KAREidoscope · Version of 1 January 2026
Protecting your personal data is a priority for KAREidoscope. This policy explains what data is collected, why, with whom it is shared, how long it is kept and what rights you can exercise.
It applies to the website www.kareidoscope.ch and to the relationship with the practice’s clients. This document is a translation; in the event of any discrepancy, the French version prevails.
Karla Chacon, operating as a sole proprietorship under the trade name KAREidoscope
Chemin de Budron C5, 1052 Le Mont-sur-Lausanne, Switzerland
Secondary practice: Centre Énergie-Santé, Rue de la Gare 30, 1110 Morges
Telephone: +41 78 228 15 93 · E-mail: info@kareidoscope.ch
Swiss business identification number (UID): CHE-332.925.777 · Creditor code (RCC): A275765
Website hosting: Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (GE), Switzerland. The website and its data are hosted in Switzerland.
For any question relating to data protection, please write to info@kareidoscope.ch.
The processing described here is governed by the Swiss Federal Act on Data Protection (FADP) and its implementing ordinance (DPO). If you reside in the European Union, the General Data Protection Regulation (GDPR) also applies.
KAREidoscope processes your data lawfully, fairly, proportionately and transparently, solely for the purposes described below.
Category | Examples |
Identification | Surname, first name, date of birth |
Contact details | Postal address, e-mail, telephone number |
Appointments | Date, time, location and type of service, session history |
Health data (sensitive) | Reason for consultation, relevant history, current treatments, contraindications, follow-up observations |
Billing | Amounts, payment dates and methods, insured number and insurer if you request reimbursement |
Espaces vivants | Photographs, plans, measurements and characteristics of the premises, design preferences |
Browsing | IP address and technical data recorded in server logs (device and browser type, page requested, date and time) |
Correspondence | Content of e-mails, text messages and other exchanges |
You are never obliged to provide this data, but some of it is essential: without it, an appointment cannot be arranged nor a service delivered safely.
Purpose | Legal basis |
Arranging and honouring appointments | Performance of the contract |
Delivering services safely (intake, contraindications, follow-up) | Express consent for health data |
Issuing invoices and monitoring payment | Performance of the contract, legal obligation |
Providing supporting documents for your insurer | Consent, performance of the contract |
Responding to your enquiries and messages | Legitimate interest |
Operating, securing and improving the website | Legitimate interest |
Complying with accounting and tax obligations | Legal obligation |
Your data is never sold, rented or transferred for advertising purposes.
Information relating to your health constitutes sensitive personal data within the meaning of art. 5 let. c FADP and benefits from enhanced protection.
If you request reimbursement, only the strictly necessary details appear on the invoice (nature of the service, dates, amounts) — never the content of your sessions.
Data | Retention period |
Client file and follow-up notes | 10 years from the last session |
Invoicing and accounting records | 10 years (legal obligation, art. 958f CO) |
Correspondence without contractual follow-up | 12 months |
Contact form | 12 months after the last reply |
Technical server logs | 6 months maximum |
Espaces vivants photographs and documents | Duration of the mandate, then 5 years unless deletion is requested |
Once these periods expire, data is deleted or destroyed securely.
Your data is disclosed only to those people and service providers who genuinely need access to it, and who are bound by contractual confidentiality:
Recipient | Role | Location |
Infomaniak Network SA | Website hosting and e-mail | Switzerland |
agenda.ch | Booking system and appointment management | Switzerland |
Google Ireland Ltd. | Google Tag Manager (tag management) | EU, servers possibly located in the United States |
Your supplementary insurer | Only if you submit the invoice to them | Switzerland |
Disclosure may also occur where a legal obligation or an order from an authority requires it.
KAREidoscope does not offer direct billing to insurers: you decide whether or not to submit your invoice to your insurer.
What is a cookie?
A cookie is a small file placed on your device when you visit a website. It allows your browser to be recognised, your choices to be remembered, or traffic to be measured.
What this website uses
Necessary cookies — essential to the operation of the site: security, correct display of pages, storage of your consent preferences and, where applicable, your shopping basket. They cannot be disabled and do not require your consent.
No audience measurement tool is currently active. The website uses neither Google Analytics nor any other statistics or targeted advertising service. No browsing profile is created.
Google Tag Manager is installed as a tag management tool. It serves solely to administer the site’s scripts; it sets no tracking cookie and collects no statistics of its own. Loading it does, however, involve a connection to Google’s servers, which receive your IP address on that occasion.
Should this change
If an audience measurement tool were activated in future, it would be deployed only after obtaining your consent through a dedicated banner, and this policy would be updated beforehand.
Managing cookies
You may at any time view, block or delete the cookies placed on your device through your browser settings. Blocking necessary cookies may impair certain features of the website.
The website and your client data are hosted in Switzerland, with Infomaniak Network SA.
The only transfer liable to occur abroad results from loading Google Tag Manager, supplied by Google Ireland Ltd., whose infrastructure may be located outside the European Economic Area, in particular in the United States. This transfer is limited to technical connection data (IP address, browser information). Google relies in this respect on the European Commission’s standard contractual clauses and on the EU–US Data Privacy Framework together with its Swiss extension.
No health data, no appointment data and no billing data is transferred outside Switzerland.
KAREidoscope implements appropriate technical and organisational measures:
No transmission over the internet can, however, be guaranteed to be entirely secure. In the event of a security breach presenting a high risk to your rights, you will be informed and the Federal Data Protection Commissioner notified in accordance with art. 24 FADP.
You have the following rights at any time:
To exercise these rights, write to info@kareidoscope.ch or to the practice address. You will receive a reply within 30 days. Proof of identity may be requested in order to prevent disclosure to a third party.
If you consider that your rights are not being respected, you may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — or, if you reside in the European Union, the supervisory authority of your country.
Services provided to a minor require the prior agreement of their legal representative(s), who also exercise the rights described in section 12. Data concerning minors is handled with particular care and used solely for follow-up purposes.
No data is knowingly collected through the website from a minor under 16 without the agreement of their legal representative.
KAREidoscope makes no automated individual decisions and carries out no profiling with legal effect. No scoring, segmentation or automated evaluation of your person is performed.
This policy may be adapted where the services, the tools used or the legal framework change. The applicable version is the one published on the website, whose date appears at the top of this document. You will be informed appropriately of any substantial amendment.
KAREidoscope – Karla Chacon · Chemin de Budron C5, 1052 Le Mont-sur-Lausanne · Centre Énergie-Santé, Rue de la Gare 30, 1110 Morges · info@kareidoscope.ch
