Privacy Policy

Responsible entity in terms of data protection laws, particularly the EU General Data Protection Regulation (GDPR), is:
Specto Medical AG
Elisabethenstrasse 18
4051 Basel

Email: info@spectomedical.com
Website: https://spectomedical.com

General Notice

Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the Swiss Confederation (Data Protection Act, DSG), every person has the right to privacy protection as well as protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect the databases as well as possible against unauthorized access, loss, misuse, or forgery.

We would like to point out that data transmission over the internet (e.g., communication by email) can have security vulnerabilities. A complete protection of data against access by third parties is not possible.

By using this website, you agree to the collection, processing, and use of data as described below. This website can generally be visited without registration. During visits, data such as pages accessed, names of accessed files, date, and time are stored on the server for statistical purposes, without these data being directly related to your person. Personal data, particularly name, address, or email address, are collected on a voluntary basis as far as possible. Without your consent, no data will be passed on to third parties.

 

Processing of Personal Data

Personal data is all information that relates to a specific or identifiable person. A data subject is a person whose personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular, storing, disclosing, procuring, deleting, saving, altering, destroying, and using personal data.

We process personal data in accordance with Swiss data protection law. Additionally, we process personal data - as far as and to the extent that the EU GDPR is applicable - in accordance with the following legal bases in connection with Art. 6 para. 1 GDPR:

  • Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR) - The data subject has given their consent to the processing of personal data concerning them for one or more specific purposes.

  • Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR) - Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.

  • Legal obligation (Art. 6 para. 1 sentence 1 lit. c. GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.

  • Protection of vital interests (Art. 6 para. 1 sentence 1 lit. d. GDPR) - Processing is necessary in order to protect the vital interests of the data subject or of another natural person.

  • Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

  • Application procedure as a pre-contractual or contractual relationship (Art. 9 para. 2 lit. b GDPR) - Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g., health data, such as disability status or ethnic origin) are requested from applicants for the purpose of the responsible entity or the data subject to exercise the rights arising from employment law and social security and social protection law and to comply with their obligations in this regard, their processing is carried out in accordance with Art. 9 para. 2 lit. b. GDPR, in the case of the protection of vital interests of the applicants or other persons in accordance with Art. 9 para. 2 lit. c. GDPR or for purposes of preventive healthcare or occupational medicine, for the assessment of the working capacity of the employee, for medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services in accordance with Art. 9 para. 2 lit. h. GDPR. In the case of voluntary consent to the communication of special categories of data, their processing is based on Art. 9 para. 2 lit. a. GDPR.

We process personal data for the duration necessary for the respective purpose or purposes. In the case of longer-term storage obligations due to legal and other obligations to which we are subject, we restrict processing accordingly.

 

Relevant Legal Bases

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and carrying out contractual measures as well as responding to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing for compliance with our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing for the purposes of our legitimate interests is Art. 6 para. 1 lit. f GDPR. In cases where vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

 

Security Measures

We take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing as well as the different likelihood and severity of risk to the rights and freedoms of natural persons.

The measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access, input, transfer, securing availability, and separation of the data. Furthermore, we have set up procedures to ensure the exercise of data subject rights, deletion of data, and reaction to data threats. Moreover, we already take the protection of personal data into account in the development or selection of hardware, software, and procedures in accordance with the principle of data protection by design and data protection-friendly default settings.

 

Transmission of Personal Data

In the course of our processing of personal data, it may happen that the data is transmitted to other entities, companies, legally independent organizational units, or persons or disclosed to them. The recipients of this data may include service providers entrusted with IT tasks or providers of services and content that are embedded in a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements that serve the protection of your data with the recipients of your data.

Data Processing in Third Countries

If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)), or the processing occurs in the context of the use of third-party services or disclosure or transmission of data to other persons, entities, or companies, this is done only in accordance with legal requirements.

Subject to express consent or contractual or legally required transmission, we process the data only in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, EU Commission information page: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en).

 

Privacy Policy for Cookies

This website uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie primarily serves to store information about a user during or after their visit within an online offer. The stored information can include, for example, language settings on a website, the login status, a shopping cart, or the point at which a video was watched. The term "cookies" also includes other technologies that fulfill the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as "user IDs").

