Privacy policy

Data controller

The controller for personal data collected on this website is:

Data we collect

We process the following categories of data:

• Student data: name, phone number, email address.
• Booking data: chosen program, verification call slot, enrollment status.
• Payment data: processed by Stripe (PCI-DSS Level 1 sub-processor). No card data is stored on our servers.
• SMS verification data: phone number and OTP code, processed via Twilio for number verification.

Purposes of processing

Data is processed for enrollment management, phone number verification, scheduling verification calls with the instructor, payment processing, and communication regarding training sessions.

Legal basis

Processing is based on the performance of the enrollment contract (art. 31 para. 2 let. a FADP; art. 6 para. 1 let. b GDPR) and on our legitimate interest in running the training activity (art. 31 para. 1 FADP; art. 6 para. 1 let. f GDPR).

Retention

Enrollment data is kept for the duration of the training, then archived for 10 years under accounting obligations (art. 958f CO). Support data is kept for 24 months. Technical logs are kept for 30 days.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data. You may withdraw your consent at any time.

To exercise your rights, contact us at the address above. We respond within one month.

Sub-processors

We use the following sub-processors for certain data processing:

• Stripe — payment processing (PCI-DSS Level 1), Ireland / United States.
• Twilio — SMS OTP sending for phone number verification, United States / European Union.

Security

We implement appropriate technical and organizational measures to protect your data: encryption in transit (TLS), secure storage, restricted access.

Supervisory authority

You may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the data protection authority of your country of residence.