Data protection

1. Introduction 

The Clinique romande de réadaptation (CRR) attaches great importance to data protection. The purpose of this guideline is to explain how we use and process your personal data in the course of providing our services in accordance with the provisions of the Swiss Data Protection Act (DPA) and the General Data Protection Regulation (GDPR).

This data protection declaration is valid for all Internet platforms of the Clinique romande de réadaptation and regardless of the access method used to consult or use our services (sites, applications, newsletter). 

2. Statement of consent

Please read these guidelines and the legal notice carefully. 

By accessing the CRR website (crr-suva.ch; hereinafter referred to as "the website") and using our services, you acknowledge that you have read and understood these terms and conditions (hereinafter referred to as "the terms and conditions") for accessing the website and our various platforms and that you accept them. If you do not agree with these conditions, please leave the website.

The use of special services (patient portal, newsletter, etc.) may be subject to special additional provisions. In the event of any contradiction between these terms and conditions and the specific provisions, the latter shall prevail.

3. What information do we store and for what purpose?

We process personal data that you yourself make available to us.

For advertising purposes, we also process personal data that we have legally obtained from publicly available sources (e.g. public databases, the Internet) or from third parties (e.g. credit check companies).

We may process the following personal data in certain circumstances:

• Your personal details
  
• Name, address and other information, date of birth, preferred language, telephone numbers
  
• Data on your activities as a customer
• Contractual data, contacts, session data in relation to visits to our website, applications for mobile devices, participation in our training courses, product preferences, etc...
  
• Accounting information
  
• Transactions, invoices and all data related to the legal obligations of a company's financial reporting
  

Your personal data is used in accordance with the legal provisions for the following purposes and on the following basis:

• In the context of the execution of the services provided: Online purchases, requests for information, participation in our training courses
• On the basis of your consent: Consultation of the website, subscription to newsletters
  
• On the basis of legal obligations : Legal requirement for commercial accounting.

3.1 Consultation of our Internet site

When visiting our website, your specific user data (IP address, Internet browser, operating system, etc.) as well as technical information (URLs of the pages visited, searches performed) are collected and evaluated. For this purpose, we use cookies (Cookie Policy). When visiting our website, you agree to the collection and use of this data in accordance with this policy.

The processing of this data is based on the legitimate interest of the CRR to enable the use of its website and to guarantee its security. It is also used to optimise the website and to adapt it to the various target groups. For this purpose, the data is evaluated exclusively on an anonymous basis.

3.2 Saving your data

We save data on CRR's websites. On CRR websites, data is collected using cookies, in accordance with our cookie policy. 

Saving and evaluation of data (in particular in the context of the use of Google Analytics)

With Google Analytics, the information collected by the Google cookie about your use of the website is generally transmitted to and stored on a Google server. Your IP address is transmitted in its entirety to a Google server in the USA. For further information on this subject, please refer to the Google Analytics data protection guidelines.

We use Google Analytics to collect data for statistical purposes from DoubleClick and AdWords cookies (in particular page views, clicks, time spent on each page, etc.). If you do not wish to do so, you can disable this function via the ad manager using this link. 

As part of Google Analytics, we use the functions of Universal Analytics. These allow us to analyse activities on our website, regardless of the device used (e.g. access from a laptop and then from a tablet).

Retargeting and social networks

Content (see also "cookies" or "pixels") from external service providers (e.g. Facebook, LinkedIn or Twitter, hereinafter "social networks") may be integrated into the CRR website in order to improve the user experience and for statistical, market research and marketing purposes. These cookies or pixels are used by the external service providers concerned for the purpose of controlling and monitoring their services. When you visit our website, cookies may be installed (locally) on your computer's hard drive.

The CRR needs these cookies and pixels, for example, to optimize its website, to personalize its advertising messages and offers and to be able to compile statistics and market research on usage. Only anonymous data is collected and processed on the CRR website. You can also visit the website without these cookies by disabling cookies in your browser.

Most of the cookies we use are deleted automatically at the end of your visit. Other cookies remain on your computer for a longer period of time and are used for example for personalization or retargeting. You can delete these cookies at any time.

When you visit the CRR website, cookies establish a link between your browser and the server of the corresponding provider. It is therefore possible, for example, that your visit to this site is associated with a user account of the corresponding social network. CRR has no information about this data and its use.

Profiling

When you use our website and publicly accessible services (e.g. contact form or online registration) and enter personal or company data, the CRR may determine an individual profile on the basis of this data. This profile can then be used for the following purposes:

• Customer surveys (e.g. on satisfaction)
• Management of offers (e.g. personalized invitations to courses)

3.3 Contact requests

In this context, we record your contact details and information relating to your request.

By using the contact form, the user grants the CRR the right to record and evaluate all accesses and movements.

By sending or uploading his/her data, the user authorizes the CRR to process this data for marketing and analysis purposes required in this context. The user also authorizes the CRR to analyze and take measures in the context of updating existing and future customer relationships as well as for purposes that are explicitly mentioned or clearly related to the data submission process. 

Data transmitted by e-mail is not encrypted.

3.4 Newsletter / List of training courses

It is possible for you to subscribe to our newsletter / list of training courses. By creating an account and sending or uploading your data, you give us permission to use this data. The data you enter for this purpose enables us to send you a newsletter to inform you about offers tailored to your needs and about other topics. By subscribing to the list of training courses, the user grants the CRR the right to record and evaluate all accesses and movements. You also agree to receive our newsletter and training programme. You can revoke your consent at any time by unsubscribing directly at the bottom of the received emails.

3.5 Use of data for marketing purposes

The information you enter when using our services (contact details, login data, access, etc.) may be used on the basis of the CRR's legitimate interest in achieving its marketing objectives (communicating about products, marketing actions, recommending training courses, ensuring a user-friendly service and contact, etc.).

3.6 Surveys

Surveys that are carried out by an external provider on behalf of the CRR are treated confidentially. It is also guaranteed that your data will not be passed on to any third party. In the case of such a survey, you will receive separate information about the processing of your data.

4. Data transmission

In principle, your data will not be passed on to third parties. However, your data may be passed on to third parties if this is required by law, legal decisions or instructions from authorities or if you give your consent.

Our employees only have access to the data they need to fulfil contractual and legal obligations. 

If we use third parties to provide a service (e.g. a survey) and access to or transmission of the data is necessary, the corresponding suppliers must meet the same data protection obligations as we do. 

5. Data security

When you transmit information to us via the Internet or other electronic communication media, there is always a risk that it may be lost, corrupted or manipulated. You therefore do so at your own risk.

As a rule, data transmitted via the Internet platforms provided are transmitted in encrypted form.

We implement technical and organisational measures to ensure that your personal data is protected against unauthorised processing, loss and destruction.

We do not use any automatic decision-making tools.

6. Saving your personal data

We process and save your personal data for as long as required by legal and contractual provisions.

The data relating to your preferences is kept for 2 years after the last commercial transaction.

The data relating to the newsletter is kept for 1 year after unsubscription.

7. Your rights regarding your personal data

You have a right of access, a right of rectification, a right of opposition, a right to limit processing and a right to erasure.

If you wish to exercise the above rights, please contact the Data Protection Officer (see point 10). 

Please note that exercising these rights may result in us no longer being able to provide the agreed services.

8. Children

Our products and services are not intended for children. If your child has provided personal information on our platforms, please contact us at

9. Data controller

Responsibility for processing your data is assumed by :