Privacy Policy – Dr. Ina Isac

Who is responsible for your data

This website is operated by Dr. Ina Isac and is published at drisac.ch. For questions about this policy or your data, contact us at [email protected].

Dr. Isac practices at FineSkin Hauptbahnhof (FineSkin Group AG), Löwenstrasse 61, 8001 Zürich. Messages sent through this site's Contact or "Ask the doctor" form may be addressed to that practice's own email account, which FineSkin Group AG operates and is separately responsible for as the recipient of that mailbox.

What this site does NOT do

This site does not use cookies, does not run any analytics or advertising tracking (no Google Analytics, no Facebook Pixel, no similar tool of any kind), and does not sell or share your data with advertisers. There is no user account system and no newsletter sign-up.

What data is actually processed, and why

Contact and "Ask the doctor" forms: when you fill in one of these forms, your browser opens your own email program with the message pre-filled - the website itself never receives, transmits, or stores what you type. The email is sent directly from your device to our practice email address. We process the resulting email (your name, contact details, and message) only to respond to your enquiry, on the basis of your consent in contacting us and our legitimate interest in answering patient questions. We keep these emails for 24 months from your last message, then delete them.
Before/after photo gallery: see the dedicated section below.
Language preference: if you use the language switch (top right), your choice is remembered only on your own device (in your browser's local storage), so we don't ask again on your next visit. This is never transmitted to us and never leaves your device. It is not a cookie, and it is strictly necessary for the feature to work, so no consent banner is shown for it.
Standard hosting logs: this site is hosted via Cloudflare, which, like any web host, automatically processes basic technical information (IP address, browser type, pages requested, timestamps) to deliver the site securely and reliably. We don't access or analyse this data for marketing purposes; it exists only as a normal part of how any website is served, and Cloudflare, Inc. is our hosting processor for this purpose. See Cloudflare's own privacy policy at https://www.cloudflare.com/privacypolicy/ for details.
Google Maps: the Contact page embeds a Google Maps map so you can find the practice easily. Loading that page causes your browser to connect directly to Google and load content from google.com - Google may process your IP address and set its own cookies as part of that, under Google's own privacy policy (https://policies.google.com/privacy). We include the map because we think it's genuinely useful for finding the office, which is our legitimate interest in providing it; it is not used by us for any tracking or advertising purpose.

Before/after photo gallery: consent and anonymisation

Every treatment photo shown in this site's galleries is published only after the patient's explicit, specific, prior written consent to that use - separate from, and in addition to, consent for the medical procedure itself. A patient can withdraw that consent and ask for their photos to be removed from the site at any time, by contacting us at [email protected]; we will remove the images without delay once we've verified the request.

Because these images show parts of the body related to a medical procedure, they are treated as a special category of personal data under data protection law (health-related data), and explicit consent is the legal basis for publishing them - not any other basis. Images are selected and, where necessary, cropped or edited specifically to avoid making the patient identifiable: faces are not shown, and no name or other directly identifying detail is published alongside a photo. The "Case #" numbering used throughout the galleries is an internal reference only and is not linked to any patient's real identity anywhere on this site.

Your rights

Depending on where you live, you may have the right to: access the personal data we hold about you; have it corrected if inaccurate; have it deleted; restrict or object to our processing of it; receive a copy in a portable format; and, where processing is based on consent (as with gallery photos), withdraw that consent at any time without affecting the lawfulness of processing before the withdrawal. To exercise any of these rights, contact us at [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority:

In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC) - https://www.edoeb.admin.ch
In Romania: the National Supervisory Authority for Personal Data Processing (ANSPDCP) - https://www.dataprotection.ro
Or the supervisory authority in your own country of residence, if different.

International data transfers

Where this site relies on providers based outside your country (Cloudflare, Inc. and Google LLC are both US companies), those providers process data under their own applicable safeguards (such as EU Standard Contractual Clauses) as required by data protection law. See the links above for each provider's own documentation.

Children

This site and the procedures it describes are intended for adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time, for example if we change which tools or providers this site uses. The version published on this page is always the current one.

Last updated: November 2026