Privacy Policy

The controller of your data is Elena Widmer, who runs TeAjut.ch from French-speaking Switzerland (Vaud / Geneva).

I have not appointed a Data Protection Officer (DPO), as the law does not require one for an activity of my size. You can contact me directly, in person, with any question.

• Controller: Elena Widmer, TeAjut.ch
• Legal form / identification number: [Legal form / UID number if any]
• Address: [Postal address], Switzerland
• E-mail: elena@teajut.ch
• Phone: +41 79 818 33 44
• Representative in the European Union (Art. 27 GDPR): [EU representative, Art. 27 GDPR — to be completed or removed]

Most data comes directly from you when you fill in the contact form. The rest is created by me while we work together, or arises automatically for technical reasons.

I do not need sensitive data (for example medical, religious or intimate-life information), nor ID numbers, passwords or bank details. Please do not write them in the form. If a project does require such information, we discuss it directly, I handle it with extra care, and only with your explicit consent.

• From the contact form, required: your name, e-mail address, service category, your message, preferred language and the confirmation that you have read this policy (I keep the version of the policy and the date and time of confirmation as proof).
• From the contact form, optional (only if you wish): phone number, country, locality of interest in Switzerland, timeframe, approximate budget, the capacity in which you write (student, parent, individual, company), study level and institution, company and sector.
• During our cooperation: notes on our conversations, message history, draft replies, the offer, the contract, the invoice and documents you voluntarily send me (for example a CV or a motivation letter), only where they are needed for the service.
• By phone, WhatsApp or e-mail: if you contact me this way, I receive your number or address and the content of your message.
• Technical data: when you visit the site, the hosting server may record, for security, your IP address, date and time, the requested page and your browser type, for a short period. When you submit the form, I temporarily use, in server memory only, a value derived from your IP address (not the address itself) to limit abusive automated messages; your IP address is not saved in your file in my database.

I use your data only for clear and limited purposes. If you do not fill in the required fields I cannot answer your request; the optional fields are yours to complete only if you wish.

• To reply to your request and prepare a personalised offer. Basis: steps taken at your request before a possible contract (GDPR Art. 6(1)(b)); where the request is sent by a parent for their child or by an employee for a company, my legitimate interest in replying properly (Art. 6(1)(f)).
• To carry out the agreed services, communicate with you and issue invoices. Basis: the contract (Art. 6(1)(b)).
• To comply with legal obligations, in particular accounting and tax rules. Basis: legal obligation (Art. 6(1)(c)).
• To protect the website and data (security, abuse prevention), keep proof that you have read this policy and be able to defend myself in a possible dispute. Basis: my legitimate interest (Art. 6(1)(f)).
• To discuss sensitive information or pass it to a third party, only if you have explicitly agreed. Basis: your consent (Art. 6(1)(a) and Art. 9(2)(a)), which you can withdraw at any time.

I want to reply to you carefully and with good research. That is why I use an artificial intelligence tool (the API service of OpenAI) as a drafting aid. It summarises the request, notices what information is missing, suggests clarifying questions, a checklist, research notes from public internet sources and a draft reply. It is only an aid: it does not replace my own judgement.

The steps are these. First, your request reaches my server in Switzerland. Then, still there, a program automatically removes identifying details from the text and replaces them with generic markers (for example NAME or EMAIL). Only after that is the anonymised text sent to the provider. For the local anonymisation step, my basis is my legitimate interest in replying correctly and efficiently.

• Removed before sending: your name, e-mail address, phone number, company name, personal web addresses, IBAN, social security or ID numbers, passport numbers, dates of birth and street addresses.
• Sent: the anonymised message and general information not directly tied to your identity (service category, language, country, locality in Switzerland, timeframe, approximate budget, study level and institution, sector).
• Never sent: your name, e-mail, phone number and company name.
• I keep in your file a copy of exactly what was sent, so I can check it at any time.
• The draft I receive is read, corrected and approved by me before it reaches you. Nothing is sent automatically.

I do not make automated decisions. The tool does not decide whether I accept a request, what offer you receive or what the price is. I do not profile you or score you in any way. Every reply is written or approved by me, personally.

Automated anonymisation is careful but cannot be perfect. If you write details in free text that could identify you through context, some of them may remain in the text. Please therefore avoid identifying details and sensitive data in your message.

The provider has its own terms for API use. According to them, data sent is not used to train its models, but it may be kept temporarily in security and abuse-monitoring logs, usually for up to 30 days. The provider's servers may be located outside Switzerland and the EU, including in the United States. That is exactly why I send anonymised content only: my intention and my measures are that no personal data reaches them. I also have a data processing agreement with the provider that imposes contractual safeguards.

Your data is seen by me. I do not sell it or pass it on for advertising. I use a few providers that help me run the service and that process data only on my instructions, under data processing agreements:

• Hosting: [Hosting provider, Switzerland] — the website server and the database of requests, including encrypted backups, in Switzerland.
• Sending e-mails: [E-mail (SMTP) provider, Switzerland/EU] — delivers the replies I send you. The internal e-mail by which I am notified of a new request contains no personal data.
• Drafting help (OpenAI): anonymised content only, as described in section 4.
• An accountant or fiduciary, if applicable, only for data needed for bookkeeping.
• Third parties involved in your project (for example a university, a landlord, a shop or an event organiser): I always tell you which data must be shared and pass it on only with your knowledge and as far as necessary.
• Authorities, only when the law requires me to.

