Privacy.

Controller

InterClinic GmbH, Bahnhofstrasse 14, 4562 Biberist, Switzerland

Email: kontakt@inter-clinic.ch

Phone: +41 79 431 41 23

Data we process

For contact and appointment requests, we process first and last name, telephone number, email address, preferred appointment, the general treatment category selected and voluntary messages. Please do not submit diagnoses, medical reports, identity documents, medical records or treatment photographs through these forms.

When you visit the website, technically necessary connection and access data such as IP address, time, requested page and browser or device information may be processed.

Purposes and basis of processing

We process personal data to answer enquiries, prepare a non-binding initial consultation, organise appointments, explain requested services and provide pre-contractual or contractual services.

Where processing requires consent, it takes place only after appropriate information has been provided. Consent may be withdrawn at any time with effect for the future.

Hosting and technical service providers

We use OpenAI for hosting and technical operation of this website. Cloudflare is used for technical delivery, storage of form requests and operational security. These providers may process the form, connection and access data needed to provide their services.

We use Hostpoint to send and receive emails. Contact and appointment requests are sent to kontakt@inter-clinic.ch. When booking an appointment, you also receive a confirmation with a calendar invitation at the email address you provide. Your email and calendar providers process this data under their own privacy policies. The invitation contains appointment information, not medical documents.

Technical processing may also take place outside Switzerland, particularly in the United States and other countries used by the providers. The level of data protection and necessary safeguards or an applicable statutory exception must be considered before an international transfer.

Internal processing and access

Requests and appointments are handled in a protected internal dashboard. This includes processing status, timestamps, delivery status and internal consultation notes. Only authorised people handling the requests have access. No user account is required to use the forms.

Partner clinics, financing and Turkey

Form details are not automatically shared with a clinic or financing partner. Before sending your data or documents to a partner clinic, we conclude a consultation and referral agreement with you. This defines our services and the purpose and scope of the exchange of information and documents with the selected clinic. You are informed of the specific recipient and any transfer to Turkey and expressly consent to the sharing.

InterClinic provides organisational consultation, referral and coordination. We do not provide medical advice, make diagnoses or recommend medical treatments. Medical advice, information, assessment and treatment are provided exclusively by the selected clinic and its medical professionals.

At your request, we coordinate the exchange of information and documents required for your consultation and treatment with the selected clinic. Medical documents are requested through a separately agreed, suitable transfer channel. Information is shared with financing partners only at your express request and after separate information.

Before a transfer to a country without recognised adequate data protection, we clarify the necessary safeguards, such as appropriate contractual protections, or an applicable statutory exception. You are informed separately about the specific transfer and the safeguards intended for it.

WhatsApp and external links

When you use the WhatsApp link, you leave this website. WhatsApp or Meta then processes data under its own responsibility and privacy rules. InterClinic receives the content only after you send a message. Please do not send medical documents or particularly sensitive information via WhatsApp.

Cookies and audience measurement

InterClinic currently uses no proprietary analytics, advertising or marketing cookies. Technical providers may use necessary security, storage or session functions. The protected internal dashboard also uses OpenAI sign-in functions. If analytics or marketing services are introduced later, this notice will be updated beforehand and a choice will be provided where required.

For staff accounts, we store name, email address, role, access status, password hash and login timestamps. A necessary session cookie provides protected dashboard access for up to eight hours. Personal invitation and password links expire and can only be used once.

Retention

Non-binding contact and appointment requests without a contractual relationship are automatically deleted from the internal dashboard six months after processing is completed. Completion is recorded by the status “Erledigt” (completed). Deletion takes place at the next daily check. Reopening a request restarts the period only when it is completed again. Email copies in the mailbox are reviewed and deleted separately. Technical backups follow the respective providers’ retention cycles. If a contractual relationship arises, the records required for it are retained during the relationship and afterwards only for as long as statutory retention or evidentiary obligations apply.

Data security and spam protection

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. If medical records or treatment photographs are required, they will be requested through a separately agreed, appropriate transfer method.

To protect forms against automated requests, we use invisible trap fields, timing and frequency checks and pseudonymised technical identifiers. This protection data does not store IP addresses in plain text. Checks cover a period of 24 hours; older identifiers are cleared when the forms are next used.

Your rights

Within the scope of applicable data protection law, you may request access, correction, deletion or release of your data, object to processing or withdraw consent for the future. Privacy requests may be sent to kontakt@inter-clinic.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Updates

We update this privacy notice when our services, providers or legal requirements change. The version published on this page is authoritative.