The following types and functions of cookies are distinguished:

  • Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user leaves an online offer and closes their browser.

  • Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users used for range measurement or marketing purposes can be stored in such a cookie.

  • First-party cookies: First-party cookies are set by us.

  • Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.

  • Necessary (also: essential or strictly necessary) cookies: Cookies can be necessary for the operation of a website (e.g., to save logins or other user inputs or for security reasons).

  • Statistics, marketing, and personalization cookies: Furthermore, cookies are generally also used within the framework of range measurement and when the interests of a user or their behavior (e.g., viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles serve to show users, for example, content that corresponds to their potential interests. This process is also referred to as "tracking," i.e., tracking the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.

Notes on Legal Bases: The legal basis on which we process your personal data using cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the declared consent. Otherwise, the data processed using cookies will be based on our legitimate interests (e.g., in the economic operation of our online offer and its improvement) or if the use of cookies is necessary to fulfill our contractual obligations.

Storage Duration: Unless we provide you with explicit information on the storage duration of permanent cookies (e.g., in the context of a cookie opt-in), please assume that the storage duration can be up to two years.

General Notes on Revocation and Objection (Opt-Out): Depending on whether the processing is based on consent or legal permission, you have the option to revoke any consent given or to object to the processing of your data using cookie technologies at any time (collectively referred to as "opt-out"). You can first declare your objection via the settings of your browser, e.g., by disabling the use of cookies (whereby the functionality of our online offer may be restricted). An objection to the use of cookies for online marketing purposes can also be declared via various services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com. In addition, you can receive further objection instructions in the context of the information on the service providers and cookies used.

Processing of Cookie Data on the Basis of Consent: We use a cookie consent management procedure in which the consents of users for the use of cookies or the processing and providers mentioned within the framework of the cookie consent management procedure can be obtained and managed and revoked by the users. In this process, the consent declaration is stored to avoid having to repeat the request and to be able to prove the consent in accordance with the legal obligation. The storage can be server-side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies) to be able to assign the consent to a user, respectively, their device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of the consent can be up to two years. A pseudonymous user identifier is created and stored with the time of consent, information on the scope of consent (e.g., which categories of cookies and/or service providers), as well as the browser, system, and used device.

Processed Data Types: Usage data (e.g., visited websites, interest in content, access times), meta/communication data (e.g., device information, IP addresses).

Affected Persons: Users (e.g., website visitors, users of online services).

Legal Bases: Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

 

Privacy Policy for SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the change in the address line of the browser from "http://" to "https://" and the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

Privacy Policy for Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version

  • Operating system used

  • Referrer URL

  • Hostname of the accessing computer

  • Time of the server request

These data cannot be assigned to specific persons. This data will not be combined with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

 

Third-Party Services

This website may use Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube for embedding videos.

These services of the American Google LLC use, among other things, cookies and as a result, data is transmitted to Google in the USA, whereby we assume that no personal tracking takes place solely through the use of our website.

Google has committed to ensuring an appropriate level of data protection according to the American-European and the American-Swiss Privacy Shield.

Further information can be found in Google's privacy policy.

 

Privacy Policy for Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

 

Privacy Policy for Newsletter Data

If you wish to receive the newsletter offered on this website, we need an email address from you, as well as information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke the consent given to store the data, the email address, and their use for sending the newsletter at any time, for example, via the "unsubscribe" link in the newsletter.

 

Use of Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google." With reCAPTCHA, it is to be checked whether the data entry on our websites (e.g., in a contact form) is done by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g., IP address, time spent by the website visitor on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and SPAM. For further information on Google reCAPTCHA and Google's privacy policy, please visit the following links: https://www.google.com/intl/en/policies/privacy/ and https://policies.google.com/terms?hl=en.

 

Privacy Policy for Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for data processing on this website is located outside the European Economic Area or Switzerland, the data processing by Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google."

The statistics obtained allow us to improve our services and make them more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings under "My Data," "Personal Data."

The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google. We would like to point out that this website uses Google Analytics with the extension "anonymizeIp();" to ensure anonymized collection of IP addresses. As a result, IP addresses are processed in a shortened form, making it impossible to relate them to a specific person. Any personal reference that can be made to the data collected about you is therefore immediately excluded and the personal data is thus promptly deleted.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: Disable Google Analytics.

