Nathalie Buschor
← Back to website DE EN FR

Privacy Policy

1. Controller

The controller responsible for data processing within the meaning of the revFADP (and, where applicable, the GDPR) is:

Nathalie Buschor
Scheuchzerstrasse 8
8006 Zurich
Switzerland

E-mail: nathalie@buschor.biz
Phone: +41 79 255 64 20

2. What data we process

We process personal data that you actively provide to us as well as data that is generated technically when you visit the website.

2.1 Data from your enquiry

If you contact us by e-mail or phone, we process in particular the following information:

  • name
  • e-mail address
  • phone number
  • your request and any further details you voluntarily share with us

Please do not send us any particularly sensitive personal data (e.g. detailed health information) by e-mail. We will discuss sensitive matters with you confidentially in a personal conversation (see section 10).

2.2 Technical data when visiting the website

When the website is accessed, the hosting provider automatically records technical data in server log files (see section 5).

3. Purpose and legal basis of processing

We process your data for the following purposes:

  • responding to your enquiries and establishing contact
  • arranging, organising and providing appointments and services (coaching, consulting, therapy)
  • fulfilling contractual and pre-contractual obligations
  • operating, securing and improving the website
  • complying with statutory retention and documentation obligations

Under Swiss law, the processing is based in particular on your consent, on the initiation or performance of a contract with you, and on our overriding legitimate interest in operating the website securely and efficiently. Where the GDPR applies, processing is based on Art. 6(1) GDPR (in particular consent, performance of a contract and legitimate interests) and, in the case of health data, on Art. 9 GDPR.

4. Disclosure of data

Your data will only be passed on to third parties where this is necessary for the purposes stated, where you have consented, or where we are legally obliged to do so. Processors engaged by us (e.g. for hosting and e-mail, see sections 5 and 6) process data exclusively on our behalf and in accordance with our instructions.

5. Hosting and server log files

This website is operated by a Swiss hosting provider (METANET AG, Josefstrasse 218, 8005 Zurich, Switzerland); the servers are located in Switzerland. The provider processes the resulting data on our behalf.

When you visit the website, information is automatically recorded and stored in server log files, in particular:

  • the IP address of the accessing device
  • date and time of access
  • the page or file accessed
  • the volume of data transferred
  • the browser type and operating system used
  • the previously visited page (referrer), where applicable

This data is used to provide the website technically and to ensure its security and stability. In normal operation, it is neither combined with other data sources nor attributed to you personally.

6. Contact by e-mail and phone

This website does not contain a contact form. You can reach us directly by e-mail or phone (see section 1). We use your details exclusively to handle your enquiry.

E-mails to us are received and stored via the Microsoft 365 service of Microsoft Ireland Operations Limited, Dublin, Ireland; Microsoft processes the data as a processor on our behalf. Processing of data in countries outside Switzerland and the EEA, in particular in the USA, cannot be ruled out. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework including the Swiss-U.S. Data Privacy Framework; standard contractual clauses are also in place.

Please note that unencrypted e-mails are not fully protected against access by third parties during transmission. We are therefore happy to discuss confidential matters in person or by phone.

7. Cookies, audience measurement, fonts and embedded content

7.1 Necessary cookies

This website only sets cookies that are technically necessary for its operation:

  • buschor_lang – stores your language choice (retention 1 year)
  • buschor_consent – stores your decision in the cookie notice (12 months if you agree, 6 months if you decline)
  • buschor_nostat – only set if you opt out of our visitor statistics; remembers this choice (1 year)
  • Session cookie of the administration area – only for logged-in administrators; deleted when the browser is closed

These cookies contain no identifier relating to you and are set without separate consent. You can change your decision in the cookie notice at any time via the «Cookie settings» link at the bottom of every page.

7.2 Our own cookie-free visitor statistics (pseudonymised)

To understand which content is read, how the website is used and whether our advertising works, we run our own visitor statistics hosted on our server in Switzerland. It works without cookies. We record the page visited, the time, the referring website (referrer) or campaign parameters in the address – including whether you reached the website via an advertisement (e.g. Google Ads) –, the device type and browser, the language, the active reading time and clicks on the phone number, e-mail address, external links and downloads. We also count how far a page is read (scroll depth in steps of 25, 50, 75 and 100 %); this information is stored only as a daily total per page – without a time stamp and without a short value – and cannot be linked to any individual visit.

Your IP address is not stored. It is only combined with the browser identifier and a random value that changes daily to calculate a short value (hash), in order to group the page views of one visit and repeat visits within 3 days. The random values are deleted after 3 days; after that, the short value can no longer be attributed to anyone – not even by us. An ad click identifier (e.g. gclid) is only evaluated, not stored. The data is therefore pseudonymised; we do not identify anyone, and no data is passed on to third parties. The short value is used to group the page views of one visit (e.g. entry and exit page, reading time). In the protected administration area, the visits currently active are also shown in a real-time overview (page viewed, source, device type – without IP address and without names). To prevent abuse, we also briefly count how many messages arrive from one sender; this, too, uses only a short value without IP address. Otherwise, only aggregated figures are evaluated; search terms from search engines are not stored. Individual page views are deleted after 14 months at the latest.

You can object to this recording at any time: this link excludes your browser from the statistics. If your browser sends the «Global Privacy Control» or «Do Not Track» signal, your visits are automatically not counted.

