Data protection

Privacy policy

We, Meliora Academy - Zsofia Lazar, Elfenweg 15, 8038 Zurich, operate the website www.meliora-academy.ch and are the provider of the services offered on the website. We are subsequently deemed to be responsible for the collection, use and processing of your data.

In the following, we will show you whether and how we process your data:

Data processing, storage and deletion

We only process personal data that we collect directly via our website, the associated applications, via external platforms, via so-called "landing pages" or as part of the business relationship with our customers and other business partners. Processing only takes place if explicit consent or a legal basis exists, for example for contract processing, to fulfill legal obligations or due to legitimate interests on our part.

Within the scope of the consent you have given, we will only process your data within the limits of this consent, unless one of the following legal bases applies. We expressly point out that you can revoke your consent at any time, whereby an already completed - lawful - processing action is not affected by the revocation.

The following legal bases come into question:

• Consent of the data subject;
• Fulfillment of the contract with the data subject as a contracting party or necessary pre-contractual measures at the request of the data subject;
• Fulfillment of necessary legal obligations of our company;
• Performing or exercising a task in the public interest;
• Legitimate interests of our company, provided that the interests of the data subject or their fundamental rights do not prevail.

We delete personal data as soon as the purpose of its collection has been fulfilled and there is no need for its further storage. However, there are cases in which we are legally obliged to store data for a longer period of time. This applies in particular to provisions of Swiss or European legislation in areas such as contract and tax law and commercial accounting. For example, business documents, contracts and accounting records must be stored for a period of 10 years. We block personal data that is stored exclusively for legal reasons and is no longer required for the provision of our services and only use it for accounting and tax purposes.

Disclosure to third parties

The use of third-party services may be necessary as part of order processing. It may be necessary to pass on data to external service providers in order to provide services in accordance with the contract. The legal basis for this data transfer corresponds to that of lawful processing and is explained in more detail in the previous section. We ensure through contractual agreements that the third parties commissioned with data processing comply with data protection regulations. In addition, in certain cases we may be obliged by official or court orders to disclose data to government agencies or third parties.

Provision of our services and creation of log files

As soon as you access our website, our system automatically collects and stores information in so-called log files. This involves the following information:

• Browser type and version
• Operating system
• IP address
• Internet service provider
• Date and time

The aforementioned data cannot be directly assigned to a person and is not merged with other personal data, but remains in our system. The collection and storage of this data in log files is based on the legitimate interests of our company, in particular ensuring the functionality and security of our services and their optimization. The log files are automatically deleted at the end of each session.

The collection and storage of your data in log files is essential for the operation of our website; it is therefore not possible to object to this process.

Cookies, tracking and other technologies

We use cookies and similar technologies on our website. Cookies are small text files that are stored by your browser and enable your browser to be uniquely identified when you visit our website again. They store and transmit display settings and login information in order to make our website user-friendly and secure. The use of cookies is based on the legitimate interests of our company to optimize our website.

You have control over the use of cookies: by adjusting your browser settings, you can deactivate or restrict the transmission of cookies and delete cookies that have already been saved at any time. Please note, however, that disabling cookies may limit the functionality of our services.

When you visit our website, you will be informed by a cookie banner, which you can use to give your consent to the use of cookies. This consent is the legal basis for the use of those cookies that are necessary for the full use of our services.

Tools, applications and other technologies used

Amelia

We use the WordPress plugin Amelia from the Serbian company Touch Me Soft doo, Velisava Vulovića street no. 18, Belgrade, for our services. For more information on Amelia's data processing, please refer to their privacy policy at: https://wpamelia.com/privacy-policy.

Cyon

Our website is hosted by cyon AG, Brunngässlein 12, 4052 Basel. The use of cyon's web hosting services is based on our legitimate interest in the secure, high-performance and reliable provision of our online offering.

For more information on data processing by cyon, please refer to their privacy policy at: https://www.cyon.ch/legal/datenschutzerklaerung.

Contact form

Our website has contact forms that you can use to get in touch with us. Among other things, the following data provided by you will be transmitted to us and stored: first and last name, telephone number, e-mail address, subject and message.

