Data protection

We are committed to protecting the personal data entrusted to us. Below you will find detailed information on how we process your personal data at VAMED Management und Service Schweiz AG.

Thank you for your interest in our website.
The protection of your personal data and your privacy is of particular concern to us. In this privacy policy, we inform you about the processing of your personal data when you visit our website.

1. Controller and data protection advisor
VAMED Management und Service Schweiz AG ("VAMED Switzerland") is responsible for this website under data protection law.
Our data protection advisor can be contacted as follows:

• by letter to VAMED Management und Service Schweiz AG, Data Protection Advisor, c/o Rehaklinik Zihlschlacht AG, Hauptstrasse 2-4, 8588 Zihlschlacht
• by telephone on: +41 71 424 38 28
• by e-mail to: datenschutz@vamed.ch

2. Processing of personal data when visiting our website

2.1 Processing of access data
When you visit our website, we store the access data in so-called web server log files. The following data is collected from you:

• IP address
• Date and time of access
• Browser
• Operating system
• Your internet service provider

This data is statistically evaluated in order to further improve the website and make it more user-friendly, to find and rectify errors more quickly and to manage server capacities. We will only use this data in personal form for the purpose of legal prosecution if there is a concrete indication of illegal use of our website.

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. If the data is stored in log files, this is the case after 3 months at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

2.2. Cookies

2.2.1. Use of cookies
We use so-called cookies to make visiting our website attractive and to enable the use of certain functions, as well as to support our marketing activities. These are small text files that are stored on your end device. They enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. However, deactivating cookies may limit the functionality of our website.

For all cookies that are not required for the presentation of the website or the provision of a service requested by you, data processing is based on your express consent in the cookie banner, which you can change or revoke at any time.

Cookies are deleted as soon as the purpose of storage no longer applies, at the latest after one year. The specific storage periods for each cookie set can be found in our cookie banner.


2.2.2 Data protection settings with Datareporter GmbH
We use the services of the provider Datareporter GmbH, Zeileisstrasse 6, 4600 Vienna, Austria (“Datareporter”) on our website for the provision of our cookie banner. The system controls the use of third-party cookies, technical measures and cookies based on consent given or refused.

Datareporter processes the following data for the provision

• Date and time of your visit to our website
• Privacy settings via our cookie banner,
• IP address and browser attributes,

and uses cookies to store this information locally in your browser. For this purpose, your individual setting is stored in a cookie so that the setting is taken into account when you visit our website again. You can access the cookie settings at any time via the “Cookie settings...” icon at the bottom left of the screen.

The purpose of data processing by Datareporter is to provide and manage the consent given by our website visitors in order to comply with data protection-compliant consent management.

The processing of data for the provision of a cookie banner is absolutely necessary for the operation of the website.

Further information about Datareporter can be found at https://www.datareporter.eu/.

2.3 Integration of third-party services and content
We use content or service offerings from third-party providers within our online offering in order to integrate their content and services, such as videos or fonts ("content").

This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as web beacons) for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website.

The information may also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as being linked to such information from other sources.

2.3.1 Matomo Analytics
We use the open source software Matomo (https://matomo.org/). This is a web analysis platform from InnoCraft Limited, 7 Waterloo Quay, PO625, 6140 Wellington, New Zealand, which helps us to optimize our website. For this purpose, cookies are used to collect information about website usage (e.g. pages accessed, duration of access, browser data) so that usage behavior can be evaluated and vulnerabilities identified. Your IP address is immediately anonymized, so that you remain anonymous as a user. The information obtained about website usage is transmitted exclusively to our servers. The data collected will not be passed on to third parties.

2.3.2 YouTube
We have integrated YouTube videos on our website. This allows us to present interesting videos to you directly on our site. YouTube (https://www.youtube.com/) is a video portal that is operated in the European Economic Area (“EEA”) and in Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Ireland”). When you visit a page on our website that has a YouTube video embedded, your browser automatically connects to the YouTube or Google servers. Various data is transmitted (depending on the settings). In particular, this involves the IP address and our URL. If you are logged into your YouTube account, YouTube can usually assign your interactions on our website to your profile using cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your internet provider. Other data may include contact details, any ratings, the sharing of content via social media or adding to your favorites on YouTube.

Google Ireland is responsible for all data processing in connection with YouTube in the EEA and Switzerland. Further information on data processing by Google Ireland can be found in Google's privacy policy: https://www.google.com/policies/privacy/.

