cart functions, save logins, increase security, analyze website usage, or personalize advertising.

We distinguish in particular the following categories:

• Necessary cookies: These cookies are necessary for the operation of the website. These include, for example, shopping cart, login, security, consent storage, and basic technical functions.
• Analytics and performance cookies: These help us understand how visitors use our website, which pages are visited, and how we can improve our offerings.
• Marketing cookies and tracking technologies: These are used to measure advertising, build target audiences, track conversions, and display interest-based advertising.
• External media and content: Our website may integrate content from third-party providers, such as videos, maps, social media posts, or fonts. In the process, data may be transmitted to the respective providers.

 

We use non-essential cookies and tracking technologies, where required, only with your consent. You can change or revoke your cookie settings at any time via [add link/button to cookie settings].

The FDPIC points out that cookies and similar technologies not only enable convenience features, but can also be used to track online behavior and for targeted advertising.

 

11. Consent Management

We use a consent management tool to obtain, manage, and document your consent for cookies and tracking technologies.

Used consent tool:
[e.g., Cookiebot, Borlabs Cookie, Complianz, Usercentrics, OneTrust, etc.]

The consent tool stores in particular:

• Your selected cookie settings
• Time of consent or refusal
• technical information on consent management
• a random consent ID or comparable identifier

 

These data are processed in order to save your selection and fulfill our documentation obligations.

 

12. Google Tag Manager

We can use Google Tag Manager. The provider is Google.

Google Tag Manager is used to manage website tags centrally. Google Tag Manager itself does not create independent user profiles. However, other services can be integrated via Google Tag Manager, such as Google Analytics, Google Ads, or Meta Pixel.

Insofar as services that do not use necessary cookies or tracking technologies are loaded via the Google Tag Manager, this only occurs in accordance with your cookie and tracking settings.

 

13. Google Analytics

We can use Google Analytics 4, a web analytics service provided by Google. Google Analytics helps us understand how visitors use our website.

In this context, the following data in particular may be processed:

• visited pages
• Click Behavior
• Length of stay
• Device type
• Browser
• approximate location data
• Referrer
• Website interactions
• technical identifiers
• Conversion data

 

Google Analytics can use cookies and similar technologies. The information generated by this can be transmitted to Google servers and processed there.

Google states that Google Analytics does not log or store IP addresses for users from the EU and discards IP addresses before storage via EU domains and servers.

We only use Google Analytics to the extent permitted by your cookie and tracking settings.

For more information about data processing by Google, please refer to Google's privacy policy.

 

14. Google Ads, Conversion Tracking and Remarketing

We can use Google Ads to promote our products and services and measure the success of our ads.

In particular, the following functions can be used for this purpose:

• Google Ads Conversion Tracking
• Google Remarketing
• interest-based advertising
• Target audience segmentation
• Measurement of ad clicks and purchases
• Campaign analysis
• Google Consent Mode, if configured

 

When you access our website via a Google ad, Google can recognize that you clicked on an ad and subsequently performed a specific action, such as a purchase, an inquiry, or a newsletter registration.

We use Google Ads and associated marketing tags only in accordance with your cookie and tracking settings.

Google requires valid consent for cookies or local storage where legally required, and for the collection, sharing, and use of personal data for personalized advertising, for users in Switzerland, the EEA, and the United Kingdom.

 

15. Social Media and Social Media Presence

We operate presences on social media platforms to provide information about our products, offers, and activities, and to communicate with customers and interested parties.

We can be represented in particular on the following platforms:

• Instagram
• Facebook
• LinkedIn
• YouTube

 

When you interact with our social media pages, such as commenting on, liking, or sharing posts, sending messages, or visiting our profiles, we and the respective platform operators may process personal data.

In addition, the data protection regulations of the respective platforms apply. The platform operators may also process data for their own purposes, in particular for analysis, advertising, market research, and profiling.

 

16. Meta Pixel and Social Media Advertising

We can use Meta's advertising and analytics features, in particular the Meta Pixel or comparable Meta Business Tools.

The provider is Meta Platforms, specifically for Facebook and Instagram.

With the Meta Pixel, we can measure whether users perform a specific action on our website after clicking on an ad, e.g.:

• Visiting a product page
• Add a product to the cart
• Completion of a purchase
• Submitting a form
• Newsletter Signup

 

Meta can use this data to measure the effectiveness of our advertising, create target audiences, and personalize ads on Facebook, Instagram, or other Meta services.

We only use Meta Pixel and comparable marketing technologies in accordance with your cookie and tracking settings.

Meta points out in its Business Tools Terms that businesses can share certain information with Meta via Meta Business Tools and that corresponding notices to users are required.

 

17. Newsletter and electronic communication

When you sign up for our newsletter, we process your email address and, if provided, additional data such as your name, interests, or customer group.

