Privacy policy

swan-id.com and network.swan-id.com — version 1, draft of 20 September 2026, to be reviewed by a lawyer.

Working translation of the French text. In case of divergence, the French version prevails.

1. Controller

SWAN-ID, Anas Lahras, Rue des Hirondelles 42, 2502 Bienne — contact@swan-id.com.

Reference: Federal Act on Data Protection of 25 September 2020 (FADP), in force since 1 September 2023.

2. What we collect, and why

Newsletter. Your email address and the date of your consent. To send you new articles and episodes. Basis: your consent, withdrawn in one click from every message.

Fact sheets and documents received by email. Your email address, the document requested, the page you requested it from. To send it to you, and to know which content is useful. Basis: your request.

Contact, proposal and Club waiting-list forms. Your first name, your email address, your message, the offer or profile you indicated, the page you came from. To answer you and prepare a proposal. Basis: your request, then the contract if one is concluded.

CV Generator. The information you enter to produce your CV — career, education, skills, contact details — and your delivery email address. To produce and deliver the document. This information is deleted 48 hours after delivery. Basis: the contract.

The writing of the text calls on the service of OpenAI, called by our server. What is transmitted is the information you entered in the form, including the contact details that will appear on the CV — name, email address, telephone, postal address, LinkedIn profile — since the document carries them. Neither your payment, nor your order identifier, nor any other data of your file is transmitted.

Orders and payments. Your email address, the product, the amount, the date, the payment identifier. To perform the order and keep the accounts. The payment itself is processed by Stripe: we neither see nor keep your card number. Basis: the contract, then the legal obligation to keep accounting records.

Courses and services. The information of the proposal and the invoice, the level assessments, the documents you entrust to us for a service. To perform the contract. Basis: the contract.

Technical data. The server log (IP address, page requested, date, browser) and usage events (page viewed, tool used, episode played). An event records the name of the action, the page, the campaign you came from if you came from one, and technical values — a kind of form, a file format. It records no IP address, no name and no email address, and the session identifier appears there as a digest, which does not lead back to a person. For the security and the proper working of the sites. Basis: our legitimate interest in running and protecting the sites.

The school converter processes the date of birth entered for the calculation only; it is neither stored nor logged.

3. Cookies

The sites use a session cookie, necessary to their working (forms, orders), and a language cookie on network.swan-id.com. No advertising cookie, no third-party tracker. The measurement consent cookie, if set, lasts 12 months. The session cookie is set on the domain swan-id.com and holds for both sites.

4. For how long

• Information entered in the CV Generator: 48 hours after delivery.
• Contacts and proposals: 2 years after the last exchange, deleted then by the scheduled task, or earlier at your request.
• Waiting list and newsletter: until you unsubscribe or ask for erasure; a sign-up left without consent is erased after 30 days.
• Orders and invoices: 10 years, the legal retention period for accounting records.
• Application logs: 14 days, by daily rotation.
• Documents entrusted for a service: the duration of the service, then returned or deleted at your request.

Reference: art. 958f CO (keeping of books and accounting records for ten years).

5. Who has access

Your data is processed by SWAN-ID and by the providers necessary to the service:

• Infomaniak Network SA, Geneva — hosting of the sites, of the database and of email sending. Data in Switzerland.
• Stripe Payments Europe, Ltd., Dublin — processing of card and Twint payments. Stripe processes your payment data under its own policy.
• OpenAI — writing of the text of the CV Generator, for the information entered in the form only.

No data is sold or passed on for advertising purposes. For a company service, the practitioners we associate with an assessment are bound by the same confidentiality as we are.

6. Transfer abroad

The data is hosted in Switzerland. A transfer out of Switzerland occurs only for payment (Stripe, Ireland, a country recognised as providing adequate protection) and for the writing of the CV Generator text, entrusted to OpenAI.

7. Your rights

You may ask for access to the data we hold about you, its rectification, its erasure, or object to a processing, by email to contact@swan-id.com. We answer within thirty days. You may also address the Federal Data Protection and Information Commissioner (FDPIC).

For the newsletter, the unsubscribe link is in every message.

8. Security

The sites are served over HTTPS, administration access is protected by a second factor, delivered documents go through signed links with a limited lifetime, and the backups are encrypted and kept in Switzerland.

9. Changes

This policy may be amended; the version in force is the one published on the sites, with its date. Important changes are announced to the newsletter subscribers.

10. Language

This policy exists in French, English and German on network.swan-id.com. In case of divergence, the French version prevails.