Last Updated: March 13, 2026
Introduction
MC-TERRA is committed to protecting your privacy and being transparent about how we collect, use, and secure your personal data. This privacy policy explains our practices regarding the processing of your information.
By accessing and using the MC-TERRA platform (mc-terra.ch), you accept the terms described in this policy.
Data Controller
Data Controller Information:
- Company: MC-TERRA
- Representative: Marta Coelho
- Address: Route de Gilly 30, 1180 Rolle, Switzerland
- Email: contact@mc-terra.ch
For any questions about how we process your data, please contact us at the address above.
Data Collected
We collect the following data depending on your use context:
Registration and Profile Data
- Full name, email address, phone number
- Residential location (to personalize services)
- Optional profile information (photo, bio, preferences)
- Preferred language (French, English, Portuguese)
Payment Data
- Payment card information (processed entirely by Stripe, we do not store it)
- Transaction history and invoices
- Billing address
Platform Data
- Emotional journal (free-form, confidential entries)
- Mood tracking and wellness data
- Browsing and usage history
- Progress in video courses and exercises
- Booking and workshop participation history
Communication Data
- Transactional emails (confirmations, password resets)
- Newsletter emails (sent via Resend)
- Support message content
Technical Data
- IP address
- Cookie and session identifiers
- Browser type and device information
- Pages visited and duration of visit
Authentication Data
- Email for magic link authentication
- Google ID (if using Google OAuth authentication)
Processing Purposes
Your data is used for:
- Service Delivery: managing your account, processing bookings, providing access to courses and exercises
- Payments and Invoicing: processing Stripe payments, generating invoices
- Communication: sending confirmations, account updates, newsletter content
- Service Improvement: analyzing usage to optimize user experience
- Security: detecting and preventing fraud, ensuring legal compliance
- Legal Compliance: meeting Swiss and GDPR legal obligations
Legal Basis
Processing of your data is based on:
- Contract: performance of service agreement (Article 6(1)(b) GDPR)
- Legitimate Interest: service improvement, security (Article 6(1)(f) GDPR)
- Consent: for newsletter and marketing emails (Article 6(1)(a) GDPR)
- Legal Obligation: retention of accounting and tax documents (Article 6(1)(c) GDPR)
Cookies and Tracking Technologies
We use the following cookies:
Essential Cookies (always active)
- Authentication Session: keeping you logged in
- CSRF Token: protection against CSRF attacks
- Language Preference: remembering your language choice
Analytics Cookies (consent required)
- Analysis of platform usage to improve services
You can manage your cookie preferences through your browser settings. Disabling essential cookies may limit platform functionality.
Data Sharing
Your data is shared with the following third parties only for the specified purposes:
Stripe
- Purpose: payment processing
- Data: transaction amount, currency, billing address
- Sensitive Data: you authenticate directly with Stripe (MC-TERRA has no direct access)
- Protection: Stripe is GDPR compliant and PCI certified
Google OAuth
- Purpose: optional authentication
- Data: email, name, profile photo (if authorized)
- Control: you control access through your Google account settings
Resend
- Purpose: sending transactional emails and newsletters
- Data: email, name, language preferences
- Protection: Resend is GDPR compliant
Legal Authorities
We may disclose your data if required by law (Swiss authorities, legal request, protection of rights).
No Data Sale: We never sell your data to third parties for commercial purposes.
Data Retention
- Active Accounts: data retained during use + 1 year after deletion
- Payment Data: 7 years (Swiss tax obligation)
- Newsletter Emails: retained until unsubscription
- Session Cookies: deleted upon logout
- Emotional Journal: deleted immediately after account deletion (except legal obligation)
Your Rights
You have the following rights regarding your personal data:
Right of Access
You can request a copy of your data at any time.
Right of Rectification
You can correct or update your profile information directly from your dashboard.
Right to Erasure
You can request deletion of your account and data (except legal retention obligations).
Right to Restrict Processing
You can request limitation of data processing in certain circumstances.
Right to Data Portability
You can request export of your data in readable format (JSON, CSV).
Right to Object
You can object to processing of your data for marketing or analytics.
Withdraw Consent
You can unsubscribe from newsletters at any time via the link at the bottom of each email.
To exercise these rights, contact us at contact@mc-terra.ch with your specific request.
Data Security
We implement the following security measures:
- Encryption: data in transit (TLS/HTTPS), sensitive data at rest
- Authentication: magic link or Google OAuth authentication (no password storage)
- Isolation: data stored on European servers, isolated by database
- Access: access limited to authorized personnel with minimum rights
- Backups: regular backups with restoration testing
- Compliance: Swiss DPA and GDPR (EU) compliance
While we take all reasonable precautions, no system is 100% secure. In case of data breach, we will inform you promptly.
Changes to this Policy
We may update this privacy policy periodically. Significant changes will be communicated by email. Your continued use of the platform after changes constitutes acceptance.
Contact
For any questions about this privacy policy or how we process your data:
MC-TERRA
Route de Gilly 30
1180 Rolle, Switzerland
Email: contact@mc-terra.ch