// Legal

Privacy Policy

Last updated: September 2026. This policy explains what personal data mytochi.com processes, why, and what your rights are. It is written to describe what actually happens, in plain language.

1. Who is responsible

Responsible for data processing on this website (the controller) is:

mytochi by Chiara Breuer
Höhenweg 23
8032 Zürich, Switzerland
Email: info@mytochi.com

2. The short version

3. Hosting and server logs

This website is hosted by Infomaniak Network SA, Geneva, Switzerland. All data described in this policy is stored on Infomaniak servers in Switzerland. When you visit the site, the hosting infrastructure processes technical connection data (such as IP address, date and time, requested page) in server logs for security and operation. This is based on our legitimate interest in running the site securely.

4. Assessments you take as an individual

If you take one of our assessments as an individual, we process: your answers, the option that a situation did not occur, timestamps, computed scores, and a randomly generated session identifier. Taken anonymously, we do not ask for and do not store your name, email address, or any other identifying data.

Your answers describe your self-reported experience and are therefore treated as sensitive personal data. Legal basis: your explicit consent, which you give before starting (Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR; Swiss FADP). You can stop at any time; if you leave early, only the answers given until then are stored.

Purpose: computing and showing you your results, and improving the scientific quality of our instruments (for example item statistics). Results of anonymous sessions are shown through a one-time link that invalidates itself after the first visit. We cannot link an anonymous session to you as a person.

5. User accounts for individuals

If you create an account to keep your results, we additionally process: an identifier you choose for logging in (a real name is not required), your password in hashed form only, your email address (sign-in, recovery, contact), and the demographic details birth year, gender, country, and highest education, plus optionally city, employment status, and a mobile phone number (the phone number is used only for password recovery and human verification).

The demographic details are used exclusively in anonymized statistics, for example to develop norm values, and never appear next to your results or your login. Your account links your assessment results to your login so you can revisit them and see your history across measurements. Legal basis: performance of the account relationship you request, and your consent for the assessment content itself.

You can delete your account at any time. Your results are then irreversibly detached from the account and retained in anonymized form for the scientific quality of our instruments; after deletion, they can no longer be linked to you.

6. Assessments run by organizations

When an organization runs one of our assessments among its members, mytochi processes the answers on behalf of that organization, which is the controller for this data. To administer the assessment, the organization provides the participant data needed for it, such as names, email addresses, or organizational attributes like department, function, or site; identification of participants happens on the organization's side and for its purposes. Answers are stored pseudonymously; reports towards the organization show aggregated results, and small groups are suppressed to protect individuals. Details are governed by the agreement with the respective organization; questions can be directed to your organization or to us at info@mytochi.com.

7. Contact

If you contact us by email or through the contact form on this website, we process your name, your email address, and the content of your message to answer you. Messages sent through the contact form are stored on our servers in Switzerland and forwarded to our mailbox. If you optionally leave an email address to be notified when report content is unlocked, we store it for that notification and do not use it for anything else.

8. What we do not do

We do not sell or share personal data, do not use advertising or tracking services, do not profile visitors, and do not transfer the data described here outside Switzerland. Fonts are served by your own device, not by an external provider.

9. Retention

Anonymous assessment data is retained as long as it is needed for the purposes above. Server logs are retained according to the hosting provider's operational periods. Emails are kept as long as needed to handle your request and applicable retention duties.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability where applicable, and to withdraw consent with effect for the future. Contact: info@mytochi.com. Please note: because anonymous sessions are not linked to your identity, we may be unable to locate your specific data unless you can provide your one-time results link. If you have an account, you can exercise most of these rights directly by managing or deleting your account. You also have the right to complain to a supervisory authority (in Switzerland: the FDPIC; in the EU: your local data protection authority).

11. Changes

We will update this policy when the platform changes, for example when user accounts are introduced. The date above shows the current version.