Privacy Policy

Contact details

Your data will be processed by us. The contact person (jointly responsible person) to obtain information on the purpose and means of this processing on our part is:

Health Info Net AG
Seidenstrasse 4
CH-8304 Wallisellen
HIN Customer Care Center: 0848 830 740
International: +41 52 235 02 70
info@hin.ch

Contact for data protection matters: datenschutz@hin.ch

Please send your enquiries in writing or by e-mail to the address specified above.

Data collection

We process personal data that you provide to us or that we receive about you from third parties (e.g. contractual partners, extracts from registers, etc.). Certain types of personal data, e.g. health data, are considered particularly “sensitive” under data protection law. Depending on the circumstances, other categories of personal data mentioned may also include such particularly sensitive personal data (e.g. information on religious affiliation in the master data). As a rule, we only process particularly sensitive personal data if it is necessary for the provision of a service, if you have disclosed this data to us of your own accord or if you have given us your consent to process it. We assume that you have provided your consent when we receive data from your contractual partners. We may also process particularly sensitive personal data if this is necessary to uphold the law or comply with Swiss or foreign legal provisions, if the relevant data has obviously been publicly disclosed by the data subject or if the applicable law otherwise permits its processing. Every time the website is accessed, data that is technically necessary or useful is collected. For example, the browser types used, the operating system used, the date and time of access, the public Internet Protocol address (IP address), and the name and URL of the file accessed can be recorded. If you have subscribed to our newsletter, we will use your e-mail address and name to send it to you, and if necessary, we may also go through a specialised company. You can unsubscribe from the newsletter at any time. The corresponding link can be found in every newsletter.

Purposes of data processing

Your data will be processed for the purpose of fulfilling our services, as well as:

• To communicate with you, e.g. to respond to enquiries or maintain customer relationships

• To conduct contract negotiations and potentially conclude a contract

• To process contractual relationships (incl. employment)

• To ensure the functioning of infrastructure, websites, newsletters, accounting, etc.

• For marketing purposes (e.g. newsletters, invitations, relationship management, etc.)

• To analyse market developments, to plan, to develop our product range, for research and development

• To maintain contractual relationships with employees

• To ensure that we act in compliance with the law, industry standards, etc.

• To conduct legal proceedings or investigations

• To ensure safety and security

• For administrative activities and management

• To provide employees with instructions, further education and training 

Retention period

Your data will be stored for as long as required by law, contract or specific situations (e.g. legal proceedings or imminent proceedings). It will then be deleted or pseudonymised.

Disclosure of data to third parties and processors

Insofar as it is necessary for the operation of our services, we disclose data to the companies commissioned by us to operate and process services. When your data is processed, it may be disclosed to the following third parties:

• Group companies and their employees
• Service providers (who process your data partly on our behalf, e.g. IT/web providers, support companies, partly on their own responsibility, e.g. lawyers assisting with legal issues, insurance companies)
• Authorities in Switzerland and abroad due to legal obligations
• Business partners, e.g. suppliers
• Customers, marketing and project partners
• Credit reference agencies that store this data for credit reports
• Third parties who collect data about you via the website/app (see list on the website)

You expressly agree that we may pass on data to third parties for processing. The respective service providers are bound by our standards under data protection law through legal provisions, a contract for order processing or contractual provisions, or are authorised to process personal data through the use of standard contractual clauses recognised by the FDPIC.

Disclosure of data abroad

In principle, your personal data is stored and processed in Switzerland. If required by law, your personal data will be stored and processed exclusively in Switzerland (e.g. EPRA). It is possible that your data may be transferred to countries in the EEA, where it may be processed and stored in the course of processing (e.g. IT support, cloud solutions, online services, home office, etc.) and, in exceptional cases, to any country in the world. If we do this, we ensure that the respective country has an adequate level of data protection. If your data is transferred, processed and stored in a country without adequate data protection, this is done on the basis of contractual guarantees, which are reported to the FDPIC. However, standard contractual clauses drawn up or recognised by the FDPIC are used, which is why the reporting obligation does not generally apply.

Revocation or restriction of your consent, data corrections and downloads, deletion

You have the right to withdraw or restrict your consent. A change of this kind is valid if it is made in writing (not by e-mail) and shall apply from receipt for future data processing. Rights not based on consent (e.g. statutory or contractual rights) shall remain unaffected by this revocation. In most cases, you can check, download or correct your data online at any time. HIN Support will be happy to answer any questions you may have. Please do not hesitate to contact us if you would like any information on further rights such as data access, data correction and data portability.

Cookies and other services

Our company may use cookies on its website. Cookies contain a so-called cookie ID, a unique identifier of the cookie, which assigns websites and servers to a specific Internet browser. A specific Internet browser can be recognised and identified via this unique cookie ID. If you do not wish for this to happen, you should adjust the settings of your Internet browser to refuse to accept cookies. We may also use third-party services (e.g. Google Analytics) to analyse and improve our website. We will be happy to provide you with a detailed list on written request.

Data security

To ensure that your rights are safeguarded, your data is protected against unauthorised access, changes and loss. We use technical and organisational measures (e.g. access restrictions or back-ups) for this purpose. The technical and organisational measures selected are generally based on risk. The data security requirements outlined in the Data Protection Act (FADP) and the Data Protection Ordinance (DPO) are observed. We are also pleased to confirm that our company is certified in accordance with ISO/IEC 27001 and is regularly audited. You acknowledge and agree that we may exchange data with you in an unencrypted form via e-mail, SMS or other digital applications.

Applicable law and place of jurisdiction

This privacy policy and the contracts concluded based on or in connection with this privacy policy are subject to Swiss law, to the exclusion of any rules on the conflict of laws. The place of jurisdiction is our registered office.

Final provisions

Should individual parts of this privacy policy be invalid, this shall not affect the validity of the rest of the privacy policy. We may amend this privacy policy at any time without prior notice. The current version published on our website shall be applicable.