Online Privacy Notice Template for Switzerland

An Online Privacy Notice is a fundamental legal document that every organization operating a website or online service in Switzerland must have in place. Under the Swiss Federal Data Protection Act (FADP/DSG), which underwent significant modernization in 2023, you're legally required to provide transparent information about how you collect, process, and protect personal data from website visitors and users.

When do you need this document?

You need an Online Privacy Notice if you operate any website, mobile app, or online platform that collects personal data from users in Switzerland. This includes e-commerce sites that process customer orders and payment information, corporate websites with contact forms or newsletter subscriptions, service platforms requiring user registration, and any site using cookies or analytics tools. The requirement applies regardless of your organization's size or the volume of data you process. If you're a multinational company serving both Swiss and EU users, your privacy notice must address both FADP and GDPR requirements to ensure comprehensive compliance.

Key legal considerations

Your Online Privacy Notice must include several mandatory elements under Swiss law. You must clearly identify yourself as the data controller and provide contact information, including details of any appointed Data Protection Officer. The notice must specify the types of personal data you collect, both automatically (through cookies, server logs, analytics) and actively (through forms, registrations). You're required to explain the legal basis for processing under the FADP, detail the purposes for which you use personal data, and disclose any third-party processors or international data transfers. The document must also inform users of their rights, including access, correction, deletion, and data portability rights. Additionally, you must explain your data retention periods and security measures, and provide information about automated decision-making or profiling activities if applicable.

Legal requirements in Switzerland

Switzerland's FADP requires that privacy notices be easily accessible, typically through a clearly visible link on every page of your website. The information must be provided in a concise, transparent, and easily understandable format, avoiding complex legal jargon wherever possible. For international data transfers outside Switzerland, you must ensure adequate protection through adequacy decisions, standard contractual clauses, or other appropriate safeguards. If you process special categories of personal data (such as health information or biometric data), additional disclosure requirements apply. The law also mandates that you inform users about their right to lodge complaints with the Swiss Federal Data Protection and Information Commissioner. Organizations must regularly review and update their privacy notices to reflect changes in data processing activities, legal requirements, or business operations.