Version 5.8.2024

In this privacy policy, we, hospitales, explain how we collect and otherwise process personal data. This is not an exhaustive description; other privacy policies [or general terms and conditions, participation conditions, and similar documents] may regulate specific issues. Personal data includes all information relating to an identified or identifiable individual.

If you provide us with personal data of other individuals (e.g., family members, work colleagues), please ensure that these individuals are aware of this privacy policy and only share their personal data with us if you are authorized to do so and if this data is accurate.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DSG), and the revised Swiss Data Protection Act (revDSG). However, whether and to what extent these laws apply depends on the individual case.

1. Controller / Data Protection Officer / Representative

The controller responsible for the data processing described here is hospitales, Dorneckstrasse 133, 4143 Dornach [, unless otherwise stated in individual cases]. If you have data protection concerns, you can contact us at the following address: info@hospitales.ch.

Our Data Protection Officer under Art. 37 GDPR can also be reached at hospitales – We enable Hospital at Home, Business Office, Dorneckstrasse 133, 4143 Dornach, Email: info@hospitales.ch. They are also our representative in the EEA under Art. 27 GDPR (if required).

2. Collection and Processing of Personal Data

We primarily process the personal data that we receive from our customers and business partners as part of our business relationships or that we collect from users of our websites, apps, and other applications.

Where permitted, we may also obtain certain data from publicly accessible sources (e.g., debt enforcement registers, land registers, commercial registers, press, internet) or from authorities and other third parties (e.g., credit agencies, address brokers). In addition to the data you provide directly to us, the categories of personal data we receive from third parties may include:

• Information from public registers
• Data obtained in connection with administrative and legal proceedings
• Information related to your professional roles and activities
• Information received through correspondence or meetings with third parties
• Creditworthiness information (where relevant to transactions)
• Information about you provided by individuals in your environment (e.g., family, advisors)
• Information for compliance purposes such as anti-money laundering or export restrictions
• Details about transactions, purchases, and customer activities

3. Purposes of Data Processing and Legal Basis

We primarily use the collected personal data to process inquiries, maintain contact with your company, and conclude or fulfill contracts with customers and business partners.

In addition, we process personal data for the following purposes, where permitted and appropriate:

• Offering and developing our products, services, websites, and platforms
• Communicating with third parties and handling inquiries
• Optimizing customer outreach strategies
• Marketing and advertising (including events)
• Market and opinion research
• Legal claims enforcement and defense
• Crime prevention and investigation
• IT, building, and system security
• Video surveillance for property protection

If you have consented to specific data processing (e.g., newsletter registration or background checks), we process your data based on this consent, which can be withdrawn at any time.

4. Cookies / Tracking and Similar Technologies

Our websites and apps use cookies and similar technologies. Cookies are small files stored on your device to identify your browser when you visit the site again. These may include:

• Session Cookies (deleted after the session)
• Persistent Cookies (stored for a longer period, e.g., two years)

You can configure your browser to reject or delete cookies. However, this may affect website functionality.

We may use services like Google Analytics to analyze website usage. These services typically involve cookies and collect data in a way that anonymizes visitors.

5. Data Sharing and Cross-Border Data Transfers

We may share personal data with third parties involved in our business operations, such as:

• Suppliers, subcontractors, and business partners
• Customers
• Government authorities and courts
• Media and social platforms
• Competitors, associations, and organizations
• Other involved parties in legal proceedings

Recipients may be located domestically or abroad. We contractually ensure compliance with data protection standards when transferring data to countries without adequate legal protection.

6. Duration of Personal Data Storage

We retain your personal data as long as necessary to fulfill contractual and legal obligations or for legitimate business interests. Once your data is no longer required, we delete or anonymize it.

7. Data Security

We take appropriate technical and organizational security measures to protect your personal data against unauthorized access, misuse, or data loss. These measures include:

• Staff instructions and training
• IT and network security solutions
• Access controls and encryption
• Monitoring and data protection protocols

8. Obligation to Provide Personal Data

To establish and maintain a business relationship, you must provide the personal data necessary for contractual fulfillment. Without such data, we may be unable to provide services or maintain our website.

9. Profiling and Automated Decision-Making

We may conduct profiling to evaluate personal characteristics for targeted communications and marketing purposes. We do not generally use fully automated decision-making processes unless legally required, and we will inform you accordingly.

10. Data Subject Rights

Under applicable data protection laws (e.g., GDPR), you have rights including:

• Access to your data
• Correction of incorrect data
• Deletion of your data
• Restriction of data processing
• Data portability
• The right to object to data processing

To exercise these rights, you must provide proof of your identity. If costs apply, we will inform you in advance.

11. Changes to this Privacy Policy

We may amend this privacy policy at any time without notice. The current version is published on our website. If the privacy policy is part of an agreement with you, we will inform you of updates via email or other appropriate means.