Privacy Policy

Last updated: March 2026

1. Data Controller

Institut für Neurofeedback und Biofeedback AG (I-NFBF AG)
Wolleraustrasse 9, CH-8807 Freienbach, Switzerland
Email: [email protected]
Phone: +41-78 7 141415

2. Overview

We take the protection of your personal data seriously. This policy explains what data we collect, why, and your rights under the Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023).

3. Essential Cookies

We use essential cookies that are strictly necessary for the operation of this website. These include:

• Session cookie — maintains your login session (expires when you close the browser)
• CSRF token cookie — protects form submissions from cross-site request forgery
• Language preference — stores your selected language (EN/DE/FR)
• Cookie consent cookie (laravel_cookie_consent) — records your consent choice for 365 days

Essential cookies do not require your consent (Art. 45c revDSG). No personal data from these cookies is shared with third parties.

4. External Content (Consent Required)

With your consent, we embed content from the following third-party providers. These providers may collect your IP address, browser information, and usage data according to their own privacy policies.

Google Maps

We use Google Maps to display our locations. When you consent, your browser contacts Google's servers, which may process your IP address and device information.
Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy: policies.google.com/privacy
Data may be transferred to the USA (Google LLC). Google participates in the EU-U.S. Data Privacy Framework.

YouTube

We embed YouTube videos using youtube-nocookie.com to reduce tracking. When you consent, YouTube may still collect viewing data and your IP address.
Provider: Google Ireland Ltd. (YouTube LLC)
Privacy policy: policies.google.com/privacy
Data may be transferred to the USA.

Google Fonts

We load fonts from Google Fonts to improve the visual appearance of our site. This sends your IP address to Google's servers.
Provider: Google Ireland Ltd.
Privacy policy: policies.google.com/privacy

5. Authenticated User Area

For registered students and administrators, our platform loads additional external content necessary for the delivery of our educational services:

• Vimeo — used to stream lecture videos (legal basis: contract)
• CKEditor CDN — used by administrators for content editing (legal basis: contract)

Processing in the authenticated area is based on the contractual relationship (Art. 31 nFADP) and does not require separate cookie consent.

6. Contact Form & Newsletter

When you submit our contact form or subscribe to our newsletter, we collect your name and email address solely to respond to your enquiry or send newsletters. This data is not shared with third parties and is deleted when no longer needed.

7. Your Rights (Art. 25–32 nFADP)

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data where legally permitted
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw cookie consent at any time via the "Cookie preferences" link in the footer. Withdrawal does not affect prior processing.

To exercise these rights, contact us at [email protected].

8. Supervisory Authority

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):
www.edoeb.admin.ch

9. Data Security

We use HTTPS encryption for all data transmitted between your browser and our servers. Access to personal data is restricted to authorised personnel only.

10. Changes to This Policy

We may update this policy when our practices change. The date at the top of this page indicates when it was last revised.