Privacy notice

Draft for pre-launch review — 19 September 2026. Company contact details and hosting arrangements must be completed before publication. This draft describes the current demonstration website, not the PAtch data platform.

Who is responsible

SwisStep AG is the intended website operator. Registered address and privacy contact: awaiting confirmation. See company information.

Information handled by this website

Page requests may expose your IP address, request time, browser information and requested URL to the hosting provider. The production provider, processing locations and log-retention period have not yet been selected and must be disclosed before launch.

The current contact form processes the name, email address, organization and message you enter in your browser solely to create a downloadable text draft. It does not send an enquiry to SwisStep. The downloaded file remains under your control. Do not submit patient records or sensitive health information.

Browser storage and tracking

Google Analytics 4 integration is available but remains inactive until a Measurement ID is configured and you consent to analytics. When active, Google receives public page-visit and browser/device information, including the IP address needed for the network request. The site does not deliberately send form entries, URL query strings or fragments. Google advertising signals are disabled. Your cookie choices are stored locally for up to 180 days. You may change or withdraw optional permissions through Cookie settings. Images and fonts are served locally or supplied by your device.

Purpose and legal basis

Website delivery and security serve the operator’s legitimate interest in providing a secure informational site where that legal basis applies. Creating an enquiry draft happens at your request. Google Analytics relies on your optional analytics consent. You can refuse it or withdraw through Cookie settings without losing access to the site. Withdrawal stops further collection on this site but does not itself delete previously collected information held by Google.

Recipients, retention and international transfers

Production hosting and form-delivery providers, their processing countries, retention schedules and any required transfer safeguards remain to be confirmed. No contact-delivery integration is currently configured. These details must be completed before collecting live enquiries.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal data, object to certain processing, and withdraw consent where processing depends on it. You may complain to the competent supervisory authority, including the Swiss FDPIC or the relevant EEA authority. A working privacy contact must be provided before launch.

The PAtch platform and external links

The platform is a separate service. Its authentication, patient-data processing, permissions and retention require its own privacy information and agreements. Following external links subjects your visit to the destination’s practices.

Google Analytics launch details

Before activation, the operator must confirm the Google contracting entity, processing and transfer arrangements, property retention settings and applicable disclosures. See How Google uses information from sites that use its services. Browser identifiers are configured for up to 180 days; this is distinct from server-side retention in the Analytics property. No advertising tools are configured.

Changes

This notice will be updated when the actual hosting, contact service or data practices change.