Privacy Policy (cross-border guide)

The data controller (within the meaning of Article 4(7) GDPR and Article 5(j) nLPD) of Frontaliere Ticino (frontaliereticino.ch), an independent information project for cross-border workers in the Switzerland–Italy area, is Valerie Linc.

Privacy contact point

For any request concerning the processing of your personal data or the exercise of your rights, you can write to [email protected]. We respond within the time limits laid down by the applicable law (normally 30 days, extendable where permitted). You can also use the contact page or the guided data deletion procedure.

We have not appointed a Data Protection Officer (DPO), as there is no obligation to do so under Article 37 GDPR; the contact point above remains responsible for all data protection matters. The related documents — the Terms of Service — form an integral part of the rules governing our relationship with users.

ZERO Data Collection from the Tax Simulator

We do not collect, store or transmit any personal or financial data entered into the tax simulator. All calculations are performed exclusively on the client side (in your browser).

The data you enter (income, family circumstances, expenses, etc.) stays on your device and is never sent to our servers or to third parties.

We use analytics tools to understand how users interact with the site and to improve the service. We do not obtain prior consent for traffic analysis — the banner you see on your first visit concerns advertising only, not these tools: they activate automatically from your first visit, on the basis of the Controller's legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR; Article 31 nLPD). You may object at any time through your browser settings or extensions such as “uBlock Origin” (see below); we do not currently offer an equivalent preference control within the site.

Google Analytics 4

Collects aggregate statistics: pages visited, time spent, device type and browser used. IP anonymisation is enabled by default; we do not collect personally identifiable data for analytics purposes.

PostHog (EU Cloud)

Anonymous behavioural analytics with data hosted in Europe (Frankfurt). Records page views and navigation paths to optimise the user experience. Does not collect personally identifiable information (PII) or carry out individual profiling. For a sample of 30% of sessions, it also records an anonymous video playback of browsing (session replay), to identify usability problems.

Microsoft Clarity

Heatmaps and anonymous session recordings to identify usability problems. A free Microsoft service with automatic masking of sensitive content.

You can disable the collection of statistics through your browser settings or extensions such as “uBlock Origin”.

Some pages contain links to third-party services (banks, financial services, telephone operators) that include tracking parameters (UTM) to attribute visits to our site.

• What we track: which link was clicked and from which page of the site
• What we do NOT track: your identity, your actions on the partner's site, any purchases or registrations
• Compensation: we may receive a commission if you register through an affiliate link

We only recommend services that we consider useful for cross-border workers. Recommendations are based on our direct experience, not on commercial agreements.

When someone registers on the site — through email, Google, LinkedIn, Gmail or another sign-in system — the Controller records their acceptance of the Terms and enrols them in the basic communications relationship: newsletters, job alerts, service messages and third-party promotional communications. No separate checkbox is required for these channels: details of what is sent and the relevant preferences are set out in the Terms and on the “Communications” page.

Purposes of processing

The email address may be used for: (i) informational and service communications relating to the platform, including updates on exchange rates, traffic at border crossings and changes to tax regulations; (ii) the basic newsletter and job alert relationship, with criteria enriched by the registration channel, searches, visits and clicks on job listings; (iii) additional channels such as followed companies and saved jobs, activated by the corresponding action; (iv) selecting relevant content based on preferences and interactions with our communications; this information may be used to select third-party promotional communications. When the channel is active, we may disclose, make available or transfer the email address and relevant information to advertisers and advertising partners for their commercial purposes described in the Terms and on the “Communications” page.

Legal basis and retention

Registration and acceptance of the Terms constitute the stated basis for email communications and job alerts in the basic relationship; communications strictly necessary to perform a requested service may have a different applicable contractual basis. Data will be retained until the subscription is withdrawn or the account deleted. Users may stop communications at any time through the unsubscribe link in each communication, without affecting the lawfulness of previous processing. Third-party advertising is active as part of the basic relationship, but can be disabled separately through the preference centre.

Google authentication

If you use Google Sign-In authentication, the platform may access the email address and display name associated with your Google account, strictly to the extent necessary to provide the requested features (newsletter subscription, access to the community and personal dashboard). This data is processed in accordance with this notice and Google's policy (policies.google.com/privacy).

Automatic sign-in from email links (autologin)

The links in our emails (newsletters and job alerts) include two parameters — ne (your email address) and ac (an HMAC-SHA256 authentication code tied to your address) — allowing you to open the site already signed in, without having to re-enter your credentials. On first use, the ac code is exchanged for a short-lived Firebase Auth token (1 hour) and contains no personal data beyond its connection to your address.

