Privacy Policy

1. Contacts

NAME AND ADDRESS OF THE RESPONSIBLE PARTY

The responsible party for data processing in connection with our website is:
Alpine Biomedical AG
Bahnhofplatz 12
8400 Winterthur
Switzerland
Tel.: +41 52 203 10 11
Email: info@alpine-biomedical.ch
Website: www.alpinebiomedical.ch

2. Your Rights

RIGHT TO INFORMATION

You have the right to request information from us about whether and, if so, which personal data we process about you.

RIGHT TO CORRECTION

You have the right to request the correction of your inaccurate personal data and, if necessary, the completion of incomplete personal data in our systems.

RIGHT TO DELETION

You have the right to request the deletion of your personal data, for example, if the data is no longer needed for the purposes pursued.
Please note that we reserve the right to assert the legally prescribed restrictions on our part, for example, if we are obliged to retain or process certain data, have a predominant interest in doing so, or need it to assert claims.

RIGHT TO RESTRICTION OF DATA PROCESSING

You have the right to request the restriction of the processing of your personal data by us.

RIGHT TO DATA PORTABILITY

You may have the right to receive your personal data, which we process based on your consent or for the fulfillment of a contract, in a structured, common, and machine-readable format, or to request the transfer of this data to another responsible party. If you request the direct transfer of personal data to another responsible party, this will only be done to the extent technically feasible.

RIGHT TO OBJECT

You have the right to object to the processing of your personal data at any time in accordance with legal requirements. In particular, you have the right to object to the processing of your personal data for the purpose of direct advertising.

WITHDRAWAL OF CONSENT

You have the right to revoke your consent to the processing of your personal data, generally with effect for the future, at any time. However, this revocation does not affect data processing that has already taken place.

RIGHT TO LODGE A COMPLAINT

If the GDPR is applicable, you have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates data protection regulations.
For questions related to our data protection practices and information regarding your rights and their enforcement, you can contact the contact person mentioned under item 1.
We reserve the right to request appropriate identification for the processing of related inquiries.

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To conduct your medical consultation and treatment according to the respective contractual relationship between you and us and generally to exercise or claim the associated rights and obligations.
• For the management of your patient record.
• As part of legally required accounting and for archiving purposes.
• For communication with you or health insurance companies regarding insurance-related aspects.

We also process personal data to comply with our legal obligations in Switzerland and abroad.

In certain cases, we also process personal data based on our legitimate interests. This is particularly the case for:

• Providing the website.
• Developing our offers, services, and websites.
• Analyzing and evaluating website activities.
• Communicating news, including advertising measures that may interest you.
• Market and opinion research, media monitoring, as far as legally permissible.
• Asserting legal claims and defense in connection with legal disputes and official proceedings.
• Preventing and investigating possible crimes.
• Ensuring our operation, especially IT, our websites, and other platforms.
• Compliance with compliance and other internal guidelines.
• Conducting internal investigations.
• For internal administrative purposes.
• Monitoring and improving system security.

4. Types of Personal Data

We process the following types of personal data:

• Master data (e.g., names and addresses)
• Contact details (e.g., email and phone numbers)
• Content data (e.g., text entries)
• Usage data (e.g., visited websites, access times)
• Meta/communication data (e.g., IP addresses, device information)

5. Legal Basis for Data Processing

The legal basis for the processing of your personal data depends on the specific purpose of data processing. Namely:

• As far as legally prescribed, your express consent, which you can revoke at any time. All you need to do is send us an informal email. The legalness of the data processing that has already been carried out remains unaffected by the revocation;
• The conclusion or fulfillment of a contract with you or the implementation of pre -contractual measures, in particular for medical advice and service provision;
• The protection of our legitimate interests, unless their interests or fundamental rights and fundamental freedoms predominate;
• The fulfillment of legal obligations of the medical documentation obligation.

6. Disclosure of Personal Data

We generally treat your personal data confidentially and only pass it on if you have expressly agreed to this, if we are obliged to do so by law or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your personal data to third parties to the extent that this is necessary or expedient in the context of using the website or in order to provide the services you have requested (including outside the website).
The legal regulations regarding the transfer of personal data to third parties are of course complied with. If we use processors to provide our services, we take appropriate legal precautions and appropriate technical and organizational measures to ensure the protection of your personal data in accordance with the relevant legal regulations. Medical confidentiality and data protection are always maintained.
If the level of data protection in a country in which the data is processed does not correspond to the applicable data protection regulations, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the European Economic Area (EEA) at all times.

