Legal notice

Content and preparation

eHealth Suisse
Swiss Competence and Coordination Centre of the Confederation and the Cantons
Schwarzenburgstrasse 157
CH-3003 Bern
+41 (0)58 462 93 59
info@e-health-suisse.ch

Conception, design, programming and operation

NETNODE AG, digitale Agentur

Confident GmbH, Agentur für Markenkommunikation

patientrecord.ch is the official information platform for the electronic patient record (EPR), operated by eHealth Suisse, the Confederation and the cantons. The Competence and Coordination Centre eHealth Suisse is jointly supported by the Confederation and the cantons.

The patientrecord.ch website is free of advertising of any kind.

Website content warranty

patientrecord.ch is the official information platform for the electronic patient record (EPR), operated by eHealth Suisse, the Confederation and the cantons. The content of these web pages is non-binding and is provided solely for information purposes. While eHealth Suisse prepares the information presented on its web pages with all due care, it does not make any warranty as to the currency, correctness, completeness or quality of the information provided. Liability claims against eHealth Suisse concerning damage of a material or non‑material nature resulting from the use or non-use of the information presented, or from the use of inaccurate or incomplete information, are excluded, except in the case of demonstrably wilful or grossly negligent behaviour on the part of eHealth Suisse. All offers are provisional and non-binding. eHealth Suisse expressly reserves the right to modify, supplement or delete parts of pages or the entire site without notice, or to cease publication temporarily or permanently. The information on the electronic patient record (EPR) provided on the patientrecord.ch website is designed to support, but under no circumstances to replace, the physician-patient relationship.

References and links

eHealth Suisse examines links or references for any illegal content, especially when they are first included on its website. As eHealth Suisse has no influence whatsoever on the subsequent development of the websites to which links are provided on its own site, it cannot assume any liability for the content of these websites. Should eHealth Suisse become aware of illegal content on pages linked/referred to on its site, it will remove the relevant links and references. This also applies to external contributions in guest books, discussion forums and mailing lists set up by eHealth Suisse.

Copyright and trademark law

eHealth Suisse makes every effort, in all publications, to observe copyright in any graphics, sound files, video sequences and texts used, to use self-created graphics, sound files, video sequences and texts, or to use graphics, sound files, video sequences and texts that are in the public domain. All trademarks mentioned on the website and possibly owned by third parties are subject without restriction to the provisions of applicable trademark law and the property rights of the registered owners. The mere mention of a trademark does not imply that it is not subject to third-party property rights.

Copyright in published items created by eHealth Suisse remains with eHealth Suisse. The reproduction or use of such graphics, sound files, video sequences and texts in other electronic or print publications is only permissible with the explicit consent of eHealth Suisse.

Data protection

Insofar as the website permits the entry of personal or business data (e-mail addresses, names and addresses), such data is provided by the user on an explicitly voluntary basis.

Cookies

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. The primary purpose of a cookie is to store information about a user during or after their visit within an online site. Stored information may include, for example, language settings on a website, login status, a shopping cart, or where a video was watched. We also include under the term “cookies” other technologies that perform the same functions as cookies (e.g. when user information is stored using pseudonymous online identifiers, also known as user IDs).

The following cookie types and functions are distinguished:

Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online site and closed the browser.
Permanent cookies: Permanent cookies remain stored even after the browser is closed. Thus, for example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users, employed for reach measurement or marketing purposes, can be stored in such a cookie.
First-party cookies: First-party cookies are those which we set ourselves.
Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (or essential) cookies: Cookies may be essential for the operation of a website (e.g. to store logins or other user input, or for security reasons).
Statistical, marketing and personalisation cookies: Cookies are generally also used in reach measurement and whenever a user’s interests or behaviour (e.g. content viewed, functions used, etc.) on individual websites are stored in a user profile. Such profiles are employed, for example, to show users content matching their potential interests. This process is also known as tracking, i.e. tracking users’ potential interests. Insofar as we use cookies or tracking technologies, we will inform you separately in our data protection policy or in the context of obtaining consent.

