Privacy
What we do with your data – and what we do not.
The revised Data Protection Act requires that you understand who processes your data, for what purpose and on what basis. This notice covers the website and the LEHRWERK platform.
Who processes your data.
The controller within the meaning of Art. 5 let. j FADP is whoever decides on the purpose and the means of the processing.
For this website, for enquiries and for billing training companies, Mein Lehrwerk Eric is the controller.
For the content a training company records in LEHRWERK – topics, tasks, feedback, records, messages, portfolio – the training company is the controller. We process those data as a processor under Art. 9 FADP, on the company’s instructions and under the contract of use.
No data protection adviser under Art. 10 FADP has been appointed. The Act does not require one for a sole proprietorship of this size. Data-protection requests go to the same place as every other request.
- Controller
- Mein Lehrwerk Eric, sole proprietorship
- Represented by
- Ivan Eric, owner
- Address
- Zihl 2a, 6204 Sempach, Switzerland
- UID
- CHE-144.540.265
Who this notice applies to.
It applies to visits to https://meinlehrwerk.ch, to the portal https://portal.meinlehrwerk.ch and to correspondence with us, whether you are a vocational trainer, the owner of a training company or an apprentice.
It does not apply to third-party websites we merely link to. Their processing is governed by their own notices.
Where European data-protection law would exceptionally apply – for instance because a data subject is in the EU and we offer them goods or services in a targeted way – we also observe the principles of the GDPR. Our offer is aimed at training companies in Switzerland.
Which personal data we process.
Personal data are all information relating to an identified or identifiable person (Art. 5 let. a FADP). We process only what the purpose requires.
We do not ask for sensitive personal data within the meaning of Art. 5 let. c FADP – such as health data or data about prosecutions. If a company files such information of its own accord in a task or a record, it remains under that company’s responsibility. We do not request it and we do not evaluate it separately.
- Website
- Technical log data, insofar as the hosting service produces them: truncated or full IP address, time, address called, referrer, browser and device. Plus the consent level you set and, if present, an access token.
- Contact
- Name, email address, content of the message, occupation, number of apprentices and reason, insofar as you write them to us. None of this is mandatory except the address we can reply to.
- Training company
- Company name, address, UID if stated, contact person, email or user number, chosen tariff, invoice address and payment status.
- Apprentices
- Name, apprenticeship year, occupation, username, assigned people in the company. No email address if access is via the login card.
- Training
- Topics, tasks, work done, feedback, records (often a photo), end-of-day note, messages, dates, training path, portfolio, optional practice (quiz, cards, situation check) and short audio recordings when someone wants to show and explain.
- Technical
- Login data, session tokens, chosen language, device type insofar as operation requires it. No credit-card data. We do not record video.
Why we need the data – and on what basis.
The FADP permits processing if it is lawful, the purpose remains recognisable and good faith is observed (Art. 6 and 31 FADP). In particular:
- Contract
- Setting up and running LEHRWERK, access, support, invoicing, adjusting the tariff to the number of active apprentices. The basis is the contract with the training company and its conclusion.
- Law
- Bookkeeping and retention under Art. 957 et seq. CO, in particular Art. 958f CO (ten years), and – where applicable – the VAT Act. Disclosure to authorities where a statutory duty exists.
- Overriding interest
- Security of the platform, investigation of abuse and errors, enforcement of claims, improvement of functions on the basis of anonymised or aggregated events. No advertising to third parties, no sale of addresses.
- Consent
- Measurement of page views only if you chose “Agree”. You may withdraw consent at any time. What was lawfully processed until then remains lawful.
- Company’s instruction
- Everything apprentices and trainers record in LEHRWERK we process on behalf of the training company. The legal basis towards the apprentice sits with the company – as a rule in the apprenticeship and the training mandate.
Who else sees anything.
We do not sell personal data and we do not pass them on for advertising.
In the product, the company and assigned people see the same thread: tasks, feedback, records. That is the purpose of LEHRWERK, not a disclosure to the outside.
Technical service providers – hosting, storage, email, possibly the bank’s payment traffic – see data only insofar as their mandate requires. With processors we conclude contracts under Art. 9 FADP.
Authorities and courts receive data if a statutory duty or an order requires us to provide them. We do not volunteer reports to third parties, for example to the vocational school or a professional organisation. The company decides that.
Where the data sit – and when they leave Switzerland.
Disclosure abroad is permitted only if the Federal Council finds an adequate level of protection or if suitable safeguards exist (Art. 16 and 17 FADP).
LEHRWERK application data – topics, tasks, feedback, records, portfolio – sit on servers in Switzerland.
Delivery of this website and the sending of email may run over infrastructure in Switzerland, in the EEA or, exceptionally, in another state. States with an adequate level of protection are listed in Annex 1 to the Data Protection Ordinance. If that level is missing, we rely on standard contractual clauses or another safeguard under Art. 16 para. 2 FADP.