The information you send us is used solely to process your request/message. By sending the request/message, you consent to the data processing described (legal basis: consent). You can revoke your consent at any time, whereby processing that has already taken place is not affected by the revocation.

Stripe

We use Stripe on our website, from the company of the same name Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe is one of the payment tools we use. If you decide to use Stripe, the data you provide for payment will be transmitted to Stripe. The data may also be transferred to the USA.

The legal basis for the use of Stripe is your consent as the data subject. The basis for data processing and data transfer to the USA are so-called standard contractual clauses. Through these clauses, Stripe undertakes to comply with applicable European law and the level of data protection. This also applies if the data is processed in a third country, such as the USA.

Further information about Stripe: https://stripe.com/at/privacy.

Weglot

For the translation on our website we use Weglot from the company of the same name Weglot SAS, 7 Cité Paradis, 75010 Paris. You can find more information about Weglot at: https://www.weglot.com/privacy.

Right to information

As the data subject, you can request confirmation from us as to whether personal data concerning you is being processed by us. If this is the case, you have the right to access the following information:

• The purposes for which the personal data is processed;
• The categories of personal data that are processed;
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
• The planned duration of the storage of your personal data or, if this is not possible, the criteria for determining this duration;
• The existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing;
• The existence of a right of appeal to a supervisory authority;
• All available information about the origin of the personal data that was not collected from you;
• The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You also have the right to request information as to whether personal data concerning you is transferred to a third country or an international organization; in this case, you have the right to be informed of the appropriate safeguards in connection with the transfer.

Right to rectification and erasure

You have the right to obtain from us without undue delay the rectification and/or completion of inaccurate and/or incomplete personal data concerning you.

You also have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You withdraw your consent and there is no other legal basis for the processing;
• You object to the processing on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing or you object to the processing for direct marketing purposes;
• Your personal data has been processed unlawfully;
• The deletion of your personal data is necessary to fulfill a legal obligation;
• The personal data concerning you was collected in relation to information society services offered.

Right to restriction of processing

As the data subject, you have the right to request the restriction of processing if one of the following conditions is met:

• The accuracy of the personal data is contested. The restriction may be requested for the period of time that enables us to verify the accuracy of the personal data;
• The processing is unlawful and you request - instead of deletion - the restriction;
• We no longer need the personal data for processing, but you need it to assert, exercise or defend legal claims;
• You object to the processing.

If the processing of personal data concerning you is restricted, we may, with the exception of storage, only process the data with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of public interest.

If you have obtained a restriction of processing in accordance with the aforementioned conditions, you will be informed by us before this restriction is lifted.

Information and notification obligation towards third parties

If we have made your personal data public and are required by law to erase it, we will take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers and processors who are processing the data that you have requested the erasure by such controllers of any links to, or copy or replication of, that personal data.

We will inform all recipients to whom your personal data has been disclosed of any rectification or erasure of this data and of any restrictions on its processing, except in cases where this is impossible or involves a disproportionate effort. In such cases, we will endeavor to clearly communicate the reasons for non-disclosure and ensure that your rights are still protected.

Exceptions to the right to erasure

The right to erasure does not exist if the processing is necessary for the exercise of the right to freedom of expression and information and/or for the establishment, exercise and/or defense of legal claims.

Right to data portability

You - as the data subject - have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us to which the personal data have been provided, where the processing is based on consent or on a contract and the processing is carried out by automated means.

You also have the right to obtain that the personal data concerning you be transmitted directly by us to another controller, insofar as this is technically feasible. This must not adversely affect the rights and freedoms of other persons.

Right of objection

You - as the data subject - have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. An additional exception is processing for the establishment, exercise or defense of legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing for the purpose of such marketing. If you object to processing for the aforementioned purpose, we will no longer use your personal data for this purpose.

You have the right to withdraw your consent at any time. This revocation does not affect the legality of the - lawful - processing that has already taken place.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular at your place of residence (EU/CH), your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR or the FADP.

The competent authority for Switzerland is: Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Bern.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.

Meliora Academy, August 2025