Privacy.

Controller & contact

Rahel Bühler
Practice for sex therapy, couples therapy & relationship counselling
Gürtelstrasse 14
7000 Chur, Switzerland

Email: info@deine-sexualtherapeutin.ch
Telephone: +41 78 268 63 38

You can contact me directly with questions about data protection or to exercise your rights.

Personal data

Personal data is information relating to an identified or identifiable person. I treat your data confidentially and comply with the Swiss Federal Act on Data Protection (FADP). This policy covers the website and the contact methods offered here.

Data is processed to respond to enquiries, arrange appointments, prepare services and operate the website securely. Health data and information about your sex life are particularly sensitive. Please share detailed sensitive information only through a suitable contact method that we have agreed together.

Where the GDPR applies, the relevant legal basis may include consent, pre-contractual or contractual measures, legal obligations, and legitimate interests in security and communication, depending on the purpose. Additional requirements apply to particularly sensitive data.

Hosting & server logs

The website is hosted by Netlify. Domain management and email accounts are provided by Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland.

When you access the website, Netlify processes technical connection data, including your IP address, the time of access, requested files and status messages. This is used to deliver the website, operate it securely and prevent attacks. Netlify’s infrastructure and service providers may process data outside Switzerland, particularly in the USA. See Netlify’s privacy policy and Netlify’s contractual and security information.

Email is processed through Hostpoint. Further information is available in Hostpoint’s privacy information.

Contact & email

When you get in touch, I process the information you provide to answer your enquiry and arrange appointments. The contact form requires your first name and email address. Your last name, telephone number, preferred location and a short message are optional. Please do not send intimate details, diagnoses or medical documents, and use the form only for administrative enquiries.

When you submit the form, your information is sent over an encrypted connection to a server function at Netlify. It checks the request and forwards it to my Hostpoint email inbox using an encrypted SMTP connection. No Netlify Forms storage or separate message database is used. The application code does not write message contents or contact details to its logs. Providers may process technical connection data for operation and abuse prevention.

Your message is processed and retained in the email inbox for as long as needed to handle your enquiry and any necessary follow-up. It is then deleted unless legal retention obligations or other lawful reasons require otherwise. Backups are subject to the provider’s retention cycles. Transmission is not end-to-end encrypted. You can contact me by telephone instead.

Feedback: voluntary feedback

“Feedback” lets you choose three optional impressions and write up to 256 characters without a name, email address or account. Until the protected service is activated, only the preview is available and nothing is sent. Once activated, submissions go directly from your browser to feedback.deine-sexualtherapeutin.ch, operated with Hostpoint in Switzerland. They do not pass through Netlify Functions, Netlify Forms, an external AI service or GitHub.

You can request publication without your name or send feedback privately to Rahel. Publication requires your separate, explicit consent and a review for identifying information, third-party details, spam and abusive content. Critical and positive contributions are reviewed under the same rules. We do not rewrite your words. Published text and impressions may be found by search engines or copied by others. This is not a verified patient-review system or a Google review service.

Unpublished entries are deleted from the active database after 90 days. Published entries expire after two years from approval. Withdrawing publication starts a new 90-day private retention period. A daily cleanup and cleanup on service access remove expired entries. Your private deletion code allows you to delete an entry sooner without giving your name. An administrator can also remove it. Provider backups have separate retention periods; deletion does not retrieve copies already made by third parties.

Feedback contents are encrypted in the database; authorised administrators can decrypt them. This is not end-to-end encryption. The application stores no original IP address with your feedback. Abuse prevention uses temporary coded values derived from connection addresses, kept separately for up to 24 hours. Hostpoint may additionally process technical server logs. The protected administrative area uses a session cookie; the feedback form uses no tracking cookies or permanent browser storage. Without a name is not a guarantee of complete technical anonymity. Please leave out diagnoses, intimate details and information identifying yourself or others.

Cookies & local content

The website itself does not use analytics or marketing cookies or tracking pixels. Fonts, images, animations and audio files are loaded from the website’s own hosting.

Your background-music setting is stored locally in your browser’s session storage for the current tab visit. This setting is not sent to the contact form or used for analytics.

GitHub is used to store the source code. The public website is served by Netlify; no GitHub content is loaded during an ordinary page visit.

After you activate external services or open external links, those providers may use cookies or similar technologies. You can manage storage through your browser settings.

External services

Google Maps

Maps on the location pages load only after you select “Load Google map”. Your browser then connects to Google. This may transfer your IP address, browser and device information, and usage data. You can read the practice address without loading the map. Google’s privacy policy applies.

WhatsApp

The WhatsApp link opens WhatsApp; no chat module is loaded in the background. When you open it or send a message, WhatsApp processes communication, connection and usage information under its own terms. See WhatsApp’s privacy policy. Telephone and email are available as alternatives.

Other links

The providers of external publications and other linked services are responsible for those services. Their privacy policies apply when you open them.

Data processed abroad

Netlify, Google Maps and WhatsApp may process data outside Switzerland, particularly in Ireland and the USA, and in other locations listed in their privacy policies. This also applies to their service providers.

Transfers to countries without recognised adequate data protection require suitable safeguards or a statutory exception. The Swiss–U.S. Data Privacy Framework may be relevant for appropriately certified US companies; otherwise, recognised standard contractual clauses may be used, for example. Providers explain the specific arrangements in the information linked above. Use of these external services is voluntary.

Security & retention

HTTPS encrypts transmission between your browser and the website; you can recognise it by “https://” in the address bar. Despite technical safeguards, completely risk-free transmission or storage cannot be guaranteed.

Information from enquiries is retained for as long as needed to process them and handle necessary follow-up. Legal obligations or the protection of legal claims may require longer retention. The data is then deleted or anonymised. Backups are subject to the hosting provider’s retention cycles.

Your rights

Within the scope of applicable law, you may request information about your data and ask for incorrect information to be corrected. You may request deletion or object to processing. Legal obligations or other lawful grounds may prevent these requests from being fulfilled. Where the relevant conditions are met, you also have rights to restriction of processing and to receive or transfer your data.

You may withdraw consent with effect for the future. A reasonable identity check may be needed to process your request. Please use the contact details above. You may also contact the Federal Data Protection and Information Commissioner (FDPIC) or another competent supervisory authority.

Changes

This policy is updated when the website, the services used or legal requirements change. The version published here applies.

The published contact details are intended for enquiries about the practice. Their use for unsolicited advertising is prohibited.