Privacy Policy

Please take a moment to read through this Privacy Policy, which explains how your personal data is collected, used and protected by Cenas Médical SA. Should you have any question, do not hesitate to contact us at the following address: Chemin de la Gravière 3, 1225 Chêne-Bourg, Switzerland.

As stated in Section 4.6 below, none of your personal data will be sold to third parties. Moreover, we do not share your personal information or otherwise make it available to third parties, except in special circumstances set out in this Privacy Policy.

In any event, your personal data will be processed in compliance with applicable rules in terms of medical ethics and confidentiality.

1.1. Our website (www.cenas.ch) provides users with information about the services offered by our organisation, and features contact information (contact form).

2.1. We may collect personal data whenever you visit our website. In particular, we collect user data when you view or click on content featured on the website. To do this, we use cookies and similar technologies to identify you and track how you use our website.

2.2. We may also collect personal data when you fill in a contact form on our website or subscribe to our newsletter. In these cases, we collect any personal information you provide, including medical data.

2.3. Espace Médecin : 

3.1 The personal data collected through our website is stored with a backup copy on Infomaniak servers, which are located in the canton of Geneva.

3.2 Access to personal data collected on our website is limited to the staff in charge of your file, and to any qualified person within the CENAS Sleep Medicine Centre as set out in the organisation’s access management rules.

A. Services we offer

4.1. We use personal data primarily to grant you access to the website and provide you with the features of our site. In this regard, we may use identification tools such as cookies to remember you and improve your browsing experience.

B. Marketing communications

4.2. We may use personal data to send out marketing information (typically newsletters), in digital or paper format, relating to information provided on our website, which we believe may be of interest to you.

4.3. In light of the above, we may use identification tools such as cookies to gain a clearer understanding of your personal interests and ensure that, when we send marketing communications or you visit our website, you do not miss out on specific offers or other information that may be of interest to you (online targeted advertising).

4.4. You can request not to receive such information by sending us an email at contact@cenas.ch, or a letter to the following address: Communication Department, Chemin de la Gravière 3, 1225 Chêne-Bourg, Switzerland. Upon receipt, we will promptly confirm by email that your request is being processed.

C. Internal use

4.5. Personal data and information obtained through cookies and similar technologies help us continuously improve our website.

4.6. We also compile statistical information – on an anonymised basis – relating to the use of our website. This helps us improve our services.

4.7. We may also use personal data (including your communications) when necessary for security reasons or to investigate possible breaches of this Privacy Policy. For instance, we may use your personal data to conduct surveys, respond to complaints and resolve problems and other disputes relating to our website.

D. Non-disclosure of personal data

4.8. We shall by no means sell, share or otherwise make your personal data available to third parties, except in cases provided in this Privacy Policy (see next section).

A. Publication of statistics

5.1. As stated above, we may compile statistics about the use of our website based, among other things, on your personal data. We may publish these statistics or share them with third parties in an aggregated form, so that they do not include your personal data or help identify you.

A. Cookies and web beacons

Data protection statement for the use of Analytics

This website uses Google Analytics, an online analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and enable an analysis of your browsing behaviour on the website. The information generated by the cookie is usually sent and stored on a Google server located in the United States. If IP anonymisation is activated, your IP address will be abbreviated by Google within a member state of the European Union, or in another country that is a signatory to the Agreement on the European Economic Area.

Only in exceptional cases shall the full IP address be transmitted to a Google server in the United States and then abbreviated. Google uses this information for the purpose of assessing user behaviour on the website, compiling activity reports for website operators and providing other services relating to the site and Internet usage. Google may also transfer this information to third parties where required by law, or in cases when such third parties process the information on Google’s behalf.

The IP address transmitted by your browser within the framework of Google Analytics will not be tied to other Google data.

You may refuse cookies by adjusting your browser’s settings, but doing so may affect some of this website’ features. By using this website, you consent to the processing of personal data by Google – in the manner and for the purposes set out above.

