Data Processing Information Notice
Medical Center Sorengo Sagl (hereinafter the "Medical Center" or "we") attaches great importance to the protection of the personal data of its patients, users and partners. Data processing is carried out in compliance with the Federal Act on Data Protection (FADP), its related ordinances and the applicable healthcare regulations. This notice describes what data we collect, how we use it and what rights data subjects have. By accessing our website and using the services and products offered, you declare that you have carefully read this data protection statement and that you accept the processing of personal data described herein. If you do not agree with this statement, you must refrain from accessing the portal and from using our services and products.
1. Data Controller
Medical Center Sorengo Sagl
Via Ponte Tresa 35
6924 Sorengo – Switzerland
Tel: 091 994 20 00
E-mail: info@mcsorengo.ch
For any request relating to data protection, you can contact us using the details indicated above.
2. Categories of Data Processed
We process various categories of personal data, depending on the relationship with the data subject.
Patient data
- Identification and contact data
- Insurance and administrative data
- Health data (medical history, diagnoses, reports, treatments)
Website user data
- IP address
- Technical information (browser, device, operating system)
- Browsing data
Other data
- Data of suppliers, partners and applicants
- Data of legal representatives
Health data is considered sensitive data and is processed with particular confidentiality.
3. Purposes of Processing
Personal data is processed for the following purposes:
- Provision of medical services
- Management of medical records
- Coordination with other healthcare providers
- Fulfilment of legal obligations
- Billing and administrative management
- Communication with patients
- Facility security
- Technical management and analysis of the website
- Staff recruitment processes
4. Legal Bases for Processing
Data processing is based on:
- Contractual relationship with the patient
- Legal obligations
- Overriding interest of the Medical Center
- Consent of the data subject, where necessary
5. Data Collection
Personal data is collected:
- Directly from the data subject
- From other healthcare professionals (with prior consent)
- From insurers or other authorised third parties
- Through the use of the website
Only the data necessary for the purposes indicated is processed.
6. Disclosure and Transfer of Data
Personal data may be disclosed to:
- Doctors, specialists, laboratories and pharmacies
- Health, accident or disability insurers
- Competent authorities
- Service providers (IT, hosting, billing)
- Debt collection companies
All recipients are required to comply with data protection regulations.
7. Transfer of Data Abroad
Where data is transferred abroad, this is done exclusively to countries with an adequate level of protection or on the basis of appropriate safeguards.
8. Retention Period
Personal data is retained for as long as necessary for the purposes of processing.
In particular:
- Medical records: 20 years from the last treatment
- Administrative data: in accordance with legal obligations
- Technical data: for limited periods
The data is subsequently deleted or anonymised.
9. Data Security
We adopt appropriate technical and organisational measures to protect personal data, including:
- System access controls
- IT protection
- Restriction of access to health data
- Staff training
10. Communications
We may contact patients via:
- Phone
- SMS
Healthcare communications take place via secure channels. Administrative communications may also take place via unencrypted channels.
11. Video Surveillance
For security reasons, some areas of the Medical Center may be subject to video surveillance.
Recordings are limited to the marked areas and used exclusively for security purposes.
12. Browsing Data and Cookies
During browsing of the website, technical data may be collected such as:
- IP address
- Browser type
- Device used
- Pages visited
- Access times
This data is used to ensure the proper functioning of the website and for statistical analysis.
The website may use cookies and similar technologies.
13. Analytics Tools and Third-Party Services
The website may use traffic analysis tools and services provided by third parties, such as Google (for example Google Analytics).
These tools collect information such as:
- Pages visited
- Duration of the visit
- Approximate geographic origin
The data may be transmitted and processed on servers located abroad.
The use of these tools is carried out in compliance with applicable regulations and, where required, with the user's prior consent via the cookie banner.
14. Rights of the Data Subject
The data subject has the right to:
- Obtain information about their data
- Request the rectification of inaccurate data
- Request the deletion of data within the limits of the law
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
Requests can be sent to: info@mcsorengo.ch
15. Withdrawal of Consent
Consent may be withdrawn at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before it.
16. Job Applications
In the case of unsolicited applications or applications in response to job offers, we process the personal data provided by the applicant to manage the selection process.
The data processed may include:
- Curriculum vitae
- Cover letter
- Certificates and references
The data is accessible only to authorised personnel and is processed confidentially.
In the event of an unsuccessful application:
- The data is deleted within an appropriate period (normally within 6 months)
- Or retained with consent for future opportunities
17. Amendments
This notice may be updated at any time.
The version published on the website shall prevail.
18. Contacts
For any question relating to data protection:
info@mcsorengo.ch