Privacy Statement of Alpinamed AG

Here’s the English translation of the privacy statement you provided:

1. What is the purpose of this privacy statement?

Alpinamed AG (hereinafter also “we”) collects and processes personal data about you or about other people (“third parties”). In this statement, we use the term “data” as a synonym for “personal data.”

“Personal data” means data relating to an identified or identifiable person, i.e., whose identity can be inferred from the data itself or in combination with other relevant information. “Special categories of personal data” are personal data that receive particular protection under applicable data protection law. Examples include data revealing racial or ethnic origin, health data, information on religious or philosophical beliefs, biometric data for identification purposes, and trade union membership. Information on the data we process can be found in Section 3. The term “process” refers to any operation performed on personal data, such as collection, storage, use, modification, disclosure, or deletion.

This privacy statement describes what we do with your data when you use www.alpinamed.ch
and other websites we own (collectively referred to as the “website”), purchase our services or products, enter into a contract with us, communicate with us, or otherwise interact with us. Where applicable, we will inform you in advance in writing of any additional processing not covered in this statement. We may also provide separate information about the processing of your data, e.g., in consent statements, contractual terms, additional privacy statements, forms, or notes.

If you provide data about other people, such as family members or colleagues, we assume you are authorized to do so and that the data is accurate. By providing data about third parties, you confirm this. Please also ensure that these third parties are informed of this privacy statement.

This privacy statement complies with the EU General Data Protection Regulation (“GDPR”), the Swiss Federal Act on Data Protection (“FADP”), and the revised Swiss Federal Act on Data Protection (“revised FADP”). However, applicability and scope depend on each individual case.

2. Who is responsible for processing your data?

Under data protection law, Alpinamed AG, 9306 Freidorf (hereinafter “Alpinamed”) is responsible for the processing described in this privacy statement, unless otherwise specified in particular cases, e.g., in other privacy statements, forms, or contracts.

You can contact us regarding data protection questions and to exercise your rights under Section 11 as follows:

Alpinamed AG
Alte Landstrasse 11
9306 Freidorf
admin(at)alpinamed.ch

3. What data do we process?

We process various categories of data about you. The most important categories include:

Technical data: When you use our website or other electronic services, we collect your device’s IP address and other technical data to ensure functionality and security. These also include logs recording the use of our systems. Technical data is generally retained for six months. To ensure functionality, we may also assign you or your device an individual code (e.g., a cookie). Technical data usually cannot identify you directly. However, in the context of user accounts, registrations, access controls, or contract execution, it can be associated with other data categories (and therefore, with you).

Registration data: Some services, such as contests, login areas, newsletters, etc., require an account or registration, either directly with us or via external providers. You must provide certain data, which we also collect regarding your use of the service. Data is deleted when the account or registration is deleted.

Communication data: When you communicate with us via admin@alpinamed.ch
, other email or phone contacts, mail, or other communication channels, we record the exchanged data, including contact details and communication metadata. If calls or video conferences are recorded for training or quality assurance, you will be informed. Such recordings are only used according to our internal guidelines. If you do not wish to be recorded, inform us or leave the session. If identity verification is required (e.g., for information requests), we collect identifying data (e.g., ID copy). These data are generally stored for 12 months after the last contact. Emails in personal inboxes and written correspondence are typically retained for at least 10 years. Video conference recordings are generally stored for 24 months.

Basic data: “Basic data” refers to essential data we need, in addition to contractual data, for managing contracts, business relationships, marketing, and advertising. Examples include name, contact information, role, bank information, birth date, customer history, authorizations, and consent statements. Basic data is collected from you, your organization, third parties (partners, associations, address resellers), or public sources and retained for up to 10 years from the last interaction. Marketing-only contacts are generally retained for up to 2 years.

Contractual data: Data collected in connection with contract conclusion or execution, including contract information, performance data, pre-contractual information, and reaction data (e.g., complaints). Data is collected from you, partners, third parties involved, or public sources. Retention is generally 10 years after last contract activity or at least until contract end.

Behavioral and preference data: Depending on the relationship with you, we collect behavioral and preference data to better tailor products, services, and offers. This may include online behavior, combined with third-party information. Data is anonymized or deleted when no longer relevant, typically up to 24 months.

