Privacy Policy

This document describes the processing of Personal Data in connection with the Website operated under the name NORTHLINE — HR Operations & Advisory, including its contact facilities, enquiries relating to the Services and other interactions initiated through the Website. It does not replace the contractual data-protection provisions applicable to individual professional mandates.

1. Operator and Data Controller

The Website is operated by NORTHLINE — HR Operations & Advisory, under the responsibility of Aleksia Rabinovich (the Operator), who is the controller of the Personal Data described in this Policy, unless otherwise indicated.

Website: https://n-line.ch

Business address: Avenue Viollier 13, 1260 Nyon, Switzerland

Data-protection contact: legal@n-line.ch

2. Scope, Definitions and Applicable Legislation

This Policy applies to natural persons accessing or interacting with the Website (each a User), including persons submitting enquiries, requesting consultations or subscribing to communications, and persons contacting the Operator through any other Website facility.

For the purposes of this Policy:

Website means n-line.ch and the webpages, forms, content and associated functionality made available under that domain.
Operator means the person responsible for the Website, as identified in section 1.
User means a natural person who accesses or interacts with the Website.
Personal Data means information relating to an identified or identifiable natural person.
Processing means any operation involving Personal Data, including collection, recording, storage, use, disclosure, modification and deletion.
Usage Data means technical information generated through the use of the Website, including connection, device, browser and security-related information.
Services means the Swiss HR operations and advisory services presented by the Operator through the Website. The scope and contractual conditions of any particular mandate are governed separately.
Third-Party Provider means an external organisation supplying hosting, communications, security, payment or other technical functionality used in connection with the Website or a related enquiry.

This Policy is established primarily in accordance with the Swiss Federal Act on Data Protection of 25 September 2020 (FADP; RS 235.1) and its implementing legislation. Other mandatory data-protection legislation applies only to the extent that the relevant processing falls within its scope.

3. Categories and Sources of Personal Data

The Operator processes Personal Data supplied voluntarily by Users or generated automatically in connection with the Website, according to the relevant functionality.

Depending on the interaction concerned, the categories of Data may include:

Identification and contact information: name, email address, telephone number where requested, organisation, professional position and other contact details communicated by the User.
Enquiry and correspondence information: selected enquiry subject, message content, relevant deadlines, communications and associated records.
Consultation information: the subject of a requested Individual Swiss HR Consultation, description of the circumstances, information concerning relevant documentation and, where an engagement is accepted, additional information strictly relevant to that engagement.
Subscription information: contact details and records required to administer an optional subscription to Northline communications and the User's associated choices.
Usage and security information: IP address, requested resources, date and time of access, browser and device characteristics, technical identifiers and security events.
Commercial and transaction information: information required to administer an accepted service, issue invoices, account for payments or comply with statutory recordkeeping obligations.
Application or partnership information: only where the corresponding Website functionality is made available, the information submitted through a spontaneous application or partnership enquiry, as further described below.

Certain consultation enquiries may concern matters such as sickness, accidents or other circumstances capable of revealing sensitive Personal Data. Such information is not required through the ordinary initial Website contact form. Where additional documentation is necessary, the Operator provides separate instructions.

The provision of information marked as mandatory in a Website form is necessary to process the corresponding request. Other information is optional. Failure to provide necessary information may prevent the Operator from assessing or responding to an enquiry. The Operator may also receive relevant contact information from a professional correspondent or from an organisation represented by the User, subject to applicable law.

4. Methods of Processing, Access and Security

Processing is carried out by electronic and, where appropriate, manual means, in accordance with the purposes stated in this Policy and with appropriate technical and organisational measures designed to protect Personal Data against unauthorised access, alteration, disclosure, loss or destruction.

Access is limited to the Operator and, where necessary, persons or external providers authorised to perform functions relating to Website operation, communications, administration or the relevant request. The use of a Third-Party Provider does not of itself entail the outsourcing of Northline's professional advisory services.

Personal Data may be processed at the Operator's place of business and in the locations of the technical providers involved. Foreign processing and disclosures are addressed in section 7.

5. Purposes of Processing and Detailed Information

5.1. Operation and Hosting of the Website

Purpose: To make the Website accessible, serve its content, maintain technical functionality, diagnose errors and ensure the continuity of operations.

Data processed: Usage Data and technical connection information, including IP addresses and request logs.

Provider category: Website hosting and technical infrastructure. The Website is hosted by Infomaniak in Switzerland. Website recovery copies are stored using Dropbox Business, for which the Operator reports European-region storage. Associated technical access or support may take place in other jurisdictions.

5.2. General Enquiries and Requests Concerning the Services

Purpose: To receive and assess enquiries, provide information concerning the Services, respond to correspondence and arrange subsequent contact where appropriate.

Data processed: Identification, contact, organisation and enquiry information supplied through the Website, together with the resulting correspondence.

The Website offers contact facilities for enquiries relating to the Operator's Swiss HR advisory and operations services. Submitting an enquiry does not in itself establish a professional mandate. Where an enquiry leads to an engagement, the processing necessary for that engagement is governed by the applicable arrangements and notices.

