Privacy policy

1. Collected data

We collect only the data required to process your requests: identity, contact details, and administrative information shared through forms.

Card payment data is not stored on Dossiora. Transactions are processed through Stripe on secure infrastructure.

2. Purposes

Data is used exclusively to manage your support, case follow-up, and communication related to your request.

Purposes also include platform security (fraud prevention, security logging, abuse protection) and compliance with applicable legal obligations.

3. Legal basis and minimization

We apply data minimization: only strictly necessary information is requested. Processing is based on service execution, your consent when required, and legal obligations (nLPD / GDPR depending on context).

4. Security measures

We implement enhanced technical and organizational measures:

• Encryption of data in transit (TLS/HTTPS)
• Restricted data access based on roles and operational need
• Abuse protection (rate limiting, anti-bot checks, security logs)
• Technical backups and integrity checks
• Regular review of security configurations

5. Retention

Information is retained for the time needed to process your request and then deleted according to our internal procedures.

Some data may be retained longer where required by law (accounting, tax obligations, legal defense).

6. Your rights

You may request access, correction, or deletion of your data. Dedicated form: Manage my personal data.

You can also request restriction of certain processing, object to non-essential communications, and request details on data usage.

7. Processors and transfers

We only use service providers necessary to operate the service (hosting, payments, communication), under contractual confidentiality and security obligations. For international transfers, appropriate legal safeguards apply.

8. Incident notification

In the event of a security incident involving high risk to your rights and freedoms, we apply a response, remediation, and notification process to authorities/data subjects within applicable legal deadlines.

9. Personal data contact

Data controller
AccessCrea, Lion (Entreprise individuelle)
Address: Rue de Carouge 74, 1205 Genève, Suisse
UID: CHE-467.588.971
Contact: privacy@dossiora.ch
Public verification: https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-467.588.971

10. Automated service processing

Some service steps are automated (case classification, checklists, reminders). Sensitive cases are subject to enhanced review. The service does not constitute legal advice from a lawyer.

11. Cookies and similar technologies

We may set cookies or use browser storage for service operation and security, and—with your explicit consent only—for audience measurement or marketing.

• dossiora_lang — stores display language (fr, de, it, or en) for up to 12 months; basis: operating the multilingual site (legitimate interest / strictly necessary technical measure).
• ads_cookie_consent — stores your choices on non-essential cookies (analytics, marketing) for up to 12 months.
• Browser session cookie: may be used for form security (CSRF), client area, or a temporary session; duration limited to the session or server configuration.

You can clear or block cookies in your browser settings. Refusing strictly necessary cookies may degrade or prevent some features (language, secure login, client area).