Other data: Other situations may require data collection, e.g., administrative or legal proceedings, health protection measures, photos/videos/audio recordings, access control, event participation. Retention periods vary from a few days to several years depending on purpose.

Most of these data are provided by you (e.g., forms, communications, contracts, website use). Some technical data is unavoidable (e.g., using the website). Behavioral and preference data may be optionally withheld.

We may also collect data from public sources or other companies in our group, authorities, or third parties (credit agencies, address resellers, associations, contractual partners, online analytics services).

4. For what purposes do we process your data?

We process your data for purposes described below, including online purposes (Sections 12 and 13). These purposes and their underlying objectives constitute our legitimate interests and, if applicable, those of third parties.

Communication with you, responding to inquiries, asserting rights, and documenting communication.

Contract management, administration, and execution.

Marketing and relationship management, including personalized advertising via newsletters, email, mail, phone, events, contests, and free services (vouchers, invitations). You may object at any time.

Market research, service and operational improvement, and product development.

Security and access control.

Legal compliance and regulatory obligations.

Risk management, operational organization, and corporate development.

Internal processes, administration, training, and quality assurance.

5. On what basis do we process your data?

Consent: For certain processing (e.g., sensitive data, advertising or behavioral analysis), consent is obtained and can be revoked at any time.

Contract: Necessary for contract preparation or execution.

Legitimate interests: For communication, marketing, understanding markets, managing operations, ensuring legal compliance.

Sensitive data: May be processed under other legal grounds, e.g., legal claims or rights defense.

6. Profiling and automated decisions

We may automatically evaluate certain personal characteristics (profiling) to determine preferences, detect abuse, perform statistical analysis, or plan operations. Profiling is proportionate and reliable, with measures against misuse. Significant legal effects trigger manual review.

7. Who do we share your data with?

Categories of recipients include:

Service providers in Switzerland and abroad (IT, transport, advertising, cleaning, surveillance, banks, insurance, collection agencies).

Contractual partners and clients (e.g., performance beneficiaries, sponsors, advertisers).

Authorities (courts, regulatory bodies) as required by law.

Other parties as needed (media, associations, publications).

Recipients may further engage third parties, making data accessible to them. Disclosure may also occur for confidential data or legally mandated reasons.

8. Are personal data transferred abroad?

Yes, recipients may be located in Switzerland, Europe, or, in exceptional cases, worldwide. Data transfers to countries without adequate legal protection require contractual safeguards (e.g., EU standard contractual clauses). Internet traffic may also pass through third countries.

9. How long do we retain your data?

Data is retained as long as required for processing purposes, legal retention periods, documentation, or technical necessity. Once no longer required, data is deleted or anonymized.

10. How do we protect your data?

We implement appropriate technical and organizational measures to protect confidentiality, integrity, and availability of personal data against unauthorized processing, loss, alteration, disclosure, or access.

11. Your rights

You have the following rights under applicable law:

Request confirmation of data processing and access to your data.

Request correction of inaccurate data.

Request deletion of data.

Request data portability.

Withdraw consent at any time.

Request additional information necessary to exercise these rights.

In the case of automated decisions, request human review.

To exercise your rights, contact us in writing, in person, or by email (see Section 2). Verification may be required (e.g., ID copy). Rights may be subject to exceptions or restrictions. Complaints may be submitted to supervisory authorities (links provided for EEA, UK, and Switzerland).

12. Online tracking and advertising

Our website uses tracking technologies (cookies, similar techniques) to recognize users, analyze visits, optimize services, and personalize content. Cookies include:

Necessary cookies: Required for basic site functionality.

Performance cookies: Used for analytics (e.g., Google Analytics) and require consent.

Marketing cookies: Used for targeted advertising by us and our partners.

Third-party offers (social media, analytics) may also track data. Users can block or delete cookies via browser settings.

Current providers include: Google Analytics, and social media platforms such as Facebook, LinkedIn, Instagram, YouTube, Mailchimp, Shopify, Surveymonkey.

13. Social media pages

We operate social media pages and collect data when you interact with us (comments, messages, visits). Platforms also track your use and process data for their own purposes. We process these data for communication, marketing, and market research. Rights and information can be exercised according to the platforms’ privacy policies.

14. Changes to this privacy statement

This privacy statement is not part of a contract. It may be updated at any time. The version published on the website is current.

Last updated: 01/08/2023

Return to the Home Page