Privacy Policy
Data Controller
The party responsible for processing personal data within the meaning of the Swiss Federal Act on Data Protection (FADP; SR 235.1) is Vitalis Coaching & Mentoring (hereinafter the “Controller”). This includes in particular the contact details given in the legal notice (name/company, postal address, email address).
Purposes of Data Processing
Personal data is processed exclusively for the purpose of initiating, carrying out, and concluding coaching, mentoring, and consulting engagements, for communicating with prospective and existing clients, and for administrative handling (scheduling, invoicing, accounting). Processing for further purposes takes place only where these are compatible with the original purposes or where appropriate consent has been given.
Categories of Data Processed
Depending on the nature of contact and collaboration, the following categories of personal data may be processed in particular: master data (name, contact details), communication data (email correspondence, phone notes), contract and engagement data (agreements, appointments, fees), and content voluntarily shared in the course of consulting (e.g. professional, personal, or health-related information). Only the data necessary for delivering the contractual services under Art. 394 et seq. of the Swiss Code of Obligations (CO) and for fulfilling legal obligations is collected.
Legal Bases
Data processing is based in particular on the necessity of performing a contract or carrying out pre-contractual measures (Art. 31 FADP by analogy, Art. 394 et seq. CO), as well as on the overriding or legitimate interests of the Controller in proper and secure service delivery. Where processing is based on consent, this can be withdrawn at any time with future effect, without affecting the lawfulness of processing carried out up to that point.
Confidentiality and Duty of Secrecy
All information entrusted or disclosed in the course of an engagement is subject to strict confidentiality and treated as confidential. Under the contractual duty of loyalty and care pursuant to Art. 398 para. 2 CO, the Controller is obliged to use this information only for the agreed purposes and to protect it against unauthorised access. Disclosure to third parties takes place solely with the express consent of the data subject or where there is a legal duty of disclosure.
Disclosure to Third Parties and Processors
Personal data is transmitted to third parties only insofar as this is necessary for performing the contract (e.g. accounting, payment processing) or for enforcing legal claims, or where a legal basis requires it. In such cases, third parties are contractually obliged to maintain confidentiality and to implement appropriate data protection and security measures.
Data Processing When Visiting the Website
When the website is accessed, certain usage data (e.g. IP address, date and time of access, pages visited, browser and operating system used) is automatically collected for technical reasons and stored in server log files. This data serves to ensure technical operation, IT security, and the optimisation of the online offering, and generally does not allow direct conclusions to be drawn about a specific person.
Cookies and Similar Technologies
Cookies or similar technologies may be used on the website to ensure the site’s functionality and to make it more user-friendly. Cookies are small text files stored on the user’s device that can, among other things, record settings and usage information. The use of cookies can be restricted or disabled in your browser settings; however, certain functions of the website may then be only partly available.
Web Analytics and Third-Party Tools (optional)
Where web analytics services or other third-party tools are used (e.g. for statistical analysis of how the offering is used), this is done within the legal requirements of the FADP and, where applicable, the GDPR. Wherever possible, only pseudonymised or anonymised data is used; any further processing takes place only with appropriate consent or on the basis of overriding interests.
Retention Period
Personal data is stored only for as long as is necessary to achieve the stated purposes or to fulfil statutory retention obligations (in particular under commercial and tax law). Once the purpose of processing no longer applies or the statutory periods have expired, the data is deleted or anonymised, unless overriding legitimate interests prevent deletion.
Data Security
Appropriate technical and organisational measures are taken to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction, as required by Art. 8 et seq. FADP. These include, in particular, access and authorisation controls, the use of secure systems and procedures, and the careful selection of any service providers.
Rights of Data Subjects
Within the scope of applicable data protection law, data subjects have, in particular, the right to information about the personal data concerning them, to rectification of inaccurate data, to deletion or restriction of processing, and to the release or transfer of certain data (data portability). These rights can be exercised pursuant to Art. 25 FADP directly with the Controller, using the contact details given in the legal notice.
Transfers Abroad
Where personal data is transferred to recipients in countries without adequate statutory data protection, this is done only with suitable safeguards in place (e.g. contractual protection clauses) or, in exceptional cases, on the basis of explicit consent or a legal basis. In such a case, the data subject is informed accordingly in line with the statutory information obligations.
Updates to This Privacy Policy
This privacy policy may be amended at any time without prior notice in order to adapt it to changed legal or technical requirements or to new services. The version published on the website applies in each case; further information is provided where this is legally required or appropriate in an individual case.