Privacy Policy

This is the privacy policy of kindermedizin an der oper. It applies to the use of our website, our medical services—specifically examinations and treatments—as well as other contractual relationships.

This privacy policy informs patients, contractual partners, employees, and visitors to our website about the collection and processing of personal data.

By using this website, you agree to the processing of your personal data in accordance with this privacy policy.

Our medical practice primarily provides its services in Switzerland and is aimed mainly at individuals residing in Switzerland.

Collection of personal data

We collect personal data that you or your doctor provide to us. This can occur, for example, in the following ways:

• by submitting a medical referral
• by completing a registration form
• by providing information about your medical and patient history
• as part of an examination, treatment, or consultation

Certain personal data is considered particularly sensitive under data protection law. This includes, in particular, health data such as:

• information about complaints and symptoms
• diagnoses
• laboratory and examination results
• information about medication
• biometric data
• other treatment-relevant information

Depending on the situation, other data may also be considered sensitive, such as information about religious affiliation, provided it is relevant to your treatment or care.

We generally only process sensitive personal data if:

• this is necessary for the provision of our services
• you have provided the data to us yourself
• you have consented to the processing by us or by a referring physician
• processing is necessary for compliance with legal requirements or for the establishment, exercise, or defense of legal claims
• the data subject has manifestly made the information public
• processing is otherwise permitted by applicable law

If we receive data from a referring physician, we generally assume that you have provided the necessary consent.

Technically collected data

Every time you visit our website, technically necessary information may be collected. This may include, in particular:

• browser type used
• operating system used
• Date and time of access
• IP address
• Name and URL of the accessed file or page

If you have subscribed to our newsletter, we use your name and email address to send it to you. The newsletter may be sent via a specialized service provider.

You can unsubscribe from the newsletter at any time using the unsubscribe link provided in the newsletter.

Purposes of data processing

We process your personal data primarily to provide our medical and contractual services.

Furthermore, processing may serve the following purposes:

• Communicating with you and responding to inquiries
• Conducting examinations and medical treatments
• Provision of medical, radiological, and pharmaceutical services
• Processing and maintaining contractual relationships
• Organizing internal practice workflows
• Operation of IT systems, website, and newsletter
• Accounting and administration
• Managing employment relationships
• Compliance with legal and industry-specific regulations
• Conducting legal proceedings or investigations
• Ensuring security
• Management and administrative tasks
• Guidance, further education, and training of employees

Our employees are generally subject to professional confidentiality.

Retention period

Your patient data will be retained for 20 years after your last treatment.

This retention period is based on a legal obligation of the treating physicians and generally cannot be shortened.

Disclosure to third parties and processors

We may disclose personal data to third parties to the extent necessary for the operation of our medical services, for the performance of your treatment, or to protect your interests.

This may include, in particular:

• physicians involved in pre- and post-treatment
• other healthcare professionals
• Hospitals and medical facilities
• scientific expert committees, such as tumor boards
• Health insurance funds and insurance companies
• Group companies and their employees who are bound by confidentiality
• IT and web service providers
• Support companies
• Laboratories
• Lawyers
• Domestic and foreign authorities

Service providers may process data either on our behalf or under their own responsibility.

The respective service providers are bound by applicable data protection requirements through legal regulations, data processing agreements, confidentiality obligations, or recognized standard contractual clauses.

Disclosure of data abroad

As part of legal or contractual processing, personal data may be transferred to countries in the European Economic Area and processed or stored there, for example through IT support, hosting, or cloud services.

In exceptional cases, processing may also take place in other countries.

We ensure that the respective country has an adequate level of data protection or that appropriate protective measures are in place.

If data is transferred to a country without an adequate level of data protection, the protection of the data is ensured in particular by contractual guarantees or by standard contractual clauses recognized by the Federal Data Protection and Information Commissioner.

Revocation or restriction of consent

You have the right to revoke or restrict any consent you have given.

The revocation or restriction must be made in writing. According to the existing privacy policy, notification by email is not sufficient for this purpose.

The change applies to future data processing from the time it is received.

Data processing that is not based on your consent, for example due to legal or contractual obligations, remains unaffected by this.

Cookies

Our website may use cookies.

Cookies contain a so-called cookie ID. This is a unique identifier that allows websites and servers to be assigned to a specific internet browser.

This allows a browser to be recognized and identified.

Data security

We protect your personal data against:

• unauthorized access
• unauthorized alteration
• loss
• misuse

To this end, we employ appropriate technical and organizational security measures, for example:

• Access restrictions
• Authorization policies
• Data backups and recovery
• technical security measures

Security measures are generally based on the respective risk.

We comply with the requirements of the Swiss Federal Act on Data Protection and the Data Protection Ordinance.

You acknowledge that we may exchange data with you via unencrypted communication channels such as email, SMS, or other digital applications.

Your rights

Under applicable data protection law, you have various rights. This includes, in particular, the right to request information about the processing of your personal data.

You may contact us directly to exercise your rights.

Applicable law and place of jurisdiction

This privacy policy and all contracts concluded in connection with it are subject to Swiss law.

Any conflict of law rules are excluded.

The place of jurisdiction is the registered office of the medical practice.

Final provisions

Should individual provisions of this privacy policy be or become invalid, the validity of the remaining provisions shall remain unaffected.

We may update this privacy policy at any time without prior notice.

The version currently published on our website applies in each case.