This Privacy Policy outlines the applicable principles, policies, and procedures regarding the collection and processing of personal information provided by users (hereinafter also referred to as “you” or “your”) when using the services operated by Topmed AG (hereinafter also “the operator,” “we,” “us,” or “our”) through the Enmedify platform (hereinafter “the platform”). It also informs users about their data protection rights.
The platform is intended for users in Switzerland and has been developed in accordance with the principles of Swiss law. Unless otherwise stated, the use of the platform and the services offered on it is limited to Swiss territory. Use of the platform requires that the user is of legal age.
The data controller within the meaning of the Swiss Data Protection Act (DSG) and, where applicable, the EU General Data Protection Regulation (GDPR) is:
Topmed AG
Steinenberg 23
4051 Basel
CH-ID: CH-270.3016429-9
Everyone has the right to privacy and protection from the misuse of their personal data. The operator takes the protection of users’ personal data seriously and complies with all applicable data protection regulations and this Privacy Policy.
The operator uses personal data exclusively to provide and continuously improve its services. By using the platform, you consent to the collection and processing of your information in accordance with this Privacy Policy. If you do not agree to these terms, you must refrain from using the platform and the services offered through it.
This Privacy Policy constitutes an integral part of the General Terms and Conditions (GTC) of the platform and must be accepted together with them before using the platform.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
We process personal data that you — as a user — or third parties (e.g., your treating physician) voluntarily provide to us with your consent. This may occur, for example, when you register on the platform, use our services, complete forms or questionnaires, contact us via email or other communication channels, or subscribe to our newsletter.
Personal data:
Before using our services, you must register in order to create a user account. For this purpose, you are required to provide the following information:
Depending on the specific service you choose to use, additional personal data may be collected. In particular, this may include information relating to your health status or medical background. By voluntarily providing such sensitive (health-related) information, you expressly consent to its processing by the operator and, where applicable, by authorized service providers, as described in this Privacy Policy.cessing of this data by the operator and other service providers, as described in this privacy policy.
Usage data:
When you use our services, certain data is automatically collected. Usage data may include information such as:
Usage data is evaluated exclusively for internal analytical purposes by the operator or, where applicable, by authorized third parties in anonymized form. Such evaluation does not involve the processing of identifiable personal data.
Data Provided by Third Parties
While using our services, you may have the option to share data collected by third parties with the operator. If you choose to transmit third-party personal data or other sensitive information (including health data) to us (e.g., via the platform), you confirm that you have obtained the necessary authorization and consent from the relevant third party to do so.
The use of the services and in particular the platform is voluntary and all consents given can be withdrawn at any time without giving reasons.
Processing by the operator:
The operator processes all personal data in accordance with applicable data protection legislation, in particular the Swiss Data Protection Act (DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
For the purposes of this Privacy Policy, “processing” refers to any operation or set of operations performed on personal data, regardless of the means or procedures used — including, but not limited to, the collection, recording, storage, use, modification, disclosure, transmission, archiving, deletion, or destruction of data.
The operator can process personal data for the following purposes:
- To provide and maintain the services, including monitoring the use of the services, and to maintain the secure and stable operation of the platform.
- To fulfill the contract: To provide the user with the requested services or to fulfill another contract that you have concluded with the operator: Currently, the services offered via the platform include, for example, the provision of the infrastructure for the remote treatment of users by our partner doctors (telemedicine), the transmission of prescriptions issued to the user by the partner doctor via the platform to Partner pharmacy, billing and collection of Compensation for services provided by our partner doctors and corresponding payment transactions. The user account also contains the corresponding, up-to-date payment information, which is used to pay for the paid services and to enforce corresponding claims.
- To manage the user account, in particular for registration to use the platform: The personal data provided by users can enable users to access various functions of the services that are available to users as a registered user.
- To contact users: To contact users by email, telephone, SMS or other equivalent forms of electronic communication, for example to answer/process users' inquiries or to remind them of a booked appointment; to provide information regarding updates, security updates or informative messages about the features, products or contracted services; to send newsletters or push notifications (if the user has agreed to this).
- To provide users with news, special offers and general information about other goods, services and events that the operator offers and that are similar to those that users have already purchased or enquired about, unless you have objected to receiving such information.
- To comply with legal and regulatory obligations to which we are subject.
- For other purposes: The operator may use users' information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of advertising campaigns and evaluating and improving users' services, products, marketing and experience.
Disclosure/transfer to third parties:
The operator may disclose or share users' personal data in the following situations:
- To service providers: The operator may share personal data with service providers to provide the services to users or to contact users to monitor and analyze the use of the services.
- To sub-contract data processors: The operator can share information with sub-contract data processors (e.g. IT suppliers).
- As part of transactions/business transfers: The operator may disclose user information in order to evaluate or carry out a merger, sale, restructuring, reorganization, dissolution, or other sale or transfer of some or all assets, whether as part of a continuation or as part of an insolvency, liquidation or similar procedure in which personal data stored by the operator about the users relates to the transferred assets Can belong to values.
In all these cases, recipients are required to comply with this privacy policy and all applicable data protection laws and to keep personal data confidential.
The operator may disclose or share personal data for any other purpose with the consent of the users.
In addition, the operator may disclose personal data if this is necessary to:
- to comply with a legal obligation;
- to protect your own overriding interests, e.g. to prevent or investigate possible misconduct in connection with the services;
- to protect the interests of other users of the services or the public;
- to protect yourself from legal liability;
- to cooperate with the authorities on the basis of official orders; or
- to enforce users' obligations.
However, your personal data will neither be sold nor otherwise passed on to third parties who do not process this personal data on our behalf and in accordance with our instructions.
