Privacy policy

The controller responsible for processing your personal data on apmedimex.ch is:

For questions about data protection and to exercise your rights, it is best to write to info@spitex-medimex.ch (subject “Data protection”) or by post to the address above.

Everyone has the right to privacy and to protection against the misuse of their personal data (Art. 13 of the Federal Constitution). This privacy policy applies to apmedimex.ch – the family caregiving website of Spitex Medimex – and to sign-ups and questions you send us through this website, by e-mail or by phone.

Our website spitex-medimex.ch has its own privacy policy.

Privacy policy of spitex-medimex.ch (opens in a new window)

If we employ you, we will inform you separately about how we process your personal data as your employer – for example in your personnel file, for pay and social insurance, and in the care records.

The governing law is the Swiss Federal Act on Data Protection (FADP) in its revised version, in force since 1 September 2023. Where the General Data Protection Regulation of the European Union (GDPR) applies in an individual case – for example if you are in the European Economic Area – its provisions apply as well. Notes on the GDPR appear at the end of each section.

Personal data is any information relating to an identified or identifiable person. Data concerning health is sensitive personal data (Art. 5 let. c FADP). This is why our sign-up form does not ask for it.

• Your sign-up: first name and surname, phone number, your e-mail address if you wish, the canton of the person you care for, who you care for (for example your mother or father), when we can best reach you, and your message (see sign-up form).
• If you write to us or call us: your contact details and your request.
• Technical data: IP address, date and time of access, the page visited and details of your browser and operating system.
• Where your visit came from: landing page, referring website, campaign parameters and ad click IDs (see where your visit came from).
• Your settings: for example the text size and contrast view you chose.

We process this data to call you back and look with you at whether employment as a family caregiver is possible, to answer your questions, to run the website securely and reliably, to understand how people find us and to meet our legal obligations.

Under the FADP, processing is lawful if it complies with the principles of the Act. Where necessary, we rely on your consent or on an overriding interest (Art. 31 FADP), for example in running the website securely.

We treat personal data confidentially. We do not sell it and do not pass it on to third parties for advertising purposes.

GDPR The legal bases are answering your request and pre-contractual steps – the conversation about employment – (Art. 6(1)(b) GDPR), legal obligations (point c), our legitimate interests (point f) and your consent (point a). You can withdraw consent at any time with effect for the future.

Our website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare delivers the pages through a worldwide network of data centres and protects them against attacks. Technical data is processed with every request: IP address, date and time, the address requested, the referring website and details of your browser and operating system.

This data is needed to deliver the website, keep it secure and fix faults. Cloudflare processes it on our behalf; we do not analyse it in a way that identifies you.

The connection to our website is encrypted (HTTPS).

We serve fonts and images from our own server, so loading a page makes no connection to Google Fonts, picture agencies or other third parties.

GDPR Art. 6(1)(f) GDPR – legitimate interest in a secure and working website.

With the “Free consultation” form on the sign-up page, you ask us to call you back. The form collects exactly these details:

• Required fields: first name, surname and phone number – so that we can call you back – and your confirmation that you have read this privacy policy and agree to your details being used for your sign-up and the call-back.
• Optional details: e-mail address, canton of the person you care for, who you care for (for example a parent, your partner or someone close to you), when we can best reach you (morning, afternoon or evening) and a message.
• Sent automatically: the language, the page you send the form from, the time and the details of where your visit came from.

No health data: the form does not ask about diagnoses, illnesses or care needs. Please do not put such details in your message either – we will talk about them in person. If you tell us about health matters anyway, we use the information only to reply to your sign-up.

What for: we use your details only to call you back, answer your questions and look with you at whether employment as a family caregiver is possible. All the form tells us about the person you care for is their canton and your relationship to them. If you tell us more about them, please let them know.

Your sign-up is sent to our server in encrypted form and forwarded from there by e-mail to our office. We use the service Resend (Resend, Inc., USA) to send these e-mails. We do not store sign-ups on the website itself: our server logs contain only a reference number, the form type, the website, the canton, whether the sign-up followed an ad click, and the delivery result – no names, contact details or messages.

To protect against spam, the form contains an invisible check field and a timing check.

E-mail and phone

If you send us an e-mail or call us, we process your details to deal with your request. E-mails are usually sent unencrypted, so please do not send us medical documents by e-mail. Our mailboxes are run by a service provider on our behalf. We do not record phone calls.

How long we keep sign-ups

Sign-ups that do not lead to employment are deleted once they have been dealt with, at the latest after twelve months. If you are employed, we transfer the necessary details to your personnel file.

GDPR Art. 6(1)(b) GDPR (your request and pre-contractual steps); for health information you choose to give us, Art. 9(2)(a) GDPR (explicit consent).

With the Quick-Check on the “Requirements” page, six questions show you whether you meet the basic requirements for employment. It runs entirely in your browser: your answers are neither stored nor sent to us or anyone else, and they do not appear in the page address (URL) either.

