Data protection

Pyramid Clinic Data Protection Statement

Valid from 31 August 2023

1. Purpose of the privacy policy

1.1 The operator of the website www.pyramide.ch (hereinafter referred to as the "website") is Klinik Pyramide am See AG (hereinafter referred to as "Klinik Pyramide", "we" or "us"). Data protection is important to us and we comply with the applicable data protection laws and regulations.

1.2 This Privacy Policy informs you in particular about how we collect personal data that becomes available to us through the Website, for what purposes it is used, to whom it may be disclosed and what your rights are in relation to our use of your personal data.

1.3 This data protection declaration does not extend to any external links that lead to third-party offers. For these offers, the data protection provisions of the respective provider apply.

2. Consent

By accessing the website and using the services and products we offer, you declare that you have read this privacy policy carefully and agree to the data processing described.

Any questions in connection with this privacy policy can be directed at any time by e-mail to datenschutz@pyramide.ch. If you do not agree with this statement, you must refrain from using the website and from using our services and products.

3. Personal data

Personal data is any information relating to an identified or identifiable natural or legal person, e.g. surname, first name, address, e-mail, date of birth in combination with postcode or telephone number. The responsible party within the meaning of data protection legislation is the
Klinik Pyramide AG, Bellerivestrasse 34, 8034 Zurich, e-mail: datenschutz@pyramide.ch.

The Pyramid Clinic respects the privacy of users and will not collect any personal data (such as name, address, e-mail address) unless this is requested:

  • voluntarily provided by users (in particular first name, surname, address, mobile number, email address)
  • or collected automatically and temporarily through cookies

Health data are only collected and processed with the explicit consent of the patients and are treated confidentially.

Klinik Pyramide am See AG determines the purposes and means of processing your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. If you have any questions or concerns regarding this privacy statement or the processing of your personal data, please contact us at any time by sending an email to datenschutz@pyramide.ch.

We collect and process personal data carefully and for the purposes described in this Privacy Policy. In accordance with applicable law, we may also use your personal data in ways other than those described in this Privacy Policy. In this case, we will provide you with specific privacy notices or communications at the time of collection and may seek your consent. We will always endeavour, as far as is reasonable, to collect information in anonymised or pseudonymised form so that the identity of the user(s) is not identifiable.

4. Collection and use of personal data

4.1 Users can contact us via the website in various ways and forms and call up or order information (in particular anonymised before and after pictures of former patients). In the process, personal data about users is transmitted to us voluntarily.

Data transmitted by users to the Pyramid Clinic in this way will be used by the Pyramid Clinic as follows:

  • to answer the specific requests of the users
  • to conduct business with users
  • for marketing purposes, i.e. in particular to provide users with information about the services of the Pyramid Clinic and its affiliated companies (e.g. via e-mail)
  • for customer communication by post, telephone and electronic means of communication (email, newsletter)
  • for analysis purposes. For the continuous improvement of our website and services, the Pyramid Clinic regularly compiles statistical evaluations based on anonymised user data. In addition, this data can be linked and analysed with other Klinik Pyramide data for marketing purposes
  • to avoid unnecessary advertising and to address users with relevant information. For individualised and personalised marketing, we use the findings from the analysis of user behaviour.

In doing so, we may collect sensitive personal data about users, for example, if they voluntarily provide us with information about their health as part of a request for information. In this case, we only use this information to respond to the request.

By providing us with their sensitive personal data, users consent to our processing of that data to the extent described in this Privacy Policy.

The processing of this data is therefore necessary within the meaning of Art. 6 para. 1 lit. b DSGVO for the implementation of pre-contractual measures or is in our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO. The data will be deleted up to a maximum of 60 days after collection.

4.2 The Pyramid Clinic on the Lake AG collects and stores information that your browser automatically transmits to us in "server log files" when you visit our website. The data collection is based on your will and interest to visit our website and our legitimate interests to operate the website. This may include the following data:

  • Browser type and version;
  • Operating systems used;
  • Referrer URL (the previously visited website);
  • Host name of the accessing computer;
  • Date and time of the server request;
  • Internet Protocol address (IP address);
  • Amount of data transferred;
  • Other similar data and information that serve to avert danger in the event of attacks on our IT systems.

This personal data is not merged with other personal data and is stored separately from any other personal data transmitted by the user. They are deleted by us after three months at the latest.

The Klinik PyramideAG uses the automatically collected personal data to fulfil the following purposes:

  • enable the display, operation and functionality of the Portal,
  • ensure the stability and security of the system,
  • to improve and protect our services,
  • for statistical purposes in the event of attacks on the network infrastructure on which the website is provided.

4.3 Our website is not intended for children and we do not knowingly collect personal data from children under the age of 16 unless we have the express consent of their parents. If we are notified or otherwise learn that personal data of a child under 16 has been improperly collected, we will take all reasonable steps to delete that personal data.

