Last updated: Winterthur, August 31, 2023
When you visit our website, the server automatically logs general technical information. This data includes, for example, the IP address and operating system of your device, the date and time of your visit, the website you came from, and the type of browser you use to access our website.
If you contact us through the website (e.g., through the booking tool, WhatsApp, email, or any other means of communication made available through the website), we process your contact details and other personal data you provide us with, as well as, if applicable, technical data that may accrue during the use of the respective means of communication.
When you use our services (e.g., book and attend appointments, visit us for a suitability assessment, treatment or check-up, etc.), we process the following personal data about you:
Identification data (e.g., name, ID, etc.);
Contact details (e.g., email, address, phone number, etc.);
Health data (e.g., visual function, astigmatism, general health, medications taken, etc.);
Other relevant personal data you provide to us;
Technical data, if the process takes place through our website (including integrated services) (see above, "When you visit our website").
When you apply for a position with us, we collect and process the necessary personal data to review your application and conduct the application process. This includes, in particular:
Identification data (name, first name, etc.);
Contact details (e.g., email, address, phone number, etc.);
Information about your professional background and qualifications;
The content of your application;
Other data necessary for the review of your application.
You submit most of this data directly to us as part of your application. In addition, we process data from other sources, in particular from references (if you have consented to references being obtained), as well as from publicly accessible sources (e.g. professional social networks, the internet).
During our business activities, we process personal data of other individuals, such as our contacts at business partners, suppliers, and service providers, or persons who are interested in our services. The personal data we process in this context primarily includes identification data, contact details, and communication content, as well as other relevant personal data.
We receive this data either directly from you or from other sources, such as your coworkers, our business partners and other contacts, as well as from publicly available sources (e.g. social networks).
We process your personal data:
to prepare, conclude, fulfill, and enforce contracts within the scope of our business activities. This includes contracts related to our services: in this context, we also process your health data, for example, for the preparation, execution, and follow-up of treatments.
based on and within the scope of your consent, if applicable. You can revoke your consent at any time.
to comply with legal obligations (e.g., retention of patient records).
as part of our interests to communicate with you and third parties (even outside the preparation or conclusion of a contract), to provide the website, to optimize your user experience, to maintain and potentially expand our business relationship with you, to improve, expand, and market our offerings, to ensure IT security and data protection, and to enforce, defend, or avert legal claims.
When you use our services, we may create evaluations and statistics based on your data to improve, expand, and market our offerings. Whenever possible, your personal data will be anonymized before evaluation.
We may contact you to invite you to rate our services or to seek feedback on a rating you have submitted. Submitting a review or feedback on it is always voluntary.
Based on our interest in informing individuals interested in our offerings about new developments, we can send you marketing information (e.g., via a newsletter). These marketing emails may contain visible or invisible images. When you download these images from the server, we can see whether and when you have opened the email. This allows us to better understand how you use our offerings and customize them for you. You can turn off this feature in your email program. You also have the option to opt out of receiving our marketing emails at any time.
To fulfill a contract, protect our interests, or comply with legal requirements, it may be necessary for us to disclose your personal data to third parties. This includes, in particular:
our IT service providers, manufacturers of diagnostic and treatment devices with cloud functions, as well as third-party providers in the areas of payment transactions, billing, collection, consulting, sales, and marketing;
third parties to whom we transfer our company or parts thereof, or with whom we merge;
cases where disclosure is necessary to (i) comply with legal obligations, (ii) ensure IT security and data protection, or (iii) enforce, defend, or avert legal claims.
In this context, we also transfer personal data abroad. In particular, we use IT service providers with data locations in the EU or the EEA. We limit the transfer of personal data outside Switzerland, the EU, and the EEA as far as possible, but it cannot be entirely avoided. If the respective recipient country does not have a level of data protection recognized by Switzerland, we use standard contractual clauses to ensure adequate data protection, where necessary and possible supplemented by additional security measures.
We do not sell or rent personal data to third parties.
We protect your personal data with appropriate technical and organizational security measures against accidental, unlawful, or unauthorized manipulation, deletion, alteration, access, disclosure, use, or loss.
We have a state-of-the-art IT infrastructure.
Health data in our patient database is stored redundantly in Frankfurt (DE) and Paris (FR);
Our employees only have access to your personal data to the extent necessary or reasonable for the fulfillment of their tasks.
We store your personal data only for as long as and to the extent necessary for the purposes described or for legal reasons.
For legal reasons, data related to analyses and treatments (patient records) is retained for 20 years.
If provided for and subject to the conditions of the applicable data protection laws, you have the following rights in connection with your personal data:
Right to access your personal data;
Right to have inaccurate personal data rectified;
Right to erasure ("right to be forgotten");
Right to restrict the processing of your personal data;
Right to data portability (transfer of your personal data to you or a third party);
Right to object to the processing of your personal data.
Please note that exceptions apply to these rights. In particular, we may be obliged or entitled to further process your personal data to fulfill a contract, to protect our legitimate interests such as enforcing, defending, or averting legal claims, or to comply with legal obligations. In these cases, we can or must reject certain requests or comply with them only to a limited extent.
If you are not satisfied with how we process your personal data, you have the right to file a complaint with the relevant supervisory authority (Federal Data Protection and Information Commissioner, FDPIC).
Please contact us first before filing a complaint. This way, we can try to resolve your issue directly. The easiest way to contact us is by email at [email protected].
Our website may link to third-party websites that are not operated or controlled by us. We are not responsible for whether and how these third parties comply with data protection regulations.