Privacy policy

1. Controller & data protection contact

The controller for data processing on this website within the meaning of the Swiss Data Protection Act (FADP) is:

For all questions or concerns about the protection of your data or to exercise your data subject rights, you can contact us at any time directly at the email address above.

2. General principles & data collected

Personal data means all information relating to an identified or identifiable natural person. We primarily process data that you submit to us yourself while using psyvita.ch.

Categories of processed data:

• Personal master data: First and last name, form of address.
• Contact data: Email address, telephone number, place of residence or postal code.
• Inquiry and counselling data: Details of the requested counselling format (on site, online, telephone), proposed appointments and voluntary information about concerns or questions.
• Professional data: Qualification evidence, education, memberships, photos, practice addresses and bank or billing data of registered counsellors.
• Technical online identifiers: IP address, date and time of access, browser type and version, operating system, referrer URL and cookie preferences.

Note on submitting third-party data: If you submit data about third parties (for example family members), please ensure that those people have been informed in advance and have given their consent.

3. Purposes of data processing

We process personal data exclusively for legitimate purposes in accordance with Swiss data protection law:

• Platform operation and matching: Providing the search functions, forwarding appointment requests from people seeking counselling to the selected counsellors and coordinating bookings.
• Contract processing with professionals: Administering subscriptions, issuing invoices, verifying qualifications and providing customer support.
• Communication and support: Answering inquiries submitted through the contact form and sending appointment confirmations and important platform notices.
• Security and abuse prevention: Ensuring IT security, detecting spam and bot attacks and protecting against fraudulent activity.
• Optimization and quality assurance: Evaluating our own aggregated operations and matching data. We only use analytics and marketing services with your consent in the cookie banner (see section 9).

4. Disclosure of data & confidentiality

Forwarding to the selected counsellor: When you submit an appointment request through Psyvita, we forward your contact details and counselling preferences exclusively to the professional you selected so that they can review your request and contact you.

Professional secrecy and confidentiality: Psychological professionals are subject to strict professional ethics-based confidentiality obligations (and, where applicable, professional secrecy under Art. 321 of the Swiss Criminal Code). We never disclose confidential counselling details to unauthorized third parties or advertisers.

Data processors: We use carefully selected service providers (for example hosting providers, email services and software tools) to operate the platform. They process data exclusively on our instructions and are contractually obliged to maintain the Swiss level of data protection.

5. International data transfers

For the Google and OpenAI services described below, data may be transferred to recipients in the European Union and the USA. We provide information about the purpose and recipients for each service.

Disclosure to a country without an adequate level of data protection takes place only if the requirements of Art. 16 or 17 FADP are met, in particular on the basis of recognized standard data protection clauses or, for appropriately certified recipients, the Swiss–U.S. Data Privacy Framework. The processors, locations and safeguards actually used in the productive target stack will be conclusively reconciled before go-live.

6. Retention period & data security

Retention period: We store personal data only for as long as necessary to fulfil the respective purposes or as required by statutory retention periods (for example 10-year commercial and tax accounting obligations under the Swiss Code of Obligations). Once a purpose no longer applies, data is securely deleted or anonymized.

SSL/TLS encryption: To secure data transmission, this website uses modern transport encryption (HTTPS / SSL/TLS). You can recognize the secure connection by the padlock symbol in your browser’s address bar.

Technical measures: We take appropriate technical and organizational security measures (TOMs) to protect your data against unauthorized access, loss, manipulation or destruction.

7. Your rights as a data subject (revFADP)

Under the Swiss Data Protection Act (FADP), you have the following rights regarding your personal data:

• Right to information (Art. 25 FADP): You may request at any time to know whether and which personal data we process about you.
• Right to rectification (Art. 32 FADP): You have the right to have incorrect or incomplete data corrected without delay.
• Right to erasure: You may request erasure of your data unless statutory retention obligations prevent this.
• Right to data disclosure and portability (Art. 28 FADP): You can request your data in a common format.
• Withdrawal of consent: You may withdraw consent you have granted at any time with effect for the future.

To exercise your rights, an informal email to datenschutz@ideeal.ch is sufficient. Processing is free of charge.

8. Server log files & web hosting

When you visit our website, our hosting provider Hostinger automatically collects access data in server log files (IP address, date/time, requested page, referrer URL, browser type).

This data is used for system security and the stability of platform operations.

9. Cookies, consent management & external services

The Swiss Data Protection Act (FADP) and Art. 45c of the Telecommunications Act require transparency and an effective way to refuse services. For private providers, however, they do not require a blanket opt-in for every non-essential service. Explicit consent remains required in particular when processing particularly sensitive personal data or for high-risk profiling.