4.4 When processing your personal data, the Pyramid Clinic may use auxiliary persons who carry out the data processing on behalf of the Pyramid Clinic. This applies in particular to the processing of commercial and administrative services and in connection with IT, marketing and telecommunications services.

Access to personal data is limited to those employees as well as contractual partners who need to know this data. The persons and companies concerned are obliged to maintain confidentiality and to comply with the applicable data protection laws. Personal data is always processed in Switzerland.

5. Safety measures

5.1 The Pyramid Clinic provides for security measures to prevent the loss, misuse or alteration of information and personal data.

5.2 Users are aware that Internet transmissions are not secure. We therefore recommend that users exercise caution when transmitting sensitive personal data over the internet. Once the Pyramid Clinic has received the transmitted information, it secures it appropriately in its systems.

5.3 Transfer of personal data
Users agree that their data may be transferred to and processed by other associated, strictly selected companies (such as the Pyramid Clinic). This may take place in order to fulfil the purpose stated by the user, for reasons of accounting, reporting, optimisation of IT services and marketing. In doing so, the Pyramid Clinic guarantees compliance with the principles of Swiss data protection law.

In addition, we may disclose personal data to third parties in order to use technical or organisational services that we need to fulfil the aforementioned purposes or our other business activities. This is particularly the case for the processing of commercial and administrative services and in connection with IT and telecommunications services.

Our service providers are contractually obliged to process personal data exclusively on our behalf and in accordance with our instructions.

We may also disclose personal information if we are required to do so to comply with applicable laws and regulations, in legal proceedings, at the request of the relevant courts and authorities, or as otherwise required by law, or if we believe it is necessary to protect and defend our rights or property.

5.4 Transfer of personal data to countries outside the EEA

Personal data collected through our website is stored in Switzerland. In addition, we may transfer, store and process your personal data at data locations around the world, e.g. where our third-party providers or partners are located. Therefore, we may transfer your personal data outside the European Economic Area (EEA) if this is necessary for the data processing described in this Privacy Policy in accordance with applicable law.

When data is transferred to countries that do not ensure an adequate level of protection, we ensure adequate data protection by taking appropriate safeguards such as

  • contractual guarantees (e.g. based on EU standard clauses),
  • on the basis of binding corporate rules,
  • the transmission of data in accordance with your express consent,
  • for the conclusion or performance of a contract with you, or
  • in connection with the establishment, exercise or enforcement of legal claims.

For more information about our reasonable security precautions, please contact us by email at datenschutz@pyramide.ch.

6. Deletion / duration of retention of personal data

In principle, we delete personal data from the time a contract is fulfilled or the purpose for processing no longer applies.

In the event of an objection to processing on the basis of a legitimate interest or consent, we delete personal data from this point in time, unless another authorisation to process continues to exist, such as in the case of statutory retention obligations, a legitimate interest to enforce own legal positions, etc.

However, we shall retain personal data for at least as long as is necessary for the performance of any treatment contract. The retention periods provided for by law, in particular under public health legislation, as well as retention for internal documentation purposes are also reserved.

7. Rights of the user

Users may at any time request that the Pyramid Clinic sends them a copy of the personal data relating to them or provides them with information on the use of this data. Furthermore, the Pyramid Clinic will correct this data at the user's request at any time. Users have the right to delete their data. Users can contact the office responsible for this as follows:

Klinik Pyramide am See AG
Bellerivestrasse 34
8034 Zurich
datenschutz@pyramide.ch

The Pyramid Clinic is obliged to verify the identity of the user in the case of such requests. Requests can therefore only be processed if they are accompanied by suitable proof of identity (copy of identity card or similar).

8. Cookies

8.1 When you access or use the Website, we may place so-called cookies - small text files - or similar tools on your computer.

We use cookies to provide user-friendly features on the website, for internal company marketing purposes and to continuously improve the website's performance.

We always strive to reduce the use of cookies and the collection and storage of user data to a minimum and to reduce or even prevent the transfer of data abroad. For example, in August 2023, all Google services such as YouTube, Google Maps, Google Font and Google tracking solutions such as Google Analytics or Google Tag Manager were removed from the website.

Depending on their function and purpose, the cookies we use can be divided into the following categories: Functional Cookies, Performance Cookies and Marketing Cookies.

Functional cookies: These cookies serve a variety of purposes for the presentation, functionality and performance of a website and, in particular, to improve visitors' experience and enjoyment of the website. They allow a website to remember information already provided (e.g. username, location or language selection) and provide visitors with improved, more personalised functionality. Functional cookies are used, for example, to remember things like your login details. These cookies cannot track your movement on other websites.

Performance cookies: These cookies are used to collect information about how a website is used - for example, how visitors came to our website, which pages a visitor opens most often, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, such as how many visitors have come to our website. These cookies are used to monitor the level of activity on the website and to improve the performance of the website.

