Spital Männedorf

We collect, process and use your personal data in connection with this website and other online activities for the following purposes:

2.1 Visiting the website

When you visit our website, our servers temporarily store the following data in a log file, the so-called server log files.

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved data
• Operating system of your computer and the browser you use
• Country from which our website is accessed
• Content of the request (concrete page)
• Access status/HTTP status code
• Last visited website
• Language and version of the browser software

This data is processed for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis, to optimize our offer and for internal statistical purposes, thus based on our legitimate interests. This data is not passed on to third parties or evaluated in any other way. A personal user profile is not created.

2.2 Contact for referring persons

Assignors have the option on our website to contact us via a contact form and/or by e-mail. In this case, the information you provide will be processed for the purpose of handling your request and its processing.

If you wish to contact us, the following information is required (some of it is voluntary):

• Salutation
• Name
• Name
• Practice name
• Address
• Phone number
• E-mail address
• Message

The mandatory information is required in each case to process your request. The voluntary provision of further data facilitates the processing of your request and enables us to provide you with more detailed information.

If you contact us via online form, the information you provide in the form, including the contact data you enter there, will be stored by us for the purpose of processing your request and in case of follow-up questions and will not be disclosed to unauthorized third parties without your consent. This also applies, of course, to requests that you send us by mail.

You can object to this data processing at any time. Please send your objection to the (e-mail) address mentioned under point 1 and we will check your request. In such a case, your contact will not be processed further.

Your personal data will be deleted as soon as the matter you have raised has been resolved. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and the deletion does not conflict with any legal obligations to retain data.

2.3 Contact for patients

Patients and other interested parties have the option on our website to contact us via a contact form and/or by e-mail. In this case, the information you provide will be processed for the purpose of handling your request and its processing.

If you wish to contact us, the following information is required:

• Name
• Last name
• E-mail address
• Message

The information is required in each case to process your request.

If you contact us via online form, the information you provide in the form, including the contact data you enter there, will be stored by us for the purpose of processing your request and in case of follow-up questions and will not be disclosed to unauthorized third parties without your consent. This also applies, of course, to requests that you send us by mail.

You can object to this data processing at any time. Please send your objection to the (e-mail) address mentioned under point 1 and we will check your request. In such a case, your contact will not be processed further.

Your personal data will be deleted as soon as the matter you have raised has been resolved. This is the case if the circumstances indicate that the matter in question has been conclusively clarified and the deletion does not conflict with any legal obligations to retain data.

2.4 Baby gallery

If your baby is born in our hospital, you will have the opportunity to have your baby included in our online baby gallery. The photography will be done by an external photo studio. For the conditions and privacy policy, please contact this photo studio according to the written information you will receive from the photo studio before the shooting.

You have the possibility to have a photo of your newborn selected by the photo studio published in our baby gallery. The following information about your child will be published:

• First name (mandatory)
• Middle name (optional)
• Last name (voluntary)
• Date, time of birth (mandatory)
• Birth size, weight (mandatory)

The publication in the baby gallery is based on your consent. The photo and the associated information will be published on our website for three months and then irrevocably deleted. You can revoke your consent at any time. In this case, the publication will be deleted immediately. Please note that for technical reasons it cannot be ruled out that photos or videos can be redistributed in whole or in part by third parties (downloading, screenshots, etc.).

2.5 Course registrations

You have the option of registering for various courses on our website. The personal data that is transmitted to us in the process results from the respective input mask that is used for registration. The personal data entered is collected and stored exclusively for internal use for the organization and implementation of the event.

We use so-called cookies on our website based on legitimate interests. Cookies are small text files that are placed and stored on your end device (laptop, tablet, smartphone or similar) with the help of the browser. They serve to make our website more user-friendly and effective overall and to make your visit to our website as pleasant as possible. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

Most of the cookies we use are so-called session cookies. These are automatically deleted when you log out or close the browser. Other cookies remain stored on your computer beyond the respective usage process and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

Most Internet browsers are regularly set to accept cookies. If you do not wish this, you can set your browser so that it informs you about the setting of cookies and you allow the acceptance of cookies for certain cases only in individual cases or generally exclude. You can also activate the automatic deletion of cookies when closing the browser. In addition, you can delete cookies that have already been set at any time via an Internet browser or other software programs.

