Hospital Management

Data protection declaration

We take the protection of your personal data very seriously. Respecting your private sphere and handling your personal data in a trustworthy manner are important to us. We consider it a matter of course to comply with the legal regulations on data protection. Below, we provide you with an overview of how we guarantee the security of your personal data, what data of yours we process, and the purpose for which we process it.

Who is responsible for the data processing?

Klinik Gut is responsible for the data processing activities described in this data protection declaration. If you have any questions about this or would like to exercise your rights as a data subject under data protection law, please let us know at the following address:

Klinik Gut AG
Plazza Paracelsus 2a
7500 St Moritz
Switzerland
+41 81 836 34 34
info@klinik-gut.ch

What types of personal data do we process?

We process the following types of personal data:

• Master data (e.g. names and addresses)
• Contact data (e.g. email addresses and telephone numbers)
• Diagnostic, examination and treatment data (in the form of text, images or sound)
• Applicant data (e.g. personal details, postal and contact addresses, documents included in the application and information contained therein, e.g. cover letter, curriculum vitae and references, as well as other personal or qualification-related information provided by applicants voluntarily or with regard to a specific position)
• Surfing and usage data (e.g. websites visited, access times)
• Meta/communication data (e.g. IP addresses, device information)
• Contract data (e.g. subject and duration of contract, customer category)
• Payment data (e.g. bank details, invoices, payment history)

For what purposes do we process your personal data?

We process your personal data for the following purposes:

• To carry out your medical consultation and treatment in accordance with the respective contractual relationship between you and us, as well as to generally exercise, claim or perform the associated rights and obligations
• To maintain your patient record
• To adhere to the legal requirements on record keeping, as well as for archiving purposes
• To communicate with you or health insurers on insurance-related matters
• To conduct and conclude business with you
• For application procedures (establishment of the employment relationship and possible subsequent implementation or termination thereof)
• For market research
• For range measurement / marketing
• For the purpose of tracking (e.g. interest/behavioural profiling, use of cookies)
• To ensure your security and the security of other patients
• To lodge or assert legal claims
• To convey news, including advertising, that may be of interest to you
• To display and optimise website content
• To send quality-control questionnaires

On what legal basis do we process your personal data?

The legal basis for processing your personal data depends on the respective purpose of data processing in each case. In particular, this basis may include:

• Your express consent where required by law, which you can withdraw at any time
• The conclusion or fulfilment of a contract with you or the implementation of pre-contractual measures, particularly for medical consultation and service provision
• The protection of our legitimate interests, unless your interests or fundamental rights and freedoms override these
• The fulfilment of legal obligations, particularly those arising from health and accident insurance legislation, or the duty to keep medical records

For how long do we process your personal data?

We process and store your personal data only to the extent and for the duration necessary for fulfilment of our contractual and legal obligations, or otherwise necessary for the purposes pursued via the processing, e.g. for the duration of the entire treatment contract and beyond that in accordance with statutory retention periods (particularly those arising from public legislation on health, or on health and accident insurance) and the duty to keep records. As soon as your personal data is no longer required for the aforementioned purposes or a prescribed retention period expires, it will be deleted or blocked as a matter of course and to the greatest possible extent.

How do we protect your personal data?

The security of your personal data is important to us. We take appropriate and suitable technical and organisational measures to ensure the security of your personal data and to protect it against unauthorised or unlawful processing and/or accidental loss, alteration, disclosure or access. This includes, among other things, the use of recognised encryption procedures (e.g. SSL encryption). Access to your personal data is only granted to those staff, service providers or partners of ours who need such access for a business-related purpose or to perform their duties.

We also take our in-house data protection seriously. Our staff and the service providers whom we engage are obliged to maintain confidentiality and to comply with the provisions of data protection law. Moreover, they are only granted access to your personal data to the extent necessary.

To whom do we pass on your personal data?

As a matter of principle, we treat your personal data as confidential and only pass it on if you have expressly consented to this, if we are legally obliged or entitled to do so, or if this is necessary in order to assert our rights, in particular to assert claims arising from the contractual relationship. Here, the legal regulations regarding passing on personal data to third parties are adhered to as a matter of course.

In order to provide our services, to comply with contractual or legal regulations, or for the other purposes mentioned in this data protection declaration, it may be necessary for us to disclose your personal data to the following categories of recipients:

• Referring doctors who carry out treatment or subsequent treatment, or other health professionals or service providers involved in the treatment
• Insurance companies (particularly health, accident and supplementary insurers, and medical examiners)
• External service providers whom we engage to provide services, to process contracts or to provide our infrastructure and technologies for examination or treatment (e.g. laboratories, pharmacies, debt collection companies, IT service providers, payment service providers, outsourcing partners, hosting providers, and companies with whom we offer what is available on our website)
• Legal representatives, authorities, offices or courts
• Relatives or (unless you object) your other visitors
• Electronic patient record (EPR in accordance with the Federal Act on the Electronic Patient Record, EPRA)

If we engage third parties to provide our services, we take appropriate legal precautions, as well as adequate technical and organisational measures, to ensure protection of your personal data in accordance with the relevant legal regulations.

