Since September 1, 2023, the new Federal Act on Data Protection (nFADP) has applied to every Swiss company that processes personal data. Many SME owners think it only concerns large companies. In reality, the contact form on your website is enough to make it apply to you.
Does your website collect personal data?
Almost certainly. These are the most common elements that do:
- A contact or quote request form (name, email, phone).
- A visitor analytics tool such as Google Analytics.
- An embedded YouTube video, Google Maps map or social media button.
- A newsletter sign-up.
- A chat or WhatsApp button that passes on information.
The 5 points to check on your website
- A privacy notice in plain language, accessible from every page (usually in the footer).
- Which data is collected, why, and how long it is kept.
- Which providers receive the data (hosting, email tool, analytics) and in which countries.
- How visitors can request access to or deletion of their data.
- A complete legal notice: company name, address, UID number and contact details.
US tools transfer data outside Switzerland.
Analytics, fonts loaded from Google, embedded videos: every external tool must be listed. The fewer there are, the simpler compliance becomes, and the faster the website.
Is your website up to date?
We check your website for free (speed, SEO, mandatory information) and tell you what to fix first.
A compliant website is also a faster website
Removing unnecessary third-party tools improves both compliance and loading speed, an important factor for Google. That is why we host our websites cleanly, with a minimum of external scripts and a privacy notice that matches what the site actually does.
This article gives practical guidance and is not legal advice. Sources: Federal Act on Data Protection (FADP), Federal Data Protection and Information Commissioner (FDPIC).