Legal Notice &
Data Protection
Legal Notice
Physiotherapie Proalp GmbH
Schaffhauserstrasse 347
8050 Oerlikon
Zurich
Switzerland
E-Mail: physioproalp@gmail.com
E-Mail for Doctors: sebastjan.gantar@hin.ch
The company owner is Sebastjan Gantar.
Registered in the Swiss and cantonal commercial registers, as well as in the Swiss Commercial Gazette.
Data Protection
Privacy Policy: Physiotherapie Proalp GmbH
This is the Privacy Policy of Physiotherapie Proalp GmbH.
The following Privacy Policy applies to the use of our website, the physical therapy services we offer (in particular, your treatment or examination at our facility), and our other contracts.This Privacy Policy informs you—as a patient, contractual partner, employee, or visitor to our website—about the collection of personal data when you use our website and our services.
By using this website, you consent to the processing of your personal data in accordance with this Privacy Policy.
In general, our medical practice offers its services in Switzerland and is intended for individuals residing in Switzerland.
Data Collection
We collect personal data that you or your physician provide to us—for example, through physician referral documents,
by completing the registration form, or by sharing your patient history.
Under data protection law, certain types of personal data are classified as "sensitive"—such as health data (e.g.,
descriptions of symptoms, diagnoses, laboratory results, medications, and other related information) as well as biometric characteristics. Depending
on the circumstances, other categories of personal data may also include such data requiring special protection
(e.g., information regarding religious affiliation included in your master data for treatment purposes). As a rule, we process
personal data requiring special protection only if it is necessary to provide a service, if you have voluntarily disclosed
this data to us, or if you have consented to the processing in communications with us or your referring physician.
We assume your consent when we receive data from your referring physician. We may also process
personal data requiring special protection if necessary to assert legal claims or comply with domestic or
foreign legal regulations, if the data in question has been manifestly made public by the data subject,
or if applicable law otherwise permits such processing.
Whenever the website is accessed, technically necessary data is collected. This may include, for example,
the browser types used, the operating system, the date and time of access, the Internet Protocol (IP) address,
and the name and URL of the accessed file.
Purposes of data processing
Your data is processed for the purpose of providing our services. Additional purposes include:
Communicating with you, e.g., responding to inquiries
Managing contractual relationships, e.g., providing medical, radiological, and pharmaceutical services
Ensuring the functioning of practice operations, such as IT, websites, newsletters, accounting, etc.
Maintaining the contractual relationship
Managing employment relationships
Ensuring compliance with laws, industry standards, etc.
Legal proceedings or investigations
Ensuring safety and security
Administrative and management activities
Issuing instructions to and providing further education and training for employees, who are subject to a duty of confidentiality
Retention period
Your data will be retained for 20 years following your last treatment. This retention period is a mandatory legal requirement for the physician and cannot be altered.
Disclosure of data to third parties and processors
To the extent necessary for the provision of our medical services (particularly for your benefit), we disclose data to companies commissioned by us to operate and administer these services. During the processing of your data, such data may be disclosed to the following third parties:
Physicians involved in prior or subsequent treatment, healthcare professionals, and hospitals, upon request
Scientific bodies (e.g., tumor boards)
Health insurance funds and insurance companies, particularly for the assessment of coverage obligations
Group companies and their employees, provided they are subject to confidentiality obligations
Service providers (some of whom process your data on our behalf—such as IT/web providers and support companies—while others process it under their own responsibility—such as laboratories for testing or lawyers handling legal matters)
Domestic and foreign authorities, in compliance with statutory obligations
The respective service providers are bound to our data protection standards by law, by a data processing agreement, or by contractual provisions, or are authorized to process personal data through the use of standard contractual clauses recognized by the FDPIC (Federal Data Protection and Information Commissioner).
Transfer of data abroad
Your data may be transferred to, processed in, and stored in countries within the EEA—or, in exceptional cases, any country worldwide—as part of statutory or contractual processing activities (e.g., IT support, cloud solutions, etc.). In doing so, we ensure that the respective country maintains an adequate level of data protection. If your data is transferred, processed, or stored in a country lacking adequate data protection, this is done on the basis of contractual safeguards reported to the FDPIC. However, since standard contractual clauses drafted or recognized by the FDPIC are used, the notification requirement does not apply.
Revocation or restriction of your consent
You have the right to revoke or limit your consent. Such a change is valid if made in writing (not via email) and applies to future data processing from the time of receipt. Rights not based on consent (e.g., statutory or contractual rights) remain unaffected by the revocation.
Cookies and other services
Our medical practice may use cookies on its website. Cookies contain a so-called cookie ID—a unique identifier—that associates websites and servers with a specific internet browser. A specific internet browser can be recognized and identified via this unique cookie ID.
Data security
To safeguard your rights, your data is protected against unauthorized access, alteration, and loss. We employ technical and organizational measures (such as access restrictions or backups) for this purpose. The specific technical and organizational measures selected depend on the level of risk. We comply with the data security requirements set out in the Data Protection Act (DPA) and the Data Protection Ordinance (DPO).
You acknowledge and agree that we may exchange data with you via email, SMS, or other digital applications in unencrypted form.
Your rights
Based on data protection legislation, you have various rights, such as the right to information. Please contact us to exercise your rights.
Governing Law and Place of Jurisdiction
This privacy policy and any contracts concluded based on or in connection with this privacy policy are governed by Swiss law, excluding any conflict-of-law rules. The place of jurisdiction is the registered office of the medical practice.
Final Provisions
Should individual parts of this privacy policy be invalid, this does not affect the validity of the remainder of the privacy policy. We may amend this privacy policy at any time without prior notice. The version currently published on our website applies.