Privacy Policy

1. Scope

This Privacy Policy explains how RICB Diagnostics AG processes personal data in connection with this website. We comply with the revised Swiss Federal Act on Data Protection (revFADP, in force since 1 September 2023) and, where applicable, with the EU General Data Protection Regulation (GDPR). Where the two regimes diverge, we apply the stricter standard.

2. Data controller

The controller responsible for the processing described in this policy is:

RICB Diagnostics AG, Zeughausstrasse 10, 8887 Mels (SG), Switzerland. Phone: +41 81 300 4010. Email: info@ricb-diagnostics.com.

3. Contact for privacy matters

For any question about how we process your personal data, please contact us at info@ricb-diagnostics.com. We have not currently appointed a Data Protection Officer, as we are not legally required to do so. We have not currently appointed a representative in the European Union under Art. 27 GDPR.

4. Personal data we process

4.1 Server log data (automatic)

When you visit this website, our infrastructure provider automatically processes the following technical data, which your browser transmits with each request:

• IP address (typically truncated)
• Date and time of the request
• Requested URL and HTTP status code
• Browser type, version and operating system (user agent)
• Referrer URL
• Approximate volume of data transferred

This data is processed exclusively to deliver the website, ensure its security and integrity, detect and prevent attacks, and troubleshoot technical issues. We do not combine server logs with other sources to identify individual visitors.

4.2 Contact form and direct contact

When you contact us via the contact form or directly by email or phone, we process the data you provide voluntarily, typically your name, your email address, your company, your phone number and the content of your message. We use this data exclusively to respond to your request and, where relevant, to follow up on a potential business relationship.

4.3 Scheduling a call

If you book a call with us through a scheduling tool linked from this website, the third-party scheduling provider processes the data required to set up the meeting (typically your name, email address, time-zone, the meeting time and any information you voluntarily share). The respective provider acts as a processor or independent controller for that processing.

4.4 Cookies and similar technologies

For details on the cookies and storage technologies we use, please refer to our Cookie Policy. Today, this website does not use any analytics, advertising or tracking cookies.

5. Purposes and legal bases

We process personal data for the following purposes and on the following legal bases:

• Operating, securing and improving the website: based on our overriding legitimate interest (Art. 31(1) revFADP; Art. 6(1)(f) GDPR) in providing a stable, secure and appropriate online presence.
• Responding to your enquiries: based on the steps taken at your request prior to entering into a contract and/or our legitimate interest (Art. 31(2)(a) revFADP; Art. 6(1)(b) and (f) GDPR).
• Compliance with legal obligations: including record-keeping obligations under Swiss law (Art. 31(1) revFADP; Art. 6(1)(c) GDPR).
• Defence of legal claims: where necessary and proportionate (Art. 31(1) revFADP; Art. 6(1)(f) GDPR).

6. Recipients and processors

Within RICB Diagnostics AG, only employees who need access to your personal data to perform their duties receive access to it. We may share your data with the following categories of recipients:

• Infrastructure and hosting providers operating this website on our behalf as data processors under a Data Processing Agreement
• Email service providers we use for business correspondence
• A scheduling provider (only if and once a scheduling tool is activated, see section 4.3)
• Professional advisors (legal, tax, audit) bound by confidentiality, where necessary
• Public authorities and courts, where we are legally obliged to disclose data

We will provide the current name and registered office of any of these processors on request.

7. Transfers outside Switzerland and the EEA

Personal data may be transferred to recipients in countries outside Switzerland and the European Economic Area, including to countries that do not provide the same level of data protection as Swiss or EU law. Where this is the case, we ensure that adequate safeguards are in place, typically the European Commission's Standard Contractual Clauses, supplemented where necessary, or an adequacy decision recognised by the Swiss Federal Council and/or the European Commission. You may request a copy of the relevant safeguards by contacting us.

8. Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by Swiss law (in particular, statutory record-keeping obligations of typically ten years for business-related correspondence). Server log data is generally deleted or anonymised within a few weeks unless a security incident requires longer retention. Once the retention period expires, the data is deleted or anonymised.

9. Automated decisions and profiling

We do not use automated individual decision-making (including profiling) within the meaning of Art. 21 revFADP or Art. 22 GDPR in connection with this website.

10. Your rights

Subject to the conditions of the applicable data protection laws, you have the following rights with respect to your personal data:

• Right of access (Art. 25 revFADP; Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 32 revFADP; Art. 16 GDPR)
• Right to erasure (Art. 32(2) revFADP; Art. 17 GDPR)
• Right to restrict processing (Art. 18 GDPR)
• Right to data portability (Art. 28 revFADP; Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 30(2) revFADP; Art. 21 GDPR)
• Right to withdraw consent at any time, with effect for the future, where processing is based on consent (Art. 6(2) revFADP; Art. 7(3) GDPR)

To exercise these rights, please contact us at info@ricb-diagnostics.com. We may need to verify your identity before responding.

11. Right to lodge a complaint

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), www.edoeb.admin.ch. In the European Union, you may lodge a complaint with the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our processing activities or to legal requirements. The current version is always available on this page, with the date of the last update shown below.