Privacy Policy
1. Data controller
The data controller for your personal data collected via this Website is Dr. Marie José Ruiz Lachat (contact details above, section 2).
2. Personal data collected
We collect the following types of data via the Website:
Identification and contact data: First name, last name, email address, phone number (when you use the contact form or contact us by text message).
Message content: The information you voluntarily include in your messages via the form or text message.
Connection and usage data: Information collected automatically via cookies (see section 4 for details).
Important note: Detailed health data is NOT collected via this Website. It is collected only in the context of medical consultations (in the office or by other agreed secure means) and is protected by medical confidentiality and specific regulations. The Website is mainly used for initial contact and information.
3. Purposes of collection and legal bases
Your personal data is used to:
Respond to your requests and questions (via form/SMS).
Legal basis: Your consent (by submitting the request), our legitimate interest in responding.
Manage appointment scheduling.
Legal basis: Performance of pre-contractual measures, your consent.
Improve the functioning and content of the Website (via cookies).
Legal basis: Your consent (non-essential cookies), legitimate interest (essential cookies).
Provide medical services (data is collected outside the Site during consultations).
Legal basis: Healthcare contract, legal obligation (medical records), explicit consent (if required).
4. Sharing of personal data
Your personal data collected via the Site is not sold. It may be shared with:
Wix.com: As the Site's host and technical platform.
Other technical service providers: If we use other tools related to the Site (e.g., external analysis tool), under a confidentiality obligation.
Other therapists: Only if this is part of the therapeutic strategy and with your explicit prior consent.
Legal authorities: If required by law or to respond to legal proceedings.
The sharing of health data (collected off-site) is strictly governed by medical confidentiality.
5. Data security
We and our host Wix.com implement technical and organizational security measures to protect your personal data collected via the Site. Health data processed in the office is subject to enhanced security and confidentiality measures in accordance with professional and legal obligations.
6. Data retention
Contact data (form/SMS): Kept for the time necessary to process your request and follow up, then archived or deleted in accordance with legal requirements and obligations.
Cookie data: Variable durations depending on the type of cookie (see section 4).
Medical records (off-site): Kept in accordance with Swiss legal obligations (generally 10 years or more).
7. Your rights (Data protection)
In accordance with the Swiss Federal Act on Data Protection (FADP), you have the following rights:
Right of access to your data.
Right to rectify inaccurate data.
Right to erasure1 of your data (subject to legal retention obligations, particularly for medical records).
Right to restrict processing in certain cases.
Right to data portability (for data processed on the basis of consent or a contract, if technically feasible).
Right to object to processing based on our legitimate interest.
Right to withdraw your consent at any time for processing based on consent.
To exercise these rights, please contact us by email: ruizlachat@gmail.com. Proof of identity may be requested.
You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.