Welcome to the Cenas website
Updated on 13.10.21
In any event, your personal data will be processed in compliance with applicable rules in terms of medical ethics and confidentiality.
1. General principles
1.1. Our website (www.cenas.ch) provides users with information about the services offered by our organisation, and features contact information (contact form).
2. The personal data we collect
2.2. We may also collect personal data when you fill in a contact form on our website or subscribe to our newsletter. In these cases, we collect any personal information you provide, including medical data.
2.3. Espace Médecin :
3. Storage and access to personal data
3.1 The personal data collected through our website is stored with a backup copy on Infomaniak servers, which are located in the canton of Geneva.
3.2 Access to personal data collected on our website is limited to the staff in charge of your file, and to any qualified person within the CENAS Sleep Medicine Centre as set out in the organisation’s access management rules.
4. How we use your personal data
A. Services we offer
4.1. We use personal data primarily to grant you access to the website and provide you with the features of our site. In this regard, we may use identification tools such as cookies to remember you and improve your browsing experience.
B. Marketing communications
4.2. We may use personal data to send out marketing information (typically newsletters), in digital or paper format, relating to information provided on our website, which we believe may be of interest to you.
4.3. In light of the above, we may use identification tools such as cookies to gain a clearer understanding of your personal interests and ensure that, when we send marketing communications or you visit our website, you do not miss out on specific offers or other information that may be of interest to you (online targeted advertising).
4.4. You can request not to receive such information by sending us an email at firstname.lastname@example.org, or a letter to the following address: Communication Department, Chemin de la Gravière 3, 1225 Chêne-Bourg, Switzerland. Upon receipt, we will promptly confirm by email that your request is being processed.
C. Internal use
4.5. Personal data and information obtained through cookies and similar technologies help us continuously improve our website.
4.6. We also compile statistical information – on an anonymised basis – relating to the use of our website. This helps us improve our services.
D. Non-disclosure of personal data
5. Third party access to your personal data
A. Publication of statistics
5.1. As stated above, we may compile statistics about the use of our website based, among other things, on your personal data. We may publish these statistics or share them with third parties in an aggregated form, so that they do not include your personal data or help identify you.
A. Cookies and web beacons
Data protection statement for the use of Analytics
This website uses Google Analytics, an online analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and enable an analysis of your browsing behaviour on the website. The information generated by the cookie is usually sent and stored on a Google server located in the United States. If IP anonymisation is activated, your IP address will be abbreviated by Google within a member state of the European Union, or in another country that is a signatory to the Agreement on the European Economic Area.
Only in exceptional cases shall the full IP address be transmitted to a Google server in the United States and then abbreviated. Google uses this information for the purpose of assessing user behaviour on the website, compiling activity reports for website operators and providing other services relating to the site and Internet usage. Google may also transfer this information to third parties where required by law, or in cases when such third parties process the information on Google’s behalf.
The IP address transmitted by your browser within the framework of Google Analytics will not be tied to other Google data.
B. Contractual partners and affiliated companies
5.2. Some of our contractual partners and affiliated companies may have access to personal data you’ve shared through our website. These contractual partners and affiliates help us operate our site and provide the services listed therein. They are required to sign contracts in which they agree to protect personal data by applying procedures similar to ours.
C. Change of control or sale
D. Lawful disclosures
5.4. We will only disclose your personal data if legally required to do so, or if we believe in good faith that such disclosure is necessary to (i) investigate, prevent, or take action regarding suspected or established illegal activities or to assist public authorities; (ii) enforce any agreement we have with you; (iii) investigate or defend against claims or allegations made by third parties; (iv) protect the security or integrity of our website (e.g. by sharing information with companies facing similar threats); or (v) exercise or protect the rights and safety of our users, employees or others.
5.5. Where appropriate and technically feasible, we do everything we can to notify our users of requests that we receive regarding their personal data, unless such action is not permitted by law or by court order, or where the urgent nature of the situation prevents it. We may contest requests of this kind where we judge, at our sole discretion, that the request is too broad or vague or that it does not have an appropriate basis. However, we do not undertake to contest all requests that we receive.
6. Managing your personal data
A. Preliminary notes
6.1. We manage your personal data in accordance with the provisions of this section. Please note, however, that we must comply with certain legal requirements, in particular those arising from medical law – when dealing with the medical data you provide us with -, which may differ from the provisions of this section.
6.2. For security reasons and to prevent fraud, any request relating to this section must include appropriate proof of identity.
B. Protecting your personal data
6.3. We do our utmost to prevent unauthorised disclosure of personal data. In particular, we implement and maintain the necessary measures (including administrative, physical and technical safeguards) to prevent and manage unauthorised disclosure of personal data.
6.4. In the event of a data breach, or if we suspect such a breach: (i) we will do our best to notify you promptly, insofar as this is technically feasible, and (ii) we will work with you to investigate and resolve the incident, including providing you with reasonable assistance should you be required to notify a third party. On submission of a reasonable request by you, we will provide you with prompt access to the files affected by the data breach. Nevertheless, it should be noted that these files remain confidential information belonging to us, and that we are under no obligation to provide you with information that belongs to other users or that compromises other users’ security.
6.5. In the event of or if we suspect a data breach, we will also inform relevant authorities in compliance with the applicable regulations.
C. Accessing and amending your personal data
6.6. When we process personal data, we do our utmost to ensure that it is kept accurate and up to date, and that it is only processed for the purpose for which it was collected.
D. Storing your personal data
6.7. We retain personal data to grant you full access to our website and its features (such as our newsletter or the member area for physicians), without prejudice to our storage obligations.
E. Deleting your personal data
6.8. You may request the deletion of your personal data at any time, subject to our storage obligations.
6.9. Following a request for deletion of data, you have 30 days to request a copy of your personal data. Then we make it available to you for transfer or download in a commonly accepted format. We reserve the right not to provide you with a specific format you request, or to agree only if you pay for the costs incurred.
6.10. After this 30-day period, we have no further obligation to retain or disclose personal data to you. We will therefore delete any copy of your personal data held on our systems, under our control or in our possession.
6.11. Please note that we may retain anonymised information after your personal data has been deleted.
8. Questions or complaints ?