Privacy Policy

This policy explains how we handle personal data when you visit lps-permits.ch, use our eligibility check, or become a client. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU GDPR.

1. Who is responsible

Lotti Lojacono Permit Services, Breitistrasse 27, 5614 Sarmenstorf, Switzerland. Contact for all data protection questions: info@lps-permits.ch.

2. What data we process and why

• Website visit. Our hosting provider processes technical data such as IP address, browser and the pages requested, to deliver and secure the site.
• Usage statistics. We measure which pages and buttons are used, with PostHog (EU servers). We do not use cookies for this. See section 4.
• Eligibility check. The answers you give (for example nationality, role, salary range, canton) and your email address. We use them to prepare your assessment, send it to you, and contact you about your enquiry.
• Account and cases. Name, email, password (stored in protected form), and the information and documents about the candidate that you upload for a permit application, such as passport data, contracts and diplomas. We use them to prepare and submit the application.
• Payments. Payments are handled by Stripe. We receive payment status and billing details, but never your full card number.
• Communication. Emails you send us and the emails we send to you.

3. Legal bases

We process data to perform a contract or take steps you request before one (cases, assessments), based on our legitimate interests in running and improving a secure service (statistics, security, follow-up of your enquiry), to meet legal duties (for example bookkeeping), and where required with your consent.

4. Statistics and first-visit source

We use PostHog, hosted in the EU, to count visits and clicks. It is set up without cookies. In addition, your browser stores a small record of how you first reached our site (for example the advertising campaign or referring website, and the first page you saw) for up to 30 days. If you later submit the eligibility check or create an account, we save this source together with your enquiry, so we can see which channels bring clients. You can delete this record any time by clearing your browser data, or ask us to delete it from our records.

5. Who receives your data

We use these service providers, who process data on our behalf:

• Vercel Inc. (USA) — website hosting
• Supabase (database and login)
• Stripe (payments)
• Resend (sending emails)
• Hostpoint AG (Switzerland) — domain and mailboxes
• PostHog (EU) — usage statistics
• Anthropic PBC (USA) — to generate the eligibility assessment, the answers you give in the check (without your email address) are sent to Anthropic’s AI service. Support letters for cases are drafted the same way, from the case details needed for the letter.

For permit applications we pass the necessary information to the competent authorities, such as the cantonal migration office. We do not sell personal data.

6. Transfers abroad

Some providers process data outside Switzerland, including in the USA. Where needed, we rely on an adequacy decision (for example the Swiss-US Data Privacy Framework) or standard contractual clauses to protect your data.

7. How long we keep data

We keep personal data only as long as needed for the purpose, or as the law requires. Business records are kept for the statutory period, generally ten years. Eligibility enquiries that do not lead to a case are deleted when no longer needed, and at the latest after 24 months.

8. Your rights

You can ask us for access to your data, correction, deletion, restriction of processing, a copy in a common format, or object to processing. Write to the address above. If you are not satisfied with our answer, you can complain to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, or to your local authority if the GDPR applies to you.

9. Security

We use encrypted connections and access controls, and we limit who can see case data. No online service is completely secure, so please share only the information that is needed.

10. Changes

We may update this policy. The version on this page applies, with the date shown above.