Privacy Policy
1. Who is responsible for your personal data?
In this privacy policy, we describe how we collect and process your personal data when:
-
You visit our website.
-
You use our services.
-
You apply for a job with us.
-
We receive your personal data for other purposes as part of our business activities.
2. What personal data do we process?
2.1 When You Visit Our Website
When you visit our website, the server automatically records general technical visit information. This data includes your IP address, your device’s operating system, the date and time of access, the website from which you visited us, and the type of browser you used.
When you contact us through the website (e.g., via booking tools, WhatsApp, email, or other provided contact channels) or download content from our site, we process your contact details and any other relevant personal data you provide, as well as any technical data generated through the use of the corresponding contact channel.
We use cookies and other tracking technologies to ensure our website functions properly, improve user-friendliness, analyze website usage, collect information to enhance our offerings, and for marketing purposes.
2.2 When You Use Our Services
When you use our services (e.g., scheduling appointments, undergoing assessments, treatments, or check-ups), we process the following personal data:
-
Identification data (e.g., name, ID, etc.).
-
Contact details (e.g., email, address, phone number, etc.).
-
Health data (e.g., visual acuity, astigmatism, general health condition, medications taken, etc.).
-
Communication content.
-
Payment data.
-
Other relevant personal data you provide.
-
Technical data if the process takes place via our website (including integrated services) (see above, "When You Visit Our Website").
Health data is considered highly sensitive personal data under data protection regulations and is subject to enhanced protection. Therefore, this privacy policy includes additional information on how we specifically process and safeguard your health data.
2.3 When You Apply for a Job with Us
When you apply for a job with us, we collect and process the personal data necessary to review your application and conduct the hiring process. This includes:
-
Identification data (name, surname, etc.).
-
Contact details (e.g., email, address, phone number, etc.).
-
Communication content.
-
Information about your background and qualifications.
-
Content of your application documents.
-
Other necessary data for evaluating your application.
Most of this personal data is directly provided by you as part of your application. Additionally, we may process information from other sources, particularly references (if you have given consent for reference checks), as well as publicly accessible sources (e.g., professional social networks, the internet).
2.4 When We Receive Your Personal Data for Other Business Purposes
In the course of our business activities, we process personal data from other individuals, such as our contacts at business partners, suppliers, and service providers, or people interested in our services who seek information about them.
The personal data processed mainly includes identification data, contact details, and communication content, as well as any other necessary personal data relevant to the specific context.
We receive this data either directly from you or from other sources, such as colleagues from your company, business partners, contacts, or publicly accessible sources (e.g., professional social networks).
3. For what purposes do we process your personal data?
We process your personal data:
- To prepare, enter into, perform and enforce contracts in the course of our business activities. This includes contracts for our services, where we process your health data, for example, to prepare, monitor and carry out treatments.
- On the basis of and within the scope of your consent, where applicable. Once given, you may withdraw your consent at any time.
- To comply with legal obligations (for example, obligations to keep medical records).
- Within the scope of our interests, to communicate with you and third parties (even outside the preparation or conclusion of a contract), to provide the website and optimize the user experience, to maintain and possibly develop our business relationship with you, to improve, develop and promote our offers, to guarantee IT security and data protection, and to assert, defend or protect legal rights.
Translated with DeepL.com (free version)
When you use our services, we may create evaluations and statistics based on your data to improve, develop and promote our offers. Wherever possible, your personal data will be anonymized prior to analysis. We may contact you to request an evaluation of our services or to obtain feedback on a given evaluation. Submitting an evaluation or feedback is completely voluntary. On the basis of your consent or our interest in informing people interested in our offers about new developments, we may send you marketing information (e.g. newsletters). These marketing e-mails may contain visible or invisible images. By downloading these images from the server, we can determine if and when you opened the e-mail. This helps us understand how you use our offers and tailor them to you. You can deactivate this function in your e-mail program. You can also opt out of receiving marketing e-mails at any time.
4. When do we share your personal data with third parties?
To fulfill contracts, safeguard our interests or comply with legal regulations, it may be necessary to share your personal data with third parties. This includes in particular:
- Our IT service providers, manufacturers of measuring and processing devices with cloud functions, as well as third-party providers in the fields of financial transactions, billing, debt collection, consulting, sales and marketing.
- Third parties to whom we transfer our business or parts thereof, or with whom we merge.
- Where disclosure is necessary to comply with a legal obligation, to ensure data security and protection, or to enforce, defend or protect legal rights.
We may also transfer personal data abroad, in particular to IT service providers whose data is located in the EU or EEA. Transfers of personal data outside Switzerland, the EU and the EEA are limited as far as possible, but cannot be completely avoided. If the countries concerned do not have a level of data protection recognized by Switzerland, we use standard contractual clauses to guarantee adequate protection, where necessary supplemented by additional security measures. We do not sell or rent personal data to third parties.
5. Data security
We protect your personal data with appropriate technical and organizational security measures against accidental, unlawful or unauthorized manipulation, deletion, alteration, access, disclosure, use or loss. In particular
- We have a state-of-the-art IT infrastructure.
- We store healthcare data redundantly in our patient database in Frankfurt (DE) and Paris (FR).
- Our employees only have access to your personal data insofar as this is necessary or reasonable for the performance of their duties.
6. How long do we keep your personal data?
We only store your personal data for the time and to the extent necessary for the purposes described or for legal reasons. Data relating to analyses and treatments (patient files) are kept for legal reasons for 20 years.
7. What rights do you have regarding your personal data?
Subject to the applicable data protection legislation and to the extent provided for, you have the following rights regarding your personal data:
- Right to information about the personal data we process about you.
- Right to rectification of inaccurate personal data.
- Right to erasure of your personal data (“right to be forgotten”).
- The right to limit the processing of your personal data.
- Right to data portability (transfer of your personal data to you or a third party).
- Right to object to the processing of your personal data.
Our website may contain links to third-party websites that are not operated or controlled by us. We are not responsible for whether and how such third parties comply with data protection regulations.
8. Changes to this Privacy Policy
We reserve the right to modify this privacy policy at any time. New versions become effective for you as soon as we communicate them by publication on our website.