Disclosure is generally made within Switzerland, or else to recipients either in EU or EEA member states or in other states with appropriate data protection legislation. If we make any disclosure to recipients in other countries, we do so on the basis of recognised guarantees (particularly contractual agreements) or with your consent in individual cases.

What rights do you have?

Right to information

You have the right to demand information from us regarding whether we process your personal data and, if so, what data.

Right to rectification

You have the right to demand rectification of your personal data if incorrect and the completion of any incomplete personal data of yours in our systems.

Right to erasure

You have the right to demand that your personal data be deleted, e.g. when the data is no longer needed for the purposes pursued. However, in cases where we are nevertheless obliged or entitled to retain your personal data due to legal or contractual obligations, we may restrict or block your personal data only to the extent necessary.

Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data.

Right to data portability

Where applicable, you have the right to obtain, in a structured, common and machine-readable format, any of your personal data that we process automatically on the basis of your consent or for fulfilment of a contract, or to demand the transfer of this data to a third party. If you demand direct transfer of personal data to another responsible party, this will only be done insofar as technically feasible.

Right to object

You have the right to object to the processing of your personal data at any time in accordance with the legal requirements. In particular, you have the right to object to the processing of your personal data for the purpose of direct advertising.

Revocation of consent

You categorically have the right to revoke your consent to the processing of your personal data at any time. The revocation will apply from that point onwards.

Right of complaint

You also have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates the provisions of data protection law.

Please note that there are applicable exceptions to these rights. In particular, we may need to continue processing your personal data and store it in order to fulfil a contract with you, to protect vital interests of our own (such as the assertion, exercise or defence of legal claims) or to comply with legal obligations. Insofar as legally permissible, we may therefore also reject your data-protection-related requests, e.g. requests for information and erasure, or only comply with them to a limited extent.

Visiting our website

When our website is visited, our servers temporarily record each instance of access in a log file. The following user data, device data and personal data are thus collected without any action on your part and stored by our hosting ISP (internet service provider):

• The IP address of the computer submitting the query
• The date and time of access
• The name and URL of the file accessed
• The website from which access occurred
• Your computer’s operating system and the browser that you used
• The country from which you accessed our website and your browser’s language settings

This data is collected and processed solely for the purpose of enabling use of our website (connection establishment), to ensure lasting system security and stability, to optimise our website offering and for internal statistical purposes. This constitutes our legitimate interest in processing the data. This data is not combined with any other data sources. In addition, this data cannot be traced back to individual persons. We reserve the right to check this data if definite indications of illegal use come to our attention.

Contact

You have the option of contacting us (e.g. via a contact form, by email or telephone, or via social media). In this event, the information you provide is processed for the purpose of handling and processing your query. If a contact form is used, the respective contact form indicates what data is collected. Information marked with (*) is mandatory. All other information can be provided voluntarily by the person making the query.

You can object to this data processing in an email to info@klinik-gut.ch at any time. If you do so, your query will not be processed any further.

Your personal data will be deleted as soon as your query has been dealt with. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and the erasure does not conflict with any legal obligations to retain data.

Applications

If you apply for a job with us, we process the personal data that you supply as part of the application procedure. Alongside the details you provide about yourself and about your education, work experience and skills, this includes the usual correspondence data such as postal address, email address and telephone number. Moreover, all documents that you submit in connection with the application, e.g. letter of motivation, curriculum vitae and references, are processed. Applicants can also voluntarily provide us with additional information. This data is only stored, evaluated, processed or forwarded within our organisation in connection with your application. It may also be processed for statistical purposes (e.g. reporting). If this occurs, it is done in such a way that no conclusions can be drawn about individual persons.

Processing may also be carried out by other electronic means. This is particularly the case if you send us relevant application documents electronically, for example by email.

Your application data is processed in order to fulfil our (pre-)contractual obligations within the scope of the application procedure.

You can object to this data processing at any time and withdraw your application. Please send your objection to the email address info@klinik-gut.ch or to the contact person named in the job advertisement.

If we enter into an employment contract with you, the transferred data is stored for the purpose of handling the employment relationship in compliance with legal regulations.

If the application procedure ends without appointment to a position, your personal data will be deleted unless you have given us your consent to use your details for any of our other application procedures and to possibly contact you again. You have the option of subsequently revoking this consent at any time. You can send your revocation to info@klinik-gut.ch or to the email address stated in the job advertisement.

Provision of contractual services

We also process personal data to the respective necessary extent for fulfilment of our contractual and pre-contractual obligations, as well as for provision of other services that you request, as described in this data protection declaration. The personal data processed in this way, and the type, scope and purpose of the processing required in each case, are thus determined by the respective contract arranged with you or the services that you request.

If we store your personal data on the basis of a contractual relationship, this data remains stored for at least the duration of the contractual relationship and for no longer than the duration of the limitation periods for possible claims on our part, or of legal or contractual retention obligations.

