Privacy Policy
for visitors to our website
BACKGROUND:
medica MEDIZINISCHE LABORATORIEN Dr. F. KAEPPELI AG, Hottingerstrasse 9, CH-8032 Zurich (“medica”) understands that the protection of your privacy is important to you and that you are therefore interested in how your personal data is used online and shared. We respect and value the privacy of all people who visit the www.medica.ch website.
Apart from the limited exceptions outlined in section 4, we will not collect any personal data about you unless you contact us (see section 5). The data collected and processed by us is only used within the scope of statutory regulations.
Please read this Privacy Policy carefully and ensure that you understand it. By using this website, you are deemed to have accepted this Policy. If you do not accept this Policy and instead object to it, you must stop using this website immediately.
1. Definitions
In this Policy, the following terms have the following meanings:
Processing refers to any kind of handling of personal data, regardless of the means or procedures applied, in particular procuring, storing, retaining, using, amending, disclosing, archiving, deleting or destroying data. This definition encompasses the definition of the term as per the Swiss Data Protection Act (FADP) and, where (and if) applicable, the EU General Data Protection Regulation (GDPR), as amended from time to time.
Data subjects or subjects are all natural persons whose personal data is processed.
Personal data refers to all data that relates to an identifiable person who may be directly or indirectly identified using this data. In this case, the personal data is that which you share with us by using our website or making enquiries. This definition encompasses the definition of the term as per the Swiss Data Protection Act (FADP) and, where (and if) applicable, the EU General Data Protection Regulation (GDPR), as amended from time to time.
A website is the presence of a company, a person or organisation in the World Wide Web. A website is usually made up of a number of pages, each of which is an individual HTML document.
We/us/our refers to medica, as defined above.
2. What does this Policy cover?
This Policy only applies for your use of the www.medica.ch website. The above website may contain links to other web pages that are not part of the medica website. Please note that we have no control over how your data is collected, stored or used by these external websites. We recommend checking the privacy policy of a particular website before transferring your data to it.
3. Your rights
As a data subject, you have the following rights arising from the FADP or GDPR (insofar as applicable):1
- right to information about the collection and use of personal data.
- right to access personal data that we have stored about you (see section 4).
- right to rectify any personal data that we have stored about you that is incorrect or incomplete.
- right to request that we delete all or some of your personal data.
- right to restrict (i.e. prevent) the processing of your personal data.
- right to data portability (receipt of a copy of your personal data stored by us in electronic form for the purpose of further use at another service or another organisation).
- right to object to the use of your personal data for certain purposes.
- rights in respect of automated decision making and profiling.
Should you have reason to complain about the use of your personal data, please contact us using the contact details in section 8. We will do our best to address your concerns. If we are unable to help you, you have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) and/or a competent EU supervisory authority (depending on the jurisdiction or applicability of the GDPR).
4. What data do we collect?
Apart from the details specified in this section 4, we do not collect any personal data from you.
In principle, this website can be accessed without registration. Data, such as the pages called up, the names of files, the IP address and the date and time on which they were accessed, is stored on our server in Switzerland for statistical purposes, without this data being traced back to you directly.
To optimise functionality and provide a more secure user experience on our website, we use plug-ins provided by third parties. For more information about the plug-ins used and the data they access, please read section 11.
We save cookies onto your computer or device. Please see our cookie guidelines as per section 10 in this regard.
If you contact us, for example by sending an e-mail, we may record your name, contact details (e.g. e-mail address) and all other information you provide to us.
5. How do we use your data?
If we collect personal data, it is only processed and stored for as long as is necessary for the purpose for which it was collected. We will fulfil our obligations and uphold your rights under the FADP and/or the GDPR (insofar as applicable) at all times. For details on the security of your data, see section 6.
As mentioned above, we do not usually collect any personal data. If you contact us and we receive your personal data as part of your communication (e.g. e-mail), we may use it for the following purposes:
- to process/respond to your enquiry;
- to contact you.
Generally speaking, we will not forward your personal data onto third parties without informing you of this in advance and, if necessary, obtaining your consent. This does not apply in the case of service providers and partners located within Switzerland who help us, among other things, to respond to your requests or to provide you with our services in fulfilment of our contractual obligations (e.g. IT service providers). Contracts are in place with these service providers and partners which, among other things, ensure compliance with data protection.