2.3.3 Meta Pixels (Facebook Pixel)
The “Meta Pixel” of the social network Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is used on our website. This allows us to track the behavior of visitors after they have been redirected to our website by clicking on a Facebook or Instagram ad. This enables us to evaluate the effectiveness of the meta ads for statistical and market research purposes and to optimize future advertising measures.

The data collected in this way is anonymous to us, i.e. we cannot draw any conclusions about the identity of the users. However, Meta stores and processes the data so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes, in accordance with Meta's data policy.

You can object to the use of the Meta Pixel at any time. Further information on this and on your setting and objection options can be found in Meta's privacy policy and in our cookie settings.

 
3. Links
The website contains links to other websites. These links to websites of other Internet participants are provided free of charge as a service to cover the accessing party's need for further information. VAMED VAMED Switzerland has no influence on their content. VAMED Switzerland accepts no liability whatsoever for this content. The respective provider of the linked website is solely responsible for the content and accuracy of the information provided there.

4. Data processing in connection with the contact form
We look forward to hearing from you.

4.1 Data processing
VAMED Switzerland processes the following personal data when you contact us via the contact form:

• Title
• First name
• Last name
• Company (optional)
• Address (optional)
• Postcode (optional)
• City (optional)
• Country (optional)
• E-mail address
• Telephone number (optional)
• Your individual message

4.2 Purpose of processing
The personal data you provide when contacting us will be processed for the purposes of establishing contact and, if applicable, establishing and processing business relationships.

4.3 4.3 Storage period
The data processed for the aforementioned purposes will be processed for the duration of the business relationship or beyond until the expiry of statutory retention periods.

5. Empfänger
Insofar as this is useful for the purposes of processing the data, we will transfer parts of your personal data to the following recipients:

• Service providers used by us (e.g. agencies and hosting providers)
• Administrative authorities, courts and bodies governed by public law
• Other recipients specified by the user

We do not transfer any personal data to countries outside Switzerland and the EEA.
All processors have given us a contractual obligation to comply with the applicable data protection standards.

6. Data security
The security of your personal data is of particular concern to us.

VAMED Switzerland takes appropriate technical and organizational measures, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the likelihood and severity of the risk to the rights and freedoms of natural persons.

In this sense, the following measures, among others, are taken to protect your data and to secure it against loss, destruction, access, modification and dissemination by unauthorized persons:

• Ensuring the confidentiality, integrity, availability and resilience of the systems and services in connection with the processing;
• Ensuring rapid restoration of the availability of personal data in the event of a physical or technical incident;
• Implementation of procedures to regularly review, assess and evaluate the effectiveness of the technical and organizational measures to ensure the security of the processing.

Please note that it is nevertheless not possible to guarantee absolute protection. We therefore accept no liability for the disclosure of information or otherwise unlawful processing of personal data. Furthermore, neither confidentiality nor data security can be guaranteed when communicating by e-mail.

7. Your rights
As a user of our website, you have the following rights, subject to legal exceptions and restrictions:

• Right of access: You have the right to request confirmation from VAMED Switzerland as to whether your personal data is being processed. In addition, you have the right to receive further information about the specific purposes of the processing, categories of personal data, recipients or categories of recipients of personal data and the duration of storage.
• Right to rectification: You have the right to request that VAMED Switzerland correct your personal data. This right includes the correction of incorrect data and the completion of incomplete personal data.
• Right to erasure: You have the right to request that VAMED Switzerland delete your personal data.
• Right to restriction of processing: You have the right to request that VAMED Switzerland restrict the processing.
• Right to data portability: You have the right to receive the personal data concerning you, which you have provided to VAMED Switzerland, in a structured, commonly used format and to request that VAMED Switzerland transmits those data to another controller.
• Right to object: You have the right to object at any time to the processing of your personal data in connection with this website.
• Revocation of declarations of consent: You have the option of revoking consent given to VAMED Switzerland at any time.

8. Contact
If you have any questions about this privacy policy or your rights, please feel free to contact our data protection advisor. 

Data protection officers and advisors
VAMED Management und Service Schweiz AG (“VAMED Switzerland”) is the data controller within the meaning of data protection legislation.

Our data protection advisor can be reached as follows:

• by letter to: VAMED Management und Service Schweiz AG, Data Protection Advisor, c/o Rehaklinik Zihlschlacht AG, Hauptstrasse 2-4, 8588 Zihlschlacht
• by telephone on: +41 71 424 38 28
• by email to: datenschutz@vamed.ch

Purposes of data processing

1. Compliance with legal requirements
   We are subject to legal and regulatory requirements that oblige us to process business communications and accounting-related documents (including the personal data they contain).
   
