Does your website meet the Swiss nFADP?
Since September 2023, Swiss law requires you to inform your visitors and obtain their agreement before measuring them. We look at your page the way an attentive visitor would, or an authority.
A technical observation of what is visible on your public page. This is not legal advice and does not replace review by a lawyer.
Informing visitors
The document explaining what data you collect, why, and how to exercise one's rights. The most elementary nFADP obligation.
The identity of the website publisher: who is responsible for what the visitor reads and the data they entrust.
A person must be able to request access to their data or its deletion, which requires knowing whom to write to.
Trackers & consent
As soon as a non-essential tracker loads, the visitor must be able to accept or refuse, before measurement begins.
The measurement and advertising tools present on the page. Those hosted outside Switzerland involve a transfer that must be declared.
Cookies set before any interaction: a session cookie is legitimate, a measurement cookie is not.
Transfers abroad
Google Fonts loaded remotely sends every visitor's IP address to the United States. Hosting the fonts removes the problem.
Videos and maps often set cookies as soon as they display. YouTube offers a no-cookie mode; a click-to-load thumbnail is better still.
Handy against spam, but it sends behavioural data to Google, to be mentioned in your policy.
Security of exchanges
The nFADP requires appropriate security: transmitting a form in clear text is not part of it.
A form that collects data should recall how it will be used and link to the privacy policy.