Privacy Policy


Privacy Policy

 

(As of: 2026)

1. Responsible Body

Angelika Schlothauer
Sole Proprietorship "Brain Artistry"
Address: Schulstrasse 18, 8302 Kloten
Email: ani@brainartistry.com

This privacy policy provides information about the processing of personal data in accordance with

  • Swiss Data Protection Act (revDPA)
  • General Data Protection Regulation (GDPR) for visitors from the EU/EEA.

 

2. Collection and Purpose of Data Processing

2.1 Automatically transmitted data (server logs)

When accessing this website, the following data is automatically processed:

  • IP address
  • Date and time
  • Browser type and version
  • Operating system
  • Referrer URL
  • Visited pages

Purpose: technical provision, security, and stability of the website.
Legal basis:

  • Art. 31 para. 1 revDPA
  • Art. 6 para. 1 lit. f GDPR (legitimate interest)

 

3. Cookies & Consent Management

This website uses cookies for functionality, security, and (if activated) analytics.
Users can select which cookies are allowed to be set via the cookie consent banner.

Legal basis depending on the category:

  • Necessary cookies: legitimate interest (Art. 6 para. 1 lit. f GDPR)
  • Analytics / Marketing cookies: consent (Art. 6 para. 1 lit. a GDPR)

 

4. Contact Form & Contact via Email

When contacting us, the following data is processed:

  • Name
  • Email address
  • Content of the inquiry

Purpose: processing your inquiry.
Legal basis:

  • Art. 31 revDPA
  • Art. 6 para. 1 lit. a GDPR (consent) or lit. b GDPR (pre-contractual measures)

Data will be deleted as soon as they are no longer required.

 

5. Newsletter (Shopify Email)

To receive the newsletter, we need your email address.
Double opt-in is used.

Processed data:

  • Email address
  • Proof of consent
  • Open and click rates (optional, if activated)

Purpose: sending news, updates, and content notifications.

Legal basis:

  • Consent according to Art. 6 para. 1 lit. a GDPR
  • Art. 31 revDPA

Unsubscription is possible at any time via the link in the newsletter.

Newsletter service: Shopify Email, Shopify Inc.
Data processing takes place worldwide; appropriate safeguards (standard contractual clauses) are in place.

 

6. Web Analytics (optional use of Google Analytics 4)

This website may use Google Analytics 4.

Service provider: Google Ireland Limited.
Processed data may include:

  • IP address (shortened/anonymized)
  • Usage behavior
  • Device information
  • Interactions on the website

Legal basis:

  • Consent according to Art. 6 para. 1 lit. a GDPR
  • Legitimate interest according to revDPA

Data transfer to the USA is possible. Google uses standard contractual clauses.

You can deactivate Google Analytics at any time in the cookie banner.

 

7. Embedding external content (YouTube)

This website embeds videos via YouTube (Google Ireland Limited).
Once a video is activated, YouTube may process personal data (e.g., IP address).

Legal basis:

  • Consent according to Art. 6 para. 1 lit. a GDPR
  • Art. 31 revDPA

YouTube's privacy policy applies:
https://policies.google.com/privacy

 

8. Payment Providers

For bookings, purchases, or app transactions, payment data is transmitted to the following providers:

8.1 Stripe

Stripe Payments Europe, Ltd.
Data: payment method, amount, billing data.
Legal basis: fulfillment of contract (Art. 6 para. 1 lit. b GDPR).

8.2 Shopify Payments

Shopify International Ltd.
Data: payment information, billing data.
Processing worldwide (incl. USA) based on standard contractual clauses.

8.3 PayPal

PayPal (Europe) S.a.r.l.
Data transmission only occurs if this payment method is selected.

8.4 Apple App Store / Google Play Store

For app purchases, Apple or Google process payment data.
The privacy policies of the respective platforms apply:

 

9. Use of External Booking and Platform Services

For bookings, purchases, and the provision of digital content, Brain Artistry uses external platforms, in particular Acuity Scheduling and Uscreen.

When clicking on booking or purchase buttons, users are redirected to the platform of the respective provider.
There, personal data (e.g., name, email address, payment data) are processed directly by the respective provider.

The privacy policies of the respective platform operators apply.

Legal basis:
Art. 6 para. 1 lit. b GDPR (fulfillment of contract)
Art. 31 revDPA

10. Member Platform (Uscreen)

For the provision of the STATE platform, digital programs, and memberships, Brain Artistry uses the Uscreen service (Uscreen Inc., USA).

The following data may be processed:

  • Name and email address

  • Login data

  • Membership status and booked content

  • Payment status

  • Usage data (e.g., viewed content, progress)

  • Communication within transactional emails

The purpose of processing is the provision and management of digital content, member accounts, and contract execution.

Data transfer to the USA takes place on the basis of standard contractual clauses.

Legal basis:
Art. 6 para. 1 lit. b GDPR
Art. 31 revDPA

Registration and use of the member platform take place via Uscreen's infrastructure. Technically necessary cookies are set, and usage data is processed to provide streaming functions.

11. Use of Notion for Course Dashboards

For certain programs (e.g., NSI – The Art of Nervous System Intelligence), an external dashboard is provided via Notion (Notion Labs Inc., USA).

When accessing the dashboard, technical access data and – for personalized content – name and email address may be processed.

The purpose is the provision of course materials, worksheets, and organizational information.

Data transfer to third countries takes place on the basis of standard contractual clauses.

Legal basis:
Art. 6 para. 1 lit. b GDPR
Art. 31 revDPA

 

12. Hosting & Infrastructure (Shopify)

This website is hosted by Shopify Inc.
Shopify processes personal data to provide the website and for technical functions.

Server locations can be worldwide; appropriate safeguards are in place (standard contractual clauses).

Shopify Privacy:
https://www.shopify.com/legal/privacy

 

13. Data Disclosure

Data will only be disclosed if:

  • this is necessary for the fulfillment of the contract
  • there is a legal obligation
  • consent has been given
  • legitimate interests prevail (revDPA/GDPR)

 

14. Storage Duration

Data will only be stored for as long as necessary for the respective purpose or as required by legal deadlines.

 

15. Rights of the Data Subjects

You have the right to:

  • Information
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Withdrawal of consent
  • Objection to processing (Art. 21 GDPR)

For EU visitors, Art. 15–22 GDPR apply.
For Swiss visitors, the rights under revDPA apply.

Inquiries: ani@brainartistry.com

 

16. Right to Lodge a Complaint

EU visitors can contact the competent data protection supervisory authority in their Member State.
Swiss visitors can contact the Federal Data Protection and Information Commissioner (FDPIC).

 

17. Changes to this Privacy Policy

This policy may be updated as new tools or services are used.
The current version will always be available on this website.