Technical processing: Website forms are administered within the Operator's WordPress installation. Communications and related copies are handled through its email infrastructure, provided by Infomaniak.

5.3. Individual Swiss HR Consultation Enquiries

Purpose: To determine the suitability and scope of a requested consultation, communicate with the prospective client and, where accepted, organise the consultation and associated administrative matters.

Data processed: Contact information, the Swiss HR subject selected by the User, the factual summary supplied, relevant timing information, and subsequent correspondence or documents where required.

The consultation facility relates to Swiss HR and employment-administration matters. An initial request is assessed before acceptance. Supporting documents are requested separately where necessary. The initial Website form is not intended for the transmission of identity documents, detailed medical records, personnel files or other unnecessary sensitive material.

The existence of this facility does not imply provision of advice on foreign employment-law systems.

5.4. Subscription to News and Editorial Communications

Purpose: To register and administer optional subscriptions and, when communication campaigns commence, provide Northline updates, N-journal publications and related Swiss HR insights.

Data processed: Subscriber identification and contact information, subscription preferences and records relevant to the subscription and its withdrawal.

Subscription is voluntary and independent of any request for Services. Subscriber information is administered through the Operator's Website-based contact-management system, FluentCRM. Each editorial or marketing email distributed under the subscription will provide an unsubscribe facility. An objection or other data-protection request may also be addressed to the contact specified in section 1.

Subscription information is not used to send communications unrelated to the purposes indicated when the subscription was collected.

5.5. Website Security and Protection Against Automated Abuse

Purpose: To identify malicious or automated traffic, prevent unauthorised activity and protect Website forms and infrastructure.

Data processed: Usage Data, IP addresses, browser and connection characteristics, security events and technical verification signals.

Third-Party Providers:

Wordfence / Defiant: Website firewall, security monitoring and related threat-detection functions. Certain technical information concerning suspected threats and visitor connections is transmitted to Wordfence infrastructure.
Cloudflare Turnstile: Verification of Website form interactions and protection against automated submissions. The service processes technical browser and connection information and may use browser storage in connection with verification. Cloudflare also describes certain processing for improvement of bot detection. Further details are available in Cloudflare's Turnstile Privacy Addendum.

These functions are intended to secure the Website. They do not constitute an engagement by these providers to deliver Northline's professional HR Services.

5.6. Display of Website Content

Purpose: To ensure the correct display and presentation of Website content.

Data processed: Technical browser and connection information, including IP addresses where transmitted through the retrieval of external resources.

The Website currently loads certain typography resources using Google Fonts, which may establish a direct connection between the User's browser and Google infrastructure. This section will be reviewed if the resources are subsequently hosted locally.

The Website uses Weglot to translate and display its content in other languages. Website content is processed by Weglot for this purpose. Loading certain translation-service resources also involves the processing of technical browser and connection information, including IP addresses. International disclosures are addressed in section 7.

5.7. Partnership Enquiries and Proposals

Purpose: To receive, examine and respond to requests for professional cooperation, commercial partnerships, referrals or other business relationships concerning the Operator's activities.

Data processed: The name and professional contact details of the correspondent, the organisation represented, the content and nature of the proposal, and relevant subsequent communications.

Collection method: Organisations may submit partnership proposals through the Website's existing general contact form. A dedicated partnership form is not required for this purpose. The Operator may maintain a proportionate record of proposals and resulting professional correspondence for assessment and reasonable follow-up. Submission does not establish a partnership or contractual obligation.

5.8. Spontaneous Applications

Purpose: To receive and assess spontaneous expressions of professional interest, determine whether a potential opportunity may exist, and communicate with the applicant concerning the application.

Data processed: Identification and contact details, curriculum vitae, qualifications, employment history, professional experience, availability and other information voluntarily provided for the assessment of an application.

Where the Website invites spontaneous applications, the Operator processes the information submitted through the designated application channel for the stated purpose. Unrelated or excessive personal information should not be included. Applications may be retained for a period justified by the assessment and any expressly agreed continuing consideration, subject to applicable law and deletion where the purpose ceases. The submission of an application does not establish an employment relationship or an obligation to offer a position.

5.9. Administration of Accepted Services and Payments

Purpose: To organise accepted consultations, administer contractual and accounting information, issue invoices and record or receive payments.

Data processed: Client contact information, service and invoice references, amount and status of payments, and related correspondence.

5.10. Professional Contacts and Enquiry-Based Business Development

Purpose: To maintain appropriate professional contact records arising from enquiries, consider potential professional relationships, and conduct proportionate follow-up concerning Swiss HR services relevant to the original contact.

Data processed: Professional identification and contact details, organisation information, enquiry subject and the limited correspondence or relationship history necessary for this purpose.

Where a User contacts the Operator in a professional capacity, relevant information may be retained in the Operator's business-contact records for as long as there is a justified and continuing relationship or prospecting purpose, subject to periodic review and applicable law. Submission of an enquiry does not automatically constitute consent to a newsletter or to unrelated electronic marketing. Optional editorial subscriptions are governed separately by section 5.4. The User may object to further direct commercial contact by notifying the Operator.

