Privacy Policy
This Privacy Policy explains how personal data is processed in connection with the OrthoCompanion commercial website.
Controller
OrthoCompanion is an early-stage Swiss software project carried by Nathan Gaillard and David Kuonen, not a company.
Email: admin@orthocompanion.ch
Scope
This policy covers the public commercial website at www.orthocompanion.ch. It does not by itself authorize use of the OrthoCompanion app, demo application, any pilot environment, clinic agreement, patient account, or clinic dashboard. Those services require separate privacy and contractual documentation before use.
Personal data we process
The current website does not use contact forms, demo forms, waitlist forms, newsletter forms, analytics tools, marketing pixels, or direct online purchase flows.
We may process personal data only if you choose to contact us by email. This may include:
- your name;
- your email address;
- your clinic or organisation;
- your role or professional title;
- your message and any information you include voluntarily;
- technical email metadata generated by email systems.
Do not send patient health data, treatment details, urgent medical information, images, clinical records, or information about minors through the website contact email, demo fields, or unsupported channels unless a specific written agreement and appropriate data-processing framework are in place.
Technical logs
The hosting provider for this website may process technical access data, such as IP address, date and time of access, requested page, browser type, operating system, referrer URL, and security logs.
- Hosting provider: Microsoft Azure (Azure Static Web Apps)
- Hosting location: Switzerland and/or the European Economic Area
- Log retention: as determined by the hosting provider's standard configuration
Email processing
Our email is operated through Infomaniak. Infomaniak may process technical metadata in connection with email delivery. For details, see Infomaniak's privacy policy.
Cookies, analytics, and tracking
The current website does not intentionally use analytics cookies, marketing cookies, tracking pixels, fingerprinting, personalized advertising, location tracking, or high-risk profiling.
If analytics or marketing tools are added later, this Privacy Policy and the Cookie Policy will be updated before those tools are activated. Where required, non-essential tools will not run before consent.
Purposes of processing
- Responding to email enquiries
- Arranging a demo or pilot discussion if requested by email
- Documenting business communications
- Supporting account management, pilot evaluation, troubleshooting, and service improvement where a separate written framework exists
- Operating, securing, maintaining, and improving the website
- Complying with legal obligations
- Establishing, exercising, or defending legal claims
Legal basis
Under Swiss data-protection law, we process personal data only where processing is lawful, proportionate, transparent, and limited to the relevant purpose.
If the GDPR applies, the legal bases may include:
- Article 6(1)(b) GDPR: steps requested before entering into a contract, where a clinic asks for a demo or pilot discussion;
- Article 6(1)(f) GDPR: legitimate interests in responding to enquiries, operating a commercial website, maintaining security, and documenting business communications;
- Article 6(1)(c) GDPR: compliance with legal obligations.
We do not intentionally collect health data through the public website. Health-related or patient-related data should not be entered into the demo application unless a specific written agreement and appropriate data-processing framework are in place.
Where OrthoCompanion processes data on behalf of an orthodontic practice, clinic, or other professional organization, the respective roles, responsibilities, security measures, retention rules, access rights, deletion rules, and data-processing terms must be defined in a separate written agreement.
Recipients and processors
We may disclose personal data to:
- email service provider: Infomaniak;
- website hosting provider: Microsoft Azure (Azure Static Web Apps);
- IT, security, legal, accounting, or professional advisers where necessary;
- authorities, courts, or regulators where legally required.
We do not sell personal data.
International transfers
If personal data is transferred outside Switzerland, the EEA, or another country recognised as providing adequate protection, we will use appropriate safeguards where required, such as contractual safeguards or another legally recognised transfer mechanism.
Retention
- Email enquiries: 12 to 24 months after last contact unless a business relationship develops
- Business correspondence connected with pilots or contracts: as required by applicable accounting and contractual rules
- Server logs: as determined by the hosting provider's standard configuration
- Legal records: as long as required by applicable law
Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.
No email or internet transmission is risk-free. Do not send sensitive patient information through ordinary email unless an appropriate channel and written framework have been agreed.
Your rights
Subject to applicable law, you may have rights to request information about your personal data, access, correction, deletion, restriction, objection, data portability, and withdrawal of consent where processing is based on consent.
To exercise your rights, contact admin@orthocompanion.ch.
In Switzerland, you may also contact the Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch. If GDPR applies, you may also lodge a complaint with a competent EU/EEA supervisory authority.
Children and minors
This commercial website is intended for orthodontic clinics and professional users. It is not directed at children or minors. We do not knowingly collect personal data from minors through the website.
The OrthoCompanion app may involve patients, including teenagers, only under a separately reviewed clinic, consent, privacy, and regulatory framework.
Changes
We may update this Privacy Policy when the website, contact process, providers, or legal requirements change. The updated version will be published on this page.