You can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This will set an opt-out cookie on your device, which prevents the processing of your personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted, meaning that you will have to set the opt-out cookies again if you still wish to prevent this form of data collection. The opt-out cookies are set per browser and device, meaning they need to be activated separately for each browser, computer, or other device.

 

Google Tag Manager

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate Google Analytics and other Google marketing services into our online offer. The Tag Manager itself, which implements the tags, does not process any personal data of the users. Regarding the processing of users' personal data, reference is made to the following details about the Google services. Usage policies: https://www.google.com/intl/en/tagmanager/use-policy.html.

 

Privacy Policy for Facebook

This website uses functions of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages with Facebook plugins, a connection is established between your browser and the Facebook servers. In the process, data is already transmitted to Facebook. If you have a Facebook account, this data can be linked to it. If you do not wish your data to be linked to your Facebook account, please log out of Facebook before visiting our site. Interactions, particularly using a comment function or clicking a "Like" or "Share" button, are also transmitted to Facebook. For more information, please see https://de-de.facebook.com/about/privacy.

 

Privacy Policy for Twitter

This website uses functions of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. When you visit our pages with Twitter plugins, a connection is established between your browser and the Twitter servers. In the process, data is already transmitted to Twitter. If you have a Twitter account, this data can be linked to it. If you do not wish your data to be linked to your Twitter account, please log out of Twitter before visiting our site. Interactions, particularly clicking a "Re-Tweet" button, are also transmitted to Twitter. For more information, please see https://twitter.com/privacy.

 

Privacy Policy for Instagram

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please see Instagram's privacy policy: http://instagram.com/about/legal/privacy/

 

Privacy Policy for LinkedIn

We use the marketing services of the social network LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"), within our online offering.

These use cookies, which are text files stored on your computer. This allows us to analyze the use of our website. For example, we can measure the success of our advertisements and show users products they have previously shown interest in.

Information such as the operating system, browser, previously visited website (referrer URL), which web pages the user visited, which offers the user clicked on, and the date and time of your visit to our website are collected.

The information generated by the cookie about your use of this website is pseudonymized and transmitted to a LinkedIn server in the USA and stored there. LinkedIn does not store the name or email address of the respective user. The above data is only assigned to the person for whom the cookie was generated. This does not apply if the user has allowed LinkedIn to process the data without pseudonymization or if they have a LinkedIn account.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also directly object to the use of your data by LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We use LinkedIn Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. All LinkedIn companies have adopted the standard contractual clauses to ensure that the necessary data traffic required for the development, performance, and maintenance of the services is conducted legally. If we ask users for consent, the legal basis for processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the legal basis for the use of LinkedIn Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.

Third-party information: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; User Agreement and Privacy Policy.

 

Privacy Policy for YouTube

This website includes functions of the "YouTube" service. "YouTube" is owned by Google Ireland Limited, a company incorporated and operated under Irish law, with its principal office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with "YouTube" consists of the terms and conditions found at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms form a legally binding agreement between you and "YouTube" regarding the use of the services. In Google's privacy policy, it is explained how "YouTube" handles and protects your personal data when you use the service.

 

Privacy Policy for Vimeo

This website includes plugins from the Vimeo video portal, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. Each time you access a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. Interactions with the Vimeo plugins (e.g., clicking the start button) are also transmitted to Vimeo and stored there. The Vimeo privacy policy provides further information on the collection and use of your data by Vimeo.

If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your member data stored at Vimeo, you must log out of Vimeo before visiting this website.

Additionally, Vimeo calls up the Google Analytics tracker via an iFrame in which the video is displayed. This is Vimeo's own tracking, which we have no access to. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some internet browsers. You can also prevent the collection of data generated by Google Analytics and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

 

Changes

We may change this privacy policy at any time without prior notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of any updates by email or other appropriate means in case of an update.

 

Questions to the Data Protection Officer

If you have any questions about data protection, please email us or contact the person responsible for data protection mentioned at the beginning of the privacy policy directly in our organization.

 


Source: SwissAnwalt