We use this data to send you information about products, offers, promotions, news, and events.

Subscription to the newsletter is only made with your consent or on another permitted basis. You can unsubscribe from the newsletter at any time. To do this, you can use the unsubscribe link at the end of each newsletter or contact us directly.

For sending the newsletter, we can use an external newsletter service provider.

Used newsletter provider: Brevo

The newsletter service provider can process data on our behalf. Depending on the provider, data may be transferred abroad.

 

18. Direct marketing to existing customers

We may send existing customers information about similar products or services, provided this is legally permissible and you have not objected to it.

You can object to the use of your contact data for direct marketing at any time. A message to info@mtr-ag.ch is sufficient.

 

19. Customer analysis, basket analysis, and personalized advertising

We can analyze order, cart, and usage data to improve our offerings, identify demand, make advertising more relevant, and provide more targeted customer advice.

This may allow conclusions to be drawn about your interests and purchasing behavior.

We use such analyses in particular for:

• Assortment optimization
• Improving the online shop
• personalized product recommendations
• targeted advertising
• Campaign evaluation
• Customer service

 

Insofar as tracking technologies, advertising pixels, or third-party tools that are not necessary for this purpose are used, this is done solely in accordance with your cookie and tracking settings.

 

20. No sale of personal data

We do not sell your personal data. It is only passed on if this is necessary for the purposes stated in this privacy policy, you have given your consent, there is a legal obligation, or we need to protect legitimate interests.

 

21. Recipients of personal data

We may disclose personal data to the following categories of recipients:

• Hosting and IT service provider
• Web agency and WordPress service provider
• Payment service provider
• Shipping and logistics service provider
• Accounting and fiduciary service providers
• CRM and ERP vendors
• Newsletter and marketing service provider
• analytics and tracking providers
• Advertising platforms like Google and Meta
• Security and spam protection provider
• Consultants, lawyers, authorities and courts
• business partners, insofar as this is necessary for the provision of services

 

Disclosure takes place only to the extent necessary for the respective purposes.

 

22. Data transfer abroad

We primarily process personal data in Switzerland. Depending on the service providers used, processing may also take place in other countries, in particular in the EU, the EEA, the United Kingdom, or the USA.

A data transfer abroad takes place only if there is an adequate level of data protection or if appropriate safeguards are provided, e.g., standard contractual clauses, contractual protective measures, or other legally permissible bases.

Potential recipients abroad include, in particular, providers such as Google, Meta, newsletter service providers, payment service providers, cloud providers, and technical plugin providers.

The FDPIC states that personal data may in principle only be transferred abroad if an adequate level of data protection is ensured or suitable safeguards are put in place.

 

23. Retention Period

We only store personal data for as long as is necessary for the respective purposes or as required by statutory retention obligations.

Typical storage periods are:

• Server log files: typically [e.g., 30 days]
• Contact inquiries: generally [e.g., 12 to 24 months]
• Customer account: until the deletion of the account or as long as a customer relationship exists
• Order and invoice data: in accordance with statutory retention periods, generally 10 years
• Newsletter data: until unsubscription or revocation
• Consent data: as long as this is necessary to prove consent
• Marketing and analytics data: according to the settings of the respective tools and only for as long as necessary

 

Upon expiration of the respective deadlines, personal data will be deleted or anonymized unless there are legal grounds for further storage.

 

24. Data Security

We take appropriate technical and organizational security measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

This may include, in particular:

• SSL/TLS encryption
• Access restrictions
• Password and authorization concepts
• Security updates
• Backups
• Firewall and security plugins
• Logging of security-relevant events
• contractual obligation of service providers

 

Despite adequate security measures, data transmission on the internet cannot be completely risk-free.

 

25. Your Rights

You have the following rights under applicable data protection law:

• Information about the personal data processed by us
• Rectification of incorrect personal data
• Deletion of personal data, provided there are no statutory retention obligations to the contrary
• Restriction or objection to certain processing
• Revocation of granted consents with effect for the future
• Disclosure or transfer of certain personal data, where applicable
• Objection to direct marketing

 

To exercise your rights, you can contact us at info@mtr-ag.ch.

We reserve the right to verify your identity before providing information or making changes.

 

26. Automated individual decision-making

We generally do not make automated individual decisions that produce legal effects concerning you or similarly significantly affect you.

Should we use such procedures in the future, we will inform you separately.

 

27. Links to other websites

Our website may contain links to third-party websites. The respective operators are responsible for data processing on external websites. We have no influence on their data privacy practices.

 

28. Changes to this privacy policy

We may update this privacy policy at any time, especially if we change our data processing activities or if new legal requirements apply.

The current version published on our website shall apply in each case.