Privacy policy

This is a courtesy translation. The legally binding version is the German privacy policy.

This privacy policy follows the revised Swiss Data Protection Act (revDSG, in force since 1 September 2023). Where relevant for visitors from the European Economic Area, we additionally take the requirements of the EU General Data Protection Regulation (GDPR) into account.

1. Controller

The controller for the processing of personal data in connection with this website is:

MediLink Care Management AG
Gewerbestrasse 6
6330 Cham, Switzerland
Email: info@medilink-care.ch

For questions about data protection, please contact the address above.

2. General

In principle we process personal data only to the extent necessary for a functioning website and for providing our content and services. Processing is carried out in good faith, lawfully and proportionately. Personal data is treated confidentially and processed only within the scope described here.

Personal data means any information relating to an identified or identifiable natural person.

3. Provision of the website and server log files

When you visit this website, the hosting provider automatically collects data that your browser transmits and stores it in server log files. This is in particular:

• IP address of the accessing device (usually shortened/anonymised)
• date and time of access
• name and URL of the file retrieved
• browser and operating system used
• referrer URL (the page visited previously)

This data serves the technical provision, security and stability of the website. We do not combine this data with other data sources to identify you.

Hosting provider: Vercel Inc., 440 N Barranca Avenue #4133, Covina CA 91723, USA.
The website is served from the Frankfurt am Main compute region in Germany.
As a processor, Vercel Inc. may also access data from the USA for operation, maintenance and fault resolution.

4. Cookies

This website sets strictly necessary cookies only. A single cookie is set when you sign in to the protected area; it serves solely to maintain that sign-in and expires after seven days. It contains no information about you, only an expiry time and a version number.

No cookies for statistics, audience measurement or marketing are used. Consent is therefore not required. You can refuse or delete cookies at any time in your browser settings; signing in to the protected area will then not work.

5. Contacting us

If you contact us by email, telephone or via a contact form, we store your details for the purpose of handling the enquiry and in case of follow-up questions. We do not pass this data on without your consent. The data is deleted as soon as it is no longer required for the purpose of processing and no statutory retention obligations stand in the way.

6. Web analytics and third-party services

Where we use analytics, map, font or media services from third-party providers, data is transmitted to those providers depending on the service. Services of this kind in use:

Currently none. Fonts are self-hosted; no analytics or tracking services are used.

Where required, we use such services only after your consent and conclude data-processing agreements with the providers.

7. Disclosure of data to third parties

Your personal data is disclosed to third parties only if this is necessary to provide our services, if you have consented or if we are legally obliged to do so. Commissioned service providers (processors, e.g. hosting, IT) process data exclusively on our instructions and under contract.

8. Data transfer abroad

Personal data may be disclosed to Germany and to the United States of America. The Federal Council has determined an adequate level of data protection for both countries (Annex 1 to the Data Protection Ordinance). For the United States this applies to organisations certified under the Swiss-U.S. Data Privacy Framework. Our hosting provider Vercel Inc. is certified under that framework.

Disclosures to further countries are made only on the basis of a safeguard under Art. 16 para. 2 revDSG, in particular standard contractual clauses, or an exception under Art. 17 revDSG. We state the list of recipient countries in this policy and update it when it changes.

9. Retention and deletion

We retain personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. After that, the data is deleted or anonymised.

10. Data security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. Data is transmitted on this website in encrypted form via HTTPS.

11. Particularly sensitive personal data

No health data is processed via this website. The website contains no form and no upload function.

Where, in the course of our work in the care and healthcare sector, we process particularly sensitive personal data, namely health data under Art. 5 let. c no. 2 revDSG, this takes place outside this website on the basis of explicit consent or a statutory basis, with heightened care and additional protective measures. A separate privacy notice applies to that processing.

12. Your rights

Within the scope of applicable data protection law, you have in particular the following rights:

• access to the data processed about you
• rectification of inaccurate data
• deletion or destruction of data
• restriction of processing and objection to processing
• release or transfer of your data (data portability)
• withdrawal of consent given, with effect for the future

To exercise these rights, a message to the address named under section 1 is sufficient. To verify your identity, we may request suitable proof.

13. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.

14. Changes to this privacy policy

We may amend this privacy policy at any time. The current version published on this website applies.