Privacy Policy

Swiss Kristall Health

Last updated: 16.03.2026

This Health Privacy Policy explains how Swiss Kristall GmbH processes personal data in connection with the Swiss Kristall Health section of its website and related pre-contractual communications.

Controller
Swiss Kristall GmbH
Vorderi Böde 1
5452 Oberrohrdorf
Switzerland
Commercial Register No.: CH-400.4.032.001-7
E-mail: info@swisskristallgroup.ch
Telephone: +41 79 429 36 38

For the purposes of applicable Swiss data protection law, Swiss Kristall GmbH is the controller of the personal data described in this Health Privacy Policy.

1. Scope

This Health Privacy Policy applies to personal data processed in connection with the Swiss Kristall Health section of our website, including data processed when you:

• visit the Health section of our website;
• contact us by e-mail;
• contact us through WhatsApp by using a link made available on the website;
• communicate with us before any contract is concluded.

This Health Privacy Policy applies in addition to any more specific privacy notices, consent forms, authorisations or client documents that may be provided at a later stage if your enquiry develops into a case or service engagement.

2. Our role

Swiss Kristall Health provides medical concierge, coordination and support services. Unless expressly agreed otherwise in writing, we are not a treating doctor, clinic, hospital or healthcare provider.

Our role may include helping clients identify suitable medical providers, coordinate appointments, organise telemedicine or administrative steps, facilitate communications and support the exchange of relevant documentation where necessary.

3. Categories of personal data we may process

Depending on the stage of the enquiry and the way you contact us, we may process the following categories of personal data:

General personal data

• name and surname;
• e-mail address;
• telephone number;
• country of residence, nationality or preferred language, if you provide them;
• information about your request, preferred timing and logistical needs.

Sensitive personal data, in particular health-related data

• health-related information that you choose to disclose to us;
• medical reports, diagnoses, test results, images or related information, if you voluntarily send them to us after initial contact;
• information concerning requested treatment, medical support or recovery arrangements.

Health-related data are sensitive personal data and should be shared only to the extent necessary.

4. How we collect data

We may collect personal data:

• directly from you when you contact us by e-mail or WhatsApp;
• from the content of your enquiry;
• from documents or information you voluntarily provide;
• from an authorised representative acting on your behalf;
• from technical website operation, in a limited manner, such as server logs and strictly necessary cookies.

5. Purposes of processing

We may process personal data for the following purposes:

• to receive and review your enquiry;
• to communicate with you before any contract is concluded;
• to assess whether and how we may assist you;
• to organise and coordinate requested health-related concierge and support services;
• to follow up with you regarding your enquiry;
• to ensure website operation, technical security and system integrity;
• to comply with legal obligations;
• to establish, exercise or defend legal claims.

6. Legal bases

Depending on the circumstances, we process personal data on one or more of the following bases:

• pre-contractual steps requested by you;
• performance of a contract, where applicable;
• your consent, especially where you voluntarily provide health-related data or where further disclosure is based on your instructions;
• compliance with legal obligations;
• our legitimate interests in operating a secure website, handling enquiries and documenting communications, provided such interests do not override your rights.

7. Recipients and categories of recipients

We may disclose personal data, to the extent necessary, to:

• you and, where applicable, your authorised representatives;
• IT, hosting, communication, cloud and productivity service providers used for the operation of our website and business communications;
• legal, accounting, compliance and administrative advisers where necessary;
• authorities, courts or other bodies where disclosure is required by law or otherwise legally justified.

If your enquiry develops into a concrete health-related case, personal data may later also be disclosed, where necessary and appropriately authorised, to doctors, clinics, hospitals, laboratories, telemedicine providers, insurers or other relevant service providers. In such cases, more specific client-facing privacy and consent documentation may also apply.

We do not sell health data or allow third parties to use health data for their own independent marketing purposes.

8. E-mail and WhatsApp communications

If you contact us by e-mail or WhatsApp, you acknowledge that such electronic communication channels may involve residual confidentiality and security risks.

Our website may provide a link that opens WhatsApp in a separate tab or application. Once you interact directly with WhatsApp, the privacy practices of that third-party provider apply in addition to ours.

We recommend that you do not send more medical information than necessary at the initial enquiry stage.

9. Hosting, cloud services and cross-border aspects

Our website and business communications may involve external hosting, cloud and IT infrastructure.

Personal data may be stored predominantly in Switzerland and/or in jurisdictions recognised as providing an adequate level of protection. Where cloud or IT services are used, certain processing operations may be carried out by service providers and their subcontractors in other countries, subject to appropriate contractual and organisational safeguards.

Where personal data is disclosed abroad, we aim to ensure that the applicable Swiss legal requirements for cross-border disclosure are met.

10. Data minimisation at initial contact stage

At the initial enquiry stage, please provide only the information necessary for us to understand your request. More detailed medical documentation should be shared only where appropriate and necessary.

11. Retention

We retain personal data only for as long as necessary for the purposes described in this Health Privacy Policy, for the duration of the relevant enquiry or relationship, and for any period required by legal, regulatory, accounting, evidentiary or legitimate business needs.

Where personal data is no longer required, it will be deleted, anonymised or securely archived, as appropriate.

12. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion or destruction where legally available;
• request restriction of processing where applicable;
• withdraw consent with effect for the future where processing is based on consent;
• request information about categories of recipients and, where applicable, cross-border disclosures.

Requests may be sent to: info@swisskristallgroup.ch

13. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unlawful disclosure. Such measures may include access restrictions, controlled communications workflows, secure document handling and vendor management appropriate to the sensitivity of the data concerned.

14. External links

Our website may contain links to external websites or services, including WhatsApp or websites of third-party providers. Once you leave our website or interact directly with such third parties, their own privacy policies and practices apply.

15. Changes

We may update this Health Privacy Policy from time to time. The current version will be available on our website.

16. Prevailing language

This Health Privacy Policy may be made available in English and German. In the event of discrepancies, the German version shall prevail.

‍

‍