Updated:
1. Scope & contact
This notice covers sanaviamed.ch and its contact and appointment requests. It explains website processing, not the complete handling of a clinical patient record. The controller is the operator identified in the legal notice. Please send privacy requests to sanaviaga1@hin.ch or our postal address.
2. Website operation
Hosting infrastructure processes necessary connection data such as IP address, access time, requested resources, browser information and errors to deliver, secure and troubleshoot the site. The website is hosted through Vercel. Fonts and website images are served by our website; browsers do not fetch Google Fonts.
3. Online appointments
Online appointments use arzt-direkt (zollsoft GmbH, Germany). The embedded calendar connects your browser to the provider only when you choose to load it, transmitting technical connection data. You enter booking details directly in the provider’s system. Alternatively open the external booking page or call us. The former email/Supabase forms are disabled. Provider privacy information: https://app.arzt-direkt.de/api/docs/de/datenschutz.html.
4. Previous requests
The embedded calendar does not send new booking details to the former website database or Gmail workflow. Any older requests are not automatically deleted; contact the practice for access or deletion, subject to retention obligations.
5. Optional Google services
Google Ads loads only after consent to advertising measurement. It measures a phone-link click, not an answered call or treatment. Form contents are not passed as conversion data. Personalized advertising, Google Signals and enhanced conversions are disabled in this integration. Separately, Google Maps loads only with map consent and sends technical connection data to Google. You may refuse or later withdraw either category independently.
Booking measurement
The website does not read booking completion inside the external calendar and currently sends no Google Ads conversion for it. Loading the calendar or opening booking is not counted as a completed appointment.
6. Recipients & international processing
Access is limited to responsible practice staff and providers used for hosting, database, email and explicitly enabled optional services, including Vercel, Supabase and Google. A Zurich database region does not mean all processing occurs exclusively in Switzerland. Processing or support access may involve Switzerland, the EEA, the USA and, for Supabase, Singapore. Applicable adequacy decisions, contractual safeguards or statutory exceptions govern necessary international transfers; details of the safeguards used are available on request.
7. Retention & security
Processing is limited to the relevant purpose and necessary retention periods. Appointment correspondence supports coordination, related enquiries and applicable statutory evidence duties. Technical logs follow the infrastructure provider's retention rules. Privacy choices last at most 180 days; abuse counters are short-lived. Statutory retention of clinical records is handled separately from this website. HTTPS, server-side access controls and restricted database permissions protect processing; ordinary email is not a guaranteed confidential medical channel.
8. Your rights
Under applicable law you may request access and correction and, where the conditions are met, deletion, restriction, release or transfer of your data, and object to processing. Consent may be withdrawn prospectively without affecting prior lawful processing. Statutory retention duties and third-party rights may limit requests. Proportionate identity checks may be necessary to handle a request safely. You may contact the Swiss FDPIC and, where competent, an EEA data protection authority.
9. Legal framework & updates
The Swiss Data Protection Act (FADP) applies in particular. Where GDPR applies, administrative enquiries rely on pre-contractual steps, secure operation on legitimate interests, and optional services on consent (GDPR Article 6(1)(b), (f) and (a)). Sensitive health data require additional conditions and professional confidentiality. This notice is updated to reflect actual changes. New or materially changed optional uses require an appropriate choice.