The procedure for controlling and deleting cookies depends on the browser you use. You can find information about this in the help menu of your browser. Please note that individual functions of our website may not work if you disable the use of cookies.

4.1 Google Services

On our website, we use various services of Google LLC, based in the USA, or if you have your habitual residence in the European Economic Area (EEA) or Switzerland, Google Ireland Ltd, based in Ireland ("Google"). Google LLC is always responsible for the processing of personal data when using "Google Maps". We use the following Google services on our websites:

• Google Tag Manager
• Google Analytics
• Google Maps
• Google Ads

More information on the individual services can be found below.

Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of our website. The information thus generated about your use of our website may be transmitted to a Google server in the USA or other countries and stored there. Information about the locations of Google's data centers can be found here.

We use tools provided by Google that Google claims can process personal data in countries where Google or its subcontractors maintain facilities. Google promises in its "Data Processing Addendum for Products where Google is a Data Processor" to ensure an adequate level of data protection by relying on the EU standard contractual clauses.

For more information about Google's processing and privacy settings, please refer to Google's privacy policy or privacy settings.

4.2 Google Tag Manager

Our website uses the Google Tag Manager. With the Google Tag Manager, website tags can be managed efficiently. Website tags are placeholders that are stored in the source code of the respective website, e.g. to record the integration of frequently used website elements, such as code for web analytics services. The Google Tag Manager takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags that are implemented with Google Tag Manager.

For more information, see the Google Tag Manager Terms of Service.

4.3 Google Analytics

For the purpose of analyzing our website and its visitors, as well as for marketing and advertising purposes, we use the web analytics service Google Analytics 4.

Google Analytics uses cookies that are stored on your end device (laptop, tablet, smartphone, etc.) and enable an analysis of your use of our website. This allows us to evaluate the usage behavior on our website and to make our offer more interesting through the statistics/reports obtained.

We use Google Signals. This captures additional information in Google Analytics about users who have activated personalized ads (interests and demographics) and ads can be delivered to these users in cross-device remarketing campaigns.

In Google Analytics 4, the anonymization of IP addresses is activated by default. This means that your IP address is shortened by Google within Switzerland or the EU/EEA before transmission. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there.

Google uses this information to evaluate your pseudonymous use of our website, to compile reports on website activity and to provide us with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google, according to Google. When you visit our website, your user behavior is recorded in the form of events (such as page views, interaction with the website or your "click path") as well as other data such as your approximate location (country and city), technical information about your browser and the end devices you use or the referrer URL, i.e. via which website / advertising material you came to our website.

You can prevent the collection and transmission of data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on to disable Google Analytics. If you wish to object to interest-based advertising by Google, you can use the settings and opt-out options provided by Google.

For an overview of data usage in Google Analytics and the measures Google has taken to protect your data, please see the Google Analytics Help.

For more information about the terms of use of Google Analytics and Google's privacy policy, please refer to the respective documents.

4.4 Google Maps

To integrate interactive maps on our website, we use the online map service Google Maps.

When you call up a website on which Google Maps maps are embedded, Google Maps will set a cookie. This cookie is usually not deleted by closing the browser, but expires after a certain time, unless you delete it manually beforehand.

By using Google Maps, information about your use of our website (including your IP address) may be transmitted to a Google server in the USA and stored there. Google may store this data as usage profiles for the purpose of tailoring its services, advertising and market research. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish this, you must log out beforehand.

If you do not agree with this processing of your information, you have the option to deactivate the Google Maps service. To do this, you must deactivate the Java Script function in your browser. However, this may also affect other functions of our website.

For more information, please refer to the Google Maps Terms of Use and Google's Privacy Policy.

4.5 Google Ads

Based on our legitimate interest, we use the online advertising program Google Ads, which belongs to Google marketing services.

With Google Ads, a cookie is set on your computer ("conversion cookie") if you have reached our website via a Google ad. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain of our web pages and the cookie has not yet expired, we and Google can recognize that you clicked on the ad and were thus redirected to our website. Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies are tracked across Ads customers' websites. The information obtained with the help of the conversion cookie is used by Google to create conversion statistics for Ads customers who have opted for conversion tracking. Through these statistics, we learn the total number of users who clicked on our ads and also which of our web pages were subsequently accessed by the respective user. We do not receive any information with which you can be personally identified.

Based on the information collected, interest-relevant categories are assigned to your browser. These categories are used to serve interest-based advertising.