B. Contractual partners and affiliated companies

5.2. Some of our contractual partners and affiliated companies may have access to personal data you’ve shared through our website. These contractual partners and affiliates help us operate our site and provide the services listed therein. They are required to sign contracts in which they agree to protect personal data by applying procedures similar to ours.

C. Change of control or sale

5.3. We may also, under a confidentiality agreement, share personal data in the context of a sale, merger or change of control, or in preparation for such events. Any other entity that acquires all or part of our business may continue to use your data in accordance with this Privacy Policy.

D. Lawful disclosures

5.4. We will only disclose your personal data if legally required to do so, or if we believe in good faith that such disclosure is necessary to (i) investigate, prevent, or take action regarding suspected or established illegal activities or to assist public authorities; (ii) enforce any agreement we have with you; (iii) investigate or defend against claims or allegations made by third parties; (iv) protect the security or integrity of our website (e.g. by sharing information with companies facing similar threats); or (v) exercise or protect the rights and safety of our users, employees or others.

5.5. Where appropriate and technically feasible, we do everything we can to notify our users of requests that we receive regarding their personal data, unless such action is not permitted by law or by court order, or where the urgent nature of the situation prevents it. We may contest requests of this kind where we judge, at our sole discretion, that the request is too broad or vague or that it does not have an appropriate basis. However, we do not undertake to contest all requests that we receive.

A. Preliminary notes

6.1. We manage your personal data in accordance with the provisions of this section. Please note, however, that we must comply with certain legal requirements, in particular those arising from medical law – when dealing with the medical data you provide us with -, which may differ from the provisions of this section.

6.2. For security reasons and to prevent fraud, any request relating to this section must include appropriate proof of identity.

B. Protecting your personal data

6.3. We do our utmost to prevent unauthorised disclosure of personal data. In particular, we implement and maintain the necessary measures (including administrative, physical and technical safeguards) to prevent and manage unauthorised disclosure of personal data.

6.4. In the event of a data breach, or if we suspect such a breach: (i) we will do our best to notify you promptly, insofar as this is technically feasible, and (ii) we will work with you to investigate and resolve the incident, including providing you with reasonable assistance should you be required to notify a third party. On submission of a reasonable request by you, we will provide you with prompt access to the files affected by the data breach. Nevertheless, it should be noted that these files remain confidential information belonging to us, and that we are under no obligation to provide you with information that belongs to other users or that compromises other users’ security.

6.5. In the event of or if we suspect a data breach, we will also inform relevant authorities in compliance with the applicable regulations.

C. Accessing and amending your personal data

6.6. When we process personal data, we do our utmost to ensure that it is kept accurate and up to date, and that it is only processed for the purpose for which it was collected.

D. Storing your personal data

6.7. We retain personal data to grant you full access to our website and its features (such as our newsletter or the member area for physicians), without prejudice to our storage obligations.

E. Deleting your personal data

6.8. You may request the deletion of your personal data at any time, subject to our storage obligations.

6.9. Following a request for deletion of data, you have 30 days to request a copy of your personal data. Then we make it available to you for transfer or download in a commonly accepted format. We reserve the right not to provide you with a specific format you request, or to agree only if you pay for the costs incurred.

6.10. After this 30-day period, we have no further obligation to retain or disclose personal data to you. We will therefore delete any copy of your personal data held on our systems, under our control or in our possession.

6.11. Please note that we may retain anonymised information after your personal data has been deleted.

7.1. We may change this Privacy Policy – at any time and without prior notice – by posting a new version on this or a future corresponding page. However we will always process your personal data in accordance with the version of the Privacy Policy in force at the time of collection.

7.2. Any new version of this Privacy Policy comes into effect at the time it is posted, with the effective date stated at the top of the page.

8.1. If you have any question or complaint about this Privacy Policy, please contact us by mail at the following address: Communication Department, Chemin de la Gravière 3, 1225 Chêne-Bourg, Switzerland.

Please note that you retain the right to complain to a data protection authority if you consider that your personal data is not being processed in compliance with this Privacy Policy or applicable regulations.