A risk to be aware of. If you forward a newsletter email to someone else, or someone has access to your browser history, that person will be able to open the site's pages already signed in to your profile. Access is limited to user features (dashboard, preferences, forum); it does not allow them to change your password or access administrative areas.

How to disable it. You can disable automatic sign-in at any time: (i) from the Profile page if you are signed in through Google/Facebook/LinkedIn, or (ii) from the “Manage preferences” link at the bottom of every email we send. After you disable it, email links will no longer contain the ac code and you will need to sign in manually to access restricted areas. The setting applies to both newsletters and job alerts.

Open and click tracking, engagement score

For every email we send you (newsletter, job alert, bulletin), we record whether you opened it and whether you clicked a link — the same events that the email provider already reports to us as standard. From these events we calculate an engagement score (0–100, based on open rate, click rate and how recent the last interaction was) that determines: the priority with which you receive our mailings, the sending of re-engagement emails to those who have become inactive and, if there is no response, automatic suspension of mailings to addresses that have had no interaction for a long time. Clicking the unsubscribe link does not count as engagement.

Adaptive frequency of the daily bulletin. The Bollettino del Frontaliere is not sent to everyone at the same frequency: using these same opens and clicks, we determine an interval between mailings, ranging from one day to one week. Those who click return to a daily frequency; after three mailings without any interaction, the interval increases by one step.

What we retain. On your subscription record: counts and dates of opens/clicks, the current engagement score, the date of the last bulletin sent, the current interval in days, the number of consecutive mailings without interaction and any frequency you have chosen yourself. We use information about which listing you clicked only to order the listings in emails, as described below.

Ordering listings based on clicks. When you click a job listing in a newsletter or job alert, we record which listing you clicked and four of its characteristics: category, canton, company and industry. From these clicks we derive an interest profile associated with a pseudonymous identifier, not your email address in plain text, and use it only to decide the order in which to show you the listings already selected for you in our emails. The profile does not change which emails you receive or how many, and is not disclosed to advertisers or partners. It is updated with each click and automatically deleted 180 days after the last click, or immediately if you unsubscribe from all our communications or delete your account. You may object at any time by writing to [email protected]: from that point onwards, you will receive listings in the standard order.

Legal basis and objection. Legitimate interest in measuring the effectiveness of mailings, limiting their frequency for those who do not read them and avoiding continued messages to inactive addresses. The same legitimate interest applies to showing the most relevant listings first. From the “Manage preferences” link at the bottom of every email, you can set the bulletin frequency yourself (from daily to weekly), disable only the bulletin while keeping newsletters and job alerts active, or unsubscribe entirely. A frequency you choose always takes precedence over the algorithm.

The simulator is an entirely client-side application:

• All calculations are performed directly in your browser
• No simulator data is transmitted over the Internet during use
• You do not need to create an account or provide personal information to use the tools
• You can also use the simulator offline (after the initial load)

The site uses cookies and local storage technologies to function and improve your experience. Technical cookies are always active because they are essential for the site to function. The two non-essential categories follow different rules: Analytics cookies activate automatically from your first visit (see “Anonymous Traffic Analysis” for the legal basis and how to object), while Advertising cookies require your explicit consent and remain inactive until you give it.

Technical Cookies

Cookies essential for the site to function (e.g. theme preferences, consent status, authentication session). They do not require consent.

Analytics Cookies

Google Analytics, PostHog and Microsoft Clarity cookies for anonymous statistics (see “Anonymous Traffic Analysis”). Active from the first visit and not subject to prior consent.

Advertising Cookies

Google AdSense and Google Ad Manager cookies for displaying ads, including personalised ads (see “Advertising”). They are subject to your explicit consent: no advertising script is loaded until you respond. If you refuse, Google AdSense displays only limited ads, which do not use advertising cookies: Google may use cookies and local storage only to detect invalid traffic and fraud. Consent is requested once through a dedicated banner and can be withdrawn at any time using the panel below.

You can change advertising consent using the interactive controls on this page.

LocalStorage

We use browser LocalStorage to save preferences, such as dark or light theme, and retain the parameters of your last simulation. Local storage does not mean that all preferences remain exclusively on your device: analytics tools may receive properties such as theme, area of interest and selected currency. Simulation parameters are distinct from these usage properties.

The site is free and supported by advertising served by Google AdSense. Google and its partners may use cookies and identifiers to display ads, including personalised ads, based on visits to this and other sites.