Marketing cookies allow us to serve ads on our website or on third party websites with products that the user likes, so that the ads the user sees may be more relevant to the user's preferences or interests (sometimes called "targeting cookies"). They can also be used to evaluate the effectiveness of advertising and sales promotions.

These cookies may be placed by us or a third party on our behalf. For more information about cookies and how we use them, please visit:http://www.allaboutcookies.org/.

The legal basis for the data processing results from your consent (Art. 6 para. 1 lit. a DSGVO) or our legitimate interest (Art. 6 para. 1 sentence 1 lit. f DSGVO).

By continuing to use our website and/or agreeing to this privacy policy, you consent to cookies being set by us and thus to personal usage data being collected, stored and used, even beyond the end of the browser session. You can revoke this consent at any time by activating the browser setting to refuse third-party cookies.

8.2 Most browsers allow you to delete cookies, prevent their installation or generate a warning before a cookie is installed. Users can find further information on this in the browser instructions.

8.3 The Pyramid Clinic will use automatically stored information exclusively for statistical evaluations and in particular will not associate it with any personal data provided to the Pyramid Clinic.

9. Use of third-party solutions / tools

9.1 The Pyramid Clinic uses solutions & so-called tools from third party providers to whom personal data may also be transmitted in the context of the use of these services.

9.2 We use Friendly Analytics to evaluate the use and reach of our website. Friendly Analytics is a service of Friendly GmbH from Switzerland, which enables web tracking without processing and storing personal data and without setting cookies.

All data collected and processed by us is stored by Friendly Analytics in Switzerland with providers headquartered in Switzerland. Information on the type, scope and purpose of data processing can be found in the Friendly Analytics privacy policy.

9.3 Pingdom: Our website uses Pingdom, a service provided by SolarWinds Worldwide, LLC 7171 Southwest Parkway, Bldg 400, Austin, Texas 78735 (hereinafter: "Pingdom"). Pingdom uses cookies, which are stored on your computer to enable an analysis of the use of our website. This information is used to monitor service availability and user experience. This includes the use of measurements of the user's time of use, page speed and geographical information. No user-identifiable data is stored or transmitted. When a page is accessed, data such as the following is processed:

  • Browser type/version
  • Operating system used
  • Attributes that generate information about the context in which the page is viewed
  • how the page behaves during loading and asynchronous reloading of page components
  • the geographical region of the accessing computer
  • Time of the server request

During use, data such as, in particular, country location and browser type/version of the user may be transmitted to a Pingdom server and stored there. All cookies expire after 30 days. Further information on data protection when using Pingdom can be found at the following link: https://www.pingdom.com/security

10. Online appointment booking

In order to make appointments with one of our doctors via our website, you have the possibility to use the booking system of the company Medicosearch, Gerberngasse 27-31, 3011 Bern, Switzerland. Appointments can be easily made online. The Medicosearch booking system is a software application integrated into our website that displays available resources (such as free appointments) and allows you to book directly online. In the process, personal data is usually also collected from you and stored. As we have no visibility of who uses Medicosearch's services, there is no order processing agreement between us and Medicosearch. If you use the services of Medicosearch, Medicosearch is responsible for compliance with the data protection regulations vis-à-vis you. For more information about Medicosearch, please refer to their privacy policy.

11. Social media networks

You will find links to social media networks on our website. These are not plugins provided by the social media network, which already transmit data to the provider when the page is loaded, without the user having any influence. The social media network buttons merely provide a link to our presence on the social media network. No user data is transmitted from the website to the social media network.

When you call up a link to one of our social media profiles, a direct connection is established between your browser and the server of the social network concerned. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you call up a link to a network while you are logged into your account with the network in question, the content of our site may be linked to your profile with the network, which means that the network can assign your visit to our website directly to your user account. If you would like to prevent this, you should log out before clicking on the corresponding links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

12. Privacy statements of third party providers

Please note that if you click on the link to a third party website (e.g. social media or other website), you will be redirected to a website that we do not control and our privacy policy will no longer apply.

Your browsing and interaction on any other website is subject to the terms of use and privacy statements and notices of such third party websites. In addition, we cannot guarantee the accuracy and timeliness of these links.

We encourage you to carefully read the terms of use and privacy statements and notices of other websites before submitting any personal data through this website. We are not responsible or liable for the information content and data processing of such third party websites.

13. Data protection officers

The Pyramid Clinic is the responsible body and for the collection, processing and use of your personal data in the sense of data protection law.

Enquiries about our privacy policy and other concerns related to our clinic's data protection should be sent to the following address: datenschutz@pyramide.ch.

14. Adaptation of the privacy policy

The Pyramid Clinic reserves the right to amend this data protection declaration at any time within the framework of the legal requirements.

15. Accessing the privacy policy

Users can access this privacy policy online at any time.