Who is responsible
Grégory Marti, a therapist working in psychotraumatology and based in Switzerland, is responsible for the processing of the data described here. For any question about it, write to me through the contact form, or at the following address:
What this site does not do
- No analytics, no trackers, no advertising.
- No font, script or image loaded from a third-party service: everything is served by this site.
- No accounts, no database: the site itself does not keep your messages.
The contact form
When you write to me, the form sends your name, your email address, your time zone if you give it, your message, along with the language of the page and the date it was sent. This information is used only to reply to you: that is what you agree to by ticking the box on the form.
Your message reaches me by email. The site does not keep it: afterwards it exists only in my mailbox.
If our exchange does not lead to working together, I delete your messages at the latest twelve months after the last of them. If it does, they join the file described below.
A message may contain information about your health, which the law treats as sensitive data. I handle it with the confidentiality my practice requires. For a first contact, a few lines are enough: there is no need to describe your situation in detail.
To keep robots out, the form uses Altcha: a small calculation carried out entirely in your browser. It contacts no third-party service, sets no cookie and stores nothing.
Sessions
Everything above describes this website. Sessions belong to my practice, and they are a separate processing of data: here is what happens.
I take notes during or after a session. They help me remember what we did and what is left to do. They are shared with no one, and I keep them for ten years after our last session: that is the period during which a claim remains possible, and those notes are then the only record of what we actually did.
They are stored on my own devices and on a server I own, at home. No online service, no third-party provider.
You can ask for them to be deleted at any time. I will do so, unless I need to keep them to establish or defend a legal claim — in which case I will tell you.
I do not record sessions, in audio or video, unless we explicitly agree to beforehand. In that case we settle together what becomes of the recording and when it is destroyed.
I work under supervision. That means I discuss situations met in session with someone who is themselves bound to secrecy, without your name or anything that could identify you. It is part of the frame, in the same way as confidentiality.
The session takes place on a video-call tool we agree on before starting. These tools are provided by third-party companies, most often based in the United States, and the picture and sound of the session pass through their servers during the call. I tell you which one we are using, and you may suggest another.
Cookie
This site sets a single cookie, lang, which remembers your chosen language (French or English) for one year. It is only set if you arrive through the site’s main address or switch language. It holds no information about you and serves no other purpose, which is why no banner asks for your consent.
Server logs
Like any web server, the one hosting this site keeps technical logs: IP address, date, page requested, browser type. They are used for security and troubleshooting, never analysed to measure audience, and are deleted after a few weeks.
Hosting
The site and the mail service run on a server I administer myself, rented from Contabo GmbH, a German company, and hosted in Germany. Your messages are therefore stored outside Switzerland, in a European Union country.
Nothing this site receives is passed to a third party for that party’s own use. Two providers are necessarily involved: the server’s host, and the video-call tool described above, which concerns sessions only and never this site.
Your rights
Under the Swiss Federal Act on Data Protection (FADP), you can ask to access the data concerning you, have it corrected or deleted, and object to its processing. Write to me through the form or at the address given above. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).
If you live in the European Union, you have the same rights under the General Data Protection Regulation (GDPR), and may contact the data protection authority of your country.