Privacy notice

Version 2026-10. This notice explains how processes personal data on centech-research.com. It is written to satisfy the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

1. Controller

, . Data protection contact: .

2. What we process, why, and on what legal basis

Visiting the site. Our server records the technical data of each request (IP address, time, page, browser) in a log for up to 14 days to operate and secure the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The site sets one technical cookie to protect the request form against forged submissions; it contains no personal data and expires when you close the browser. No analytics, no advertising, no third-party cookies.

Consultation request. When you send the form we process your contact details (name, email, phone, country), your date of birth, height and weight, and the medical information you enter. Purpose: a first medical assessment by the clinic's physician and the preparation of a cost estimate. Legal basis: your explicit consent to the processing of health data (Art. 9(2)(a) and Art. 6(1)(a) GDPR; Art. 6(6) and 6(7) FADP), given with the checkbox on the form, and the steps needed before a possible treatment contract (Art. 6(1)(b) GDPR). Providing the data is voluntary; without it the clinic cannot assess your request.

Emails. We send you a confirmation of receipt and later the clinic's reply. Legal basis: Art. 6(1)(b) GDPR.

3. How your request is protected

Your request is transmitted encrypted (HTTPS) and stored encrypted in the clinic's own system. Lists of requests show no personal or medical data; a request is decrypted only when a member of the clinic's reviewing staff opens it, and every opening is recorded with that person's identity in an access log that the clinic's management can inspect.

4. Recipients

Within the clinic: the physicians and staff assigned to review requests. Processors acting on our instructions: the hosting provider of the clinic's system () and the email provider that delivers our messages. We do not sell or share your data with anyone else. Data is not transferred to countries outside the EU/EEA and Switzerland unless stated above.

5. Retention

A request that the clinic has not reviewed is deleted automatically after 90 days. A request that has been closed or declined is deleted automatically 12 months after closing. If a treatment follows, the data becomes part of your medical record at the clinic and is kept as medical and tax law require. Server logs: 14 days.

6. Your rights

You may at any time ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you may object to processing based on legitimate interest. You may withdraw your consent at any time with effect for the future; your request is then deleted. Write to . You may also complain to a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country of residence.

7. No automated decisions

No decision about you is made automatically. Every assessment is made by a physician.

8. Minors

This site is for adults. We do not knowingly process requests from persons under 18; such requests are deleted.

9. Changes

We may update this notice. The version number at the top changes when we do; the consent you gave refers to the version in force at that time, which is stored with your request.