The https://www.treatmentroom.ch (hereinafter the “Company” or “we” or “us”) is a website operated in Switzerland by Treatment Room Anastasiadou, a company incorporated in Switzerland with company registration number CH-020.1.080.407-0 and VAT number: CHE-395.593.824 and whose registered office is located at Wehntalerstrasse 294, 8046 Zurich, Switzerland.
- What Personal Data Do We Collect?
We ask you for certain personal data to provide you with the products or services you request.
For example, when you fill in a contact form or request to receive communications.
This personal data includes your:
- First/Last Name;
- Email Address;
- Telephone Number.
We collect additional personal data from you to enable particular features within our Site.
When interacting with our Site, certain data is automatically collected from your device or web browser. More information about these practices is included in the relevant “Cookies Policy”. This data includes:
- IP Addresses;
- Date & Time of Visit;
- Referrer Headers;
- Data identifying your web browser and version, operating system.
Processing this data (collecting and storing on special log files) is our legal right, according to the law, in order for us to ensure protection of the information and the services from any random incidents, illegal or malicious actions that endanger the availability, authenticity, integrity and confidentiality of the stored or read-only data; for example, tracking any DDoS (denial-of service) attacks, as well as solve any technical problems that may occur.
- What Is The Purpose of Your Personal Data Processing?
We will use your personal data, to provide the requested product or service, based on your contact information.
We may use personal data about how you use our products and services to enhance your user experience and to help us diagnose technical and service problems and administer our Site.
We process your personal data provided based on your consent, which you have the right to revoke at any time and request the deletion of your data.
- Where and for how long do we store your data?
Your personal data is stored in the company’s information system, which is stored in a Canadian database in compliance with an EU competence decision. Proper organizational and technical means are used in order to avoid any data breach.
Personal data is stored strictly for the time required to serve a certain purpose.
For example, if you contact us via the contact form, email or telephone, your data will be stored for a time of three (3) months and will be permanently deleted after that, unless you proceed to use the services of our company.
- What Are Your Rights In Relation To The Processing Of Your Personal Data?
The Right of Access:
This enables you to receive information on how your personal data is processed and a copy of the personal data we hold about you.
The Right to Rectification:
You are entitled to request the correction or completion of inaccurate, out of date or incomplete data.
The Right to Erasure (‘right to be forgotten’):
This enables you to have your personal data deleted or removed where there is no compelling reason for its continued processing and there is no other legal ground for the processing.
Right to Data Portability:
This enables you to have your personal data transferred to a third party.
Right to Withdraw Consent:
In case the processing is based on consent granted by you, you may at any time withdraw your consent free of charge.
Right to Object:
This enables you to object to processing of your personal data, if such data is processed for purposes other than those necessary for the performance of the Company’s services or for compliance with a legal obligation.
Right to Restriction:
This enables you to request suspension of processing your personal data in case of wanting to establish:
- the accuracy of the data hold;
- where the data is used;
- unlawful use or processing.
- How Can You Exercise Your Rights?
You may exercise these rights at no cost, by sending a letter or an email to the Data Protection Officer designated by the Company.
Upon receipt of the request, the Company will take all necessary and reasonable measures to meet your requests within thirty (30) days, and if this is not feasible, it will inform you of the necessary extension of this period, which may not exceed the sixty (60) days.
The Company within its role as a Processor is required to inform the Data Protection Authority as well as the data subject, in the event of a violation of personal data, within 72 hours of becoming aware of the breach, in case this poses a high risk to the rights and freedoms of the data subject.
- Where Is Your Personal Data Transmitted?
- Your personal data is transmitted to the employees of the Company, who are responsible for the management of your request and your general service.
- Your personal data may be transmitted to natural or legal persons third party service providers that the Company cooperates with. In this case, these persons will process the personal data only for the purpose of providing services to the Company and not for their own benefit and with the commitment of confidentiality. These persons comply with the European General Data Protection Regulation.
- In cases of defending the Company’s rights, either because it is provided so by law or ordered by a court, a public prosecutor, a police authority or other authority, the personal data may be forwarded on to lawyers, bailiffs, judicial, police and prosecuting authorities, public services, government agencies and officials.
- Will Your Personal Data Be Processed For Commercial Purposes?
The Company will process your personal data for commercial purposes.
For this processing you will be asked for your consent, and you will always have the right in this case to object to the processing of your personal data for commercial purposes, withdrawing your consent.
- Is Your Personal Data Secure and How Is That Guaranteed?
The Company has taken all the appropriate organizational and technical measures to ensure the security of your personal data. This processing is always carried out in accordance with the relevant European Regulation.
- How Can A Request/Protest/Complaint Be Made?
You have the right to make a complaint at any time, including any requests to exercise your legal rights, to the appointed Data Protection Officer, via email: firstname.lastname@example.org. You also have the right to file a petition or complaint to the applicable Supervisory Personal Data Protection Authority,swissdataprivacy.org.