Your health is a personal matter. This page sets out clearly what data we receive, why we need it, with whom we share it to organise your programme, and what rights you have.

Who is responsible for your data

Two CorSwiss companies are jointly responsible for processing personal data on this website and in the course of our services:

CorSwiss GmbH, Talstrasse 37, 8808 Pfäffikon SZ, Switzerland
CorSwiss FZCO, IFZA Business Park, Dubai Silicon Oasis, United Arab Emirates
info@corswiss.ch · +41 41 553 89 00

Both companies process data according to the same standards described in this policy and have agreed between themselves how responsibilities are allocated. Your single point of contact for all data protection matters is info@corswiss.ch. You may exercise your rights against either company.

We process data in accordance with the Swiss Federal Act on Data Protection (FADP / nDSG) and, for clients in the European Union, also in accordance with the EU General Data Protection Regulation (GDPR).

What data we process

Contact details. Name, telephone number, email address, messenger, preferred language, country of residence.

Health information. A description of your request, medical history, examination results, doctors’ reports and any other medical documents you share with us. This is sensitive personal data, and we handle it with the utmost care.

Travel data. Passport details and information needed for your visa application, travel dates, accommodation and transfer preferences, and details of anyone accompanying you.

Payment data. Payment details and records — where payment is made through us.

Technical website data. IP address, browser and device type, date and time of your visit, pages viewed (see section 08).

How we use your data

  • to respond to your enquiry and hold a confidential consultation;
  • to select the right clinic and doctors and prepare your programme and cost estimate;
  • to organise your visit: appointments, visa, transfers, accommodation, interpreter;
  • to stay in touch after you return home and follow up on your results;
  • to handle payments and meet our accounting and other legal obligations;
  • to operate, secure and improve this website.

Your data serves solely to organise your programme. We send no marketing newsletters.

Legal basis

We process data to prepare and perform our contract with you, on the basis of your consent, to comply with legal obligations, and in our legitimate interests — for example, to operate this website securely.

We process health information and share it with clinics and doctors only with your explicit consent. You give this consent when you send us your request or medical documents and ask us to organise your programme. You may withdraw your consent at any time; this does not affect processing carried out before the withdrawal.

For clients in the EU: Art. 6 (1) (a), (b), (c) and (f) GDPR; for health information, Art. 9 (2) (a) GDPR.

Who we share data with

We share data only with those directly involved in your programme, and only to the extent necessary:

  • clinics and doctors — for consultations, examinations and treatment. Doctors in Switzerland are bound by medical confidentiality;
  • embassies and visa services — to obtain your medical visa;
  • service partners — hotels, transfer services, interpreters — only the data their service requires (without medical information unless it is needed);
  • IT service providers — under contracts obliging them to maintain confidentiality: website hosting — hosting.com; email and document storage — Google Workspace; web analytics — Google Analytics (see section 08);
  • public authorities — only where required by law.

Every partner who works with your data signs a non-disclosure agreement with us.

International data transfers

Most data is processed in Switzerland. Certain data may be transferred to EU and EEA countries, to the United Arab Emirates (CorSwiss FZCO), to the United States (website hosting, email, web analytics) and to your country of residence — for example, when applying for your visa or sending you documents.

Where the recipient’s country does not offer a level of data protection recognised by Switzerland, we transfer data on the basis of standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC), on the basis of the recipient’s certification under the Swiss-U.S. and EU-U.S. Data Privacy Framework (for Google LLC), because the transfer is necessary to perform our contract with you, or with your explicit consent.

Messengers and social media

For your convenience, you can reach us via WhatsApp and Telegram. In this case, your data is also processed by the respective provider (Meta Platforms, Telegram Messenger) under its own terms and may be stored outside Switzerland. For detailed medical documents, we will offer you a secure channel.

Links to Instagram and Facebook lead to our pages on these networks. Data is shared with them only when you follow a link and is governed by the privacy policy of the platform concerned.

Website, cookies and analytics

When you visit this website, the server automatically records technical data (server logs). This data is needed for stable and secure operation and is deleted after 30 days.

Strictly necessary cookies. These keep the website working — for example, by remembering your language and cookie settings. They are always active.

Google Analytics and Google Tag Manager. To understand which sections are useful to our guests and to improve the website, we use Google Analytics 4 and Google Tag Manager (Google Ireland Ltd., Dublin, Ireland; Google LLC, USA). Using cookies, Google Analytics collects information on how the website is used: pages viewed, time spent, device and browser type, approximate location (country, city). Google Analytics 4 does not store IP addresses. The data is kept for 14 months and then deleted automatically.

Google Analytics is activated only with your consent, which you give via the cookie banner on your first visit. You can change your choice or withdraw consent at any time via the “Cookie settings” link at the bottom of every page. You can also block cookies in your browser or install Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout).

More on data protection at Google: policies.google.com/privacy.

Data you enter in our booking form is transmitted in encrypted form (SSL/TLS) and goes directly to your personal medical manager.

Retention

We keep data for as long as it is needed for the purposes described. Records of completed contracts and accounting records are kept for 10 years, as required by Swiss law. Enquiries that did not lead to a programme are deleted after 6 months, or earlier at your request.

How we protect your data

Only your personal medical manager and the staff directly involved in organising your programme have access to your data. All staff and partners are bound by confidentiality obligations. We apply technical and organisational safeguards — encryption in transit, role-based access and secure document storage — and review them regularly.

Your rights

You may at any time:

  • find out what data we process about you and receive a copy;
  • have inaccurate data corrected;
  • have your data deleted or its processing restricted;
  • object to processing;
  • receive your data in a machine-readable format or have it transferred to another recipient;
  • withdraw any consent you have given.

Write to us at info@corswiss.ch — we will respond within 30 days. To protect your data, we may ask you to confirm your identity.

You also have the right to lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern, edoeb.admin.ch); in the EU, the supervisory authority of your country.

Changes to this policy

We update this policy when our services or legal requirements change. The current version is always published on this page.