7. Data Retention Period

Unless explicitly stated otherwise in this privacy policy, we process and store your personal data only for as long as necessary to fulfill our contractual and legal obligations or for the purposes pursued with the processing. This includes, for example, the entire duration of the treatment contract and, additionally, in accordance with legal retention periods (especially those arising from public health and health insurance legislation) and documentation obligations. Once your personal data is no longer necessary for the purposes mentioned above or when a prescribed retention period expires, your personal data will be deleted or blocked in principle and as far as possible.
Furthermore, we delete your personal data if you request us to do so at info@alpine-biomedical.ch, and we do not have any legal or contractual retention obligations or other security obligations regarding this data.

8. Data Security

We implement technical and organizational security measures to protect your personal data against manipulation, loss, destruction, or unauthorized access by third parties. The measures taken are designed to ensure the confidentiality and integrity of your personal data, as well as the availability and resilience of our systems and services during the processing of your personal data over the long term. Furthermore, they also ensure the swift restoration of the availability of your personal data and access to it in the event of a physical or technical incident.
One of our security measures includes the encryption of your personal data. When transmitting your personal data, we use SSL encryption. All information you enter online is transmitted via an encrypted communication channel.
Our security measures are continuously improved in line with technological advancements. We take our internal data protection seriously as well. Our employees and the service providers we engage are obligated to maintain confidentiality and adhere to data protection regulations. Moreover, access to your personal data is only granted to them to the extent necessary.

9. Links

Our website may contain links to websites of other providers, to which this privacy policy does not extend. After clicking on the link, we no longer have any influence on the processing of data transferred to third parties (such as IP addresses or URLs) because the behavior of third parties is naturally beyond our control. Therefore, we cannot assume responsibility for the processing of your personal data by third parties. To the extent that the use of websites from other providers involves the collection, processing, or use of your personal data, please refer to the privacy notices of the respective providers.
Illegal content was not recognizable at the time of linking. However, a permanent review and examination of the linked pages without concrete evidence of a legal violation are not reasonable. In the event of becoming aware of legal violations, such links will be promptly removed by us.

10. Use of the Website by Minors

The website is intended for an adult audience. It is prohibited for minors, especially children under 16 years of age, to transmit personal data to us or sign up for a service without the consent or approval of their parents or legal guardians. If we determine that such data has been transmitted to us, it will be deleted. The parents (or legal guardian) of the child can contact us to request deletion or unsubscription. For this, we require a copy of an official document identifying you as the parent or legal guardian.

11. Server Log Files

When you visit our website, our servers automatically store information in so-called log files. This information is transmitted automatically by your browser and includes:

• Browser type
• Browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request

The processing of this data is carried out for the purpose of enabling the use of our website (establishing a connection), ensuring the ongoing system security and stability, facilitating the optimization of our internet offering, and for internal statistical purposes, based on our legitimate interests. There is no merging of this data with other data sources. Additionally, these data cannot be traced back to individual persons. We reserve the right to review this data if we become aware of specific indications of unlawful use.

12. Contact

When you contact us via email or through a form, the information provided by you is transmitted and stored for the purpose of processing your inquiry and handling its execution, to the recipient internally designated for processing. The data collected in the case of a contact form is evident from the respective form.
The processing of your personal data is based on our legitimate interest in handling your inquiry. If the contact is related to the fulfillment of a contract of which you are a party or the implementation of pre-contractual measures, this constitutes an additional basis for the processing of your personal data.
You can object to this data processing at any time. Please send your objection to the following email address: info@alpine-biomedical.ch.

13. Downloads

We do not require you to provide any personal information to download.

14. Provision of Contractual Services

We also process personal data to the extent necessary to fulfill our contractual and pre-contractual obligations, as well as to perform other services requested by you, as described in this privacy policy. The personal data processed in this context, the nature, scope, and purpose of the processing required, are determined by the respective contract agreed upon with you (including our general terms and conditions) or the services requested by you.
If we store your personal data based on a contractual relationship, this data will be retained for at least as long as the contractual relationship exists, and as long as statutory or contractual retention obligations or limitation periods for any claims on our part persist.

15. Cookies

Our websites use so-called “cookies.” Cookies are small data packets that do not cause any damage to your end device. They are either temporarily stored for the duration of a session (session cookies) or permanently (persistent cookies) on your end device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your end device until you delete them yourself or automatic deletion occurs through your web browser.
Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of specific services from third-party companies within websites (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies may be used for evaluating user behavior or advertising purposes.
Cookies that are necessary for carrying out the electronic communication process, providing certain functions desired by you (e.g., for the shopping cart function), or optimizing the website (e.g., cookies for measuring web audiences) are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically flawless and optimized provision of its services. If consent for the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively based on this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); the consent can be revoked at any time.
You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
You can find information about which cookies and services are used on this website in this privacy policy.