6. Cookies, Similar Technologies and Technical Logs

The Website and certain integrated technical services may use cookies, browser storage or other technical identifiers where necessary for security, functionality or other disclosed purposes. Further information concerning these technologies, their purposes and available controls is provided in the Website's separate Cookie Policy.

In particular, anti-bot verification and externally loaded resources may involve interaction with Third-Party Providers. Server logs may record technical events relevant to operation, maintenance and security.

The Operator assesses technologies requiring a distinct notice, user choice or consent under applicable law. Where optional tracking technologies or an analytics service requiring additional controls are introduced, the relevant information and mechanisms will be made available as required.

7. Recipients and International Disclosure of Personal Data

Personal Data are disclosed to external recipients only where necessary for the purposes set out in this Policy, including providers of hosting, communications, website security, data storage and, where enabled, payment or translation functionality.

Relevant current categories and providers are identified in section 5. Where required by law, disclosure may also take place pursuant to a binding legal obligation or to establish, exercise or defend legal rights; this is not a statement that consultation information is routinely sent to public authorities or external advisers.

Processing takes place principally in Switzerland. Personal Data may also be disclosed to recipients in the European Union / European Economic Area (EU/EEA) and the United States of America (USA) in connection with relevant technical providers.

Where a destination or recipient is recognised as providing an adequate level of protection under Swiss law, disclosure is governed by that determination. Where adequacy does not apply, disclosure must be supported by appropriate safeguards under Article 16(2) FADP or an applicable exception under Article 17 FADP.

8. Retention of Personal Data

Personal Data are processed and retained for the period necessary to fulfil the purpose for which they were collected, taking into account the nature of the request or relationship and any applicable legal, contractual, evidentiary or accounting requirements.

In particular, enquiry records are retained for the period necessary to assess and respond to the request and, where justified, document the correspondence. Records concerning an accepted consultation may be retained for longer where necessary to document the Services provided, establish the scope of advice or preserve evidence relevant to potential claims. Unnecessary or duplicate information is removed when no longer required.

Subscription records are maintained while the subscription remains active. Following withdrawal, the Operator may retain limited information where necessary to honour the User's choice or satisfy a justified legal requirement.

Spontaneous application information, when applications are invited or submitted through an authorised channel, is retained for the duration justified by the assessment of the application and any permitted continuing consideration. Partnership proposals and related professional correspondence are reviewed according to their ongoing relevance and any justified business purpose.

Technical logs, temporary records and recovery copies are retained according to separate, proportionate operational or security purposes. Deletion of information from an active system may not immediately remove it from restricted backup copies, which remain subject to their own recovery and retention cycles.

Where a statutory obligation, dispute or other lawful ground requires preservation for a longer period, relevant information may be retained to the extent necessary.

9. Rights of Users Under Swiss Data-Protection Law

Subject to the conditions and limitations of the FADP, a User may exercise the following rights in relation to Personal Data concerning that User:

Access: to obtain information regarding the processing of Personal Data.
Rectification: to request correction of inaccurate Personal Data.
Objection and cessation: to object to unlawful processing or request that processing or disclosure cease where the applicable requirements are met.
Erasure: to seek deletion or destruction of Personal Data where legally justified, subject to applicable grounds for continued retention.
Data portability: to request delivery or transfer of Personal Data where the statutory conditions apply.

Where Processing is based on consent, consent may be withdrawn subject to applicable law. Requests must be addressed to the Operator at legal@n-line.ch. The Operator may require information necessary to verify the requesting person's identity and protect the rights of other persons.

Requests are examined and answered within the periods and according to the procedures prescribed by applicable law. Rights may be subject to statutory restrictions, confidentiality duties, justified legal claims or other lawful grounds for continued Processing.

Where other mandatory data-protection legislation applies to a particular processing activity, any additional rights and disclosures required by that legislation remain unaffected.

10. Additional Information Concerning Processing

Information Concerning Third Parties

Where a User provides Personal Data concerning another person, the User should ensure that the disclosure is lawful and relevant to the stated request. The Operator may request that unnecessary or inappropriate material be removed or submitted through another channel. This provision does not relieve the Operator of its own duties under applicable data-protection law.

Requests From Competent Authorities and Legal Proceedings

Personal Data may be retained or disclosed where required by applicable law, a lawful request of a competent authority, or where necessary to establish, exercise or defend legal rights. Such disclosure is subject to the applicable legal requirements and is not part of the ordinary provision of Swiss HR consultation services.

Additional Notices

Where a specific Website facility requires information beyond that contained in this Policy, further information may be provided at the relevant collection point or through a separate notice.

11. Amendments to This Policy

The Operator may amend this Policy to reflect changes in the Website, associated processing activities, applicable legal requirements or the providers involved. The current version and its date of revision will be made available on the Website.

Last updated: 16 October 2026