If statistics are set up on this website, we count anonymously, in line with your cookie choice, how far through the Quick-Check people got and what kind of result it showed (event “mx_quickcheck”). Your individual answers and any details about you are not included.

The Quick-Check result is a first indication, not a decision. Whether employment is possible is something we look at with you personally.

We would like to know how people find us – for example through a Google ad, through Google search or through our website spitex-medimex.ch. For this, your browser notes on the first page of a session:

• the landing page and the referring website (without its parameters),
• any campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content),
• ad click IDs (gclid, gbraid, wbraid, msclkid, fbclid) and
• the time.

These details are kept in your browser’s session storage and deleted when you close the browser tab.

If you send us a sign-up, these details are sent with it. This shows us whether a sign-up came about, for example, through an ad.

GDPR Art. 6(1)(f) GDPR (legitimate interest in measuring our advertising); storage beyond the session only with your consent (Art. 6(1)(a) GDPR).

Cookies are small text files that your browser stores. Your browser’s local storage and session storage work in a similar way. Our website itself sets no cookies; it only uses your browser’s storage for the purposes listed below. Cloudflare may set a cookie for security reasons.

We only use Google services for statistics and advertising on apmedimex.ch if we set them up. That is currently not the case: no cookie banner appears and no Google cookies are set. Before we switch such services on, we will update this privacy policy.

You can delete or block cookies and website data in your browser at any time.

What is stored in your browser

The names and lifetimes of the cookies of Cloudflare – and, where applicable, Google – are set by these providers and may change.

GDPR Necessary storage: Art. 6(1)(f) GDPR. Statistics and advertising: only with your consent (Art. 6(1)(a) GDPR).

Google Maps: we link to the location of our office on Google Maps. Only when you open the link do you go to Google, where Google’s privacy policy applies.

Links to other websites: our website spitex-medimex.ch has its own privacy policy. For websites of other providers – for example VivitaCare (vivitacare.ch) for care aids – their operators are responsible, and their privacy notices apply.

We only pass on personal data where this is necessary for the purposes described – to:

• Cloudflare (running the website, security and the server function of the sign-up form),
• Resend (sending the sign-up e-mails to our office),
• our e-mail provider,
• service providers who look after our website technically, and
• authorities and courts, if we are legally obliged to.

Our service providers process the data on our behalf and according to our instructions.

Some of these providers also process personal data outside Switzerland, in particular in EU and EEA states and in the USA. In the Federal Council’s assessment, the EU and EEA states provide adequate data protection. For the USA we rely on the Swiss-U.S. Data Privacy Framework where the provider is certified under it (recognised by the Federal Council since 15 September 2024), and otherwise on the European Commission’s standard contractual clauses recognised by the FDPIC. You can ask us for a copy of these safeguards.

GDPR Transfers to the USA are covered by the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023) or by standard contractual clauses (Art. 46(2)(c) GDPR).

We keep personal data only as long as needed for the purpose concerned or as required by law:

• Sign-ups without employment: until they have been dealt with, at the latest twelve months.
• If we employ you, the statutory retention periods for the personnel file and the care records apply.
• Details of where your visit came from, in the browser: until the end of the session.
• Your settings in the browser (for example the text size): until you change or delete them.

We protect your data with appropriate technical and organisational measures – for example encrypted transmission (HTTPS), access restrictions, carefully chosen service providers and a form whose content does not end up in logs. Together with our service providers, we protect the data as well as we can against unauthorised access, loss, misuse and falsification. However, no one can guarantee absolute security for transmission over the internet.

Under the Data Protection Act you have the following rights in particular:

• Access: you can find out whether and what personal data we process about you (Art. 25 FADP).
• Correction: we correct inaccurate data (Art. 32 FADP).
• Erasure and objection: you can ask us to delete data or to stop processing it, unless a legal obligation prevents this (Art. 30 and 32 FADP).
• Data portability: on request, you receive the data you gave us in a common electronic format, or we transfer it to another controller (Art. 28 FADP).
• Withdrawal: you can withdraw consent at any time with effect for the future.

To do so, write to us at info@spitex-medimex.ch or by post. So that no unauthorised person receives information about you, we may ask for proof of identity. We usually reply within 30 days; access is generally free of charge.

GDPR You have the rights under Art. 15 to 21 GDPR, including the right to restriction of processing.

Complaint to a supervisory authority

In Switzerland you can contact the Federal Data Protection and Information Commissioner (FDPIC): Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch (opens in a new window). In the European Economic Area, the data protection authority of the country where you are staying is responsible.

No automated decisions

We do not make decisions based solely on automated processing that significantly affect you (Art. 21 FADP, Art. 22 GDPR). The Quick-Check does not decide anything either: whether employment is possible is decided by people – in a conversation with you.

We update this privacy policy when our website, our services or the law change. The version published here applies; the date at the top shows when it was last updated. It replaces the privacy notes of the previous apmedimex.ch website.