Privacy Policy
1. General Information
Apex Physiotherapy GmbH takes the protection of personal data seriously. We process personal information responsibly and confidentially in accordance with applicable Swiss data protection legislation, particularly the Swiss Federal Act on Data Protection (FADP).
This Privacy Policy explains how we collect, use, store and protect personal data in connection with our physiotherapy services, website and communications.
2. Responsible Organisation
The organisation responsible for processing personal data is:
Apex Physiotherapy GmbH
Grabenstrasse 14
6340 Baar
Switzerland
UID: CHE-491.680.152
Website: www.apexphysio.ch
Email: info@apexphysio.ch
For questions concerning data protection or requests regarding personal data, please contact us using the email address above.
3. Collection of Personal Data
We collect and process personal data when individuals contact us, register as patients, book appointments or receive physiotherapy services.
Depending on the circumstances, this information may include:
Name, address, date of birth and contact details
Appointment and communication information
Medical history, diagnoses and treatment information
Physiotherapy assessments and treatment documentation
Medical prescriptions and referrals
Health and accident insurance information
Invoices, payments and administrative records
Health-related information is considered sensitive personal data under Swiss law and is handled with particular care.
4. Purpose of Data Processing
Personal data is processed for the following purposes:
Providing physiotherapy assessments and treatments
Maintaining patient records and treatment documentation
Organising appointments and communicating with patients
Processing invoices and insurance claims
Meeting applicable legal and professional obligations
Responding to enquiries submitted through our website
Sending newsletters and practice updates where legally permitted
We process personal data only for legitimate, specified purposes and in accordance with applicable legal requirements.
5. Patient Management – Cenplex
Apex Physiotherapy GmbH uses Cenplex, a practice management software solution provided by Compis GmbH, Switzerland.
Cenplex is used to manage patient information, appointments, treatment documentation, administrative processes and billing.
Personal data processed through Cenplex may include patient identification details, insurance information and health-related information concerning planned or completed physiotherapy treatments.
Compis GmbH processes personal data on behalf of Apex Physiotherapy GmbH under a contractual data processing agreement. This agreement includes provisions concerning confidentiality, data security, processing instructions and the use of external service providers.
Data may be stored and processed using cloud infrastructure and subcontracted service providers. Applicable data protection requirements must be observed when such processing involves other countries.
6. Website and Squarespace
Our website, www.apexphysio.ch, is hosted and operated using Squarespace.
When visitors access our website, Squarespace may process technical information such as IP addresses, browser and device information, access times and website usage data.
This information is processed to provide and maintain the website, support its security and functionality, and enable website analytics.
When visitors submit enquiries through our website, we process the information they provide for the purpose of responding to their requests.
Squarespace processes certain personal data on our behalf under its Data Processing Addendum. Squarespace may also process certain information as an independent data controller, as described in its own Privacy Policy.
Further information is available at www.squarespace.com/privacy.
7. Apex Physiotherapy offers a newsletter called APEX Monthly.
The newsletter provides information about physiotherapy, exercise, strength training, injury prevention, health and performance, as well as news and offers from Apex Physiotherapy.
For newsletter administration, we may process subscribers' names, email addresses, subscription preferences and information relating to newsletter delivery and engagement.
Newsletters are sent to individuals who have subscribed or where sending such communications is otherwise permitted under applicable Swiss law.
We intend to use Squarespace Email Campaigns to manage subscriptions and distribute newsletters. Squarespace and its relevant service providers may process the information necessary to provide this service.
Newsletter recipients can unsubscribe at any time using the unsubscribe link included in each newsletter or by contacting info@apexphysio.ch.
Unsubscribing is free of charge.
Newsletter participation is voluntary and is not required to receive physiotherapy treatment.
8. Disclosure to Third Parties
We may share personal data with authorised third parties where necessary for treatment, practice administration, billing, technical services or compliance with legal obligations.
Depending on the circumstances, recipients may include:
Healthcare professionals involved in treatment
Health and accident insurance providers
Practice management and IT service providers
Website hosting and email service providers
Accounting and administrative service providers
Authorities where disclosure is legally required
Any disclosure of confidential patient information must comply with applicable professional secrecy obligations and data protection requirements.
We do not sell personal data to advertisers.
9. International Data Transfers
Some of our external service providers may process personal data outside Switzerland, including in the United States and other countries where they or their subcontractors operate.
In particular, Squarespace may process website visitor information, enquiry data and, where its Email Campaigns service is used, newsletter subscriber information internationally.
Where required by applicable Swiss data protection law, international transfers are subject to appropriate legal safeguards. Depending on the recipient and circumstances, these may include recognised data protection frameworks or contractual safeguards such as standard contractual clauses.
Squarespace's international data processing arrangements are described in its Data Processing Addendum, available at www.squarespace.com/dpa.
We take applicable data protection requirements into account when selecting and using external service providers.
10. Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, alteration or misuse.
Access to sensitive patient information is restricted to authorised persons who require it for their professional responsibilities.
11. Data Retention
We retain personal data for as long as necessary for the purposes for which it was collected and to comply with applicable legal, professional and contractual obligations.
Medical and treatment records are retained according to applicable legal requirements.
Newsletter information is retained while a subscription remains active or as otherwise necessary to comply with legal obligations and respect unsubscribe requests.
12. Your Rights
Under applicable Swiss data protection legislation, individuals may have the right to:
Request information about the personal data we process
Request correction of inaccurate personal data
Request deletion of personal data where legally permissible
Object to certain processing activities
Withdraw consent where processing is based on consent
Request the release or transfer of certain personal data where applicable
Legal obligations relating to medical documentation and record retention may limit certain requests.
To exercise these rights, please contact info@apexphysio.ch.
13. Cookies and Website Technologies
Our website uses cookies and similar technologies to support its functionality, security and performance.
We use Squarespace's built-in analytics, including its Activity Log, to understand website visits and improve our website and services. Technical information and website activity data may be processed for these purposes.
Our website displays a cookie banner that allows visitors to accept, decline or manage non-essential cookies.
Non-essential cookies managed through Squarespace's consent system are restricted until the visitor provides the relevant consent.
Visitors can review or change their cookie preferences through the cookie preference controls available on our website.
Essential cookies may be used where necessary for website functionality and security.
Further information about Squarespace's use of cookies is available in its privacy documentation.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology providers or legal requirements.