Privacy policy

Data controller

Ornella Keller is the controller of the personal data received through this site, within the meaning of the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR).

What data is collected

This site has two doors. The contact form is open to anyone; the patient area, described below, opens only with an account I create myself. There is no open registration, and no health questionnaire is put to anyone.

The contact form collects your name, your email address, the language and type of consultation you would like, and the content of your message. This is sent straight to my mailbox: it is not recorded in a database on this site.

The form asks for no health information. It explicitly asks you not to describe your symptoms there — we discuss those in consultation, in a setting suited to it.

The patient area

The patient area is for the people I work with. I create the account myself and hand you its credentials; there is no way to sign yourself up from the site.

It holds your email address, your password as an encrypted fingerprint — never in clear — the sessions open in your browser, the language you read your area in, and the first name, surname, telephone number, photograph and notes I keep for my own follow-up.

To those are added the recipes I assign to you, the note I attach to each one and the day it is meant for.

Those assigned recipes are health data. A recipe chosen for you says something about your digestion, your intolerances or your condition, even where no field carries that name; my follow-up notes say it more plainly still. I treat them as such.

I may also record your sex in the sense the formula uses, your date of birth, your height, your weight, your activity level and the date of those measurements, in order to estimate a daily energy reference. These are health data. They help me prepare your plans: neither the measurements, nor the reference drawn from them, nor the calorie values of dishes appear in your space.

If you ask for a new password, a single-use link is emailed to you. Only its fingerprint is kept, never the link itself: it stops working as soon as it has been used, and in any case after a short while.

What is not in place yet

I would rather write down what is missing than promise what does not exist. Four safeguards that an area handling health data must offer are not in place today: explicit consent is not taken when the account is opened, the data is not encrypted at rest, no retention period has been set, and hosting is guaranteed neither in Switzerland nor in the European Union.

That is why the patient area is in use with test accounts only: no real record is held in it. This page will be corrected as each of those four points is settled, and not the other way round.

Technical logs

Like any website, the server records technical logs: IP address, date and time of the request, page visited and browser type.

These logs serve only the security and correct operation of the site. They are kept for a limited period and then deleted.

Cookies and analytics

This site uses no advertising cookie, no tracker and no profiling.

Traffic is measured with Cloudflare Web Analytics, a cookieless tool that counts page views without identifying you, without following you from one visit to the next and without building a profile.

No consent is therefore required and no banner is imposed on you.

Purpose and legal basis

Your data is used only to answer your enquiry and, where relevant, to arrange an appointment.

The data in the patient area serves only the support I give you: sending you the recipes and the plan we agreed together, and keeping from one consultation to the next what you have told me.

Processing rests on your own decision to make contact and on the legitimate interest in replying to it. The legal basis for processing health data is explicit consent — which is exactly what is missing today, and why the area serves test accounts only.

Hosting and place of processing

The site is hosted by Cloudflare, Inc. and served from its global network. Messages sent through the form are delivered by Resend, Inc. to my mailbox.

Both providers are established in the United States: the data you send through the form therefore travels outside Switzerland and outside the European Union. They act only on my instructions and do not use your data for their own purposes.

The patient area's database is hosted by Cloudflare as well. I therefore cannot guarantee today that it stays in Switzerland or in the European Union: that is one of the four points above.

If you would rather avoid that transfer, you can write to my email address directly or call me.

Sharing with third parties

Your data is never sold, rented or passed to third parties for commercial purposes.

The only recipients are the technical providers named above, strictly for hosting the site and delivering your message.

Retention

Messages received through the form are recorded in no database: they arrive in my mailbox, stay there for as long as answering your enquiry requires, and are then deleted.

The patient area's data, by contrast, is kept in a database, and no retention period has been set for it yet: that is one of the four points above. Reset links, for their part, expire on their own.

You may ask me at any time to close your account and delete what it contains.

Your rights

You may at any time ask for access to your data, its correction or its deletion, or object to it being processed.

Simply write to the address below. I answer as quickly as I can.

Updates to this policy

This policy was revised when the patient area went live. It will be revised again with each new feature, and as soon as any of the four safeguards above is in place.

It describes what the site does today, not what it will do: if a protection is not written here, it does not exist yet.