Privacy Policy
1. Controller
The controller responsible for data processing within the meaning of the revFADP (and, where applicable, the GDPR) is:
Nathalie Buschor
Scheuchzerstrasse 8
8006 Zurich
Switzerland
E-mail: nathalie@buschor.biz
Phone: +41 79 255 64 20
2. What data we process
We process personal data that you actively provide to us as well as data that is generated technically when you visit the website.
2.1 Data from the contact form
If you use the contact form or otherwise contact us, we process in particular the following information:
- name
- e-mail address
- phone number (if provided)
- your request and any further details you voluntarily include in your message
Please do not share any particularly sensitive personal data (e.g. detailed health information) via the contact form. We will discuss sensitive matters with you confidentially in a personal conversation (see section 10).
2.2 Technical data when visiting the website
When the website is accessed, the hosting provider automatically records technical data in server log files (see section 5).
3. Purpose and legal basis of processing
We process your data for the following purposes:
- responding to your enquiries and establishing contact
- arranging, organising and providing appointments and services (coaching, consulting, therapy)
- fulfilling contractual and pre-contractual obligations
- operating, securing and improving the website
- complying with statutory retention and documentation obligations
Under Swiss law, the processing is based in particular on your consent, on the initiation or performance of a contract with you, and on our overriding legitimate interest in operating the website securely and efficiently. Where the GDPR applies, processing is based on Art. 6(1) GDPR (in particular consent, performance of a contract and legitimate interests) and, in the case of health data, on Art. 9 GDPR.
4. Disclosure of data
Your data will only be passed on to third parties where this is necessary for the purposes stated, where you have consented, or where we are legally obliged to do so. Processors engaged by us (e.g. for hosting and form delivery, see sections 5 and 6) process data exclusively on our behalf and in accordance with our instructions.
5. Hosting and server log files
This website is operated by a Swiss hosting provider (Metanet AG, Zurich, Switzerland); the servers are located in Switzerland. [Add and verify the hosting provider's company details if required.] The provider processes the resulting data on our behalf.
When you visit the website, information is automatically recorded and stored in server log files, in particular:
- the IP address of the accessing device
- date and time of access
- the page or file accessed
- the volume of data transferred
- the browser type and operating system used
- the previously visited page (referrer), where applicable
This data is used to provide the website technically and to ensure its security and stability. In normal operation, it is neither combined with other data sources nor attributed to you personally.
6. Contact form
Enquiries submitted via the contact form are processed directly on the server of this website (located in Switzerland, see section 5) and delivered to us by e-mail. The data you enter (name, e-mail address, your request and your message) is not transmitted to external form service providers.
To prevent misuse (spam protection), your IP address is stored on the server for a short time – no longer than one hour – when the form is submitted and is then deleted automatically. This storage serves solely to limit automated requests and is not linked to the other information you provide.
Alternatively, you can contact us directly at any time by e-mail or phone (see section 1).
7. Cookies, audience measurement and fonts
7.1 Necessary cookies
To the extent technically required, this website only uses cookies that are necessary for its operation: to store your language choice, to store your decision in the cookie notice, and to secure forms and the protected administration area. These cookies are required for the operation of the website and are set without separate consent. We do not keep our own visitor statistics.
7.2 Google Analytics and Google Ads (only with your consent)
This website uses the "Google tag" (gtag.js) as well as Google Analytics 4 and Google Ads, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (and Google LLC, USA). They are used to statistically analyse the use of the website and to measure the effectiveness of our advertising (conversion measurement).
We use these services with Consent Mode: without your consent, no Google cookies are set and no persistent identifiers are stored; at most, cookieless technical signals without any personal reference are transmitted. Only if you choose "I agree" in our cookie notice will Google set cookies (in particular _ga and _ga_…, stored for up to 14 months) and collect pseudonymised usage data such as pages visited, device information and approximate location.
In doing so, data may be transferred to Google servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, including its Swiss extension (Swiss-U.S. Data Privacy Framework); both the European Commission and the Swiss Federal Council recognise an adequate level of data protection for companies certified in this way. The legal basis for the processing is your consent (for visitors from the EEA: Art. 6(1)(a) GDPR; for Switzerland: consent under the revFADP); you may withdraw it at any time with effect for the future by deleting the cookies set for this website and choosing "Decline" when the notice appears again.
Further information can be found in Google's privacy policy.
7.3 Fonts (hosted locally)
The fonts used on this website (Cormorant Garamond and Inter, SIL Open Font License) are stored locally on our own server and are loaded from there. When the fonts are retrieved, no connection is established to servers operated by Google or other third parties, and no data is transmitted to third parties.
8. Retention and deletion
We retain personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations. Enquiries that do not lead to a contractual or treatment relationship are deleted once their processing is complete and no retention obligations prevent deletion.
Special professional and statutory retention periods apply to data relating to consulting, coaching and therapy services (see section 10). Server log files are deleted or anonymised after [insert retention period]. The pseudonymised usage data collected in Google Analytics is automatically deleted there after 14 months (see section 7.2).
9. Your rights as a data subject
Under the applicable data protection law, you have in particular the following rights:
- the right to information about the data processed about you
- the right to have inaccurate data corrected
- the right to have data deleted or destroyed
- the right to restriction of processing
- the right to receive your data or have it transferred (data portability)
- the right to withdraw consent you have given at any time with effect for the future
- the right to object to processing under certain conditions
To exercise your rights, a message to the contact details given in section 1 or section 11 is sufficient. You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); where the GDPR applies, you may contact the data protection supervisory authority responsible for you.
10. Special notes on health data and professional confidentiality
In the course of psychotherapeutic work, particularly sensitive personal data, especially health data, is processed. This data enjoys enhanced protection.
Psychotherapeutic treatment is subject to the statutory duty of confidentiality (in particular professional secrecy under Art. 321 of the Swiss Criminal Code) as well as the professional obligations of a psychotherapist (FSP). The content of conversations and treatments and the related documentation are treated as strictly confidential and are disclosed to third parties only with your express consent or on the basis of a legal obligation.
Treatment-related health data is stored separately from the data collected via the website and in compliance with the relevant professional and data protection requirements. The statutory retention periods for treatment records apply [insert specific retention period under applicable law]. Details of the processing of health data in the treatment context will be provided to you separately in the course of treatment.
11. Contact for data protection matters
For questions about data protection and to exercise your rights, please contact the controller:
Nathalie Buschor
Scheuchzerstrasse 8
8006 Zurich
Switzerland
E-mail: nathalie@buschor.biz
Phone: +41 79 255 64 20
12. Changes to this privacy policy
We may amend this privacy policy at any time to reflect changes in the legal situation or changes to our services and data processing. The version published on this website at the relevant time is authoritative.
This English translation is provided for convenience only. In case of any discrepancy, the German version prevails.
Last updated: 3 July 2026
