Privacy Policy

Protecting your personal data is a priority. This policy explains what data we process, why, and what your rights are.

Last updated: [date]. This privacy policy describes how we process personal data within the nursee.ch platform and the websites created through our service.

1. Data controller

The data controller within the meaning of the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the GDPR is:

[legal entity name], [full address], Switzerland — business ID no. [CHE-000.000.000]. Contact: [contact email].

2. Data we collect

Depending on how you use the service, we may process the following categories of data:

  • Account data: last name, first name, email address, password (hashed), preferred language.
  • Billing data: chosen plan, payment history (card data is handled by our payment provider, not by us).
  • Content you publish: text, images and information from your professional website.
  • Technical data: IP address, browser type, pages viewed, timestamps (logs and usage statistics).
  • Communications: messages you send us via the contact forms or by email.

3. Purposes and legal bases

We process your data to: provide and maintain the service, manage your account and subscriptions, ensure security, respond to your requests, and improve our offering. Under the GDPR, the legal bases are the performance of the contract, your consent, compliance with legal obligations and our legitimate interest in operating and securing the service.

4. Cookies and similar technologies

We use strictly necessary cookies (authentication, language preferences) as well as, with your consent, audience measurement cookies. You can configure your browser at any time to refuse non-essential cookies.

5. Data sharing and processors

We never sell your data. We rely on processors who act on our instructions, in particular for:

  • hosting and infrastructure ([hosting provider, region]);
  • payment processing ([payment provider]);
  • sending transactional emails ([email provider]).

6. Transfer of data abroad

Our data is preferably hosted in Switzerland or in the European Union. If a transfer to a third country is necessary, we ensure appropriate safeguards (adequacy decision or standard contractual clauses), in accordance with the Swiss FADP (revFADP/nFADP) and the GDPR.

7. Retention period

We keep your data for as long as your account is active, then for the periods required by our legal obligations (e.g. accounting). After these periods, the data is deleted or anonymised.

8. Security

We implement appropriate technical and organisational measures (encryption in transit, access control, backups) to protect your data against any unauthorised access, alteration or loss.

9. Your rights

In accordance with applicable law, you have in particular the following rights:

  • the right of access to your data;
  • the right to rectification of inaccurate data;
  • the right to erasure and to restriction of processing;
  • the right to object to processing based on legitimate interest;
  • the right to data portability;
  • the right to withdraw your consent at any time.

10. Contact and complaints

To exercise your rights or for any question, write to us at [contact email]. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch, or, if you reside in the EU, with your local supervisory authority.

This document is a template and must be validated by legal counsel before publication.