Storage in the United States is not contemplated for the core training files. Should an auxiliary service see data there – for example an email delivery receipt – it happens only under the safeguards named above.
What this device stores.
No advertising tool, no third-party counter. What is set serves the running of the site or your express choice.
The website sets the token lw_einwilligung. It stores what you chose at the bottom of the page: the bookmark only, or agreement to measurement. It lasts one year, stays on this device, carries SameSite=Lax and goes to nobody else. The same state may also sit in the browser’s local storage.
“Bookmark only” means: we do not ask again. Page views are not counted. “Agree” means: once a counter is connected, it may record page views. Without that choice, no such script loads. No measurement service is connected at present.
The portal may store the chosen language as a cookie when you arrive with the sprache parameter. That too is a technical token, not a profile.
You change the choice at any time via “Bookmark” in the footer of this page. In the browser settings you can delete cookies; we will then ask again on the next visit.
Artificial intelligence in the background.
LEHRWERK can help with wording and suggestions – for example a task, an explanation or a flashcard. Decisions are taken in the company. The AI grades nobody, awards no mark and builds no league table.
There are no automated individual decisions that would have a legal effect on you or a similarly significant impairment (Art. 21 FADP). LEHRWERK does not trigger a qualification procedure, a transfer or the ending of an apprenticeship.
Input you entrust to an assistive function is processed only as far as the suggestion requires. It is not used to train a third-party model on your training files, insofar as we can prevent that contractually and technically.
We do not carry out profiling within the meaning of Art. 5 let. f FADP – the automated assessment of essential aspects of personality.
How long we keep data.
We store personal data only as long as the purpose or the law requires, and then delete or anonymise them.
- Enquiries
- Until the matter is closed, then as a rule twelve months. Longer only if a contract or a dispute arises from it.
- Contract and invoice
- Ten years after the end of the calendar year of the last booking (Art. 958f CO). That applies to business records, not to every photo in the portfolio.
- Portal account
- For as long as the training company uses LEHRWERK. After the contract ends we export, on request, what the company or the apprentice wants to take, and delete the rest within a reasonable period – subject to statutory retention.
- Portfolio
- At the end of the apprenticeship it belongs to the apprentice. They can take it as a link or a document. What the company still needs after that is for the company to decide.
- Logs
- Only as long as operation and security require, as a rule a few weeks.
- Consent
- One year, or until you change the choice or delete the token.
How we protect the data.
Art. 8 FADP requires appropriate technical and organisational measures. These include access control, transmission over encrypted connections, separation of each company’s tenancy and a limit on permissions to what a person’s role requires.
Apprentices sign in with the login card: username, password, QR code. The company can issue a new card in a minute. That replaces an email account and keeps the data in the company.
There is no absolute security. Whoever passes on a password or hands over a card opens the access. In the event of a data loss that is likely to result in a high risk to personality, we notify the people concerned and the FDPIC insofar as Art. 24 FADP requires it.
What you can require.
The FADP gives every data subject rights. We meet them within 30 days (Art. 25 para. 7 FADP). Information is as a rule free of charge.
If your request concerns data a training company holds in LEHRWERK, go to the company first. It is the controller. We help it with disclosure, correction or deletion.
- Information as to whether we process personal data about you and, if so, which (Art. 25 FADP).
- Correction of inaccurate data and completion of incomplete data.
- Release of your data in a common electronic format, or transfer to another controller, insofar as the processing is automated and you disclosed the data or they come from the performance of a contract (Art. 28 FADP).
- Deletion or restriction, unless a statutory retention ground or an overriding interest stands in the way.
- Objection to processing based on an overriding interest, and withdrawal of consent with effect for the future.
- Complaint to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Berne.
When the data subject is an apprentice.
Many people who use LEHRWERK are young. The apprenticeship gives the company the right and the duty to lead the training – not us the right to address the person for advertising.
We do not use apprentices’ data for advertising, for a ranking or for a grade. There is no league table and no points visible outside the company.
Photos and audio recordings serve as evidence towards the company: task, carry out, show, feedback. They are training records, not a publication. Sharing outwards – for example a portfolio link after the apprenticeship – is the apprentice’s decision.
If the apprentice is a minor, data-protection requests towards us are as a rule made by the legal representative, insofar as civil law so provides. Towards the training company the rules of the apprenticeship contract and of vocational education apply.
If this notice changes.
We adapt this text if the law, our offer or the technical processing changes. The version that stands on this page at the time of the processing applies.
A material change – for example a new recipient abroad or a measurement service – will be shown here. We will then obtain consent to measurement again, insofar as the law requires it.
As of 13 September 2026. The legal basis is the Federal Act on Data Protection (FADP) of 25 September 2020, in force since 1 September 2023, and the related ordinance (DPO).