1. DATA PROTECTION

1.1 General information
During your treatment at our clinic/therapy center, we collect and process various forms of data concerning you, in particular administrative and medical data.

Your illness, diagnoses, examination results, etc. are documented in your patient file. In principle, you have the right to inspect your patient file (more on this under point 1.11).

In rehabilitation, we work with technical equipment from various companies. In this context, software is often used to monitor and optimize the progress of your therapy. These companies may receive pseudonymized data from you; as this data is pseudonymized, they do not know your identity.

1.2 Medical confidentiality
General data protection and medical confidentiality are closely related. The duty of confidentiality protects the relationship of trust between the patient and the doctor or their support staff. Breaches of medical confidentiality can be punished under criminal law as well as through disciplinary action.

A release from the duty of confidentiality is possible:

1. by your consent,
2. by the authorization of the competent supervisory authority,
3. if there is a legal obligation to notify.

1.3 Photo, film and sound recordings
With your consent, a photo (portrait) can/will be taken when you enter. This serves the purpose of better recognition. It also makes it easier to recognize all the people treating you.

During your stay, the rehabilitation clinic will make film and photo recordings as well as sound recordings so that the course of therapy can be documented. Your consent will be obtained for other uses (publications, brochures, etc.). We assure you that recordings will not be handed over to unauthorized third parties. Your personal data may also be used for internal quality assurance purposes in accordance with the statutory provisions.

1.4 Who is responsible for data processing?
VAMED CH is responsible for data processing:

Rehabilitation Clinic Zihlschlacht AG
Data Protection Officer
Maurizio Colella
Hauptstrasse 2
8588 Zihlschlacht

Phone: 071 424 38 28
Email: datenschutz@vamed.ch

1.5 What personal data is processed?
The clinic processes the following personal data (hereinafter all categories are referred to jointly as “data”) about you:

1. Administrative data/master data: this data includes last name, first name, address, date of birth, nationality, gender and possibly denomination/religion (“administrative data”).
2. Medical data/case data: this includes your medical history, in particular all medical information that we learn about you from your admission to your discharge, such as admission and discharge diagnosis, examinations, therapies, operations, medical reports, medication, laboratory analyses, nursing reports (“medical data”). Film, photo and sound recordings are also made to document the course of your treatment. This data is usually compiled in your patient file (“patient dossier”). If you train with technical equipment, your performance (e.g. duration, distance, intensity of training) in particular will also be recorded (“performance data”).

The aforementioned data is generally medical data, which is considered to be particularly worthy of protection.

1.6 What is the personal data needed for?
The clinic requires medical data for the care and treatment of our patients, for quality purposes and for patient administration.

1.7 To whom is the personal data disclosed?
In principle, data is not passed on to third parties unless

• You have expressly authorized us to transfer data to institutions providing follow-up treatment, family members;
• Based on a legal basis (e.g. disclosure to health/accident insurers based on the Health Insurance Act or the Accident Insurance Act);
• (There is a legal obligation to report such as infectious diseases, criminal offenses, etc.)

1.8 How is your data protected?

The clinic has appropriate technical and organizational security measures in place to protect your data.

1.9 Transfer of data outside Switzerland

As a rule, your data is processed within Switzerland. If data is processed outside Switzerland, this is only done in countries that have an appropriate level of data protection.

1.10 How long and where is the personal data stored?

The data is stored in accordance with the statutory retention periods. This is at least 20 years; in individual cases this can be 30 years.

In principle, data is stored within the hospital’s internal infrastructure. Certain performance data in connection with the use of technical devices can also be stored in a cloud that meets the security standards of the VAMED Group. The data is only stored in pseudonymized and encrypted form and only on servers that are located in Europe or Switzerland and are therefore subject to a high level of data protection.

1.11 What rights do you have in relation to your data?
1.11.1 Right of access and rectification, etc.
You have the following rights within the framework and scope of the applicable statutory provisions:

1. Right to information: you have the right to information about all your personal data, including a copy free of charge. You do not have to provide a specific reason for this.
2. Right to rectification: you have the right to have incorrect personal data about you amended. Incomplete data must be completed. However, you must give reasons for this. You can also request that a correction be communicated to third parties.
   A correction is only possible in the case of objective facts; in the case of subjective opinions, you can have a counterstatement or a note added.
3. Right to erasure: if there is a reason for erasure, you can request the erasure of the data concerning you, provided that there are no longer statutory retention periods.
4. Right to object to or restrict processing: you have the right to object to the processing of your data. This will not delete your data, but will restrict its further use.

1.12 Right to withdraw consent
If data processing is based on your consent, you can revoke this at any time in writing, by e-mail, telephone or fax to the address below. It is not necessary to state a reason. Please note that the revocation is only valid from the point at which you make it. Any data processing carried out up to this point in time remains lawful.

2. WHO CAN I CONTACT IF I HAVE ANY QUESTIONS?

If you have any questions about general patient information, please contact the doctor responsible, the nursing staff or your therapist.

If you have any questions or concerns about your data protection rights or would like to exercise your rights as a data subject, please contact the following address:

Rehabilitation clinic Zihlschlacht AG
Data Protection Officer
Maurizio Colella
Hauptstrasse 2
8588 Zihlschlacht

Phone: 071 424 38 28
Email: datenschutz@vamed.ch

3. DISCLOSURE OF DATA TO VAMED APPROVED MANUFACTURERS OF THERAPY DEVICES
Pseudonymized and encrypted data can be transmitted to manufacturers of therapy devices in order to optimize care in the rehabilitation clinic/therapy center.

Many thanks

June 2022
Data Protection Officer, VAMED Switzerland