Privacy Policy

1. Data controller

2. Data collected

2.1 Contact data

When booking an appointment or contacting us, we collect:

• First and last name
• Email address
• Phone number
• Date of birth
• Postal address (if necessary)

2.2 Health data

In the context of therapeutic consultations:

• Relevant medical history
• Symptoms and health issues
• Ongoing treatments
• Consultation notes

2.3 Browsing data

On our website:

• IP address
• Browser type
• Pages visited
• Visit duration
• Interaction data (clicks, scrolling) via Microsoft Clarity

3. Processing purposes

• Appointment and consultation management
• Therapeutic follow-up and patient records
• Care-related communication
• Billing and administration
• Service improvement
• Legal obligations compliance

4. Legal basis

The processing of your personal data is based on:

• Consent: for health data and cookies
• Contract performance: for care provision
• Legal obligation: patient record retention
• Legitimate interest: service improvement

5. Retention period

• Patient records: 10 years after last consultation
• Billing data: 10 years (legal obligation)
• Browsing data: 26 months maximum
• Cookie consent: 13 months

6. Data sharing

Your data may only be shared in the following cases:

• Other health professionals (with your consent)
• Insurance companies (for reimbursement, with your consent)
• Legal authorities (in case of legal obligation)
• Technical service providers (secure hosting)
• Google LLC (Google Analytics) — anonymous visit statistics
• Microsoft Corporation (Microsoft Clarity) — behavioural analysis (heatmaps, anonymised session recordings)

7. Your rights

Under the GDPR, you have the following rights:

• Access: obtain a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: restrict processing
• Portability: retrieve your data
• Objection: object to processing
• Withdrawal of consent: at any time

To exercise these rights, contact us at: diego.costier@ctca.ch

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or accidental damage.

9. Complaints

You have the right to lodge a complaint with the competent supervisory authority (Federal Data Protection Commissioner in Switzerland) if you believe that the processing of your personal data violates regulations.

10. Changes

This privacy policy may be updated. The current version is always available on our website.

Last updated : 22/08/2026