Privacy policy
Last updated: 06/11/2026
Data controller
[NOM COMMERCIAL EXACT] — [ADRESSE]. Contact : [EMAIL DE CONTACT].
No data protection officer has been appointed, as appointment is not mandatory given the nature and volume of processing carried out.
Processing activities
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Account management and access to the programme | Email address, name, hashed password, language | Performance of the contract | Lifetime of the account, then 3 years after last contact |
| Payment processing and invoicing | Stripe session ID, amount, date (no card data) | Performance of the contract and legal obligation | 10 years (accounting obligation) |
| Learning progress tracking | Modules viewed, progress, resume position | Performance of the contract | Lifetime of the account |
| Transactional emails | Email address, message content | Performance of the contract | 3 years |
| Personalised job alerts | Email address, chosen canton and role | Consent (one-click unsubscribe) | Until consent is withdrawn |
| Security: logging and attempt limiting | IP address, timestamp, action type | Legitimate interest (abuse prevention) | 12 months |
| Display of the interactive map on the canton pages | IP address and requested page, sent to swisstopo by your browser when the map tiles load | Legitimate interest (displaying the requested map) | Not kept by the site |
| Audience measurement | Page views, referrer, aggregated non-identifying data | Consent | 13 months maximum |
Processors
| Provider | Role | Location |
|---|---|---|
| Stripe Payments Europe Ltd | Payments and invoicing | Ireland / United States |
| Vercel Inc. | Website hosting | United States (EU processing) |
| Supabase (Supabase Inc.) | Database hosting | European Union (Ireland, eu-west-1) |
| Mux Inc. | Video hosting and streaming | United States |
| Office fédéral de topographie swisstopo (Confédération suisse) | Base map of the canton pages: tiles loaded by your browser when the map appears; this service can see your IP address | Switzerland |
| Resend | Transactional email delivery | United States |
| Anthropic PBC | ATS CV and cover letter generation, from the information you enter in the tool yourself | United States |
| Plausible Insights OÜ | Cookie-less, identifier-free audience measurement, triggered only if you consent | Estonia (European Union) |
Transfers to the United States rely on the European Commission's standard contractual clauses and, where applicable, on the provider's Data Privacy Framework certification.
Services queried without any personal data
The site also queries the services below from its server. No information about you is sent to them, and your browser never contacts them directly.
- job-room.ch, Adzuna, Jooble — Sources of the job listings shown on the Listings page
- Frankfurter — EUR / CHF exchange rate for the converter
- Google Fonts — Typefaces, served from the site itself — no request from your browser to Google
Cookies
Only strictly necessary cookies (login session, security, checkout flow) are set without your consent, as they are essential to the service. Analytics cookies are set only after explicit consent, collected via a banner with no pre-ticked boxes. You can change your choice at any time via the "Manage cookies" link in the footer.
Your rights
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict, object to and port your data.
- Export your data: from your account area, under "My account" → "Your data" → "Export my data".
- Delete your account: from the same section. Deletion is permanent; payment records are nonetheless kept for ten years to meet accounting obligations.
- By email to [EMAIL DE CONTACT]. We respond within one month.
You may also lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr.
Security
Passwords are stored as bcrypt hashes, never in plain text. All traffic is encrypted over HTTPS. Administrator accounts are protected by mandatory two-factor authentication. Paid videos are delivered through short-lived signed links. Database access is restricted and logged.