Privacy policy

Company

Eternal Echo AG

Address

Heubachstrasse 59, 8810 Horgen, Switzerland

Email

info@neurovizr.ch

VYRA is a brand of Eternal Echo AG. You can reach us at this email address with any question about data protection or to exercise your rights.

This website is hosted by Vercel Inc. (USA). Every visit generates technical data that your browser sends automatically: IP address, date and time, the address requested, the previously visited page (referrer) and details of your browser and operating system.

This data is needed to deliver the website, keep it running and detect errors or misuse. The host keeps it in logs for a limited time. Legal basis under the GDPR: legitimate interest in stable and protected operation (Art. 6(1)(f)).

So that your cart is still there on your next visit, the website stores the products, variants and quantities you have chosen in the local storage of your browser (localStorage). The delivery country, if you choose one yourself, and your choice in the cookie settings are kept there too, together with the time of your decision.

This information stays on your device. Your browser only sends the contents of your cart when you go to checkout. The website sets no cookies for these functions. You can delete this storage at any time in your browser settings. Legal basis under the GDPR: legitimate interest in a working website (Art. 6(1)(f)).

When you write to us using a form, for example with a question, a partner enquiry or an enquiry about an experience, we process the details you provide: your email address and, depending on the form, your name, company, phone number, topic and message, plus technical details such as the language and the page the form was sent from. We need them to answer your enquiry.

All forms, including the newsletter sign-up, are delivered to us through the email service Resend (Plus Five Five, Inc., USA). If you email us directly, we also process your message and contact details in order to reply.

We keep enquiries for as long as we need them to deal with your request and any follow-up questions, and then delete them unless the law requires us to keep them. Legal basis under the GDPR: your consent and pre-contractual steps (Art. 6(1)(a) and (b)).

For the newsletter and for VYRA BODY updates we need your email address and your consent. We use them to send you news from VYRA, for example about experiences, insights and VYRA BODY. Emails are sent by Klaviyo, Inc. (USA). Klaviyo may record whether an email was opened and which link in it was clicked.

You can unsubscribe at any time using the link in every email or by writing to us. After that, your email address is kept only on a suppression list so that you receive no further newsletters. Legal basis under the GDPR: your consent (Art. 6(1)(a)).

When you order in the shop, we forward you to the Stripe payment page (Stripe Checkout). There you enter your name, email address, delivery address, phone number and payment details and accept the terms and conditions. Stripe processes the payment. We receive the details we need for delivery, accounting and customer service, together with the payment confirmation, but not your full card details.

Stripe processes payment data partly under its own responsibility, for example to prevent fraud, and also in the USA. In doing so, Stripe checks payments partly automatically. Stripe's privacy policy also applies.

For delivery, we pass your name, delivery address and, where needed, your phone number to the carrier we use. We keep order and accounting records for the statutory period of ten years (Art. 958f Swiss Code of Obligations). Legal basis under the GDPR: contract and legal obligations (Art. 6(1)(b) and (c)).

The following services only load once you agree in the cookie banner. Without your consent they stay switched off.

Statistics

Google Analytics 4 by Google Ireland Limited (Ireland) and Google LLC (USA). Uses cookies to show us which pages are used and how, with details of device, browser and approximate location derived from the IP address.

Marketing

Meta Pixel by Meta Platforms Ireland Limited (Ireland) and Meta Platforms, Inc. (USA), and LinkedIn Insight Tag by LinkedIn Ireland Unlimited Company (Ireland) and LinkedIn Corporation (USA). They measure the success of our advertising and enable relevant ads on these platforms. Meta and LinkedIn may link the data to your account with them and use it for their own purposes, which can create a profile of your interests.

You can change or withdraw your choice at any time via “Cookie settings” in the footer. Withdrawal applies to the future; you can delete cookies that have already been set in your browser. Legal basis under the GDPR: your consent (Art. 6(1)(a)).

Hosting

Vercel Inc., USA

Payment

Stripe, including in the USA

Forms by email

Resend (Plus Five Five, Inc.), USA

Newsletter

Klaviyo, Inc., USA

Statistics, with consent

Google Ireland Limited, Ireland; Google LLC, USA

Marketing, with consent

Meta Platforms Ireland Limited, Ireland; Meta Platforms, Inc., USA; LinkedIn Ireland Unlimited Company, Ireland; LinkedIn Corporation, USA

Delivery

The carrier we use

Authorities

Where we are required to by law

Unless these providers act under their own responsibility as described above, they process data on our behalf and according to our instructions.

Some recipients are based in Ireland, and therefore in the European Economic Area (EEA), others in the USA. The Swiss Federal Council has recognised the EEA states as providing adequate data protection.

We only disclose personal data to the USA if the recipient is certified under the Swiss-U.S. Data Privacy Framework or if appropriate safeguards are in place, in particular the standard contractual clauses of the European Commission recognised by the Federal Data Protection and Information Commissioner (FDPIC). For data subject to the GDPR, the same applies under its rules.

We keep personal data only for as long as the purpose requires or the law demands:

• Enquiries: until they are dealt with and no follow-up questions are expected
• Newsletter: until you unsubscribe, then only your email address on the suppression list
• Orders and accounting: ten years
• Server logs: for a limited time with the host
• Cart, delivery country and cookie choice: on your device until you delete them
• Analytics and advertising: according to the settings and periods of the respective providers

Within the limits of applicable law, you are in particular entitled to:

• information on whether and which personal data we process about you
• correction of inaccurate data
• erasure of your data and objection to its processing
• receipt of your data in a common electronic format
• restriction of processing, where the GDPR applies
• withdrawal of consent at any time, with effect for the future

To do so, write to info@neurovizr.ch. So that we never hand data to the wrong person, we may ask you to confirm your identity. We ourselves make no decisions based solely on automated processing that significantly affect you.

You can also lodge a complaint with a supervisory authority: in Switzerland with the FDPIC, in Liechtenstein with the Data Protection Authority, and in other EEA states with the authority where you live or work.

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. The website transmits data in encrypted form (HTTPS).

We update this privacy policy when our services or the law change. The version published on this page applies.