By using Google Ads, we reach users who have already visited our website. This allows us to present our advertising to target groups that are already interested in our products or services.

You can generally prevent the storage of cookies by deactivating the storage of cookies in your browser. Furthermore, you have the option of objecting to interest-based advertising by Google Ads by making the appropriate settings at www.google.de/settings/ads.

For more information about the Google Ads Terms of Use and Privacy Policy, please visit https://policies.google.com/technologies/ads?hl=de.

5.1 YouTube

This website uses the provider YouTube for the integration of videos. YouTube is a service of YouTube LLC ("YouTube"), 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google.

When you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. This information (including your IP address) may be transmitted to a Google server in the USA and stored there. If you are logged into your YouTube account at the same time, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.

We use YouTube in the so-called extended data protection mode. According to YouTube, this mode ensures that YouTube does not store any data about you as a visitor to our website before you watch or play the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode.

For more information on YouTube's terms of use and privacy policy, please visit https://www.youtube.com/t/terms and https://policies.google.com/privacy, respectively.

5.2 Vimeo

In addition to YouTube, our website uses the services of the provider Vimeo Inc. based in the USA ("Vimeo") to integrate videos.

When you visit a page on our website that contains a Vimeo video, your browser establishes a direct connection to the Vimeo servers. This tells Vimeo which of our websites you have visited. If you are logged into your Vimeo account Vimeo at the same time, Vimeo can assign this information to your personal user account. When clicking on the start button of a video, this information can also be assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.

In addition, Vimeo calls up the Google Analytics tracker via an iFrame in which the video is called up. This is Vimeo's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. Users can also prevent the collection of data generated by Google Analytics and related to their use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on provided by Google to disable Google Analytics.

We have concluded a commissioning agreement incl. EU standard contractual clauses with Vimeo to ensure the protection of your personal data and an appropriate level of data protection.

If you have consented to the use of Vimeo, you can revoke this at any time with effect for the future by calling up the cookie settings and changing your selection there.

For more information on the purpose and scope of data collection and the further processing and use of data by Vimeo, as well as your rights in this regard and settings options for protecting your privacy, please refer to Vimeo's privacy policy.

We would like to point out that Vimeo may use Google Analytics. For further information on data processing by Google and your opt-out options, we refer you to Google's privacy policy, or the browser add-on to disable Google Analytics and Google's settings for personalized advertising.

5.3 Issuu

On our website we integrate an application of the company Issuu Inc., 131 Lytton Ave, Palo Alto, CA 94301, USA, which allows you to access and read publications as e-paper / PDF. Issuu uses cookies to analyze your use of the website. Issuu collects and stores personal data in this way, such as the IP address and information about the time and duration of use. The transmission takes place if you have activated JavaScript in your browser. Further information on Issuu's terms of use and data protection can be found at http://issuu.com/legal/privacy.

5.4 Web fonts (Fontstand)

For the uniform display of fonts, we may use so-called web fonts from Fontstand BV, based in the Netherlands, on our websites.

When you visit one of our pages on which we use web fonts, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, your browser establishes a connection to Fontstand's servers. In this way, Fontstand learns that your IP address has been used to access the respective website and may receive further information, such as browser version, screen resolution or language settings.

According to Fontstand's privacy policy, Fontstand only shares personal data with third parties that is necessary for the provision of its service and contractually secures this data sharing.

We do not collect any personal data through the integration of web fonts/Fontstand. We also have no influence on the scope and further use of the data that is collected and processed through the use of web fonts by Fontstand.

If web fonts are not supported by your browser, a default font of your end device will be used.

For more information about these web fonts, please see Fontstand's privacy policy.

We maintain social media profiles on Facebook, Instagram, LinkedIn, YouTube and TikTok.

The data you enter on our social media profiles is published by the social media platform and is not used or processed by us for any other purpose at any time. However, we reserve the right to delete content if this should be necessary. At most, we communicate with you via the social media platform. This is based on your and our legitimate interest in exchanging information with each other in this way.

Be aware that the operator of the social media platform uses web tracking methods. The web tracking, over which we have no control, can also take place regardless of whether you are logged in or registered with the social media platform.

More detailed information on data processing by the provider of the social media platform can be found in the privacy policy of the respective provider:

• https://www.facebook.com/privacy/policy
• https://instagram.com/about/legal/privacy/
• https://www.linkedin.com/legal/privacy-policy
• https://policies.google.com/privacy
• https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE

You can find out how we process your personal data in the context of application procedures in the applicant data protection statement.

