Datenschutzerklärung

Content of this privacy policy

In this privacy policy, we inform you about how and for what purpose we collect and process personal data about you when you obtain information about our range of services, apply to us or use our services.

Person responsible for data processing

Physio23 is responsible for the data processing described in this privacy policy.

If you have any questions or would like to exercise your rights as a data subject under data protection law, please contact us at info@physio23.ch

or write to:

Physio23 GmbH
Steinentorstrasse 23
4051 Basel

Provision of our healthcare services

Data collection as part of the provision of healthcare services
in the practice

In connection with your treatment in our practice, we process general personal data and health data.

On the personal data forms (physical or digital form) for admission as a patient, you provide us with general personal data (namely name and contact details). You also provide details of the doctors treating you and your insurance policies. We can also access some of this personal data (patient master data) directly via your insurance card or a database of your insurance company.

We process your health data as part of the provision of services. This includes information about your past or current state of health, your physiotherapy and therapy progress as well as the use and billing of supplementary healthcare services.

Health data (in the form of text, images, sound or video) is collected or created by our therapists during the examination or treatment in the practice. We also receive health data from doctors who refer you to us or who have previously treated you.

Communication with you, information
and other services

Personal data processed during communication

When you contact us by email or telephone, submit feedback or inquiries via the feedback form on the website, apply for a job or register for physiotherapy, a consultation, our events or courses, we collect the information you provide to us.

This includes general personal data such as your first name, surname, email address and telephone number. If we offer online appointment booking, we collect the personal data you provide in order to administer the appointment booking.

On our feedback form, you can provide information about the reason for your physiotherapy. Providing feedback and health data in this context is always voluntary. When you apply for jobs, we collect your CV and other information about your qualifications, which you submit to us as part of your application dossier.

Provision and use of the website and online portal

Use for information

You can find out about Physio23 and our range of services on the website without telling us who you are. As with any connection to a web server, the server on which we have the website and the online portal provided automatically logs and stores certain technical data and stores it for a short time. This includes the IP address and operating system of your device, the date and time of use and the type of browser you use to access the website or online portal.

Using our online portal

We offer you an online portal ("patient portal") for easier communication and administration with us. When you fill out a form via the online portal or register as a user on the online portal, we collect the information you provide to us. This includes general personal data such as name and contact details as well as personal information that you enter, upload, generate, save and process when using the online portal. The provision of health data in this context is always voluntary. Without the provision of health data, it may not be possible to use all functions properly.

Web analysis

We use web analysis services (currently Google Analytics) to evaluate the use of the website and to obtain information for its optimization. The web analysis services we use collect and store user data using cookies. Before they are transmitted to a server outside Switzerland/EU/EEA, the requesting IP addresses are truncated. We therefore do not transmit any personal data to the providers of the web analysis services abroad.

In addition, we use cookies to analyze the use of the website and to obtain information to optimize the website.

Note on the use of cookies

We use cookies, tags and similar technologies on the website to provide you with the best possible user experience and to help us improve the website. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app.

Some of the cookies we use are necessary to provide certain features of the website. In addition, we use cookies to analyze the use of the website and to obtain information to optimize the website.

You can instruct your browser not to accept cookies or to ask you each time before a cookie is set. You can also delete cookies on your device by using the corresponding function of your browser.

Use of our social media company pages

On our company pages in social media you will find posts about current developments at Physio23 and about our range of services. The social media providers collect and analyze usage data such as the number of visitors and demographic information about visitors to our company pages.

We receive evaluations created by the social media providers based on this data. These only contain aggregated or otherwise sufficiently anonymized data. Only the respective provider can identify you based on the usage data collected. Therefore, please note the data protection information of the respective provider.

Use and optimization of our newsletter

If you are interested in our newsletter, we collect the information you provide to us. This includes general personal data such as your first name, surname and email address.

You can inform us at any time that you do not wish to receive our newsletter or other general information in future. To do so, please use the unsubscribe link at the end of the newsletter.

Our handling of your personal data and your rights

For what purposes we process your personal data
and on what basis

We process your personal data primarily in order to provide information about our range of services and to provide, document and invoice our services in accordance with our contractual and legal obligations.

We also process your personal data for the following purposes:

• Responding to your inquiries and communicating with you

• Processing your registration or appointment request

• Further education and training purposes (whereby, in the case of non(whereby we anonymize case descriptions for non-internal use)

• Response to and processing of applications

• Evaluation and optimization of our services

• Analysis and optimization of the use of the website and the online portal

• Information about new developments from us as well as about offers from us (e.g. via our newsletter; whereby you are informed about new developments and offers from us

• ).e.g. via our newsletter; you can inform us at any time that you do not wish to receive such information in the future)

• Optimization of our posts on our social media company pages

• Compliance with legal obligations

• Enforcement of legal claims

As a regulated healthcare provider, we are legally obliged to document our services and bill them in a comprehensible manner. We must also process your personal data (including health data) in order to fulfill the treatment contract with you. We are also subject to statutory retention obligations. With regard to the other purposes of processing mentioned, we have a legitimate interest in the processing of your personal data corresponding to the purposes. On this basis, we process your personal data if and to the extent that the applicable data protection law requires a legal basis or justification for the lawfulness of data processing in general or for specific processing activities.

How we store and protect your personal data

We only store your personal data to the extent and for as long as is necessary to fulfill the purposes described in this privacy policy or to comply with legal obligations. In the interests of the integrity and confidentiality of personal data, we take appropriate technical and organizational measures. In particular, we implement access controls, access controls and procedures to regularly review, assess and evaluate the effectiveness of the measures in accordance with our risk assessment.

To whom we disclose your personal data

We disclose your general personal data and health data to the following categories of recipients:

• Internally to healthcare professionals who look after and treat you in our practice

• To doctors or other external healthcare professionals and institutions (e.g. hospitals) involved in your treatment.

• Your health, accident or supplementary insurance company.

These data transfers are necessary so that we can provide, document and invoice our services professionally and in accordance with our contractual and legal obligations. Unless you inform us otherwise, we assume that you consent to the exchange of reports and other information about your state of health with healthcare professionals involved in your treatment.

We also disclose your personal data to the following categories of recipients based on legal or contractual obligations, for the provision and billing of our services or in your recognizable interest: External service providers and, if applicable, legal representatives, authorities and courts.

Place of processing

We primarily store and process your personal data in Switzerland and the EU. For certain additional services (e.g. newsletters), we also use service providers who process your personal data in the USA.

We transfer data to the USA on the basis of standard data protection clauses or other valid transfer mechanisms (e.g. necessity for contract fulfillment) that are available in accordance with the applicable data protection laws.

Your rights in relation to your personal data

You have the following rights in relation to personal data concerning you:

• The right to obtain information about what personal data we hold about you and how we process it

• The right to receive or transfer a copy of your personal data in a commonly used format

• The right to rectification of your personal data The right to erasure of your personal data

• The right, object to the processing of your personal data

Please note that these rights are subject to legal requirements and exceptions. To the extent permitted by law, we may refuse your request to exercise these rights. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

How we may change this Privacy Policy

We may change this Privacy Policy at any time, in particular if we change our data processing practices or if new legislation becomes applicable. The version provided on our website applies in each case.

Physio23 GmbH
Steinentorstrasse 23
4051 Basel