Privacy Policy

Note to the editor: this policy describes the technical state of the new Astro site. Remaining placeholders are marked TODO; the contact form backend is still open. The Google Analytics section applies once a Measurement ID is set — with none set, no analytics is loaded and no cookie banner is shown, and the section is moot. This text is a working basis, not legal advice — please have it reviewed before going live.

Controller

Magnesium Health Institute Grabenstrasse 25 CH-6340 Baar Switzerland Email: TODO

For visitors from the EEA the GDPR applies; for Switzerland, the revised Federal Act on Data Protection (FADP).

TODO — if the GDPR applies and the conditions of Art. 27 GDPR are met: appoint a representative in the EU.

Principle

This is a static website. There is no database, no user account and no login. No analytics or advertising cookies are set without your consent. Analytics cookies are used only if you agree in the cookie banner (see “Audience measurement with Google Analytics” below).

Hosting

The site is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When the site is accessed, Cloudflare processes technically necessary connection data:

  • IP address of the requesting device
  • date and time of access
  • the file or URL requested
  • volume of data transferred, HTTP status code
  • referrer and user agent

This processing is necessary to provide the site and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning service). Cloudflare is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are additionally in place. A data processing agreement has been concluded.

Fonts

The typefaces used (Oswald, Inter) are hosted on our own server and loaded from there. There is no connection to Google Fonts and no transfer of data to Google.

Audience measurement with Google Analytics

This site uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics sets cookies that allow your use of the site to be analysed.

Only with your consent. Google Analytics is loaded only after you agree in the cookie banner. Before you consent, nothing is transferred to Google, no script is loaded from Google, and no analytics cookies are set. If you decline or make no choice, no analysis takes place.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG). The IP address is processed in truncated form (IP anonymisation). Data processed includes the pages visited, the time and duration of the visit, approximate location (based on the truncated IP), the browser and device type used, and the source of the visit.

Transfer to the USA. Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are additionally in place. Even so, access by US authorities cannot be entirely ruled out.

Withdrawal. You may withdraw your consent at any time with effect for the future — via the “Cookie settings” link in the footer. After withdrawal no further analytics cookies are set; you can delete cookies already set in your browser.

For details of Google’s processing see Google’s privacy policy.

Koko Analytics, previously used on the WordPress site, is not being carried over.

Contact form

TODO — depends on the backend chosen. To be added: recipient of the data, the service provider and its location, retention period, and whether a data processing agreement is in place.

The details you enter (name, email address, message) are processed for the purpose of handling your enquiry. The legal basis is Art. 6(1)(a) GDPR (your consent) together with Art. 6(1)(f) GDPR. The details are deleted once your enquiry has been dealt with and no retention obligations apply.

Please do not send health data via the form. Health data enjoys special protection (Art. 9 GDPR), and we are in any case unable to answer individual health questions.

Embedded videos

The Magnesium page has a YouTube video embedded. The video is only loaded once you explicitly start it. Before you click, no connection to YouTube or Google is established and no data is transferred.

As soon as you start the video, Google Ireland Limited or Google LLC processes data — including your IP address and information about your device — and may set cookies. We use the youtube-nocookie.com domain, which reduces but does not eliminate this. The legal basis is your consent, given by starting the video (Art. 6(1)(a) GDPR). For details see Google’s privacy policy.

This site links to external services, among them zechstein-magnesium.com. Responsibility for data processing on those sites rests solely with their respective operators.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability, and the right to object to processing based on legitimate interests. You may withdraw consent at any time.

You may also lodge a complaint with a supervisory authority — in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EEA with the authority responsible for your place of residence.

Changes

We update this policy when the technical implementation of the site changes. Last updated: TODO — set the date when going live.