Data protection information

for medica customers and suppliers

 

 

1. Who is responsible for data processing?

medica MEDIZINISCHE LABORATORIEN Dr. F. KAEPPELI AG
Wolfbachstrasse 17
Postfach
8024 Zürich

 

medica wants you to feel safe with respect to your personal data and to be informed about what personal data relating to you is processed, as well as when and for which purpose.

It reserves the right to amend this Privacy Policy where necessary from time to time. You can find the respective current version on our website at www.medica.ch.

 

2. What personal data is processed?

 

2.1 Which categories of personal data are processed, when and for what purpose?

Data of the customer:

As a referring doctor, you will transfer patient data to the laboratory on a regular basis. When doing so, you must make sure that the patient has consented to the data transfer. In the case of external laboratory analyses, the data transfer from the referring doctor to the laboratory will amount to a transfer from one controller to another controller. This means that the referring doctor and the laboratory both bear equal and individual responsibility for ensuring that the data processing is lawful.

To be able to carry out your order, we process the following categories of personal data:

 

• In the course of establishing a business relationship: we process your contact and billing details (e.g. full name, address, e-mail address, telephone number, fax number, title, gender, KSK number, EAN number).
• To provide our courier services: we process your contact details (e.g. full name, address).
• To process your orders: we process the details that you submit to us via the order form (e.g. full name, address, e-mail address).
• To communicate with you, e.g. to respond to queries or maintain the customer relationship: we process your contact details (e.g. full name, address, e-mail address, telephone number, fax number).
• To send you the results and invoices after completing your orders: we process your contact and invoice details (e.g. full name, address, e-mail address, gender, KSK number, GLN number).

 

Data of the supplier:

To be able to collaborate with you, we process the following categories of personal data:

General data of the supplier or the appropriate contact, e.g. name and e-mail address, and if necessary details about your position or role within the organisation on whose behalf you will contact us. In addition, we also process data that is required to carry out any contracts between the supplier and laboratory.

 

2.2 How long will we process your personal data for?

We will only process and store your personal data for as long as is necessary to provide you with our (medical) service. In all other cases, we anonymise or delete your personal data, with the exception of:

• The completion of statutory retention periods and compliance with statutory periods of limitation, usually between 10 and 20 years (30 years in the case of genetic data).

 

3. Will your personal data be disclosed to third parties?

When processing your data, your data may be disclosed to the following third parties:

• External service providers (which sometimes process your data on our behalf) such as IT/web providers; support companies, which sometimes process your data independently, such as external laboratories within Switzerland or the EU (this applies for certain tests. These are indicated on the order forms); lawyers (in the event of legal questions); or medica companies affiliated with the medica laboratory
• Health insurance providers and insurance companies, in particular for the purpose of billing and assessing benefits obligations
• Authorities in Switzerland and abroad on account of legal obligations
• Doctors and hospitals providing pretreatment or aftercare on request
• Scientific circles (such as tumour boards)

The service providers in question are bound to our standards under data protection law or entitled to process personal data as a result of legal requirements, a contract for order processing or on the basis of contractual provisions.

 

4. Will your data be transferred abroad?

Your personal data will only be forwarded to locations within the EU in the cases specified in section 3. These have very high standards of data protection as they are subject to the European General Data Protection Regulation, which is generally speaking stricter than Swiss data protection law.

 

5. What are your rights?

 

5.1 Right to information

You can request information from us as to whether personal data about you is being processed; who the controller is; which personal data is being processed; what the purpose of the processing is; how long the retention period is or the criteria for setting this period; how the personal data has been obtained; whether automated individual decision-making is used and the logic underpinning it; and the recipients or category of recipients to whom personal data is disclosed.

 

5.2 Right to data portability

In accordance with Art. 28 nFADP, you may request that the personal data you have disclosed to us be copied or forwarded to you in a commonly used electronic format.

 

5.3 Revocation of consent

You may revoke your consent to processing at any time without giving a reason. The revocation shall apply to all future processing of the personal data in question. However, we may no longer be able to complete your order if the personal data is necessary to carry it out.

 

5.4 Rectification

You may request that incorrect personal data be rectified, unless the law forbids this.

 

5.5. How can you exercise your rights?

If you have any questions, you can contact us electronically at dso@medica.ch, by telephone on 044 269 99 99 or by post to medica MEDIZINISCHE LABORATORIEN Dr. F. KAEPPELI AG, Wolfbachstrasse 17, P.O. Box, CH-8024 Zurich at any time.

 

 

Last updated: September 2023