Privacy Policy
On the Rachis Clinic website, accessible from https://rachis.clinic, one of our main priorities is to protect the privacy of our visitors.
This privacy policy document contains the types of information that are collected and stored on rachis.clinic and how we use it. These terms and policy are governed by Swiss law. Updated on May 06, 2022
1. Introduction
RachisClinic SA, whose registered office is located at Rue des Jordils 40 in 1025 Saint-Sulpice (Switzerland) (hereinafter "RachisClinic", "We", "Us" or "Our"), provides patients (hereinafter "Patient(s)", "You", "Your" or "Yours") with specialized medical services for the treatment of the musculoskeletal system (hereinafter "Service(s)"). In addition to the Services that We provide to You, We conduct research to develop Our Services. We finally offer to the users (hereinafter "User(s)") of Our website "www.rachis.clinic" (hereinafter "Site") content dedicated to back problems.
In order to provide and develop Our Services and to provide back-related content on Our Site, We collect, use and disclose a certain amount of data about Patients and Users. When We talk about data, We refer to personal data. This is any information that allows Us to identify Patients and Users immediately or in combination with other information. In this respect, We are the data controller.
This Privacy Policy (hereinafter "Policy") sets forth:
• The conditions under which, RachisClinic processes data about Patients and Users, as well as the choices available to them regarding the collection, use and disclosure of such information in accordance with the Federal Data Protection Act and its implementing ordinance ;
• The conditions under which RachisClinic stores and reuses data relating to the health of Patients for research purposes in accordance with the Federal Law on Human Research and its implementing ordinance.
By using Our Services or/and accessing the Site, You acknowledge that You have read, understand and agree to be subject to all of the terms and conditions set forth in this Policy.
The designation of functions applies equally to women and men.
2. Processing of Your data in the context of the provision of Our Services
2.1 DATA THAT MAY BE PROCESSED
2.1.1 Data provided by the Patient
When You use Our Services, You will be asked to provide Us with certain data concerning Yourself, such as Your personal details, Your billing data, Your health data, Your health insurance or accident insurance data, Your data resulting from a disability insurance decision, etc. You can also, freely, communicate additional data to Us. When You request information from Us, by mail, e-mail or telephone, You may also share other data.
2.1.2 Data provided by Your physician
When the use of Our Services is prescribed by Your doctor, he or she communicates to Us a certain amount of data concerning You, such as Your personal contact information, Your health data, Your health insurance or accident insurance data, Your data resulting from a disability insurance decision, etc
2.1.3 Billing data
When You use Our Services, Your data necessary for payment is stored (e.g. name, first name, billing address, telephone number, AHV number, e-mail address, IBAN number, bank account number, date of consultation) as well as other data such as the name of Your health insurance company, accident insurance company or the number of Your disability insurance decision.
2.2 PURPOSE OF USE OF THE DATA
2.2.1 Provision of Benefits
We use Your data to provide Our Services, interact with You and respond to Your requests.
2.2.2 Information about Our Services
We use Your data to send You information about Our Services, unless You have objected. Your data may also be used for the development of Our Services in order to test Your interest in the creation of new Services.
2.2.3 Pursuit of Our legitimate interests
Your data may also be used to pursue Our legitimate interests, which include fraud detection, debt collection, and investigating any complaints We may receive from You or third parties.
2.2.4 Compliance with Our legal or regulatory responsibilities
We use your data to fulfill Our legal and regulatory obligations, such as keeping records or responding to requests from authorities.
3. Processing Your Health Data for Research Purposes
Our ability to diagnose and treat disease has advanced considerably over the past few decades. This progress has been possible thanks to the sustained effort of medical research in which several generations of doctors, scientists and patients have actively participated. An important part of this research relies on the use of health data.
With Your consent, which We obtain through Our admission form, and in parallel with the Services that We provide to You, We store and reuse Your health data for research purposes. Both in the context of Our Services and Our research, We process only "non-genetic" health data, i.e. data that are not related to Your genetic heritage.
When We conduct research on Our own, Your health data is processed in a non-coded form. If third parties are involved in such research (e.g., universities), Your health information is provided to them in encrypted form. The term coded means that all personal information is replaced by a code. The key that identifies which code corresponds to which individual is not passed on to third parties involved in the research. People who do not have the coding key are not able to identify you.
