Privacy notice

1. Controller and scope

The operator named in the operator details is the controller for processing on this website. For data protection concerns and general questions, you can reach us at info@angehörigenherz.ch. A postal address for service is expressly not stated in this version; AngehörigenHERZ is the brand name of the service and does not replace complete provider details.

This notice covers this website, the active direct contact route through FormSubmit and direct email contact with the operator named in the operator details. It is not the privacy notice of an external care provider. The service is directed at Switzerland; any additionally applicable foreign provisions remain reserved.

2. Website visits and technical data

When the website is accessed, technical data including the IP address, time, requested path, browser or device information and, where applicable, error and security information is generated. Hosting and delivery services may process this information for operation, error analysis, abuse detection and security. We do not use this information to make an automated decision about entitlement to remuneration.

For abuse protection of the contact endpoint, a hash is created from the network address and used in a 15-minute window in working memory. Expired entries are removed on the next call, at the latest on restart. Hashing is not an assurance of complete anonymity. Separate hosting logs may have other retention periods; their specific periods still need to be confirmed.

3. What the demo check stores

The former demo API component remains sanitised for existing demo flows: entered contact fields are replaced with fictitious test values. It is not the publicly active contact route and sends no demo data to FormSubmit.

The public contact enquiry uses the live route described in this notice, not the demo API component. Diagnoses, medical records and names of the person receiving care are neither requested nor intended for the form.

4. When you contact us by email

When you use the contact address info@angehörigenherz.ch, authorised employees of AngehörigenHERZ process your sender address, the content of your message and the information needed to respond. IONOS provides the recipient mailbox. This serves to handle your concern and does not automatically register you for advertising.

In the active form route, the server sends the described form details directly through FormSubmit as a structured email to info@angehörigenherz.ch; IONOS provides the recipient mailbox. FormSubmit acceptance does not guarantee mailbox delivery or reading. FormSubmit’s documentation and help state a 30-day archive; this is not a deletion period for the operator mailbox. Its retention remains to be set organisationally. Do not send diagnoses, medical records, insurance numbers or data about other people by email.

5. Internal administrative access

The protected administration area is not intended for customers and may manage existing demo references. The active route has no contact database and no outbox; a live database remains disabled. When an internal login is made through Manus, the user identifier and, where applicable, name and email, login method and login times are processed in particular.

No access roles through login are assigned to handle live enquiries. For duplicate submissions, the server holds the enquiry identifier, a verification hash of the submitted fields and the sending result or status in a 15-minute window in working memory. Expired entries are removed on the next call, at the latest on restart; there is no contact database.

6. Purposes and data protection framework

Processing serves to deliver and secure the website, respond to messages and send a contact request that you expressly requested directly to the operator mailbox. The server validates and transmits only name, telephone, optional email, canton, postcode, broad situation, language, time window, reference, server-side consent version and server-side date. Diagnoses, free-text medical information, files and IP or browser data from client headers are not part of that email. There is no automatic initial disclosure to an external provider.

The required checkbox covers only the described direct email sending for the contact purpose. It is not blanket consent to marketing, newsletters, tracking or processing of medical data and permits no partner disclosure. The server uses consent version live-angehoerigenherz-email-v3 and the processing date; evidence is in the operator email and provider archive, not in a contact database.

7. Recipients and possible future contact disclosure

Authorised employees of AngehörigenHERZ handle contact enquiries. Contracted technical hosting and delivery providers may process data within their tasks. FormSubmit processes for our operator the server-whitelisted form details — name, telephone, optional email, canton, postcode, broad situation, language, time window, reference and consent version/date — to send the structured email directly to info@angehörigenherz.ch; IONOS provides the recipient mailbox. According to https://formsubmit.co/documentation and https://formsubmit.co/help, FormSubmit documents a 30-day archive. Legal obligations may require disclosure to competent authorities.

The server validates those fields against a whitelist and sends them directly to FormSubmit. It operates no contact database or outbox for live enquiries. For duplicate submissions, the enquiry identifier, a verification hash of the submitted fields and result or status remain in a 15-minute window in working memory; expired entries are removed on the next call, at the latest on restart. The email contains no diagnoses, free-text medical information, files, IP or browser data from client headers, or third-party Reply-to, CC or autoresponder details.