The legal basis is our legitimate interest in improving our services and measuring the success of our advertising (Art. 31(1) revFADP; for visitors from the EEA: Art. 6(1)(f) GDPR).

7.3 Google Analytics and Google Ads (only with your consent)

This website uses the «Google tag» (gtag.js) as well as Google Analytics 4 and Google Ads, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (or Google LLC, USA). They are used to analyse the use of the website statistically and to measure the effectiveness of our advertisements (conversion measurement, e.g. whether a click on the phone number or e-mail address follows a click on an ad).

We only use these services with your consent: as long as you have not chosen «I agree» in the cookie notice, the Google tag is not loaded at all; no connection to Google is established, no Google cookies are set and no data is sent to Google. Clicks on the phone number or e-mail address are likewise only reported to Google with your consent. In addition, we use Google's Consent Mode, which passes your decision on to Google.

Only if you choose «I agree» in our cookie notice does Google set cookies (in particular _ga and _ga_… with a retention of up to 14 months and _gcl_… with up to 90 days) or corresponding entries in your browser's local storage (e.g. _gcl_ls) and record pseudonymised usage data such as pages viewed, device data and approximate origin. Personalised advertising and remarketing (addressing you again based on your visit) remain switched off even with your consent, as does cross-device analysis (Google signals).

Data may be transferred to Google servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework including the Swiss-U.S. Data Privacy Framework; both the European Commission and the Swiss Federal Council recognise an adequate level of data protection for companies certified in this way.

The legal basis is your consent (for visitors from the EEA: Art. 6(1)(a) GDPR; for Switzerland: consent under the revFADP). You can withdraw your consent at any time with effect for the future by clicking «Cookie settings» at the bottom of any page; the Google cookies and local storage entries are then deleted and the cookie notice appears again.

For more information, please see Google's privacy policy.

7.4 Fonts (hosted locally)

The fonts used on this website (Cormorant Garamond and Inter, SIL Open Font License) are stored locally on our own server and are loaded from there. When the fonts are retrieved, no connection is established to servers operated by Google or other third parties, and no data is transmitted to third parties.

7.5 Embedded videos (YouTube)

On individual pages (e.g. «Talks & workshops») we show a video from YouTube, a service of Google Ireland Limited (or Google LLC, USA). We use the enhanced privacy mode (youtube-nocookie.com) and only load the video when you actively click on it; before that, no connection to YouTube is made. When you click, your IP address and technical information about your device are transmitted to YouTube; YouTube may use cookies or similar storage technologies and transfer data to the USA (for the certification of Google LLC see section 7.3). The legal basis is your consent, which you give by playing the video (for visitors from the EEA: Art. 6(1)(a) GDPR).

7.6 Self-assessments (career check, wheel of life)

The interactive self-assessments on this website are calculated exclusively in your browser. Your answers are neither transmitted to us nor stored.

8. Retention and deletion

We retain personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations. Enquiries that do not lead to a contractual or treatment relationship are deleted once their processing is complete and no retention obligations prevent deletion.

Special professional and statutory retention periods apply to data relating to consulting, coaching and therapy services (see section 10). Server log files are rotated monthly by the hosting provider and deleted after two months at the latest. Individual page views in our own visitor statistics are deleted after 14 months at the latest (see section 7.2). The pseudonymised usage data collected in Google Analytics is automatically deleted there after 14 months (see section 7.3).

9. Your rights as a data subject

Under the applicable data protection law, you have in particular the following rights:

  • the right to information about the data processed about you
  • the right to have inaccurate data corrected
  • the right to have data deleted or destroyed
  • the right to restriction of processing
  • the right to receive your data or have it transferred (data portability)
  • the right to withdraw consent you have given at any time with effect for the future
  • the right to object to processing under certain conditions

To exercise your rights, a message to the contact details given in section 1 or section 11 is sufficient. You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); where the GDPR applies, you may contact the data protection supervisory authority responsible for you.

10. Special notes on health data and professional confidentiality

In the course of psychotherapeutic work, particularly sensitive personal data, especially health data, is processed. This data enjoys enhanced protection.

Psychotherapeutic treatment is subject to the statutory duty of confidentiality (in particular professional secrecy under Art. 321 of the Swiss Criminal Code) as well as the professional obligations of a psychotherapist (FSP). The content of conversations and treatments and the related documentation are treated as strictly confidential and are disclosed to third parties only with your express consent or on the basis of a legal obligation.

Treatment-related health data is stored separately from the data collected via the website and in compliance with the relevant professional and data protection requirements. The statutory retention periods for treatment records apply: at least ten years after the end of treatment and, in view of the 20-year limitation period for personal injury claims (Art. 128a Swiss Code of Obligations), generally 20 years. Details of the processing of health data in the treatment context will be provided to you separately in the course of treatment.

11. Contact for data protection matters

For questions about data protection and to exercise your rights, please contact the controller:

Nathalie Buschor
Scheuchzerstrasse 8
8006 Zurich
Switzerland
E-mail: nathalie@buschor.biz
Phone: +41 79 255 64 20

12. Changes to this privacy policy

We may amend this privacy policy at any time to reflect changes in the legal situation or changes to our services and data processing. The version published on this website at the relevant time is authoritative.

This English translation is provided for convenience only. In case of any discrepancy, the German version prevails.

Last updated: 3 November 2026