Privacy policy

This is the privacy policy of our medical practice, MKG Praxis Eyrich Mund- Kiefer- plastische Gesichts-Chirurgie in Pfäffikon (SZ) (hereinafter “we”, “us”).
The following privacy policy applies to the use of our website as well as the medical services we offer (in particular your treatment/examination with us) and our other contracts. This privacy policy informs you as a patient, contractual partner, employee (hereinafter “you”) or visitor to our website about the collection of personal data during your use of our website and our services. By using this website, you consent to the processing of your personal data in accordance with this privacy policy.

In principle, our medical practice offers its services in Switzerland and is aimed at persons resident in Switzerland.

Contact details
Your data is processed by us. The contact person (jointly responsible party) regarding the purpose and means of processing on our side is:

Name: PD Dr. Dr. Eyrich und Partner AG
Responsible person: Gerold Eyrich
Telephone number: +41 (0)55/442 60 25
Email: mkg-eyrich.hin.ch
Address: Poststrasse 4, 8808 Pfäffikon, SZ
Please submit your enquiries in writing or by email to the relevant address above.

Collection of data
We collect personal data that you or your doctor provide to us, e.g. through the referral documents from your doctor, by completing the registration form, or by relating your patient history.
Certain types of personal data are considered “sensitive” under data protection law, e.g. health data such as symptom descriptions, diagnoses, laboratory results, medications and others, as well as biometric characteristics. Depending on the constellation, other categories of personal data mentioned may also include such particularly sensitive personal data (e.g. information about religious affiliation in the master data for your treatment needs). As a rule, we process particularly sensitive personal data only when it is necessary for the provision of a service, when you have disclosed this data to us of your own accord, or when you have consented to the processing towards us or your referring doctor. We assume your consent when we receive data from your referring doctor. We may also process particularly sensitive personal data where this is necessary to safeguard rights or comply with domestic or foreign legal provisions, where the relevant data has been made manifestly public by the data subject, or where applicable law otherwise permits its processing.
With every visit to the website, data is collected that is technically necessary. This may include, for example, the browser types used, the operating system used, the date and time of access, an Internet Protocol address (IP address), and the name and URL of the file accessed.

Purposes of data processing
Your data is processed for the purposes of fulfilling our services. In addition, there are further purposes:

• For the purpose of communicating with you, e.g. answering enquiries
• For handling contractual relationships, e.g. to provide medical, radiological and pharmaceutical services
• For the functioning of practice operations such as IT, websites, newsletters, accounting, etc.
• For maintaining the contractual relationship
• For the contractual relationship of employees
• To act in compliance with the law, industry standards, etc.
• For legal proceedings or investigations
• To ensure security
• For administrative acts and management
• For the instruction, further training and education of employees, who are in principle bound by professional secrecy

Retention period
Your data is retained for 20 years from your last treatment. The retention period is a legally mandatory obligation of the physician and cannot be changed.

Disclosure of data to third parties and processors
Insofar as it is necessary for the operation of our medical services (in particular for your benefit), we pass on data to the companies engaged by us with the operation and handling of the services. When processing your data, it may be disclosed to the following third parties:

• Pre- and post-treating doctors, healthcare professionals and hospitals on request
• Scientific circles (such as tumour boards)
• Health insurers and insurance companies, in particular for assessing obligations to provide benefits
• Group companies and their employees, provided they are bound by confidentiality
• Service providers (who process your data partly on our behalf, e.g. IT/web providers,
• support companies, and partly on their own responsibility, e.g. laboratories for examinations or lawyers for legal questions)
• Authorities at home and abroad due to legal obligations

The respective service providers are bound to our standards under data protection law by legal provisions, a data processing agreement, or contractual provisions, or are entitled to process personal data through the use of standard contractual clauses recognised by the FDPIC.

Disclosure of data abroad
There is a possibility that, within the scope of legal or contractual processing (e.g. IT support, cloud solutions, etc.), your data may reach the countries of the EEA and be processed and stored there, and in exceptional cases any country in the world. In doing so, we take care that the respective country has adequate data protection. If the transfer, processing and storage of your data takes place in a country without adequate data protection, this is done on the basis of contractual guarantees that are reported to the FDPIC. However, standard contractual clauses created or recognised by the FDPIC are used, which is why the notification obligation does not apply.

Revocation or restriction of your consent
You have the right to revoke or restrict your consent. Such a change is valid if it is made in writing (not by email) and applies from receipt to the processing of data in the future. Rights not based on consent (e.g. legal or contractual rights) remain unaffected by the revocation.

Cookies and other services
Our medical practice may use cookies on its website. Cookies contain a so-called cookie ID, a unique identifier of the cookie, which assigns websites and servers to a specific internet browser. A particular internet browser can be recognised and identified via this unique cookie ID.

Data security
To safeguard your rights, your data is protected against unauthorised access, changes and loss. Technical and organisational measures (e.g. access restrictions or back-ups) serve this purpose. The technical and organisational measures to be chosen are in principle based on the risk. The data security requirements pursuant to the law (FADP) and the Ordinance on Data Protection (DPO) are observed.
You acknowledge and agree that we exchange data with you unencrypted via email, SMS or other digital applications.

Your rights
Based on the Data Protection Act, you have various rights, such as a right to information. To assert your rights, please contact us.

Applicable law and place of jurisdiction
This privacy policy and the contracts concluded on the basis of or in connection with this privacy policy are subject to Swiss law, to the exclusion of any conflict-of-law rules. The place of jurisdiction is the registered office of the medical practice.

Final provisions
Should individual parts of this privacy policy be invalid, this does not affect the validity of the remainder of the privacy policy. We may adapt this privacy policy at any time without prior notice. The current version published on our website applies.