You have the right, at any time, to refuse to participate in this research or to revoke Your consent without having to justify Your decision. In this case, Your data intended for the research will be destroyed, subject to legal requirements. This does not apply to data already used. Your decision has no effect on Your medical treatment.
You have the right to be informed of the results concerning Your health or to renounce to receive this information.
4. Website
4.1 IN GENERAL
When Users browse and interact with Our Website, We use automated data collection technologies to collect certain data about them to understand their actions (e.g., which links were clicked, which pages were viewed), as well as other similar data and statistics (e.g., content response times, download errors, length of time spent on certain pages, type of browser used, or location of connection). This information is captured through automated technologies such as cookies. It is also collected through external tracking services (e.g., Google Analytics).
When Users allow a third-party social network (such as Facebook, YouTube, Dailymotion, etc.) to share with Us, We may receive any data that Users publicly share on that social network and data that is part of their profile. This may include basic account data (e.g., first name, last name, email address, gender, birthday, city of residence, profile picture, user ID, etc.) and any other data or activities that Users allow the third-party social network to share.
4.2 COOKIES
Cookies are text files that identify Users and store personal preferences (e.g., language choice) and technical information (e.g., clickstream and clickstream data).
We use cookies to facilitate access to the Site and to analyze traffic and Users and to identify malfunctions on the Site. It also allows Us to improve the User experience and the design and content of the Site.
The use of cookies can be disabled by selecting the appropriate settings within the browser used. However, such deactivation may prevent the use of certain features of this Site. Depending on the browser used, deactivation of Google Analytics is also possible by installing an add-on or by consulting this procedure.
Users also have the possibility to see how their personal data is used when using Google Analytics.
5. Data sharing and transmission
5.1 SUBCONTRACTING
RachisClinic may use external subcontractors and service providers, to the extent necessary to carry out the tasks entrusted to them, in particular service providers to manage and/or maintain the Site, to analyze traffic on Our Site, to collect payments, to send messages on Our behalf, to conduct research, to monitor and analyze the status of Our network and the effectiveness of Our communication.
5.2 TRANSFER TO THIRD PARTIES
We may transfer Patient and User data to third parties, (i) if this is necessary for the purposes for which the Patients and Users have freely provided the data to Us; (ii) if the Patients and Users have given their prior consent; (iii) if We are permitted or required to do so by law (e.g., at the request of a judicial authority, in order to enforce Our legal rights, or in order to proceed with the collection of a debt with the help of a debt collection service).
6. Data security and confidentiality
Although total security does not exist, We have put in place state-of-the-art security measures (technical and organizational) in view of the risks involved to protect Patient and User data against accidental or intentional manipulation, loss, destruction, disclosure or unauthorized access.
7. Your rights
In accordance with data protection legislation, Patients and Users have the right to be informed free of charge about the data stored about them and, if these data appear to be inaccurate or incomplete, the right to rectify or delete them. They also have the right to object to the processing of data concerning them, subject to justifiable reasons for the processing.
Patients may also exercise their rights under the Federal Law on Human Research.
The Patient or the User who wishes to exercise one of these rights can contact Us by writing to the following address RachisClinic SA, Rue des Jordils 40, 1025 Saint-Sulpice (Switzerland). The Patient or User may also write to Us by e-mail at: info@rachis.clinic. We may ask the Patient or User to provide proof of identity.
8. Jurisdiction and applicable law
The Policy and all matters arising out of or relating to it, as well as the use of Our Site or the use of Our Services, are governed by Swiss law, excluding conflict of law rules.
You agree to submit to the exclusive jurisdiction of the Courts of the seat of RachisClinic.
9. Updating Our Policy
We may update this Policy from time to time without notice.
We will seek to bring any significant changes to the attention of Our Patients. If You have provided Us with Your email address, You will be notified by email of the new Policy, if any. The new Policy will also be available on the Site.
Users are responsible for checking the Policy and keeping themselves informed of any changes.
Use of Our Services after a change is an express acceptance of the changes, as is continued use of Our Site.
