Privacy Notice

Who is responsible

Theresa Frische, Gimenenstrasse 1, 6300 Zug, Switzerland, info@theresafrische.com, is the controller for the processing of personal data described here.

This notice is based on the Swiss Federal Act on Data Protection (revDSG). Where the General Data Protection Regulation (GDPR) applies, because you are in the European Economic Area, it applies alongside it and the additional rights set out below are yours.

The short version

This website sets no cookies, runs no analytics, and does not track you. The only personal data it collects is what you type into the contact form, plus the technical records the hosting provider keeps for security. Nothing is sold, and nothing is shared for advertising.

The contact form

When you use the contact form, the following is processed: your name, your email address, and the content of your message.

Purpose: to reply to you and, where relevant, to prepare a possible counselling engagement.

Legal basis, where the GDPR applies: steps taken at your request prior to entering into a contract, Article 6(1)(b), and the legitimate interest in responding to enquiries, Article 6(1)(f).

Retention: enquiries are kept for as long as needed to deal with them and for up to 24 months afterwards, then deleted. If an engagement begins, the retention rules for client records below apply instead.

Please do not send health information through the form. The form is deliberately built not to ask for it. A first name and a sentence about what you are looking for is enough. Anything sensitive belongs in a conversation, not in an email.

Server records

The hosting provider records technical data when the site is accessed, including the IP address, the time of the request, the page requested, and the browser type. This is used to operate the site securely and to diagnose faults. It is not used to identify you or combined with other data. These records are kept for a short period and then deleted.

Client records

If a counselling engagement begins, notes and administrative records are created. They are kept confidential, stored securely, and accessible only to Theresa Frische. They are retained for the duration of the engagement and for up to ten years afterwards, which reflects the general limitation period under Swiss law, and are then destroyed.

Who else processes data

Three service providers process data on instruction:

All three are United States companies. Data may therefore be processed in the United States. Transfers are based on the Swiss United States Data Privacy Framework and the EU United States Data Privacy Framework where the recipient is certified, and otherwise on the standard contractual clauses. No data is passed to anyone else, except where required by law.

• Netlify, which hosts the website and serves it to your browser.
• Resend, which delivers the emails generated by the contact form.
• Google Workspace, which provides the mailbox that receives them.

No cookies, no analytics, no advertising

No tracking cookies, no analytics tools, no advertising pixels, no social media plugins that load third party content. There is nothing to consent to, which is why you are not asked.

No automated decision making

No decisions affecting you are made automatically or by profiling.

Your rights

You may request information about the data held about you, ask for it to be corrected or deleted, object to processing, and request that it be released or transferred to you. Where the GDPR applies, you may additionally request restriction of processing and withdraw any consent given, with effect for the future.

Write to info@theresafrische.com. You will be asked to confirm your identity before information is released, so that data is not disclosed to the wrong person.

If you believe your data has been handled improperly, you may complain to the Federal Data Protection and Information Commissioner in Switzerland, or, in the European Economic Area, to the supervisory authority in your country.

Children

The counselling service is offered to adults. The website is not directed at children and no data is knowingly collected from them.

Changes

This notice may be updated when the service or the technology behind it changes. The current version is always the one published here.

Last updated: August 2026.