1. Scope and principles
Personal data is processed in accordance with the Swiss Federal Act on Data Protection and the principles of transparency, proportionality, purpose limitation, security and data minimisation.
The current website is informational. It has no forms, user accounts, database, booking system, newsletter or payments. Visitors are not asked to enter personal data in order to browse.
2. Data that may be processed
Please do not send medical information, diagnoses, clinical records or other particularly sensitive data through Instagram or WhatsApp. If such information becomes necessary in the future, a suitable channel and procedure will be provided.
- Technical access data that may be recorded by the hosting provider, such as IP address, date and time, requested URL, browser, device and information needed for security and operation.
- Data you provide voluntarily when contacting Elisa by email, Instagram or WhatsApp, such as your name, email address, telephone number, profile, message and any information you choose to share.
- Information needed to answer an enquiry or prepare a possible in-person session.
3. Purposes
Personal data is not sold, no advertising profiles are created, no automated marketing is sent and no automated decisions are made about visitors.
- Displaying the website, maintaining security and resolving technical issues.
- Responding to enquiries initiated voluntarily by the person concerned.
- Arranging a possible conversation or in-person session requested by that person.
- Complying with legal obligations or dealing with claims where necessary.
4. Basis for processing
Contact is voluntary and the information is used to respond to the person's own request. Where the European General Data Protection Regulation applies, processing may rely on steps requested before a possible professional relationship and on the legitimate interest in operating a secure website and responding to received communications.
Where a purpose requires specific consent, it will be requested separately before that processing begins.
5. Providers, recipients and international transfers
The website is expected to be hosted by Vercel. Email is managed through Gmail, and external contact may take place through Instagram or WhatsApp. These providers may process data in Switzerland, the European Economic Area, the United States or other countries, depending on their infrastructure and terms.
The website does not embed social tracking buttons or Meta content. Instagram and WhatsApp receive information directly when you choose to open their links or use their services.
6. Retention
The website does not store enquiries in its own database. Enquiries received by email, Instagram or WhatsApp that do not lead to a professional relationship will be retained for no longer than 12 months, unless deleted earlier or there is a legitimate reason to retain them.
If a professional relationship exists in the future, certain information may be retained for the time required to provide the service and comply with legal obligations. Technical hosting logs are retained for the period configured or determined by the provider for security and operation.
7. Security
Reasonable technical and organisational measures are used to protect information, restrict access and keep website components up to date. No transmission over the internet can be guaranteed to be completely secure.
Visitors should also protect their devices and avoid sending confidential information through unsuitable channels.
8. Your rights
You may request information about your personal data, correction, deletion, delivery or objection to processing where applicable. Requests can be sent to the email address shown on this page. Reasonable information may be requested to verify identity and prevent disclosure to an unauthorised person.
You may also contact the Swiss Federal Data Protection and Information Commissioner if you believe the processing does not comply with applicable law.
9. Changes to this policy
This policy must be updated before adding forms, bookings, payments, analytics, a newsletter, maps, embedded videos or other services involving new processing of personal data.
The date shown at the top identifies the latest review of the published version.