Privacy Policy

BusiFit processes personal data only to the extent necessary to provide this website and the services offered through it. This policy explains what data is collected, why, how long it is kept, and what rights you have. It applies to all visitors to www.busifit.ch and to anyone who purchases, books or registers for a BusiFit service.

I. Data Controller

The responsible party for data processing on this website is:

BusiFit is operated as a sole proprietorship by Aparna Emile. All references to “BusiFit”, “we” or “us” in this policy refer to Aparna Emile personally as the data controller.

II. Data We Collect and Why

1. Website visits

When you visit www.busifit.ch, your browser automatically transmits technical data to our hosting provider (Green.ch, Switzerland), including your IP address, browser type, operating system, and the pages visited. This data is processed on the basis of our legitimate interest in operating a secure and functional website (Art. 6(1)(f) GDPR / Art. 31(1) nDSG) and is not linked to any personal identity. It is deleted automatically after a short retention period set by the hosting provider.

This website loads fonts from Google Fonts. When the page loads, your browser makes a request to Google’s servers, which may transmit your IP address to Google LLC (USA). This processing is based on our legitimate interest in displaying consistent typography. For details, see Google’s Privacy Policy.

2. Newsletter sign-up (BusiFit Brief)

When you subscribe to the BusiFit Brief newsletter, we collect your email address and, if provided, your first name. This data is processed by Kit (ConvertKit LLC, USA) on our behalf and is used solely to send you the newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR / Art. 31(1) nDSG). You can unsubscribe at any time via the link in any newsletter email, after which your data will be removed from our mailing list.

3. Booking a call (HubSpot)

When you book a free strategy call via our HubSpot scheduling page, HubSpot Ireland Ltd processes your name, email address and the selected appointment time. This data is used solely to confirm and manage your appointment. The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR / Art. 31(1) nDSG). Data is retained for as long as necessary to manage the relationship and comply with any applicable obligations.

4. Event and workshop bookings (Stripe)

Payments for events and workshops are processed by Stripe Technology Europe Ltd. When you complete a booking, Stripe collects your name, email address and payment card details. BusiFit receives a booking confirmation including your name and email. Your card details are processed and stored exclusively by Stripe and are never seen or retained by BusiFit. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR / Art. 31(1) nDSG).

5. Event participant registration forms (health data)

For in-person events, participants complete a paper registration form on arrival. This form collects your name, email address, emergency contact details, and a health declaration confirming fitness to participate. The health declaration constitutes special category data under Art. 9 GDPR and is processed on the basis of your explicit written consent given at the event. This data is used solely for the safe running of the event and is not shared with third parties. Paper forms are stored securely and destroyed within 30 days of the event date.

6. Direct contact by email

If you contact us by email, we use the data you provide (name, email address, and the content of your message) solely to respond to your enquiry. The legal basis is our legitimate interest in responding to communications (Art. 6(1)(f) GDPR / Art. 31(1) nDSG), or the initiation of a contract where applicable. Data is deleted once the matter is fully resolved, unless a statutory retention period applies.

7. Cookies

This website uses a small number of cookies. Session cookies are deleted when you close your browser. Where third-party services (HubSpot, Stripe, Kit) set cookies, these are governed by the respective third party’s privacy policy. This website does not use advertising or tracking cookies. You can disable cookies in your browser settings, though some features may not function correctly if you do.

III. Third-Party Processors

BusiFit uses the following third-party services to operate this website and deliver its services. Each processes data only on our behalf and in accordance with data processing agreements.

IV. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by Swiss law. Specifically:

• Newsletter subscribers: until you unsubscribe, after which data is deleted from our mailing list promptly.
• Booking and payment records: retained for 10 years in accordance with Swiss commercial record-keeping obligations (OR Art. 958f).
• Event registration forms (paper): destroyed within 30 days of the event date.
• Email correspondence: deleted when the matter is resolved, unless a legal retention obligation applies.
• Server logs: deleted automatically by the hosting provider, typically within 30 days.

V. Your Rights

Under the Swiss nDSG and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Right of access: you may request confirmation of whether we process data about you and, if so, a copy of that data.
• Right to rectification: you may request correction of inaccurate or incomplete data.
• Right to erasure: you may request deletion of your data where there is no lawful basis for its continued processing.
• Right to restriction: you may request that processing be restricted in certain circumstances.
• Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: you may object to processing based on legitimate interests, including for direct marketing purposes.

To exercise any of these rights, please contact us at aparna.emile@opporfin.ch. We will respond within 30 days.

VI. Complaints

If you believe your data has been processed in a manner that does not comply with applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority.

In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC):
www.edoeb.admin.ch

If you are resident in the EU or EEA, you may also lodge a complaint with the data protection authority in your country of residence.

We would, however, appreciate the opportunity to address any concerns directly before you escalate to a supervisory authority. Please contact us at aparna.emile@opporfin.ch.