Privacy Policy

Protecting users’ personal data is a priority for us. This policy describes how personal data provided through our website is collected, used, stored, and protected, in compliance with the new Federal Data Protection Act (nLPD) in force since September 1, 2023, and, where applicable, the European Union’s General Data Protection Regulation (GDPR).

1. Data Controller

The data controller is:
Person: Francesca Betteni
Address: Via del Sole 19D – 6932 Pregassona – Svizzera
E-mail: francesca@pratica-mente.ch

2. Collected Personal Data

We process the following categories of personal data:
• Identification and contact data: name, surname, address, email, phone number.
• Technical and navigation data: IP address, browser type, operating system, cookie information, and log data.
• Data voluntarily provided by the user: information entered in contact or registration forms.

3. Purpose and Legal Basis of Processing

The processing of personal data is carried out for the following purposes and on the corresponding legal bases
Purpose: Provision of requested services and user request management
Legal Basis: Performance of a contract (Art. 31 nLPD; Art. 6(1)(b) GDPR)

Purpose: Improvement of user experience and statistical analysis of the website
Legal Basis: Legitimate interest (Art. 31 nLPD; Art. 6(1)(f) GDPR)

Purpose: Compliance with legal obligations (e.g., tax or accounting obligations)
Legal Basis: Legal obligation (Art. 31 nLPD; Art. 6(1)(c) GDPR)

Purpose: Sending promotional communications and newsletters
Legal Basis: Explicit user consent (Art. 31 nLPD; Art. 6(1)(a) GDPR)

Purpose: Eventuale profilazione per personalizzazione dei contenuti
Legal Basis: Explicit user consent (Art. 31 nLPD; Art. 6(1)(a) GDPR)

4. Data Processing Methods
Personal data is processed using manual and IT tools in compliance with the principles of lawfulness, fairness, and transparency. Where applicable, profiling is carried out to personalize the user experience, subject to obtaining consent.

5. Data Retention
Personal data is retained for the time strictly necessary for the purposes for which it was collected:
• Contact data for service management: retained for the entire duration of the contractual relationship and for 10 years afterward for legal obligations.
• Navigation data: retained for 12 months.
• Data used for marketing purposes: retained until consent is revoked and in any case no longer than 2 years.
• Cookie-related data: as specified in the Cookie Policy.

6. Data Recipients
Personal data may be shared with:
• IT and hosting service providers;
• Tax and legal consultants for legal obligations;
• Competent authorities in case of legal obligations.

Personal data will not be sold to third parties under any circumstances.

7. Data Transfer Abroad
Users’ personal data may be transferred outside the Swiss Confederation only to countries that ensure an adequate level of data protection, in accordance with Art. 16 nLPD and Art. 44 GDPR. If the transfer takes place to countries lacking adequate protection levels, appropriate security measures (e.g., Standard Contractual Clauses) will be adopted.

8. Data Subjects’ Rights
Users have the right to:
• Access their personal data (Art. 25 nLPD; Art. 15 GDPR);
• Request rectification (Art. 32 nLPD; Art. 16 GDPR);
• Obtain data deletion (Art. 32 nLPD; Art. 17 GDPR);
• Withdraw consent at any time (Art. 30 nLPD; Art. 7 GDPR);
• Object to processing (Art. 30 nLPD; Art. 21 GDPR);
• Request data portability (Art. 28 nLPD; Art. 20 GDPR).

Requests can be sent to the email address provided above.

9. Data Security
We adopt appropriate technical and organizational measures to ensure the security of personal data, preventing unauthorized access, loss, or breaches.

10. Changes to This Policy
We reserve the right to update this policy at any time. Changes will be published on this page with an indication of the update date.

Last update:  3 Febbraio 2025