Privacy Policy
Effective Date: 22 September 2026
Last Updated: 22 September 2026
Welcome to my practice website. I take the protection of your personal and medical data very seriously. This Privacy Policy explains how I collect, process, use, and secure your personal data in accordance with the Swiss Federal Act on Data Protection (FADP / DSG) and, where applicable, the EU General Data Protection Regulation (GDPR). [1, 2]
1. Data Controller
The entity responsible for processing your data through this website and during therapy is: [1]
Name/Practice: Imane Kurdi / Presence sessions SARL
Address: Grand Rue 139, 2720 Tramelan
Email: hello@presencesessions.com
2. What Personal Data is Collected and Processed?
As a hypnotherapist, I process data that you voluntarily provide and data that is automatically generated: [1]
Master Data: Name, contact information (email, phone, address), date of birth. [1]
Sensitive Personal Data (Health Data): Information provided during intake or consultations concerning your mental/physical health, symptoms, history, and goals for hypnotherapy. [1]
Usage and Technical Data: IP address, browser type, device type, and server log data generated automatically when navigating my Squarespace website. [1]
3. Purpose of Processing
Your data is used strictly for the following purposes: [1]
To evaluate, schedule, and provide therapeutic hypnotherapy services.
To communicate with you regarding appointments or answering your inquiries.
To handle invoicing and legal bookkeeping requirements.
To maintain the security and functionality of this website. [1]
4. Data Security & Professional Confidentiality
All client information is treated with strict professional confidentiality. I implement rigorous technical and organizational security measures to protect your health files and contact information against unauthorized access, alterations, or loss. [1, 2, 3]
Note: Standard, unencrypted email communication is inherently insecure. If you choose to contact me via standard email, you acknowledge and accept the risks associated with data transmissions over unsecured networks. [1, 2]
5. Data Disclosure to Third Parties and Abroad
I do not sell, rent, or trade your data for commercial or marketing purposes. Data is only shared with third-party service providers (processors) necessary to run my practice, such as: [1, 2]
Squarespace: To host and display this website.
Acuity Scheduling: To manage client bookings.
Stripe: To process invoices. [1]
Some of these platforms may store data on servers located outside of Switzerland or the European Economic Area (EEA) (e.g., in the USA). In such cases, I ensure appropriate safeguards are met, such as relying on recognized data protection frameworks or standard contractual clauses. [1, 2]
6. Data Retention
I retain your personal and health data only for as long as necessary to fulfill therapeutic, contractual, or legal statutory requirements (such as the standard Swiss 10-year legal bookkeeping obligation for financial records). [1]
7. Your Rights
Under the Swiss FADP, you have the following rights regarding your data: [1]
The right to request information about what data I hold about you.
The right to correct inaccurate or incomplete data.
The right to request deletion or restriction of your data (provided it does not conflict with legal retention obligations).
The right to withdraw consent to data processing at any time. [1]
To exercise any of these rights, please contact me directly at the email address listed in Section 1. [1, 2]