Last updated: 30 January 2026

This Patient Data Privacy Notice explains how DynamicBrain processes personal and healthrelated data of patients and clients in the context of neurofeedback, biofeedback, and therapeutic services.

This notice applies to all clients, patients, and legal guardians whose personal data and health data are processed in connection with services provided by DynamicBrain.

This document is issued in accordance with the Swiss Federal Act on Data Protection (FADP / revDSG, in force since 1 September 2023) and applicable Swiss health, professional secrecy, and confidentiality regulations. Where applicable, the EU General Data Protection Regulation (GDPR) also applies for EU/EEA residents.

Practice name: DynamicBrain
Owner: Rozita Seif
Location: Zürich, Switzerland
Email: info@dynamicbrain.ch
Website: www.dynamicbrain.ch

DynamicBrain is the data controller responsible for the processing of patient data.

We process the following categories of data:

Personal identification data

• Name, surname
• Date of birth
• Contact details (address, email, phone number)
• Emergency contacts
• Legal guardian information (for minors)

Health and therapy-related data (sensitive personal data)

• Medical history
• Diagnoses (where provided)
• Referrals
• Medication information
• Neurofeedback data
• Biofeedback data
• Brain mapping / QEEG data
• ERP data
• Session notes
• Therapy documentation
• Progress reports
• Assessments
• Questionnaires
• Clinical observations

Administrative and financial data

• Appointment records
• Billing information
• Insurance-related information
• Communication records

Health-related data is classified as sensitive personal data under Swiss law and is subject to enhanced legal protection.

Patient data is processed exclusively for therapeutic, medical-supportive, and professional purposes, including:

• Provision of neurofeedback and biofeedback services
• Assessment, training, and therapeutic support
• Documentation of therapy sessions
• Treatment planning
• Progress evaluation
• Communication with clients and legal guardians
• Appointment management
• Billing and administration
• Insurance communication (with consent)
• Referrals and interprofessional cooperation (with consent)
• Legal and regulatory compliance

Data processing is based on:

• Explicit consent of the patient or legal guardian
• Performance of a therapeutic contract
• Legal obligations under Swiss law
• Professional confidentiality obligations
• Vital interests of the patient (where applicable)

Sensitive health data is processed only in accordance with legal requirements and professional secrecy obligations.

All patient data is subject to strict professional confidentiality. DynamicBrain complies with:

• Professional secrecy obligations
• Medical confidentiality principles
• Ethical standards of therapeutic professions

Patient data is treated as strictly confidential and accessed only by authorized persons.

Patient data is stored:

• In secure digital systems
• In protected physical files (if applicable)
• With access control mechanisms
• With encryption and technical safeguards

Appropriate technical and organisational measures (TOMs) are implemented to protect against:

• Unauthorized access
• Data loss
• Data manipulation
• Unlawful processing

Patient data is not disclosed to third parties unless:

• The patient or legal guardian has given explicit consent
• Disclosure is required by law
• Disclosure is necessary for vital interests
• Disclosure is required for legal claims or proceedings

Possible recipients (with consent where required):

• Referring physicians
• Psychotherapists or psychiatrists
• Healthcare professionals
• Insurance providers
• Supervisory authorities

Patient and therapy-related data is retained in accordance with Swiss legal, professional, and documentation obligations.

This typically includes long-term retention of therapy and medical documentation (often up to 20 years or longer where legally required).

After the retention period expires, data is securely deleted or anonymised.

Patient data is processed primarily in Switzerland.

If data is transferred outside Switzerland or the EU/EEA, this occurs only:

• With explicit consent, or
• With legally adequate data protection safeguards

Under Swiss data protection law, patients have the right to:

• Access their personal data
• Receive information about data processing
• Request correction of inaccurate data
• Request deletion of data (where legally permissible)
• Withdraw consent at any time
• Object to processing (where legally applicable)
• Request restriction of processing in certain cases

Requests can be submitted in writing or electronically.

In the event of a data breach that may result in a high risk to the personality or fundamental rights of patients:

• The Swiss Federal Data Protection and Information Commissioner (FDPIC) will be notified as required by law
• Affected patients will be informed where legally required

By starting therapy with DynamicBrain, patients (or their legal guardians) acknowledge that they have been informed about:

• The processing of personal and health data
• The purposes of processing
• Their rights under Swiss data protection law
• Confidentiality obligations

This notice forms part of the patient onboarding and informed consent process.

For questions regarding this Patient Data Privacy Notice or your data rights, please contact:

DynamicBrain
Email: info@dynamicbrain.ch
Website: www.dynamicbrain.ch
Contact page: https://dynamicbrain.ch/contact-us/

This Patient Data Privacy Notice applies to all therapy-related services provided by DynamicBrain.