Insofar as the use of the services requires the transmission of information subject to medical secrecy (e.g. service statement via the platform with reference to mediated medical services, transmission of a prescription via the platform, etc.), BY ACCEPTING THE TERMS AND CONDITIONS AND THIS PRIVACY STATEMENT, THE USER RELEASES THE RESPECTIVE DOCTOR, PHARMACIST AND THEIR ASSISTANTS FROM MAINTAINING PROFESSIONAL SECRECY WITH REGARD TO THE OPERATOR.
Users' personal data is stored on servers located in Switzerland.
The operator only stores personal data for as long as is necessary for the purposes set out in this privacy policy. The operator stores and processes users' personal data to the extent necessary to comply with legal obligations (for example, when the data must be retained to comply with applicable law), resolve disputes, and enforce our legal agreements and policies.
The operator will also store usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, unless this data is used to strengthen security or improve the functionality of the services, or the operator is required by law to keep this data for longer periods of time.
Users' personal data is stored on servers located in Switzerland and is generally processed by us exclusively in Switzerland. Some of our service providers are located in the EU/EEA1- abroad, which is why there may also be a transfer/disclosure of data to EU/EEA countries and the processing of personal data there. The operator has concluded written contracts with all recipients, which oblige the recipient to maintain confidentiality and to comply with this privacy policy and the requirements of the DSG and, where applicable, the GDPR.
A transfer to countries outside Switzerland or the EU/EEA will not take place without prior information from users.
The operator will take all reasonable steps to ensure that users' data is treated securely and in accordance with this privacy policy. In principle, we do not transfer any personal data outside Switzerland or the EU/EEA. If the transfer of personal data to a country outside the EU/EEA would be necessary, this only takes place if there are contractual clauses or other guarantees that comply with data protection legislation (e.g. conclusion of EU standard contractual clauses, which are also recognized in Switzerland).
By contacting us at the address given at the end of this privacy policy, you as a user can obtain information at any time about which countries and to which categories of recipients we disclose and/or transfer your personal data and what measures (guarantees) we have taken to protect it.
To exercise your rights as a user and in general if you have any questions about the processing of personal data by the operator, you can contact us at the address given at the end of this privacy policy.
As a user of the platform, you have the right to request that your personal data be corrected or deleted. You can independently manage, correct and delete certain information as part of your user account.
You are also required to keep your personal information up to date and make appropriate changes/deletions by logging into your user account and making the appropriate corrects/deletions in the account settings area. Alternatively, you can send us a corresponding request for correction or deletion (see contact details below).
Please note that as an operator, we must retain certain information if there is a legal obligation or a lawful basis for doing so. Should this be the case and should we be unable to comply with your request for correction and/or deletion based on this, we will inform you of this, giving reasons.
Users have the right to receive information about the personal data we process about them, their origin and the categories of recipients, and the purpose of data processing at any time, free of charge.
If you send us a corresponding request, please note that we must be able to clearly identify you, otherwise no information can be provided. Accordingly, we ask you to include a copy of your identity card or passport with your request. Only with such proof are we able to ensure that the information and/or access is only made available to the authorized and affected person.
Please note that we may refuse, restrict or postpone the information for certain reasons (e.g. overriding interest of third parties, obviously unfounded or querulatory request, etc.). If there are such reasons, we will let you know.
Upon request, users have the right to obtain a copy of their personal data stored electronically by us in order to use it for further use by another service or organization.
We may refuse, restrict or postpone the release or transfer of personal data for certain reasons (e.g. overriding interest of third parties, obviously unfounded or querulatory request, etc.). If there are such reasons, we will let you know.
If you have any further concerns or wish to object to processing for specific purposes or to withdraw your consent, please also contact us using the contact details below. We will do our best to accommodate your request.
If we are unable to help you, you also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) and/or with a competent EU supervisory authority (depending on the competence or applicability of the GDPR).
We have implemented the necessary and appropriate technical and organizational measures to protect your personal data from loss, transfer and unauthorised access. In particular, they include the issuance of instructions, training, IT and network security solutions, password protection, access controls and restrictions, as well as other controls, pseudonymizations and encryption. We regularly review our security policies and processes together with our IT specialists to ensure that your data is protected.
However, users should note that no method of transmission over the Internet or electronic storage is 100% secure. Although the operator uses reasonable means to protect users' personal data, absolute security cannot be guaranteed.
The operator may update and/or change this privacy policy from time to time. The operator will inform users of significant changes by publishing the new privacy policy on the website https://www.enmedify.ch/datenschutz is published, users are notified within the application or a corresponding message is sent to the contact details provided by the user.
Continued use of the operator's services or platform following such changes means that users agree to the revised privacy policy.
Users are advised to check this privacy policy regularly for changes. Changes to this privacy policy are effective as soon as they appear on the website https://www.enmedify.ch/datenschutz be published.
This privacy statement is subject to the substantive law of Switzerland and must be interpreted accordingly.
To the extent permitted by law, the courts at the operator's registered office (currently: Freienbach SZ, Switzerland) are exclusively responsible for all disputes arising from or in connection with this data protection declaration.
We use cookies to improve your experience on our website and to provide you with personalized content and advertising. You can change your cookie settings and manage your consent at any time. To adjust your cookie settings, please visit our cookie management page. Here you can find detailed information about the cookies we use and your Set preferences.
If you have any questions about this privacy policy, inquiries, concerns or complaints, you can contact us using the following contact details:
Topmed AG
Steinenberg 23
4051 Basel
email: info@topmed.ch
Site: https://www.enmedify.ch/
Last updated: August 2024
1 European Economic Area.
.svg)