Any future disclosure to an external provider takes place only after a personal enquiry and separate, specific consent. Before any disclosure, the recipient, purpose, scope of data and secure channel are stated. There is no automatic disclosure. Allocation of roles, a disclosure agreement and responsibility for data-protection concerns must be clarified before such disclosure.

8. Hosting, service providers and international transfers

Technical provision is through Manus / Butterfly Effect Pte. Ltd., Singapore. In its public materials, the platform names Singapore and possible processing in the USA; its published subprocessor list includes, among others, US network and cloud service providers. This is not an assurance that all data from this project are stored exclusively in Switzerland.

For this project, the service providers actually used, storage and access countries, including the email service, and the effective contracts still need to be conclusively reviewed and added. The publicly offered platform DPA contains a Swiss transfer mechanism with adapted standard contractual clauses. Its specific application and any supplementary protective measures must be confirmed before processing real contact enquiries.

International transfers require the conditions of Articles 16 and 17 FADP, such as recognised adequate protection or appropriate safeguards. Mere general consent does not replace careful assessment. Information on safeguards used in the specific operation can be requested from the controller.

9. Retention and deletion

Data may not be retained longer than necessary for the identifiable purposes. In individual cases, statutory retention obligations or the limited safeguarding or defence of legal claims may require further retention. The data must then be deleted or genuinely anonymised.

FormSubmit describes a 30-day archive for its email service in its documentation and help. That archive is not a deletion period of the operator. Retention, deletion and organisational responsibility for the operator mailbox still need to be set. For duplicate submissions, a 15-minute window applies to the enquiry identifier, a verification hash of the submitted fields and result or status; expired entries are removed on the next call, at the latest on restart. There is no contact database. Existing demo data and hosting logs may follow separate rules. A complete retention and deletion concept remains outstanding.

10. Security and data minimisation

The application separates public information from the protected administration area, restricts server-side access, validates inputs and limits enquiries. The active route validates a whitelist of name, telephone, optional email, canton, postcode, broad situation, language, time window, reference, consent version and date, and sends only those details directly through FormSubmit. These measures are not a guarantee against every security risk.

The live route uses no contact database, no outbox and no direct SMTP sending from the server. IONOS provides the recipient mailbox. Diagnoses, free-text medical information, files, IP or browser data from client headers, and third-party Reply-to, CC or autoresponder details are not sent. For duplicate submissions, the enquiry identifier, a verification hash of the submitted fields and sending result or status are held in a 15-minute window in working memory; expired entries are removed on the next call, at the latest on restart.

11. Cookies, analytics and Google Ads

The current web application does not include Google Ads, Analytics, remarketing or comparable advertising scripts. No diagnoses, contact contents or form details are transmitted to active advertising measurement. Technical processes and, where applicable, logs of the hosting platform must be distinguished from this.

If advertising or performance measurement is added later, the service, purpose, data categories, recipients, countries, retention periods and choices will be added in advance. Consent-based measurement remains disabled until a valid choice is made. Refusal must not prevent the non-binding contact check; withdrawal must be easy. The «Cookies & Tracking» page describes the current state in more detail.

12. Your rights and contact

You may request information about data concerning you and, subject to the applicable conditions, in particular request correction, deletion, restriction or cessation of processing and disclosure or transfer of data. Where processing is based on consent, you may withdraw it for the future. Statutory exceptions and retention obligations remain reserved.

For a request, write to info@angehörigenherz.ch. Please describe it using as little information as possible. To prevent unauthorised disclosure, a proportionate identity check may be necessary. Information is generally provided free of charge within 30 days; if this deadline cannot be met, you will be informed of the delay and the further deadline.

You may contact the Federal Data Protection and Information Commissioner (FDPIC) or assert your rights before the competent courts. This notice does not limit such rights.

13. Changes and information still outstanding

The status date of this notice is stated above. It will be updated if data flows change, in particular for any future disclosure to a care provider or advertising measurement. The current route is the server-validated direct transmission through FormSubmit to info@angehörigenherz.ch. FormSubmit acceptance proves neither delivery nor reading and does not replace any required new consent.

Outstanding information includes the operator’s postal address and other required provider details, specific FormSubmit DPA, contract and country details and safeguards that actually apply, and organisational retention of the operator mailbox. FormSubmit’s generic 2019 privacy policy does not close these gaps. This notice documents live operation but, due to outstanding address and provider details, is not confirmation of full compliance.