Notes on legal foundations: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your declared consent. Otherwise, the data processed with the aid of cookies is processed on the basis of our legitimate interests (e.g. cost-effective operation and improvement of our site) or the fact that the use of cookies is essential to fulfil our contractual obligations.

Storage period: Unless we provide you with explicit information on the storage period of permanent cookies (e.g. with a cookie opt-in), please assume that the storage period may be up to two years.

General information on withdrawal and objection (opt-out): Depending on whether the processing is based on consent or permission under law, you have the option at any time of withdrawing consent you have granted or objecting to the processing of your data by means of cookie technologies (collectively referred to as an “opt-out”). You can first declare your objection by means of your browser settings, e.g. by disabling cookies (although this may also restrict the functionality of our website). You can also opt out of cookies for online marketing purposes using various services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com. In addition, further information on opting out can be obtained from the information on the service providers and cookies used.

Processing of cookie data based on consent: We use a cookie consent management process whereby users’ consent to the use of cookies – or to the processing and providers mentioned in the cookie consent management process – can be obtained, and managed and withdrawn by users. In this process, the declaration of consent is stored, so that it does not have to be requested again, and so that evidence of consent can be provided in accordance with legal obligations. It may be stored on the server and/or in a cookie (using an opt‑in cookie or comparable technologies), so that consent can be assigned to a user or to the user’s device. Subject to individual details on cookie management service providers, the following information applies: consent may be stored for up to two years. For this purpose, a pseudonymous user identifier is created and stored with the time of consent and information on the scope of consent (e.g. categories of cookies and/or service providers) and on the browser, system and device used.

Types of data processed: Usage data (e.g. web pages visited, interest in content, access times), meta-/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors, users of online services).
Legal basis: Consent (Art. 6 para. 1 point (a) GDPR), legitimate interests (Art. 6 para. 1 point (f) GDPR).

Data protection statement for SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock icon in the browser address line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data protection statement for server log files

The website provider collects and automatically stores in server log files information automatically transmitted to us by your browser, i.e.:

Browser type and version
Operating system used
Referrer URL
Host name of the computer accessing the website
Time of the server request

This data cannot be linked to specific persons. It is not combined with other data sources. We reserve the right to examine this data subsequently if we become aware of concrete evidence of illegal use.

Third-party services

This website may use Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube for embedding videos.

These services of the US company Google LLC use cookies, inter alia, and as a result, data is transmitted to Google in the US, although we assume that no personal tracking takes place in this connection solely through the use of our website.

Google has undertaken to ensure adequate data protection in accordance with the US-EU and US-Swiss Privacy Shield Frameworks.

Further information can be found in Google’s privacy policy.

Use of Google Maps

On this website, we use Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. When you visit the website, Google receives the information that you have accessed the relevant subpage of our website, irrespective of whether you have a user account with Google and whether you are logged in. If you are logged in to Google, your data will be assigned directly to your account. If you do not want this data to be linked to your Google profile, you should log out before activating the button. Google stores your data as a user profile and uses it for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right. For more information on the purpose and scope of the data collection and its processing by Google, as well as further information on your rights in this regard and on privacy protection settings, visit: https://policies.google.com/privacy?hl=en

Use of Google reCAPTCHA

We use Google reCAPTCHA (hereafter “reCAPTCHA”) on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereafter “Google”). reCAPTCHA is used to check whether data is entered on our website (e.g. in a contact form) by a person or by an automated program. To this end, reCAPTCHA analyses various features of the website visitor’s behaviour. The analysis starts automatically as soon as the website is accessed. For the analysis, reCAPTCHA evaluates various types of information (e.g. IP address, time spent on the website, or the user’s mouse movements). The data collected during the analysis is forwarded to Google. reCAPTCHA runs in the background, without visitors being informed that an analysis is taking place.

