Privacy Policy

We value your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect your personal information when you interact with our website, products, and services. It also explains your rights under the applicable laws, including the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) as supplemented by the German Federal Data Protection Act (BDSG).

1. Data Controller

The data controller responsible for the processing of your personal data under this privacy policy is:

Swiss Health Clinic AG

Stauffacherstr. 36, CH-8200, Schaffhausen

+41 (52) 56030-00

info@swiss-health-clinic.ch

For individuals located in Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).

For individuals located in the European Union, the competent supervisory authority is the [Insert name of relevant EU country authority].

2. Data We Collect

We collect various types of personal data depending on your interaction with us. This may include:

Contact Information: Your name, email address, phone number, and physical address.
Account Information: Login credentials, account settings, and preferences.
Payment Information: Credit card or bank details for processing transactions.
Technical Data: IP address, browser type, device information, and other metadata collected from the use of our website.
Usage Data: Information on how you interact with our website, products, and services.
Communication Data: Any correspondence between you and us, such as email exchanges or customer support inquiries.

We also collect non-personal data that cannot be linked back to you, such as anonymous usage statistics and aggregated data.

3. How We Collect Data

We collect personal data through the following means:

Direct Interactions: You provide personal data by filling out forms, contacting us, creating an account, or purchasing products.
Automated Technologies: We automatically collect technical data and usage data when you browse our website through cookies and similar tracking technologies (see Section 9 below).
Third Parties: We may receive personal data from third-party service providers such as analytics providers, advertising networks, or payment processors.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Consent: When you provide consent to process your personal data (e.g., for marketing communications).
Contractual Necessity: To fulfill our contractual obligations when you purchase products or services from us.
Legitimate Interests: When it is in our legitimate interest to process your data (e.g., to improve our website or prevent fraud), as long as this does not override your rights.
Legal Obligations: When we need to comply with a legal obligation, such as tax laws or regulatory requirements.

5. Data Sharing and Transfers

We may share your personal data with third-party service providers who assist us with the following:

Payment processing (e.g., payment gateways)
Website hosting and maintenance
Customer support and communication
Analytics and performance tracking

These service providers act as data processors and only process your data according to our instructions. We have entered into Data Processing Agreements (DPAs) with all third parties who handle personal data on our behalf to ensure they comply with relevant privacy laws.

International Data Transfers

We may transfer your personal data outside of Switzerland, the EU, or the European Economic Area (EEA), including to countries that do not provide the same level of data protection. In such cases, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms, are in place.

For individuals located in Switzerland, transfers to countries outside of Switzerland will only occur if these countries provide an adequate level of data protection according to the Swiss Federal Act on Data Protection or if adequate safeguards, such as SCCs, are in place.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Retention periods may vary depending on the nature of the data and the specific legal or contractual obligations.

For example:

Customer data is retained for 6 years after the closure of your account or the completion of a transaction.
Employee data is retained for 10 years in accordance with applicable labor laws.
Marketing data is retained until you withdraw your consent or opt-out.

Once your personal data is no longer necessary for the specified purposes, we securely delete or anonymize it.

7. Your Rights

Under the GDPR, BDSG, and FADP, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request corrections to any inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data under certain conditions.
Right to Restrict Processing: You can ask us to suspend the processing of your personal data.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transferred to another controller.
Right to Object: You can object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [privacy contact email].

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include encryption, secure servers, access controls, and regular security audits.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. Cookies are small text files that are stored on your device when you visit a website.

Types of Cookies We Use:

Essential Cookies: Necessary for the website to function properly.
Analytics Cookies: Help us understand how users interact with our website and improve its performance.
Marketing Cookies: Used to track user behavior and deliver personalized advertisements.

You can manage your cookie preferences through our Cookie Consent Manager, which allows you to opt out of non-essential cookies. You can also configure your browser settings to block or delete cookies.

10. Third-Party Services

We use third-party service providers, such as Google Analytics, to collect and analyze data about your usage of our website. These providers may process personal data outside the EU/EEA and Switzerland. When we transfer personal data to third countries, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place.

11. Updates to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. We will notify you of any significant changes by posting the updated policy on our website or by other means.

12. Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at:

Swiss Health Clinic AG

Stauffacherstr. 36, CH-8200, Schaffhausen

+41 (52) 56030-00

info@swiss-health-clinic.ch

For individuals in Switzerland, you may also contact the Federal Data Protection and Information Commissioner (FDPIC) at:

FDPIC
Feldeggweg 1, 3003 Bern, Switzerland
https://www.edoeb.admin.ch

For individuals in the EU or Germany, you may contact the relevant data protection authority in your jurisdiction.