Necessary cookies and local consent management

Technically necessary session cookies enable security, form and session functions. They are not used for advertising or profiling purposes. Your selection for external services is stored by the website for up to 180 days in the necessary first-party cookie psyvita-consent-v2, so it does not have to be requested again on every page view.

The Klaro settings interface is delivered locally by our website. Klaro itself does not transfer data to the Klaro provider. Optional services are preselected but are only activated after your confirmation on first visit. You can disable or re-enable them individually at any time via Cookies in the footer.

Hostinger (Hostinger International Ltd.)

Our website is hosted by Hostinger (Hostinger International Ltd., Cyprus) on a server in its Düsseldorf data centre (Germany). See the Hostinger privacy policy.

YouTube

Preview images are delivered by our own website. Only when you actively start a video and YouTube is permitted in the cookie settings is the YouTube player loaded. In doing so, in particular your IP address, device and browser data, the requested page and your interactions may be transferred to Google, and cookies or similar storage technologies may be used. Recipients are Google Ireland Limited and possibly Google LLC in the USA. Further information is available in the Google privacy policy.

Google reCAPTCHA

Google reCAPTCHA v3 may be used on public form pages to detect spam and automated attacks. The service processes in particular your IP address, the date and duration of the visit, referrer, browser and device information and interaction and risk signals. Recipients are Google Ireland Limited and possibly Google LLC in the USA.

We treat reCAPTCHA as a necessary security service when it is configured: it is used only on form pages and protects the data submitted there against automated misuse. This classification presupposes that productive operation documents necessity and proportionality and that no equally effective, less intrusive measure is available. If you do not want reCAPTCHA to be used, you can contact us directly by email. The privacy policy and the terms of use of Google apply.

Google sign-in (professionals only)

Professionals can optionally register and sign in with their Google account. Only after you click this option are you redirected to Google; no Google service is loaded before then. After your confirmation, Google transfers your email address, name and an account identifier to us. We store the identifier and email address to associate them with your account. Google processes in particular your IP address and browser and device data. Recipients are Google Ireland Limited and possibly Google LLC in the USA. The Google privacy policy applies. Registration with an email address and password remains available at any time as an alternative.

AI portrait check in the dashboard (professionals only)

Professionals on the Premium plan or higher can have their portrait rated and improved in the dashboard with “Check and optimise”. Only when you start this feature do we transfer the visible crop of your portrait together with working instructions to an AI service; your name, contact details and other profile information are not transferred. Depending on the configuration, this is Google’s Gemini API (recipients are Google Cloud EMEA Limited in Ireland and possibly Google LLC in the USA) or OpenAI’s API (recipients are OpenAI Ireland Ltd and possibly affiliated companies in the USA). The providers do not use the data to train their models and store it only for a limited time to detect abuse. We store neither the transferred nor the returned image; an edited image only becomes part of your profile once you adopt it, and is then marked as edited with AI. The Google privacy policy and OpenAI’s privacy information for business customers apply. The feature is optional.

Analytics and marketing services

To measure reach and improve the website, we may use the following services. They are optional and only load if you allow them in the cookie banner; you can see which services are currently in use at any time via "Cookies" in the footer. If you decline them or withdraw your consent, they are not loaded, or no longer loaded. We never pass form content, in particular inquiries to professionals, to these services.

Google Tag Manager and Google Analytics

We use Google Tag Manager to manage measurement scripts; Google Analytics 4 evaluates how the website is used, for example which pages are viewed, how long a visit lasts and where it comes from. In particular, your IP address, device and browser data, the pages viewed and your interactions are processed and cookies are set. Recipients are Google Ireland Limited and possibly Google LLC in the USA. Google’s privacy policy applies.

Microsoft Clarity

Microsoft Clarity shows us in aggregated form how the website is used, for example clicks, scrolling behaviour and session recordings without form entries. In particular, your IP address, device and browser data and your interactions are processed; cookies are set for this. Recipients are Microsoft Ireland Operations Limited and possibly Microsoft Corporation in the USA. Microsoft’s privacy statement applies.

Meta Pixel

We use the Meta Pixel to measure how well our advertising on Facebook and Instagram works and may show advertising to people who have visited our website. In particular, your IP address, device and browser data, the pages viewed and an identifier of your browser are processed; cookies are set for this. Recipients are Meta Platforms Ireland Limited and possibly Meta Platforms, Inc. in the USA. Meta’s privacy policy applies.

10. Supervisory authority, changes & validity

Supervisory authority in Switzerland: If you believe that processing of your personal data violates data protection law, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

Federal Data Protection and Information Commissioner (FDPIC) – www.edoeb.admin.ch

Changes to this privacy policy: We reserve the right to amend this policy. The current version is published on the website.

As of: September 2026 · IDEEAL GmbH / psyvita.ch