Privacy Notice

Effective date: 11/07/2025

This notice explains how personal data of users of www.diagnostify.eu (the “Site”) are collected, used and protected, in line with the EU General Data Protection Regulation (“GDPR”) and applicable laws.

1. Controller

The data controller is dIAgnostify Sagl, registered office: Bever, CH. Contact: info@diagnostify.eu.

2. Data Protection Officer (DPO)

If appointed, the DPO can be contacted at: info@diagnostify.eu.

3. Categories of data and sources

Browsing data: IP addresses, device identifiers, logs, request timestamps, pages visited. Necessary for Site operation; also processed in aggregate for security and statistics.
Data you provide: name, surname, email and any other information submitted via contact/registration forms or communications.
Cookies and similar technologies: see our Cookie Policy.
[Optional, if applicable] Special categories of data (e.g., health data) processed only when strictly necessary and with the appropriate legal basis/explicit consent.

4. Purposes and legal bases

Providing Site services: account management, authentication, restricted features. Legal basis: contract performance or pre-contractual steps.
Handling enquiries and support: responding to requests. Legal basis: controller’s legitimate interests.
Service communications: notices regarding account/services. Legal basis: contract performance.
Analytics and improvement: aggregated statistics, security and abuse prevention. Legal basis: legitimate interests; for non-essential analytics cookies, consent.
Legal compliance: fulfilling legal/regulatory obligations. Legal basis: legal obligation.
[Optional] Marketing (newsletters/updates): based on consent, which you may withdraw at any time.

5. Whether data must be provided

Data marked as required are necessary to provide the requested services; if not provided, services may not be available. Data for optional purposes (e.g., non-essential analytics, marketing) are processed only with consent and the lack of consent does not affect core services.

6. Processing methods and security

Data are processed using manual and electronic means, following principles of lawfulness, fairness, transparency, minimisation and integrity. We implement appropriate technical and organisational measures to prevent unauthorised access, loss, disclosure or misuse.

7. Recipients

Authorised personnel and collaborators of the controller.
Service providers (e.g., hosting, IT maintenance, analytics, communications) acting as processors where applicable.
Public authorities or third parties where required by law.

An up-to-date list of processors is available upon request.

8. International transfers

Data may be processed in Switzerland (covered by an EU adequacy decision) and, if necessary, in other non-EEA countries. In such cases, transfers occur pursuant to GDPR arts. 44–49 (e.g., Standard Contractual Clauses plus supplementary measures). More details are available on request.

9. Retention

Data are kept only as long as needed for the purposes above, following these criteria: (i) account/contract data: for the duration of the relationship and statutory limitation periods; (ii) technical/security logs: per technical cycles and security needs; (iii) marketing: until consent is withdrawn; (iv) [if applicable] health data: for as long as the account is active or until deletion is requested, subject to legal obligations.

10. Your rights

Access, rectification, update and supplementation.
Erasure, restriction and objection to processing.
Data portability.
Withdrawal of consent (where processing is based on consent), without affecting prior lawful processing.
Complaint to the competent Supervisory Authority.

11. How to exercise your rights

12. Cookies

The Site uses cookies and similar technologies. For details on types, purposes, legal bases and settings, see our Cookie Policy.

13. Changes to this notice

We may update this notice from time to time. Updates will be published on this page—please check it periodically.