   
2. Contract fulfillment
   Your personal data is processed for the purpose of taking steps prior to entering into a contract/in the procurement process (e.g. drawing up contracts, offers for services) and for the fulfillment of contractual obligations/execution of the contract as well as the enforcement of contractual claims.
   
   
3. Protection of legitimate interests
   In order to protect the legitimate interests of VAMED Switzerland or its group companies, it may be necessary to process your personal data, taking into account your legitimate interests. A legitimate interest of VAMED Switzerland exists in particular if you (or your client or employer) have entered into business relations with us, have submitted an offer for the provision of services to us or have carried out such an offer, or if you/your client/your employer are in contact with us because you/he/she work for VAMED Switzerland or would like to work for us.

Data categories

We process personal data that we receive from our contractual partners and from you in the context of the procurement and performance of services and business communication. Furthermore, we process personal data that we have legitimately received from other companies and persons and use for further business development and business relationships. We also process personal data that we have legitimately obtained from publicly accessible sources and are permitted to process. In particular, the following categories of data may be processed:

• Personal master data, e.g. first and last names, title, date of birth, client/employer, position, function, contact person
• Communication data, e.g. address, phone numbers, email address, fax number, communication content
• Information on professional background, e.g. qualification documents, CV
• Contract and agreement data, e.g. commercial register information, proof of insurance, information on economic and technical performance (including references), correspondence, economic documents (e.g. balance sheets, planning and profit and loss statements), compensation claims, bank data, invoices and billing statements, credit information, data on payment behavior, other compliance data, and data regarding the provision of services and their quality.

IIf you use procurement software, the following data may also be processed:

• log data, e.g. login history, change history.

Data transfer

We do not transfer your personal data to any country outside Switzerland or the EEA.

Your data is used by the controller and the group companies involved in the project. Only the organizational units receive personal data or contractual information that they need to perform their tasks, including answering your inquiries. In addition to the direct project participants, these may be the organizational units for legal, finance & controlling and IT.

In addition, your data may be transmitted to customers and, for the purpose of checking or evaluating a procurement, to reference providers, lawyers, experts and other third parties involved in the project (e.g. subcontractors, external service providers, manufacturers). If necessary, data must be passed on to authorities and public bodies.

Furthermore, third parties may be used for data processing in order to carry out the tasks of VAMED Switzerland. In particular, third parties are involved if a third party can provide a special service for handling business processes. This may involve mere data storage, maintenance of IT systems or the provision of entire software applications (e.g. procurement software). Insofar as it is legally necessary, all involved third parties are contractually obliged to maintain data protection and data security.

Data storage

Personal data is stored by VAMED Switzerland for as long as is necessary for legal or business purposes and is then deleted. In particular, personal data is stored for the period during which claims can be asserted against VAMED Switzerland or other legal or contractual requirements require storage.

• In particular, the following criteria are relevant for determining the storage period:
• Ongoing performance of the contract, including rectification of defects
• Relevant limitation periods
• Statutory retention requirements (e.g. company and tax law)

Data security

VAMED Switzerland has implemented technical and organizational measures to ensure that personal data is protected against loss, accidental destruction, unauthorized alteration and unauthorized access. Both technical and organizational measures are continuously reviewed by VAMED Switzerland and improved as needed to ensure an appropriate level of data protection at all times. 

Please note that it is not possible to guarantee absolute protection. We therefore do not accept any liability for the disclosure of information or any other unlawful processing of personal data. Furthermore, neither confidentiality nor data security can be guaranteed for e-mail communications.

Your rights
You have the right to information, correction, deletion, restriction of processing and data portability, subject to legal exceptions and restrictions. To exercise your rights, please contact the data protection officer. In addition, you may have the right to object to the processing. We will no longer process the personal data in the event of a justified objection, unless the processing can be justified otherwise.

Consent that has been granted can be withdrawn at any time. Please note that a withdrawal is only effective for the future. Processing that has taken place before the withdrawal is not affected. In the event of a withdrawal, VAMED Switzerland will make the relevant declarations and take the actions necessary for the deletion of your personal data, unless the processing can be justified otherwise.

The provision of personal data for procurement processes is generally not mandatory. If the information requested by VAMED Switzerland that is necessary for the conclusion of the contract, the execution of the contract or the fulfillment of legal obligations is not provided, you must expect that no conclusion of the contract is possible or that the contractual relationship will be terminated, that the contract cannot be fulfilled by VAMED or that other appropriate measures may have to be taken.

Contact

If you have any questions about this privacy policy or your rights, please do not hesitate to contact our data protection officer.