The processing of data is based on Art. 6 para. 1 point (f) GDPR. The website controller has a legitimate interest in protecting its services from improper automated spying and spam. For further information on Google reCAPTCHA and Google’s privacy policy, visit: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en

Data protection statement for Google Analytics

The data controller has integrated the Google Analytics component on this website. Google Analytics is a web analytics service. Web analytics is the collection and evaluation of data on the behaviour of website visitors. A web analytics service collects, inter alia, data on the website from which a data subject accessed the website (referrer), which subpages were visited, and how often and for how long a subpage was viewed. Web analytics is mainly used for website optimisation and for cost-benefit analysis of online advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

The purpose of the Google Analytics component is to analyse visitor traffic on our website. Google uses the data and information obtained, inter alia, to evaluate the use of our website, so as to compile online reports of activities on our website and to provide further services associated with the use of our website.

Google Analytics places a cookie on the data subject’s IT system. (For an explanation of cookies, see above.) The setting of a cookie enables Google to analyse the use of our website. Whenever a user accesses one of the individual pages of the website which is operated by the data controller and on which a Google Analytics component has been integrated, the browser on the data subject’s IT system is automatically prompted by the Google Analytics component to transmit data to Google for the purpose of web analytics. In the course of this technical procedure, Google receives personal data, such as the data subject’s IP address, which enables Google, inter alia, to determine the origin of visitors and clicks, subsequently allowing commissions to be calculated.

The cookie is used to store personal information, such as the time of access, the location from which the site was accessed and the frequency of visits by the data subject to our website. Whenever our website is visited, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States. This personal data is stored by Google in the United States. Google may pass on to third parties the personal data collected via this technical process.

As already explained above, the data subject may, at any time, prevent cookies from being placed by our website by adjusting the browser settings accordingly, thus permanently opting out of the placing of cookies. Such a browser setting would also prevent Google from placing a cookie on the data subject’s IT system. In addition, a cookie that has already been placed by Google Analytics can be deleted at any time, using the browser or other programs.

In addition, the data subject has the option of objecting to and preventing the collection of data produced by Google Analytics in relation to the use of this website and the processing of such data by Google. To do so, the data subject needs to download and install the browser add-on available at: https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data or information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google to be an opt-out. If the data subject’s IT system is subsequently deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or by any other person within the data subject’s sphere of influence, the browser add-on may subsequently be reinstalled or re-enabled.

Further information and Google’s current data protection provisions are available at https://policies.google.com/privacy?hl=en and at https://marketingplatform.google.com/about/analytics/terms/us/. A more detailed explanation of Google Analytics is available at: https://marketingplatform.google.com/about/analytics/.

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.

The statistics obtained enable us to improve our site and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor traffic, conducted through a user ID. If you have a Google account, you can disable the cross‑device analysis of your usage under “My data”, “Personal info”.

The legal basis for the use of Google Analytics is Art. 6 para. 1 point (f) GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that on this website the Google Analytics extension “_anonymizeIp();” is used to ensure anonymised collection of IP addresses. This means that IP addresses are processed in a truncated form, so that they cannot be linked to a specific person. If any data collected about you is personal, this is thus immediately excluded and the personal data is immediately deleted.

Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the controller of this website.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. You may prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that if you do so, you may not be able to use the full functionality of this website. You can also prevent the transmission to Google of data generated by the cookie about your use of the website (including your IP address) and the processing of such data by Google by downloading and installing the browser add-on available at: Google Analytics Opt-out.

Google Tag Manager

The Google Tag Manager tool provides an interface which enables us to manage website tags and thus integrate, for example, Google Analytics and other Google marketing services into our website. The Tag Manager itself, which implements the tags, does not process any personal user data. With regard to the processing of personal user data, please consult the following information on Google’s services: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

Data protection statement for contact form

If you send queries to us via the contact form, your information from the contact form, including any contact data you provide, will be sent to eHealth Suisse. We will not pass on such data without your consent.

