Data protection

Date: February 8th, 2021

Table of Contents

1. General information

The following data protection declaration applies to the use of our website as well to the information provided on it, unless otherwise stated. The present data protection declaration informs you about the collection of personal data during your visit on this website. By using this website, you agree to this data protection declaration.

EPha.ch attaches great importance to data protection. Due to our legal obligations (medical confidentiality according to Art. 321 StGB, data protection law and other federal and cantonal regulations) high legal protection already exists. The collection and processing of your personal data happens in compliance with the applicable data protection laws and conditions.

In general, EPha.ch only offers its services in Switzerland and is only intended for people living in Switzerland.

2. Collection of information on the use of the website

Each time the website is accessed by a data subject or an automated system, a range of information is collected.

The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the subpages that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) the internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that helps to prevent attacks on our IT infrastructure. To recognize certain web browsers so-called cookies are used. These contain a unique identifier (9).

This information is required to (1) display the content of our website correctly, (2) optimize the content of our website, (3) guarantee the permanent functionality of our website and IT infrastructure and (4) provide law enforcement agencies with necessary information in the event of a cyber attack. Further, EPha.ch can use this information for statistic purposes and to increase data protection and data security of our IT infrastructure. The information collected in this way will only be processed because of the mentioned purposes and stored separately from all other person-related data.

EPha.ch uses Google Analytics and Amazon Web Services to evaluate this information. These services can transfer this information to servers abroad and save them in log files. Please refer to the privacy policies of Google Analytics and Amazon Web Services for more details. Note that the use of cookie information stored by third-party companies is outside of the area of responsibility of EPha.ch. EPha.ch therefore rejects any liability.

You can block the use of cookies in your browser settings, ask for a warning before creating a cookie or clear cookies later. Please note that in case of blocking or deleting cookies the website may not be used to its full extent or the representation of the cookies may be impaired.

This website may contain links to websites of other providers. EPha.ch has no influence on these websites, their content, offers, availability or the data protection declarations and provisions that are applicable there. EPha.ch therefore declines any liability.

4. Transfer and storage of the entered data

All data entered on the EPha.ch website is securely stored on the infrastructure of Amazon Web Services to ensure the functionality of our website. This infrastructure meets the highest security and encryption standards, among others according to ISO 27001, 27017 and 27018. ISO 27018 contains security controls that focus on the protection of personal data. Compliance details of the ISO 27108 standard can be found at https://aws.amazon.com/compliance/iso-27018-faqs/ .

In addition, no data will be passed on to third parties without expressed consent or otherwise forwarded. EPha.ch only keeps your information for as long as necessary and treats it confidentially. This does not apply to announcements of personal data to public bodies and authorities as well as private individuals, that are entitled to it due to legal regulations, judicial decisions or official orders, as well as the transfer to authorities with the purpose of initiating legal proceedings or for law enforcement purposes.

In certain cases, individual personal data can be used and disclosed to third parties, provided that this is legal or permitted or with prior consent and within the scope of the previously communicated purposes.

5. Communication opportunities

The EPha.ch website contains due to legal regulations (“imprint obligation”) certain information, including a general email address, that enables quick electronic contact establishment and direct communication. If you use the communication options offered on our website to contact us, we will use your contact details and content only for processing and answering your request.

Please note: access to information and services on this website takes place via the internet and thus an open, accessible network. The transmission of your data via this website or via means of communication such as email or SMS is generally considered unsafe. EPha.ch therefore rejects any liability. If you still use such means of communication to contact EPha.ch, EPha.ch assumes that they can answer your request using the same channel. Your contact establishment via such means of communication is understood by EPha.ch as implied consent. If in doubt please contact EPha.ch personally on site.

6. Your rights

You have various rights regarding your data according to the data protection law. In particular, you have a right to access, correct or delete information. The exercise of such rights usually requires your identity to be clearly proven (e.g. by a copy of your identity card, with which your identity can be verified). To assert your rights please contact EPha.ch. Feel free to contact us for more related information.

7. Changes

EPha.ch can adapt this data protection declaration at any time without prior notice. The current version published on our website applies. If the data protection declaration is part of our contract with you, we will contact you in the case of an update or change by email or other suitable means of communication.