Consent with Borlabs Cookie

Our website uses the consent technology provided by Borlabs Cookie to obtain and document your consent for storing certain cookies in your browser or using specific technologies in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter referred to as Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, containing the consents you have given or the revocation of these consents. This data is not transmitted to the provider of Borlabs Cookie.
The collected data is stored until you request deletion, manually delete the Borlabs cookie, or the purpose of data storage no longer exists. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
The use of Borlabs Cookie Consent technology is carried out to obtain legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

16. Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, dwell time, operating systems used, and the user’s origin. This data is aggregated into a user ID and assigned to the respective end device of the website visitor.
Furthermore, with Google Analytics, we can record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected datasets and employs machine learning technologies in data analysis.
Google Analytics uses technologies that allow the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information about the use of this website collected by Google is usually transmitted to a server in the USA and stored there.
The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. The consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/. The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Google Signals

We use Google Signals. When you visit our website, Google Analytics captures your location, search history, YouTube history, and demographic data (visitor data), among other things. This data can be used for personalized advertising with the help of Google Signals. If you have a Google account, visitor data from Google Signals is linked to your Google account and used for personalized advertising messages. The data is also used to create anonymized statistics on the user behavior of our visitors.

ata Processing Agreement

We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics E-Commerce Measurement

This website uses the “E-Commerce Measurement” feature of Google Analytics. With E-Commerce Measurement, the website operator can analyze the purchasing behavior of website visitors to improve online marketing campaigns. Information such as completed orders, average order values, shipping costs, and the time from view to purchase of a product is collected. This data can be aggregated by Google under a transaction ID assigned to the respective user or their device.

Google Ads

The website operator uses Google Ads, an online advertising program provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display ads in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). Targeted ads can also be displayed based on user data available at Google (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data, such as analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.
The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. The consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/. The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Ads Remarketing

This website uses the features of Google Ads Remarketing, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign individuals who interact with our online offering to specific target groups. Subsequently, we display interest-based advertising to them within the Google advertising network (Remarketing or Retargeting).
Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google’s cross-device capabilities. This allows interest-based, personalized advertising messages tailored to your previous usage and browsing behavior on one device (e.g., mobile phone) to also be displayed on another of your devices (e.g., tablet or PC).
If you have a Google account, you can object to personalized advertising using the following link: https://www.google.com/settings/ads/onweb/.
The use of this service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. The consent can be revoked at any time.
Further information and the privacy policy can be found in Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Audience Formation with Customer Match

For audience formation, we utilize Customer Match within Google Ads Remarketing. In this process, we transfer specific customer data (e.g., email addresses) from our customer lists to Google. If these customers are Google users and logged into their Google account, they will be presented with tailored advertising messages within the Google network (e.g., on YouTube, Gmail, or in the search engine).

17. Plugins and Tools

Google Fonts (Local Hosting): This site uses Google Fonts for the consistent display of fonts, provided by Google. Google Fonts are locally installed, and no connection to Google servers is established. For more information on Google Fonts, visit: https://developers.google.com/fonts/faq and check Google’s privacy policy: https://policies.google.com/privacy?hl=de.
Font Awesome (Local Hosting): This site uses Font Awesome for the consistent display of fonts. Font Awesome is locally installed, and no connection to servers of Fonticons, Inc. takes place. For more information on Font Awesome, refer to Font Awesome’s privacy policy: https://fontawesome.com/privacy.

18. YouTube

Based on our legitimate interests, we use the YouTube provider for video integration. YouTube is a service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the EU-US and Swiss-US Privacy Shield agreements, providing a guarantee to comply with European and Swiss data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
When you visit one of our websites equipped with a YouTube video, a connection to YouTube’s servers is established. The YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
For more information on data usage by YouTube, settings, and objection options, please visit: https://www.youtube.com/t/terms and http://www.google.de/intl/de/policies/privacy.

19. Google Maps

We use Google Maps for the display of maps from Google Inc. (“Google”) based on our legitimate interests in the analysis, optimization, and economic operation of our online services. Google is certified under the EU-US and Swiss-US Privacy Shield agreements, ensuring compliance with European and Swiss data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
When you visit our website, data such as your IP address is transmitted to a Google server in the USA and stored there. Google stores this data as usage profiles for the purpose of customizing services, advertising, and market research. If you are logged into Google, this data is directly associated with your account. If you do not wish for this association, you must log out beforehand. You can prevent the use of Google Maps by disabling JavaScript in your browser settings. However, this may lead to functional limitations in website usage.
For more information on data usage by Google Maps, settings, and objection options, please visit: http://www.google.com/intl/de_de/help/terms_maps.html and http://www.google.de/intl/de/policies/privacy/.

20. Changes to the Privacy Policy

We explicitly reserve the right to supplement or modify this privacy policy at any time. The current version published on our website is always applicable.