Terms and Conditions

Last updated: October 2026

Protecting your data matters to me, especially because you share personal things with me during coaching or a treatment. This policy explains which data I process, why, and what rights you have.

1. Controller

Carmen Tatjana Metzger, Parkstrasse 17, 3014 Bern, Switzerland info@wondebaa.ch, +41 79 896 26 20

For any questions about data protection, please contact me at this address.

2. Visiting the website

My website runs on the Wix platform. When you visit it, technically necessary data is recorded, such as your IP address, date and time, pages viewed, browser and device. This data keeps the site running and secure and shows me how it is used (Wix statistics). I do not use it to identify you personally.

3. Contact and booking

When you write to me via the contact form, by email, phone or message, or book an appointment online, I process the information you give me: name, contact details, preferred date, booked service and your message. I need it to reply, organise and remind you of the appointment, and invoice the service. Online bookings and forms are processed through Wix.

4. Payment and gift vouchers

If you pay online or buy a gift voucher, payment data is processed directly by the payment provider Twint. I never see your full card details. For vouchers, I store the buyer, amount, voucher code and redemption.

5. Coaching, massage and Access Bars

Before a massage or Access Bars session, I ask about your health, for example injuries, pain or pregnancy, so that the treatment is safe. During coaching, I take notes on your topics and goals so I can support you well.

Health information and coaching content are sensitive personal data. I only collect what is necessary, keep notes [on paper, locked away, and do not share them with anyone. I am bound by confidentiality as set out in my terms and conditions.

Coaching paid for by a company: If your employer pays for the coaching, they learn at most that sessions took place and how many. I only share anything about the content with your explicit consent.

6. Online coaching

Online sessions take place via zoom or whatsapp. The provider processes technical connection data. I do not record sessions.

7. Cookies

The website uses cookies, small files stored in your browser. Technically necessary cookies make the site and booking work. Statistics cookies are only used if you agree in the cookie banner. You can delete or block cookies in your browser at any time; some features may then not work.

8. Service providers processing data on my behalf

I do not sell data or pass it on for advertising. The following providers process data on my behalf:

Wix.com Ltd. (Israel), with servers in the USA and the EU, among others: website, forms, bookings, gift vouchers
Twint: online payments
zoom: online coaching
Google (Ireland/USA): my Google Business Profile and, where embedded, Google Maps

9. Data abroad

Some of these providers process data outside Switzerland. According to the Swiss Federal Council, Israel and the EU countries provide adequate data protection. For providers in the USA, I rely on their certification under the Swiss-U.S. Data Privacy Framework or on standard contractual clauses recognised by the EU and Switzerland.

10. How long I keep data

Accounting records (invoices, receipts): 10 years, as required by law
Coaching and treatment notes and health information: 1 year after the last session, then destroyed or deleted
Enquiries that do not lead to an appointment: until dealt with, at most 1 year

11. Security

I protect your data with appropriate technical and organisational measures, such as encrypted website transmission (HTTPS), passwords and locked storage of documents.

12. Your rights

You can at any time:

ask which data I hold about you
have incorrect data corrected
request deletion, unless I am legally required to keep it
object to processing or withdraw your consent
receive your data in a common format

Just write to info@wondebaa.ch. If you are not satisfied with my reply, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

13. For visitors from the EU

Where the General Data Protection Regulation (GDPR) applies, I process your data to perform a contract or take pre-contractual steps (Art. 6(1)(b)), to meet legal obligations (Art. 6(1)(c)), on the basis of my legitimate interest in a secure and working website (Art. 6(1)(f)) or with your consent (Art. 6(1)(a)). I only process health information with your explicit consent (Art. 9(2)(a)). You also have the right to lodge a complaint with the data protection authority in your country of residence.

14. Changes

I update this policy when my services or the tools I use change. The version published on this page applies.