☝ If you don't have a Privacy Policy yet, feel free to use Secfix template and tailor it according to your organization. You'll find the template under your Shared Drive or ask your Customer Success Manager.
Your privacy policy isn't just a legal requisite; it's a reflection of your company's commitment to data protection. Beyond meeting requirements, it should cultivate trust with your customers. So, don't just tick boxes. Try to create a clear and engaging policy that resonates.
Understand and craft your Swiss GDPR Privacy Policy
Build your Privacy Policy from Scratch: If you don't have a Privacy Policy yet, you can use Secfix template. We provide a GDPR and nFADP-compliant policy. You'll find this policy under your Shared Drive under the name "POL-23 GDPR Privacy Policy".
Adapting from GDPR: If you've got a GDPR-compliant policy already, it's almost directly transferable. The key difference is that the nFADP wants you to specify any countries receiving exported data.
Data Protection Advisor: Unlike the GDPR, the nFADP doesn't mandate a data protection officer. But, having an internal or external advisor is beneficial. This go-to person can liaise with the Federal Data Protection and Information Commissioner (FDPIC) and guide your company.
Align your privacy policy with the nFADP's legal standards
To ensure that your privacy policy complies with the legal requirements of the nFADP, the following information should be included:
Who's Responsible: Your company details and the data protection advisor (if you have one).
Exercising Rights: How individuals can request their data.
Data Types and Sources: The kind of data you gather and where it's from.
Purpose of Data Collection: Why you're collecting data and what tools you're using.
Who Gets the Data: Third parties accessing the data, especially noting countries where data's sent.
Retention Strategy: How long you'll keep the data and when it gets deleted.
Automation Details: If applicable, information about any automated personal decisions.
Publish your Privacy Policy
Spread the Word: Finally, make your policy visible. Share it widely on your site, in emails, apps, and more. Your effort in crafting a solid policy only pays off when people know about it.