Privacy Policy

We take the protection of your personal data seriously and treat your data confidentially, in accordance with the revised Swiss Data Protection Act (revFADP) and — for visitors from the EU/EEA — the GDPR.

This policy explains what personal data we collect on drholger.com, how we use it, and what rights you have. drholger.com is a pure information and content site: there is no shop, no payment function and no order processing.

Personal data is any data that can identify you personally (e.g. name, email address, IP address).

The controller for data processing on this website is CuraCap Schweiz GmbH (brand The HealthChemist, the personal brand of Dr. Holger Scheib), Schänzlistrasse 37, 2545 Selzach, Switzerland, UID CHE-158.321.901, email info@drholger.com.

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Each visit involves the processing of technical log data (IP address, date/time, requested URL, HTTP status code, transferred data volume, referrer, user agent).

Delivery primarily takes place via the Vercel Edge Network. In individual cases, data may be transferred to third countries (in particular the USA). Legal basis: Art. 6(1)(f) GDPR or the overriding legitimate interest in stable, secure delivery.

This website only uses technically necessary storage: your language preference and consent status are stored in your browser's local storage. This storage is required to operate the website and takes place without consent.

Audience or behaviour measurement (e.g. Google Analytics, Meta Pixel) is currently not active; for that reason no cookie banner is shown at present. Should we use such services in the future, this will happen only after your explicit consent via a cookie banner shown at that time; this policy will be updated beforehand. You will then be able to withdraw any given consent at any time with future effect via the "Cookie settings" link in the footer.

If you contact us by email, your details (name, email address, content of the enquiry) are stored to process your request and for possible follow-up questions. Legal basis: Art. 31(2)(a) revFADP or overriding legitimate interest; for EU visitors additionally Art. 6(1)(b) and (f) GDPR.

Contact form: If you use the contact form, we process the details you enter (name, email address, your message) to handle your question, topic suggestion or collaboration enquiry. To organise our contacts, this data is stored on our behalf in our CRM system GoHighLevel (HighLevel Inc., Dallas, Texas, USA — "LeadConnector" platform) acting as a processor. Data is transferred to the USA. Legal basis: Art. 31(2)(a) revFADP; for EU visitors Art. 6(1)(b) and (f) GDPR.

Error diagnostics (Sentry): To ensure the technical operation of our form endpoint, we use the error-diagnostics service Sentry (Functional Software, Inc., San Francisco, USA). In case of technical errors, error messages and technical metadata are processed server-side; the service is configured so that personal data is not transmitted by default. Legal basis: overriding legitimate interest in stable, error-free operation (Art. 31(2)(a) revFADP or Art. 6(1)(f) GDPR).

Retention: Your enquiry data is deleted as soon as it is no longer required for processing. Mandatory statutory retention obligations (in particular Art. 958f of the Swiss Code of Obligations) remain unaffected.

For consistent presentation, we embed fonts from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland), which are loaded directly from Google servers when the page is accessed. Google thereby receives your IP address and technical device information; a transfer to third countries (in particular the USA, Google LLC) may take place. Legal basis: overriding legitimate interest in a consistent, performant presentation (Art. 31(2)(a) revFADP or Art. 6(1)(f) GDPR).

If you join the book waiting list or, later, the newsletter, we process your email address and your chosen language. Sign-up uses a double opt-in procedure: after you submit the form you receive an email containing a confirmation link. Consent is only given once you click it.

The confirmation link contains a cryptographically signed token holding your email address, the purpose of the sign-up and an expiry date (seven days). It is not stored in a database. The confirmation and its timestamp are recorded in the contact record so that consent can be evidenced.

The legal basis is your consent (Art. 6(1)(a) GDPR; Art. 6 revFADP). You may withdraw it at any time with future effect — via the unsubscribe link in every email or informally to info@drholger.com. The lawfulness of processing carried out until then remains unaffected.

Sending and administration are handled by our processor GoHighLevel (LeadConnector); see the section on contacting us. After a withdrawal the data is deleted; a record of the consent and the withdrawal may be retained to meet accountability obligations.

To slow down automated bulk requests to our forms, we briefly count the number of requests per IP address. The IP address is held only in the volatile memory of the serverless function and is not stored permanently.

The legal basis is our legitimate interest in the security and availability of this website (Art. 6(1)(f) GDPR).

You have the right to information (Art. 25 revFADP / Art. 15 GDPR), data delivery and portability, rectification and erasure. Where processing is based on consent, you may withdraw it at any time with future effect.

An informal message to info@drholger.com is sufficient to exercise these rights. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern).

Where we transfer personal data to the USA or other third countries (see the sections above), we base the transfer on the respective provider's certification under the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework and/or on the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR; Art. 16(2)(d) revFADP).

We use TLS encryption (HTTPS) for all data transfers. Personal data is stored only for as long as required for the stated purposes or as required by statutory retention obligations.

The current version of this privacy policy published on this page is authoritative.