Last updated: 29 May 2026
1. Controller
The controller responsible for processing personal data on this website is:
On Course & Partner®
Owner: Christl Lang
Kleinmatt 5
CH-6402 Merlischachen
Switzerland
Email: christl.lang@on-course.ch
2. Personal Data We Process
We process personal data when you visit our website, contact us, complete a form, use a quiz, book an appointment, subscribe to emails or enter into a business relationship with us.
- Contact details, such as your name, email address, telephone number and company information.
- Content data, such as messages, form entries, quiz answers and results.
- Appointment and communication data, such as booked appointments, calendar data and email correspondence.
- Technical data, such as your IP address, date and time of access, browser, device and pages viewed.
- Billing data, such as invoice details, payment status and payment method.
3. Purposes for Which We Use Personal Data
We use personal data for the following purposes:
- Providing and securing the website.
- Responding to contact enquiries, forms and appointment requests.
- Managing appointments and communicating in connection with requested or booked services.
- Evaluating quiz answers and providing requested content.
- Sending emails, confirmations, downloads and follow-up information.
- Processing payments, issuing invoices and complying with statutory retention obligations.
4. Legal Bases
Personal data is processed in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation (GDPR).
- Consent, for example for email subscriptions, downloads or video recordings.
- Contractual performance or steps taken before entering into a contract, for example in connection with enquiries, appointment bookings and payment processing.
- Legitimate interests, for example website security, communication and documenting consent.
- Legal obligations, for example accounting and record-keeping requirements.
5. Website, Hosting and Technical Provision
Our website is operated using WordPress. Web hosting is provided by Scaleway SAS in France. Domain and DNS management is provided by united-domains GmbH in Germany.
When you visit the website, technically necessary data is processed so that the website can be displayed, operated reliably and protected against misuse. This includes, in particular, your IP address, the date and time of access, pages viewed and browser and device information.
6. Cookies and Similar Technologies
At present, this website uses only technically necessary cookies. No marketing or tracking cookies are used.
A cookie banner may be used to provide information about technically necessary cookies and to manage settings.
If analytics, marketing or tracking services are used in the future, this Privacy Policy will be updated accordingly. Where required, such services will be used only after prior consent has been obtained.
7. Contact Forms, Quizzes and Downloads
When you use a contact form, booking form, quiz form or download form, we process the information you enter in order to handle your request.
Fluent Forms, FluentCRM, Elementor Forms and Contact Form 7 may be used for forms. Depending on the form, the data processed may include your name, email address, telephone number, company, message, preferred appointment time, quiz answers and other information you provide voluntarily.
If you complete a quiz, we process your answers and the resulting evaluation. Quiz results are used to provide the evaluation, send requested content and, where you have consented, send follow-up emails.
No automated decision-making producing legal effects takes place.
8. Email Communication and Double Opt-In
If you subscribe to emails, downloads or follow-up information, we use a double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription.
To document your consent, we store, in particular, the time of registration, the time of confirmation, the form used and technical verification data.
We use FluentCRM to manage contacts and Mailgun for email delivery. Mailgun processes the data required for delivery, such as the email address, time of dispatch and delivery status.
Email opens and clicks may be evaluated where these functions are enabled. This evaluation supports deliverability, list maintenance and improvements to our communications.
You may unsubscribe from emails at any time using the unsubscribe link contained in each email. Withdrawal of consent applies with effect for the future.
9. Appointment Bookings and Online Meetings
We use Microsoft 365, Microsoft Outlook, Microsoft Bookings and Microsoft Teams for appointment bookings, calendar management, email communication and online meetings.
The data processed may include, in particular, your name, email address, telephone number, appointment time, information you provide voluntarily and technical connection data.
Online meetings are not normally recorded. A recording will be made only upon request and with the prior express consent of the individuals concerned.
10. YouTube Videos
YouTube videos may be embedded on this website. When you access a page containing an embedded YouTube video, data may be transmitted to Google or YouTube.
This data may include, in particular, your IP address, device and browser information, the page viewed, the time of access and your interactions with the video.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It cannot be ruled out that data may also be transferred to Google LLC in the United States.
11. Social Media
Our website may include links to our profiles on LinkedIn, Instagram, Pinterest, Facebook and YouTube.
When you click these links, you leave our website. The respective platform operators are responsible for any subsequent processing of personal data. Please refer to the privacy information provided by those platforms.
12. Payment Processing
We process the data required for payment processing. Payments may be made through CopeCart or by bank transfer.
For payments made through CopeCart, CopeCart processes the data required for booking, payment and invoicing. Details of the data processed by CopeCart are available in CopeCart’s privacy information.
For payments made by bank transfer, we process the data required to receive and allocate the payment and for invoicing and accounting. This may include your name, payment amount, payment reference, invoice number and payment date.
13. Service Providers
We use technical service providers to operate the website, forms, email delivery, appointment bookings, online meetings and payment processing.
Depending on how you use our services, the following providers may be involved:
- Scaleway SAS for web hosting.
- united-domains GmbH for domain and DNS management.
- WordPress for operating the website.
- Fluent Forms, FluentCRM, Elementor Forms and Contact Form 7 for forms and contact management.
- Mailgun for technical email delivery.
- Microsoft 365, Outlook, Bookings and Teams for appointments, email communication and online meetings.
- YouTube or Google for embedded videos.
- CopeCart for payment processing.
- Banks and payment institutions for payments made by bank transfer.
14. International Transfers of Personal Data
The controller responsible for processing is located in Switzerland. The European Union recognises Switzerland as providing an adequate level of data protection.
When individual service providers are used, personal data may also be processed outside Switzerland, the European Union or the European Economic Area. This may apply, in particular, to Microsoft, Google, YouTube, Mailgun, CopeCart or social media platforms.
Where required, such transfers are based on appropriate safeguards, adequacy decisions, standard contractual clauses or other mechanisms permitted under applicable law.
15. Retention Periods
We retain personal data only for as long as necessary for the relevant purposes or for as long as statutory retention obligations apply.
Contract, invoice and accounting data is retained in accordance with statutory retention obligations. Data relating to enquiries is deleted when it is no longer required to handle the enquiry, unless legal obligations or legitimate interests require continued retention.
Records of consent may be retained in accordance with legal requirements or for the establishment, exercise or defence of legal claims.
16. Your Rights
Depending on the applicable law, you may have rights of access, rectification, erasure, restriction of processing, data portability and objection to certain processing activities.
You may withdraw your consent at any time with effect for the future. To exercise your rights, please contact: christl.lang@on-course.ch
17. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or unauthorised disclosure.
18. Right to Lodge a Complaint
You may lodge a complaint with a data protection supervisory authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).
Where the GDPR applies, you may also lodge a complaint with a supervisory authority at your habitual residence, your place of work or the place of the alleged infringement.
19. Changes to This Privacy Policy
We may update this Privacy Policy if our website, the services used, technical processes or legal requirements change.