Consent and personalisation

Advertising scripts are blocked until you respond: a dedicated banner appears on your first visit, and until you respond no AdSense, Google Ad Manager or header bidding scripts are loaded and no ads are displayed. If you say no, Google Ad Manager and header bidding remain blocked, while Google AdSense displays only limited ads: non-personalised, without profiling or advertising cookies (Google uses cookies and local storage only to detect invalid traffic and fraud; see Google's limited ads). If there is no response, or if you refuse, we send Google a denied signal through Google Consent Mode v2 for ad_storage, ad_personalization and ad_user_data; the signal changes to granted only when you accept, and returns to denied as soon as you withdraw consent. You can withdraw your choice at any time from the “Manage advertising consent” panel in the “Cookies and Local Storage” section of this page. You can also manage your Google advertising preferences at any time at adssettings.google.com and learn how Google uses data.

We process personal data only where a valid legal basis exists under Article 6 GDPR and Article 31 nLPD:

• Consent (Article 6(1)(a)): analytics and advertising cookies where required, subscribing to communications and activating job alerts or other optional channels.
• Taking pre-contractual steps / performance of a contract (Article 6(1)(b)): managing the account, dashboard and services requested by the user.
• Legal obligation (Article 6(1)(c)): tax and accounting obligations and responses to requests from authorities.
• Legitimate interest (Article 6(1)(f)): site security, prevention of abuse and fraud, and aggregate statistics, with a balancing assessment and the right to object.

Where the basis is consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Transfer, merger or sale of the business

A transfer, merger or sale of the business may involve transferring necessary data to the successor, within the limits permitted by law and with applicable safeguards. This event does not automatically authorise new uses of data or new commercial communications: if the controller or purposes change, we will provide the required notice and obtain fresh consent where necessary before using the data for the changed purpose.

Some providers may also process data outside the European Union and Switzerland, particularly in the United States: Google and Microsoft for analytics, advertising and authentication; Cloudflare for content delivery; the email providers, Stripe and language model providers listed in “Third-Party Services”. These transfers take place with appropriate safeguards under Chapter V GDPR and the nLPD:

• participation in the EU–U.S. Data Privacy Framework (and its UK extension and Swiss–U.S. counterpart), where applicable;
• Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional measures;
• current adequacy decisions, where available.

You can request information about the safeguards adopted and, where provided for, a copy of them by writing to [email protected].

The site uses the following external services, each with its own privacy notice:

• Google (Analytics 4, AdSense, Firebase Auth/Remote Config, Sign-In): analytics, advertising, authentication and configuration — policies.google.com/privacy
• PostHog EU: anonymous behavioural analytics (data in Europe) — posthog.com/privacy
• Microsoft Clarity: heatmaps and anonymous session recordings — privacy.microsoft.com
• Cloudflare: content delivery network (CDN), security and protection against abuse
• Email providers (Resend, Mailgun, Mailjet, Maileroo, Cloudflare Email Service): delivery of newsletters, job alerts and service emails. They receive your address and the message content, and return delivery outcomes to us (delivery, open, click, bounce, spam report). We do not use a single provider: the message is assigned to the first available provider among those listed, so over time your address may be passed to more than one of them.
• Stripe: collection of payments for the “ad-free” subscription, publishing job listings and consultations. Payment takes place on Stripe's pages: card details do not pass through our systems. Stripe receives your email address and payment details and returns the outcome to us — stripe.com/privacy
• Language model providers (Google Gemini, Groq, NVIDIA and, as a last resort, Anthropic Claude): power the site assistant and assisted-writing buttons. The text you write in these features is transmitted to the provider to generate the response, without first removing any personal data you may have included in the text: we ask you not to include data that you do not want to leave the site. Requests are sent from our servers, not your browser, and we do not add your email address or user identifier: the provider receives the request text, not the identity of its author.
• Paid assisted job applications (OpenAI, Codex model; Microsoft's GitHub Actions as the execution environment): to prepare the application you have purchased, the text of your CV, your answers and the job listing are processed by an OpenAI model, which drafts the cover letter, the email to the company and the answers for the portal. Processing takes place through an automated process on GitHub Actions that receives only the order number, masks personal data in logs and deletes its logs when finished; evidence of what was submitted is stored encrypted and deleted with the CV (90 days). Before submission, the draft is checked by an operator and submitted for your approval: if you do not respond within 12 hours, it is sent as it stands, as stated in the emails. We provide the company with an email address dedicated to your application ([email protected]): incoming messages are automatically classified, stored encrypted for 90 days and immediately forwarded to you with their attachments, allowing you to reply directly to the recruiter. If the company's portal requires an account, we create one in your name with that dedicated address and a random password, stored encrypted and deleted with the rest of the order; the account confirmation email is read by the automated process and is not forwarded to you. Using the same data, we prepare a version of your CV tailored to the listing (only information already in your CV; you can choose to send the original); if the company does not respond to an application sent by email, after 7 and 14 days we send it a brief follow-up in your name, which we show you beforehand and which you can stop; if it invites you to an interview, we send you preparation material based on your CV and the listing. For the emails we send you about this application, the sending provider reports delivery, opens and link clicks to us (without the personal codes contained in the links): we use these only to know whether you have seen the draft awaiting approval; they are visible only in your order record and are deleted with the CV. If the company's portal requires it to receive the application, we accept its terms and privacy notice on your behalf, but never optional consents (see the Terms, section 6): after submission, the company and the portal it uses process your data as independent controllers, under their own privacy notice. OpenAI and GitHub may also process data outside the EU/Switzerland.