Plug-ins from social media and other services

Integrated into this website are plug-ins from social media services such as Facebook, Twitter, LinkedIn, etc., or third-party media such as YouTube, Vimeo, Google Fonts, Fonts.com, etc. If the user has an account with these third parties, it may also be possible for these third parties to measure and analyse the use of the provider’s products. Additional personal data such as IP address, individual browser settings and other parameters may then be transmitted to and stored by these third parties. We have no control over and assume no responsibility or liability for the use of such personal data collected by third parties. For further information, reference is made to the following links:

For Twitter: https://twitter.com/privacy;
For LinkedIn: https://www.linkedin.com/legal/privacy-policy;
For Youtube: https://policies.google.com/privacy

Data protection statement for newsletter data

If you wish to receive the newsletter offered by this website, we require you to provide an e‑mail address and information allowing us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No other data is collected. We use this data exclusively to send the information requested and do not pass it on to third parties.

You may at any time withdraw the consent you have granted for the storage of your data and e-mail address, and for the use thereof to send the newsletter, e.g. by using the unsubscribe link in the newsletter.

Measurement of open and click-through rates:

Each newsletter contains a so-called web-beacon, i.e. a pixel-sized image which, when the newsletter is opened, is requested from our server, or from the server of the mailing service provider (if such a provider is used). In connection with this request, technical information is first collected, such as information on your browser and system, and also your IP address and the time of the request.

This information is used to allow technical improvements to be made to our newsletter on the basis of the technical data or the target groups and their reading behaviour, based on the location from which a request is made (determined with the aid of the IP address) or the access times. This analysis also includes a determination of whether and when newsletters are opened.

Types of data processed: Master data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), meta-/communication data (e.g. device information, IP addresses), usage data (e.g. web pages visited, interest in content, access times).
Data subjects: Communication partners.
Purposes of processing: Direct marketing (e.g. by e-mail or post).
Legal basis: Consent (Art. 6 para. 1 point (a) GDPR), legitimate interests (Art. 6 para. 1 point (f) GDPR).
Opt-out: You may unsubscribe from our newsletter at any time, i.e. withdraw your consent or choose not to receive any further issues. To unsubscribe, you can either use the link to be found at the end of each newsletter or else use one of the above-mentioned contact options, preferably e-mail, for this purpose.

Rights of data subjects

Information

On written request, we will inform you at any time as to what personal data is stored when you visit our website.

Rectification, erasure, restriction of processing, right to object

You may have personal data which is stored when you visit our website rectified, blocked or erased by us. In addition, you may object to the disclosure of certain personal data. Exempt from erasure is data which we require to complete outstanding tasks or to uphold existing rights and claims, as well as data which we are legally obliged to retain.

Data disclosure and transfer

On written request, you have the right to receive personal data which is stored when you visit our website in a structured, commonly used and machine-readable format (e.g. PDF file). You also have the right to request the return of data provided to us when visiting our website.

Right to withdraw consent

Insofar as, in using our website or availing yourself of our services, you have given consent to the collection, storage, use, etc., of personal data, you may withdraw this consent at any time. The withdrawal of consent can be sent, by e-mail or in writing, to the body specified in Section 2. The effects of the withdrawal of consent are restricted to the storage and use of personal data which may not already, on legal grounds, be stored and used even without your consent. In addition, the withdrawal of consent does not affect the lawfulness of previous processing based on your consent.

Supervisory authority

The supervisory authority responsible for data protection matters is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/edoeb/en/home.html).

Exercising these rights

To exercise your rights, please contact the body specified in Section 2, providing proof of your identity (copy of ID, passport or other official document). Please note that your rights may be restricted insofar as this is legally provided for or necessary on account of overriding public or private interests. For example, the right to data transfer is not applicable in particular for the processing of personal data which is necessary for the performance of a task carried out in the public interest.

Legal validity of this disclaimer

Should parts or individual formulations of this legal notice be invalid, the other parts of the notice shall remain in force and the invalid part shall be interpreted by the contracting parties as far as possible in such a way as to preserve as far as possible the originally intended purpose of the invalid formulation.