The call, WhatsApp and e-mail links on the site are optional: something happens only if you use them yourself. If you call me, the call goes through your telephone operator. If you write to me on WhatsApp, the message is processed by WhatsApp (Meta) under their terms and privacy policy; message content is end-to-end encrypted, but Meta processes some technical data (for example your phone number and metadata), including outside Switzerland and the EU. I have no influence over this processing. If you prefer to avoid WhatsApp, use the contact form or the telephone.

The site loads no third-party resources: I do not use maps, fonts, statistics tools, social networks or video embedded from other companies.

Your data is stored and processed in Switzerland. Switzerland benefits from an adequacy decision of the European Commission (reconfirmed in 2024), so personal data of people in the EU can flow to Switzerland without additional formalities.

I do not transfer personal data to countries outside Switzerland and the European Union. The only situations in which a provider outside this area is involved are the drafting aid described in section 4, which receives only anonymised text, and WhatsApp, which you use on your own initiative. If, exceptionally, I needed to transfer personal data to a country without an adequate level of protection, I would do so only with the safeguards provided by law (for example standard contractual clauses) or with your explicit consent, and I would inform you beforehand.

If you live in the Republic of Moldova or another country, the replies I send you are correspondence between us, not a transfer to a third party.

I keep data only as long as necessary. When the period ends, data is deleted or anonymised.

• Requests that do not lead to a contract: deleted after 12 months.
• Clients (contract, offer, invoice, essential correspondence): for the duration of the cooperation and then as long as the law requires. Accounting records and their supporting documents are kept for 10 years from the end of the financial year (Art. 958f of the Swiss Code of Obligations, CO). I delete or anonymise the rest of the file when it is no longer needed, at the latest when the applicable limitation periods expire.
• Technical server logs: a short period, usually no more than 30 days.
• Encrypted backups: a limited period, usually up to 30 days, after which they are overwritten. A deletion you request may therefore disappear completely from backups with a short delay.
• Proof that you read the policy (policy version and date of confirmation): as long as I keep your file.

I apply technical and organisational measures appropriate to the risk (Art. 8 FADP, Art. 32 GDPR). In short:

• The server and the database are in Switzerland; the connection to the site is encrypted (HTTPS).
• The database is not reachable from the internet, only locally from the server; daily backups are encrypted.
• The administration area is accessible only to me, with a strong password and two-step authentication, short sessions and lock-out after failed attempts.
• I collect only what I need (many fields are optional), I do not save your IP address in your file and I use no tracking tools.
• The form is protected against abusive automated messages, and actions taken on the data are logged.
• I can export or permanently delete your file on request.

If a data security breach occurred that could seriously affect you, I would notify the competent authority (in Switzerland, the Federal Data Protection and Information Commissioner; for people in the EU also the relevant authority, where the law requires it) and, where necessary to protect you, I would inform you directly and as quickly as possible.

The data is yours. You have the right:

• of access: to find out whether I process your data and to receive a copy;
• to rectification: to correct inaccurate or incomplete data;
• to erasure: to request deletion of your data, except for data the law requires me to keep (for example accounting records);
• to restriction: to request that processing be limited in certain situations;
• to object: to object to processing based on my legitimate interest;
• to portability: to receive the data you gave me in a common electronic format or to have it transferred to another controller;
• to withdraw consent at any time, where processing is based on it (withdrawal does not affect processing carried out before);
• not to be subject to a decision based solely on automated processing (I make no such decisions).

Write to me at elena@teajut.ch. I reply free of charge, usually within 30 days at the latest. For your safety, I may ask you to confirm your identity so that I do not hand your data to someone else. If there are legitimate reasons to refuse or postpone a request (for example a legal retention duty), I will explain them to you.

You also have the right to contact a data protection authority. I would ask you to write to me first, as we can usually sort things out quickly, but you are not obliged to do so.

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC / EDÖB / PFPDT), www.edoeb.admin.ch
• Romania: National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro
• Republic of Moldova: National Center for Personal Data Protection (CNPDCP), www.datepersonale.md
• If you live in another EU Member State: the data protection authority of your country of residence.

My services are aimed at adults. If your request concerns a minor (for example a pupil or student under 18), please submit it yourself as the parent or guardian and include only the data that is strictly necessary about the child. By submitting the request you confirm that you are entitled to provide this data.

If I speak directly with a minor, I do so with the knowledge of the parent or guardian and I explain, in terms they can understand, how I use their data. If I learn that I have received data from a minor without the parent's approval, I delete it on request.

The public pages of this website use no analytics, advertising or tracking cookies, and I have installed no statistics tool. That is why you do not see a cookie banner.

I use only cookies that are strictly necessary for the site to work, which do not require consent: the session cookie of the administration area, which appears only when I log in myself, not for visitors, and, where applicable, a technical cookie that remembers the language you chose, with no other information about you.

I may update this policy, for example if I change a provider or add a new feature. The date of the last update is shown at the top of the page, and when you submit the form I keep the version you confirmed. If a change is important for you, I will tell you directly.

For any question about your data: elena@teajut.ch · +41 79 818 33 44 · [Postal address]. I am happy to help.