Privacy policy

Who is responsible for your data

The controller is ESAHO, Route du Bugnon 28, 1752 Villars-sur-Glâne.

For any question about your data, write to dev@esaho.ch or call +41 78 213 14 78.

What is collected

Depending on what you do on this site:

• Contact form: your name, email address, phone number if you give one, and the content of your message.
• Booking: the same contact details, the service chosen, the date and time, and anything you add.
• Usage statistics: technical data (pages viewed, device type, country), only if you consent via the cookie banner.

Please do not send detailed medical information through this site. A web form is not the right channel for it — raise it at your appointment.

Why it is processed

Your contact details are used to reply to you, to arrange and confirm appointments, and to follow up on your care. Usage data is used only to understand how the site is used.

No data is used for advertising, sold, or passed to third parties for commercial purposes.

Health data

Information about your health is sensitive personal data under art. 5 FADP. It is encrypted in our database, access is limited to the practice, and every consultation of your file is logged.

Care staff are additionally bound by professional secrecy (art. 321 of the Criminal Code).

Who can access it

Only ESAHO accesses your patient data. The technical provider hosting this site (nursee) acts as a processor: it supplies the infrastructure and does not consult patient files.

Data is hosted in Switzerland or the European Union. Any transfer outside those countries would be covered by the safeguards in art. 16-18 FADP.

How long it is kept

• Care record: around ten years after the last contact, as health legislation requires.
• Contact messages with no follow-up: deleted once no longer needed.
• Usage statistics: ninety days, then erased.

Your rights

At any time you may:

• ask what data is held about you and receive a copy (art. 25 FADP);
• have inaccurate information corrected (art. 32 FADP);
• ask for your data to be erased, subject to the legal retention period for the care record;
• receive your data in a reusable format (art. 28 FADP);
• withdraw your consent to statistics cookies, with no effect on your care.

A request sent to dev@esaho.ch is answered within thirty days. If the answer does not satisfy you, you may contact the Federal Data Protection and Information Commissioner (FDPIC) in Bern.

Cookies

This site sets the cookies strictly necessary for it to work. Statistics cookies are set only with your agreement, asked for on your first visit and changeable at any time.

Security

Communication with this site is encrypted (HTTPS). Patients’ personal data is encrypted at rest in the database, access is restricted and logged, and backups are kept separately from the encryption keys.