GDPR & FADP — Your data rights

Last updated: [date]. This page complements our privacy policy and details your rights under the two applicable legal frameworks.

1. Two complementary frameworks

As a Swiss company processing data of Swiss and, potentially, European residents, we apply the Swiss FADP (revFADP/nFADP) (the new Federal Act on Data Protection, in force since 1 September 2023) as well as the GDPR where it applies.

2. Legal bases for processing

We only process your data when a legal basis justifies it: performance of the contract, consent, legal obligation or legitimate interest. You can withdraw your consent at any time, without retroactive effect.

3. Your rights

Whether you fall under the Swiss FADP or the GDPR, you have in particular the following rights:

to be informed transparently about the processing of your data;
to access your data and obtain a copy of it;
to have inaccurate or incomplete data rectified;
to request the erasure of your data ("right to be forgotten");
to request the restriction of, or object to, processing;
to receive your data in a portable and reusable format;
not to be subject to a decision based solely on automated processing.

4. How to exercise your rights

Send your request to [contact email], specifying the subject of your request. We respond free of charge within a reasonable time (at the latest within the statutory time limits). We may request proof of identity in order to protect your account.

5. International transfers

When data is transferred outside Switzerland or the EU, we guarantee an adequate level of protection by means of adequacy decisions or standard contractual clauses.

6. Supervisory authorities

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC) — www.edoeb.admin.ch. If you reside in the EU, you can refer the matter to the supervisory authority of your country. You have the right to lodge a complaint there.

7. Data protection officer

For any question relating to data protection, you can contact our dedicated point of contact: [DPO / contact email].

This document is a template and must be validated by legal counsel before publication.