We are not responsible for the privacy practices of third-party websites. We recommend reading their policies before providing personal information.

We retain personal data only for as long as strictly necessary for the purposes for which it is collected, in accordance with the storage limitation principle (Article 5(1)(e) GDPR):

• Tax simulator data: no server-side storage (it remains only on your device).
• Newsletter / job alert subscription: until consent is withdrawn or the subscription is cancelled.
• Account and dashboard: for the duration of the account; deleted on request or after prolonged inactivity.
• Analytics data: aggregate/anonymous data retained according to the retention settings of the respective tools.
• Security logs: for the time necessary to prevent abuse and comply with legal obligations.

The personal and financial data you enter into the simulator is never transmitted. The security of this data depends on the security of your device and browser.

We adopt appropriate technical and organisational measures (Article 32 GDPR), including an encrypted HTTPS connection, authentication managed through reliable providers and restricted access to data. However, no system is 100% secure: in the event of a personal data breach that poses a risk to your rights, we will make the notifications required by law (Articles 33–34 GDPR; Article 24 nLPD).

We do not use solely automated decision-making processes that produce legal effects or similarly significantly affect users within the meaning of Article 22 GDPR. Any profiling is limited to optimising content (e.g. selecting the most relevant job alerts and communications, including ordering listings in emails based on clicks as described in the tracking section) and does not result in automatic legal or economic consequences.

Under the GDPR, the Swiss nLPD and other applicable laws, you have the right to:

• Access your personal data and obtain a copy
• Rectify inaccurate or incomplete data
• Delete your data (“right to be forgotten”)
• Restrict data processing
• Object to processing, including direct marketing
• Receive and transfer data (portability)
• Withdraw consent at any time
• Not be subject to solely automated decisions

We do NOT collect personal data for the tax simulator. For newsletters, accounts and job alerts, you can exercise your rights by writing to [email protected] or using the data deletion procedure. You can also unsubscribe from the newsletter through the link in every email.

Right to complain. If you believe that processing breaches the law, you can lodge a complaint with a supervisory authority: in Italy, the Italian Data Protection Authority, in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), or the competent authority in your country of residence.

California (CCPA / CPRA)

If you are a California resident, you have the right to know which categories of personal information we process, request deletion and correction, and not be discriminated against for exercising your rights. We do not sell your personal data in exchange for money. The use of advertising cookies may constitute a “sale” or “sharing” under the CPRA: you can exercise the “Do Not Sell or Share My Personal Information” option by setting the controls at adssettings.google.com or through your browser settings or extensions such as “uBlock Origin”; we do not currently offer an equivalent preference control within the site, nor do we automatically detect Global Privacy Control (GPC) signals.

Other Countries

We recognise the rights granted to users in other jurisdictions by their respective laws, including UK GDPR (United Kingdom), LGPD (Brazil), PIPEDA (Canada), Law 25 (Québec), Privacy Act (Australia) and POPIA (South Africa). To exercise them, contact [email protected].

Our service is intended for adults who want to simulate their tax situation as cross-border workers. We do not knowingly collect data from people under 18 (or under 16, the minimum threshold under Article 8 GDPR for information society services). If you believe that a minor has provided us with data, contact us and we will delete it.

This notice is governed by the law applicable according to the user's residence. Nothing in this document limits or excludes the mandatory rights granted to users by the law of their country of habitual residence or by applicable mandatory rules (including the GDPR, nLPD and local consumer protection laws), which prevail over any conflicting clause.

We may update this Privacy Policy occasionally. We recommend that you review this page periodically for any changes. Changes take effect immediately upon publication on this page; in the event of substantial changes, we will highlight them by updating the date below.

Last updated: 3 October 2026

If you have questions about this Privacy Policy or our privacy practices, you can contact us:

By email at [email protected], through the contact page, or on our Facebook page:

Contact us on Facebook