Your personal data is not in principle disclosed abroad.
6. How and where do we store your personal data?
We only store your personal data for as long as is required to use it as described in section 5, and/or for as long as we have your consent to do so.
Your data is only ever stored in Switzerland.
Data security is very important to us and we have taken appropriate technical and organisational measures jointly with our hosting providers to protect your data. However, we draw your attention to the fact that data transmission over the Internet (e.g. when communicating by e-mail or filling in online forms) may involve gaps in security. It is not possible to protect data completely against access by third parties.
7. How can you access your personal data?
As a data subject, you have the right to request a copy of your personal data that is stored by us (insofar as such data exists).
For more information, please send an e-mail to the e-mail address specified in section 8.
8. Contacting the controller
Within the meaning of data protection legislation, in particular the Swiss Data Protection Act (FADP) and, insofar as applicable, the EU General Data Protection Regulation (GDPR), the controller is:
medica MEDIZINISCHE LABORATORIEN Dr. F. KAEPPELI AG
Hottingerstrasse 9
8032 Zürich
Telefon: 044 269 99 99
If you have any questions about the website or this Policy, please contact us via e-mail at info@medica.ch for general enquiries or dso@medica.ch for questions about data protection.
Please ensure that your enquiry is clear and contains all the necessary details, especially if your enquiry is a request for information about the data that we have stored about you (cf. section 3).
9. Amendments to this Policy
We may amend this Policy from time to time (for example, in response to changes in the law). Any amendments will be published on this website immediately and it will be assumed that you have accepted the Policy’s conditions in their amended form on your first use of the www.medica.ch website. We recommend that you visit this page regularly in order to remain up to date.
10. Cookie guidelines
A cookie is a small data packet (text file) that your browser (e.g. Chrome, Edge etc.) saves onto your device (the hard drive of your computer, smartphone or tablet) when instructed to do so by a website in order to “note” information about you, i.e. remember you, for example your language settings or registration information.
Our website employs cookies that are technically necessary/absolutely required and which cannot be deactivated. These cookies do not store any personal data. Their purpose is to ensure the secure browsing and operation of our website. Cookies of this kind are only set as a reaction to actions that you have carried out and which correspond to a service request, such as configuring privacy settings, logging in or filling in a form. You can configure your browser to block or notify you of these cookies. However, some parts of the website may stop working if you do this.
You can find more information about cookies in general here, for example: https://cookiepedia.co.uk/giving-consent-to-cookies.
11. Information about the plug-ins in use
Plug-ins are software components that can be connected to other pieces of software and add additional functionalities to them that were not originally supported in the main application. This means that a plug-in is connected to a specific interface of our website software (main application) and thus expands its functionality.
The plug-ins specified below are used based on our legitimate interest in the secure operation of our website, as well as our ability to connect and manage various tools quickly and easily on our website; or if requested, based on your consent (which can be revoked at any time).
Our website uses the following plug-ins:
NinjaFirewall
We use NinjaFirewall, provided by NinTechNet, 38, Soi Ladprao 94, Wang Thonglang, Bangkok 10310, Thailand
(see https://nintechnet.com/) on our website to protect our website from unauthorised access and to ward off unwanted network access.
The IP address required for the firewall to function is stored in anonymised form by removing the last three digits. These anonymised IP addresses are stored on our own server for 30 days and then deleted. No personal data whatsoever is transferred to the plug-in provider.
Ninja Firewall uses standard authentication cookies to whitelist the administrator. Cookies are then set when an administrator logs into the management console. Cookies do not apply for visitors to the protected website. No personal data is collected, stored or processed about visitors.
Contact Form 7
We use Contact Form 7, a piece of open source software, developed by Takayuki Miyoshi and others (for more information, see https://de.wordpress.org/plugins/contact-form-7/).
Contact Form 7 is used to manage contact forms on our website. Form data that you enter is sent to us by e-mail and stored on our e-mail server. The data may also be sent to you as a website visitor by e-mail, i.e. stored on your own e-mail server. In addition, this data will be stored on our web server in Switzerland.
Last updated: September 2023
1Other legal requirements (e.g. in respect of duties of retention) and overwhelming interests to the contrary can restrict these rights.
.