What are cookies and when are they used?

In certain cases, we use so-called cookies. These are small text files that are placed and stored on your computer with the aid of a browser. They do not cause any damage to your computer. They cannot execute any programs or transfer any viruses. Cookies serve to make our website more user-friendly, effective and secure.

Most of the cookies we use are what are known as session cookies. These are automatically deleted when you log out or close your browser. Other cookies remain stored on your computer beyond the respective usage session and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit and to ‘remember’ any settings you may have selected (e.g. language, font size and other display preferences) over a certain period of time. If other cookies (e.g. cookies for analysis of your surfing behaviour) are stored, these are addressed separately in this data protection declaration.

Most internet browsers are routinely set to accept cookies. If you do not want this, you can set your browser so that it informs you about the placement of cookies and so that you only allow the acceptance of cookies for certain individual cases or generally refuse them. You can also activate a function that automatically deletes cookies whenever the browser closes. Moreover, you can, at any time, use an internet browser or other software program to delete cookies that have already been placed.

The procedure for checking and deleting cookies depends on the internet browser you use. You will find information on this in your browser’s help menu. Please note that individual functions on our website might not work if you deactivate the use of cookies.

How are tracking tools used?

We use so-called tracking tools on our website. These tracking tools monitor your surfing behaviour on our website. This monitoring aids continual optimisation of our website and helps to ensure that its design meets requirements. This involves the creation of pseudonymous usage profiles and the use of small text files stored on your computer (‘cookies’).

Third-party contractors may also use permanent cookies, pixel tags or similar technologies to this end. The third-party contractor does not receive any personal data from us, but can track your use of our website, combine this information with data from other websites you have visited that are also tracked by the third party contractor, and use this knowledge for their own purposes (e.g. to manage advertising). The processing of your personal data by the third-party contractor is then the responsibility of the service provider in accordance with their data protection regulations.

The following tracking tools are used:

Google Analytics

Google Analytics is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google states that Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for data pertaining to users whose usual place of residence is in the European Economic Area or Switzerland.

Google Analytics uses cookies and similar technologies that are stored on your computer and allow analysis of your use of this website. The information generated by these cookies about your use of this website (including your IP address) is transferred to a Google server, possibly in the USA or another third country, and stored there. Google will use this information for the purposes of evaluating your use of the website, compiling reports on website activity for us, and providing other services related to website and internet usage. Google may also transfer this information to third parties where required to do so by law, or if third parties process this data on Google’s behalf. Google states that it will not, under any circumstances, link your IP address to any other Google data.

We would like to point out that, in order to improve data protection, our website only uses Google Analytics with IP anonymisation activated. Thus, any IP addresses subjected to further processing are in abbreviated form when this occurs. This rules out the possibility of any direct reference to persons during analysis of our website’s usage.

You can prevent storage of cookies by selecting the appropriate setting in your browser software, but please note that if you do this, you might not be able to use the full functionality of this website. Furthermore, if you wish to prevent Google from collecting and processing data, you can do so by downloading and installing the browser add-on available via this link: tools.google.com/dlpage/gaoptout. You can deactivate Google Analytics for display advertising and adjust the advertisements in the Google Display Network by accessing the advertisement settings here: adssettings.google.com.

You will find more information on the Google Analytics terms of use and data protection policy at marketingplatform.google.com/about/analytics/terms/us/ and policies.google.com/privacy.

How is social media used?

In addition to this website, we also maintain pages on various social media platforms, which you can access via corresponding buttons on our website. If you visit such a page, personal data may be transferred to the provider of the respective social network. Please note that user data may thus also be transferred to a server in a third country and processed outside Switzerland, the EU or the EEA.

Furthermore, user data is usually processed within social networks for the purposes of market research and advertising. For such purposes, cookies that record users’ usage behaviour and interests are usually stored on the users’ computers. Moreover, data may also be stored in usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).

For detailed descriptions of the respective forms of processing and the opt-out options, please refer to the following linked data protection declarations and statements from the operators of the respective networks:

• https://www.facebook.com/policy
• instagram.com/about/legal/privacy
• https://policies.google.com/privacy

Please also note that requests for information and assertions of data subject rights are most effective when lodged with the providers themselves. Only the providers have access to the respective users’ data, and are able to directly take appropriate measures and provide information. Nevertheless, if you require assistance, you are welcome to contact us.

What is applicable regarding links to third-party websites?

Our website may contain links to other websites that are not operated by us and to which this data protection declaration does not apply. We have no influence over whether the operators of such websites comply with data protection regulations and we therefore accept no responsibility for the accuracy, up-to-dateness or completeness of the information provided there.

Changes to the data protection declaration

We expressly reserve the right to amend or alter this data protection declaration at any time. The version published on our website at the time in question shall apply.

This page was last changed on 6 September 2021. If you have questions or comments about our legal information or privacy policy, please contact us at info@klinik-gut.ch.