Privacy policy

Last updated: October 2026

This privacy policy explains which personal data we process when you visit our website vitality-spitex.ch, contact us or use our online forms. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

Vitality Spitex GmbH
Margarethenstrasse 3
8152 Glattbrugg, Switzerland
Phone 044 330 40 00
Email info@vitality-spitex.ch

Please contact us at this address with any questions about data protection.

2. Visiting the website and server log files

When you access our website, our hosting provider's server automatically records technical information transmitted by your browser: IP address, date and time of access, page requested, referrer URL, browser type and operating system. We need this data to operate the website securely and reliably. It is not combined with other data and is deleted after a short period unless it is needed to investigate a security incident. The connection to our website is encrypted with TLS (HTTPS).

3. Contacting us by phone or email

When you call us or send us an email, we process the information you provide (for example your name, phone number, email address and your request) in order to answer your enquiry and, where applicable, to organise care or support.

4. Online forms

Our contact form and our patient referral form run directly on our website. The information and uploaded documents are transmitted in encrypted form (TLS) to our hosting provider's server and sent from there by email to our team. They are not stored on the web server. No external form service is used.

Data we process: the information you enter in the form. For the contact form this includes in particular the selected topic, your name, phone number, email address, preferred call-back time and your message. For the referral form this includes details of the referring organisation and the prescribing doctor as well as the referred person’s personal details, address, insurance details, diagnosis, required services and the doctor’s prescription. This is sensitive personal data (health data). To protect against misuse, the IP address is stored as a hash value for at most one hour.

Purpose: We use the data to answer your enquiry or to plan and provide care for the referred person and to bill the cost bearers.

Legal basis: Processing is based on your consent, on the preparation or performance of a contract and on our legal obligations under the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, we rely on Art. 6(1)(a), (b) and (c) and Art. 9(2)(a) and (h) GDPR. Anyone referring a patient confirms in the form that the person concerned has agreed to their data being passed on to Vitality Spitex.

Retention: We transfer the information to our records or the care documentation. Statutory retention obligations, in particular for care documentation, remain reserved.

5. Cookies

Our website uses cookies, small text files stored by your browser. We need technically necessary cookies to operate the website. Further cookies are set by the Google services described in section 6. You can delete or block cookies in your browser settings at any time; some functions of the website may then only be available to a limited extent.

6. Google Tag Manager, Google Analytics and Google Ads

We use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"):

  • Google Tag Manager manages the integration of the services below. Tag Manager itself does not analyse personal data.
  • Google Analytics 4 records how visitors use our website, for example pages viewed, time spent, approximate location, device and browser, and clicks on phone numbers and email addresses. Google truncates the IP address. We use the reports to improve our services.
  • Google Ads conversion tracking measures whether a visit via one of our ads led to an enquiry or a call, so that we can assess the success of our advertising.

Data may be transferred to Google servers in the USA. Google is certified under the Swiss-U.S. Data Privacy Framework; standard contractual clauses are also in place. Further information is available in Google's privacy policy. You can prevent collection by Google Analytics with Google's browser add-on and turn off personalised advertising in your Google ad settings.

We do not use any of these services on the referral page.

7. Google Maps

On some pages we show a Google Maps map (provider: Google, see section 6) so that you can find our location. When the map loads, your browser transmits your IP address and technical information to Google. Links to Google Maps ("plan route") only open Google's website when you click them.

8. Fonts and icons

The fonts on our website are stored locally on our server; no connection to Google Fonts is made when a page is loaded. For icons we load the Font Awesome library from the cdnjs content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. In doing so, your IP address is transmitted to Cloudflare; Cloudflare is certified under the Swiss-U.S. Data Privacy Framework.

9. Links to Facebook and Instagram

Our website contains simple links to our pages on Facebook and Instagram (Meta Platforms Ireland Limited). No plugins are embedded; data is only transmitted when you click a link and open Meta's website, where Meta's privacy policy applies.

10. Disclosure of data

We do not sell personal data. We only pass on data where necessary for the purposes described, for example to our hosting provider, to the service providers named above, to health insurers and other cost bearers for billing, and to authorities where we are legally obliged to do so. Our staff are bound by professional secrecy and confidentiality.

11. Retention

We keep personal data only as long as necessary for the respective purpose or as required by statutory retention obligations, in particular for care documentation and accounting.

12. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted transmission via HTTPS.

13. Your rights

You may at any time request information about your data, ask for it to be corrected or deleted, object to its processing and withdraw any consent you have given. Please contact Vitality Spitex GmbH, Margarethenstrasse 3, 8152 Glattbrugg, Switzerland, info@vitality-spitex.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

14. Changes

We may amend this privacy policy. The version published on this page applies.