NOTE: placeholder text. Have it reviewed by a lawyer before going live.
Legal
Privacy notice
Controller
[FULL NAME], [LEGAL FORM]
[STREET, POSTCODE CITY, SWITZERLAND]
Email: [EMAIL], phone: [PHONE]
Data collected
- Server log data when the website is accessed: [SCOPE AS PROVIDED BY THE HOST, FOR EXAMPLE IP ADDRESS, TIMESTAMP, PAGE REQUESTED, BROWSER]
- Details you submit when booking an appointment: [NAME, EMAIL, OPTIONAL MESSAGE]
- Details contained in a message sent by messenger or email: [SCOPE]
Purpose and legal basis
Purpose: [OPERATING THE WEBSITE, SCHEDULING APPOINTMENTS, ANSWERING ENQUIRIES, PREPARING AND PERFORMING A MANDATE]
Legal basis: [APPLICABLE PROVISIONS, FOR EXAMPLE THE SWISS FADP AND, WHERE THERE IS AN EEA NEXUS, THE GDPR]
Third party services: TidyCal
Appointments are scheduled with TidyCal, provider: [PROVIDER AND ADDRESS]. When the booking widget loads, data is transmitted to the provider, including [SCOPE, FOR EXAMPLE IP ADDRESS, BROWSER DATA, YOUR BOOKING DETAILS].
Notice on international transfers: data may be transferred outside Switzerland and the EEA, in particular to [RECIPIENT COUNTRIES]. Basis for the transfer: [SAFEGUARDS, FOR EXAMPLE STANDARD CONTRACTUAL CLAUSES]. Provider privacy notice: [LINK].
Third party services: WhatsApp
If you write to me on WhatsApp, the provider [PROVIDER AND ADDRESS] processes your data under its own terms, including [PHONE NUMBER, MESSAGE CONTENT, METADATA].
Notice on international transfers: a transfer outside Switzerland and the EEA is possible, in particular to [RECIPIENT COUNTRIES]. If you would rather avoid that, please use email or the phone. Provider privacy notice: [LINK].
Hosting
The website is hosted by [HOSTING PROVIDER, ADDRESS, SERVER LOCATION]. There is [A DATA PROCESSING AGREEMENT OR EQUIVALENT] in place. Fonts are served locally from this server; they are not loaded from a third party such as Google Fonts.
Retention
Log data: [PERIOD]. Enquiries and scheduling correspondence: [PERIOD, FOR EXAMPLE UNTIL RESOLVED PLUS STATUTORY RETENTION]. Mandate files: [PERIOD UNDER STATUTORY OBLIGATIONS].
Your rights
- Access to the data processed
- Rectification of inaccurate data
- Erasure, unless a retention obligation applies
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of a consent given
- Complaint to the competent supervisory authority: [AUTHORITY AND ADDRESS]
Contact for privacy enquiries
Please address enquiries to [EMAIL FOR PRIVACY ENQUIRIES]. A designated data protection officer is [APPOINTED OR NOT APPOINTED, WITH CONTACT DETAILS IF APPLICABLE].