This application uses the medical product SMASS (Structured Medical Assessment System) and is operated by in4medicine AG.
Name and contact details of the responsible person
The responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the
In4medicine AG
Monbijoustrasse 23
CH-3011 Bern
+41 31 370 1330
info(@)in4medicine.ch
Contact details of the data protection officer:
In4medicine AG
Datenschutzbeauftragter
Monbijoustrasse 23
CH-3011 Bern
+41 31 370 1330
datenschutzbeauftragter@in4medicine.ch
General information on data processing
We do not directly process any personal data.
Provision of the website and creation of log files
Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) Information about the browser type and version used
(2) The operating system
(3) The user's internet service provider
(4) The user’s IP address of the user
(5) Date and time of access
The data is stored in the log files of our system. This data is not stored together with user data collected in the application.
Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the website’s content to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files takes place in order to ensure the functionality of the website and the security of our information technology systems. An evaluation of the data for marketing purposes does not happen.
Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is the legitimate interest of the responsible party pursuant to Art. 6 (1) lit. f DSGVO. The legitimate interest in data processing is the interest in a functional and secure website.
Duration of storage
The data is deleted as soon as it is no longer required to serve the purpose for which it was collected. In the case of collecting data for the provision of the website, this purpose will be achieved as soon as the respective session has ended.
In the case of storage of data in log files, the data will be deleted after a maximum of 60 days. Storage beyond this period is possible temporarily for technical or security reasons.
Possibility of objection
The collection of data for the provision of the website and the storage of the data in log files is strictly necessary for the operation of the website. Consequently, there is no possibility for the user to object.
Use of cookies
Description and scope of data processing
When the web pages are called up, session cookies (text files which are stored on your computer) are set for technical reasons. If the browser does not accept cookies, the web server cannot check the validity of the contents. In addition functionally necessary cookies are set in order to save certain settings.
Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of the websites for the users. Some functions of our website (pages with forms) cannot be offered without the use of cookies for technical reasons.
The user data collected through technically necessary cookies are not used to create user profiles.
Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO. The legitimate interest in data processing is the interest in a functional and secure website.
Duration of storage
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the website’s functions to their full extent.
Session cookies are usually deleted by the browser once the browser session has ended. Functionally necessary cookies are stored for 1 year.
Using the information from the self-assessment form
Description and scope of data processing
The information which the user provides on the website (information from the self-assessment form) is processed anonymously. No links are made with other data (such as the IP address). The information is only used for the purpose of creating a recommendation for action.
The information from the self-assessment form is not personal data within the meaning of data protection law, as it is only processed in anonymous form.
Passing on the information from the self-assessment form
If you use the above-mentioned website, the data you entered in the self-assessment form will be stored in an anonymous way. If you have accessed the application via another organisation (telemedicine service provider, health insurance company, etc.), the medical history data and the results from the medical history will be transferred to this organisation for further processing. The further processing intends optimal following treatment of the person concerned and is not under control of in4medicine Ltd.
in4medicine ltd. is not responsible for any links between the data passed on from the self-assessment form and personal data by third parties. No such linkage takes place in SMASS itself.
Data security
We take appropriate technical and organisational security precautions to protect the data from unauthorised access and misuse.
Rights of the person concerned
Within the framework of the data protection law applicable to you and as far as it is intended therein you have the right to information, correction, deletion, and restriction of data processing. You also have the right to object to our data processing as well as to the release of certain personal data for the purpose of transfer to another body (so-called data portability). The exercise of these rights requires clear proof of your identity.
However, since no data allowing identification is collected within the software, these rights are not applicable or realisable in practice.
Changes
We may amend this privacy policy at any time without prior notice. The current version published on our website shall apply.