As a matter of principle, we treat your personal data as confidential and only disclose it if you have expressly consented to this, we are legally obliged or entitled to do so, or this is necessary to enforce our rights, in particular to enforce claims. In addition, we will disclose your personal data to third parties to the extent that this is necessary or expedient in the context of the use of the website or for the possible provision of the services requested by you (also outside the website).

We disclose your personal data to the following categories of recipients:

• Business Partners
• Service operators
• Logistics partners
• Subcontractor
• Collection partners
• Service company
• Authorities

In doing so, we naturally comply with the legal regulations on the transfer of personal data to third parties. If we use order processors to provide our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of your personal data in accordance with the relevant legal regulations.

If the level of data protection in a country where the data is processed does not comply with the applicable data protection regulations, we will contractually ensure that the protection of your personal data is equivalent to that in Switzerland at all times.

Unless expressly stated in this privacy policy, we process and store your personal data only as long as it is necessary for the fulfillment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, and beyond that in accordance with the statutory retention periods. As soon as your personal data is no longer required for the above-mentioned purposes or a prescribed retention period expires, your personal data will be deleted or blocked as a matter of principle and to the extent possible.

We take technical and organizational security precautions to protect your personal data against manipulation, loss, destruction or against access by unauthorized persons. This includes, among other things, the use of recognized encryption methods (e.g. SSL encryption). Our security measures are continuously improved in line with technological developments.

We also take our own internal data protection seriously. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of data protection law. Moreover, they are only granted access to your personal data to the extent necessary.

We reserve the right to review, amend or supplement our privacy policy and the way in which we process personal data from time to time. We will post the amended privacy policy on our website at www.spitalmaennedorf.ch. Any amended terms will be effective upon publication.

Our website may contain links to websites of other providers to which this data protection declaration does not extend. After clicking on the link, we no longer have any influence on the processing of any data transmitted to third parties (such as the IP address or URL), as the behavior of third parties is naturally beyond our control. Therefore, we cannot assume any responsibility for the processing of your personal data by third parties. Insofar as the collection, processing or use of your personal data is associated with the use of the websites of other providers, please observe the data protection information of the respective providers.

Illegal contents were not recognizable at the time of linking. However, a permanent control of the content and examination of the linked pages without concrete evidence of a violation of the law is not reasonable. If we become aware of any infringements, such links will be removed immediately.

13.1 Data processing during your stay

For data processing during your inpatient or outpatient stay as well as the associated data processing before and after your stay, we refer you to our patient data protection declaration.

13.2 Contacting by e-mail or telephone

If you send us inquiries by e-mail or telephone, the personal data you provide will be stored for the purpose of processing the inquiry (e.g. for contacting you or making an appointment) and answering follow-up questions.

13.3 Video surveillance

Based on legal grounds and our legitimate interests in safeguarding our house rights and to ensure the protection of our employees and other persons as well as values, data and secrets belonging to or entrusted to us, we use video surveillance systems at our site. Video surveillance is not used for the purpose of monitoring the behavior of our employees.

You can recognize the areas where video surveillance is carried out by the corresponding markings.

In principle, you have the rights of access, rectification, deletion, restriction, data portability, objection to processing and revocation of consent with regard to your personal data.

Please note, however, that we reserve the right to assert the restrictions provided for by law, for example if we are obliged to retain or process certain data, have an overriding interest in doing so (insofar as we are entitled to rely on this) or require it for the assertion of claims.

Please note that the exercise of these rights may conflict with contractual agreements and may have consequences such as the premature termination of the contract or cost consequences. We will inform you in advance if this is not already contractually regulated.

If you believe that the processing of your personal data violates data protection law, or that your data protection rights have been violated in any other way, you can also complain to the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC); in the case of data processing within the scope of the cantonal performance mandate, the Data Protection Commissioner of the Canton of Zurich.

The exercise of your rights under data protection law generally requires that you clearly prove your identity (e.g. by means of a copy of your ID card, where your identity is otherwise not clear or cannot be verified). To assert your rights, please contact us at the (e-mail) address designated in section 1.

We expressly reserve the right to supplement or amend this privacy policy at any time. All changes and additions are at the sole discretion of Spital Männedorf AG.

Männedorf, August 28, 2023