Privacy policy

1. Controller

The controller responsible for processing personal data in connection with this website and the practice's activities is:

Dr. med. Stefan Wehrle
Praxis am Stauffacher
Stauffacherstrasse 16
8004 Zurich, Switzerland
Telephone: +41 78 318 81 69
E-mail: stefan.wehrle@hin.ch

2. Scope and legal basis

This privacy policy follows the Swiss Federal Act on Data Protection (FADP/DSG) and its implementing ordinance (DPO/DSV). Where the European General Data Protection Regulation (GDPR) applies in an individual case – for example to visitors from the EU – its requirements are also observed.

We process personal data in accordance with the principles of good faith, lawfulness, proportionality, transparency, purpose limitation and data security.

3. Processing when you visit this website

3.1 Server log files

When you access this website, our hosting provider records technically necessary access data in what are known as server log files. These typically comprise:

• the IP address of the accessing device (truncated or anonymised by default at Infomaniak)
• the date and time of access
• the name and URL of the file retrieved
• the volume of data transferred and confirmation of successful retrieval
• the browser type and version and the operating system used
• the referrer URL (the page previously visited), where transmitted

This data is technically necessary to operate the website. It is used solely to deliver the content, to ensure the security and stability of the system, and for error analysis. It is not combined with other data sets, nor evaluated for advertising or profiling purposes. Log files are deleted automatically after a short period (generally within a few days, at most 30 days), unless they are required to investigate a specific security incident.

3.2 No cookies, no tracking

This website sets no cookies and stores no data in your browser's local storage or session storage. No analytics, statistics or tracking services are used – in particular no Google Analytics, no Matomo, and no pixels or counting tags from social networks. For this reason, no cookie banner is required.

3.3 No embedded third-party services

All components of the website – in particular fonts, images, icons and scripts – are delivered directly from the Swiss server. No external content delivery networks, no Google Fonts, and no embedded videos, maps or social media elements are loaded. Simply visiting this website therefore transmits your IP address to no third-party provider.

3.4 No contact form

This website deliberately contains no contact or appointment form. No input is accepted, processed or stored via the website. Contact is made exclusively via the telephone number or e-mail address provided.

3.5 External links

This website contains a small number of references to external websites. These links are only called up when you actively click them. From that moment, the privacy provisions of the respective provider apply; we have no influence over their data processing.

4. Contact by telephone and e-mail

If you contact us by telephone or e-mail, we process the details you provide (e.g. your name, telephone number, e-mail address and the content of your enquiry) in order to deal with your request and arrange an appointment. The processing is based on your enquiry and on the legitimate interest in responding to requests.

Note on e-mail security: unencrypted e-mail is not a secure transmission channel. Please do not send us particularly sensitive health data by ordinary e-mail. For an appointment request, your name and a callback number are sufficient. Our address stefan.wehrle@hin.ch is a HIN address (Health Info Net); transmission is encrypted provided that you likewise have HIN access.

Enquiries that do not lead to a treatment relationship are deleted as soon as they have been dealt with conclusively, unless statutory retention obligations prevent this.

5. Patient data at the practice

If your enquiry gives rise to a treatment relationship, we process the personal data required for treatment, including sensitive health data within the meaning of Art. 5 lit. c FADP. This processing takes place outside this website, in the practice records.

• Purpose: medical examination, diagnostics, consultation, treatment, documentation and billing.
• Confidentiality: medical professional secrecy applies under Art. 321 of the Swiss Criminal Code and the Medical Professions Act (MedBG). Data is disclosed to third parties – such as co-treating doctors, laboratories or health insurers – only with your consent or on a statutory basis.
• Retention: medical records are retained for at least ten years after the final entry, in accordance with cantonal and federal requirements.

6. Processors and disclosure to third parties

We engage the following processor to operate the website:

Hosting and domain

Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland. The servers are located in Switzerland. Infomaniak processes the data exclusively on our behalf and on our instructions.

No personal data is disclosed abroad in connection with this website. Personal data is neither sold nor passed on to third parties for advertising purposes.

7. Data security

The website is delivered exclusively over an encrypted HTTPS (TLS) connection. Together with our hosting provider, we take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. Absolute protection during data transmission over the internet cannot, however, be guaranteed.

8. Your rights

Under the applicable data protection law you have, in particular, the following rights:

• Access to information on whether and which personal data we process about you (Art. 25 FADP)
• Rectification of inaccurate personal data (Art. 32 FADP)
• Erasure or destruction of personal data, insofar as no statutory retention obligation applies
• Release or transfer of your data in a common electronic format (Art. 28 FADP)
• Objection to a particular processing operation and withdrawal of consent with effect for the future

An informal message to the address given above is sufficient to exercise your rights. To protect your data, we must verify your identity in an appropriate manner before providing information.

9. Supervisory authority

You have the right to lodge a complaint with the competent supervisory authority:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
www.edoeb.admin.ch

10. Changes to this privacy policy

We may amend this privacy policy at any time, for instance in response to changes in the legal situation or in our services. The version published on this page applies in each case.

Details of the responsible person and the practice can be found in the legal notice.

This English text is a translation provided for convenience. In the event of any discrepancy, the German version shall prevail.