Privacy Policy

1. Controller

The controller for the processing of personal data on this website is:

Please use this address for any question about data protection or to exercise your rights.

2. Legal basis

Personal data is processed in accordance with the Swiss Federal Act on Data Protection (revFADP). Where the EU General Data Protection Regulation (GDPR) applies, processing is based on Art. 6(1)(a) GDPR (consent), (b) (pre-contractual measures) and (f) (legitimate interest in the secure and functional operation of the website).

We process only as much data as necessary, for as short a time as possible, and never for advertising. Your data is not sold and is not used for profiling.

3. Data collected when you simply visit

When you open a page, your browser transmits technically necessary information which our hosting provider processes briefly: IP address, date and time, the address requested, HTTP status code, volume of data transferred, referrer and browser identification.

This information is required to deliver the page and to defend against attacks. It is not combined with other data sources and is not used to identify you personally.

4. Contact form

If you use the contact form you transmit your name, e-mail address and message. This information is used solely to process your enquiry and is not passed to third parties other than those named in this policy.

Delivery is handled technically by Resend (Resend, Inc., USA) acting as a processor, which means the content of your message is transferred to the United States. The legal basis is your explicit consent, given when you submit the form.

Please do not send diagnoses, medical reports, X-ray images or other medical records through this form. Health data is a special category of personal data and a contact form is not an appropriate channel for it. Please describe your concern only in enough detail for us to call you back – everything else is best discussed in person or by telephone.

Cloudflare Turnstile protects the form against automated submissions. Turnstile works without cookies, without advertising tracking and without the cross-site behavioural analysis usual for CAPTCHA services.

You are of course welcome to contact us without the form – by telephone on +41 61 315 27 50 or directly by e-mail.

5. No cookies

This website sets no cookies – neither strictly necessary ones nor any for analytics or advertising. No local storage is used to recognise you. That is why this website needs no cookie banner: there is simply nothing to consent to.

6. Analytics

To improve the website we collect aggregated usage statistics using Cloudflare Web Analytics. The service is cookieless, uses no fingerprinting, builds no cross-device profiles and stores no data that could identify an individual. Only anonymous metrics are recorded, such as page views, approximate country of origin, referrer and load times.

Google Analytics is deliberately not used.

7. Processors and recipients

Cloudflare, Inc. (USA/EU)

Hosting, delivery, protection against attacks, cookieless analytics and bot protection on the contact form. Delivery is served from European data centres.

Resend, Inc. (USA)

Technical delivery of the messages submitted through the contact form.

Data processing agreements incorporating standard contractual clauses are in place with both providers. Your data is not disclosed beyond this, unless we are legally obliged to do so.

8. Retention

Technical server logs are deleted after 30 days at the latest. Enquiries submitted through the contact form are retained for as long as necessary to deal with your request and to meet statutory retention obligations, after which they are deleted.

If an enquiry gives rise to treatment records, those are subject to medical confidentiality and to the statutory retention periods for patient documentation.

9. Your rights

You have the right at any time to access the data held about you and to have it corrected, deleted or its processing restricted. You may also object to processing, withdraw consent at any time, and request the release of your data in a common format.

An informal message to karl.stoffel@usb.ch is sufficient. To protect your rights we must verify your identity by appropriate means.

You also have the right to lodge a complaint with a supervisory authority – in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the data protection authority responsible for your place of residence.

10. Data security

All transmission is encrypted via HTTPS (TLS). Current security measures are active on the server side, including a strict Content Security Policy, HTTP Strict Transport Security and protection against automated attacks.

11. Fonts and external content

The typeface used is served from our own server. There is no connection to Google Fonts or any other font network, so your IP address is not transmitted to third parties.

No third-party videos, maps or social media elements are embedded. The News page contains only ordinary links to external offerings (such as Vimeo or professional journals). The privacy policy of the respective provider applies only once you deliberately click such a link.

12. Changes to this policy

This privacy policy is updated whenever the website or the legal situation changes. The version published here is the one that applies.