Effective date: 11\/07\/2025<\/strong><\/p>\r\n\r\n\r\n\r\n This notice explains how personal data of users of www.diagnostify.eu (the \u201cSite\u201d) are collected, used and protected, in line with the EU General Data Protection Regulation (\u201cGDPR\u201d) and applicable laws.<\/p>\r\n\r\n\r\n\r\n 1. Controller<\/strong><\/p>\r\n\r\n\r\n\r\n The data controller is dIAgnostify Sagl<\/strong>, registered office: Bever, CH<\/strong>. Contact: info@diagnostify.eu<\/strong><\/a>.<\/p>\r\n\r\n\r\n\r\n 2. Data Protection Officer (DPO)<\/strong><\/p>\r\n\r\n\r\n\r\n If appointed, the DPO can be contacted at: info@diagnostify.eu<\/strong><\/a>.<\/p>\r\n\r\n\r\n\r\n 3. Categories of data and sources<\/strong><\/p>\r\n\r\n\r\n\r\n 4. Purposes and legal bases<\/strong><\/p>\r\n\r\n\r\n\r\n 5. Whether data must be provided<\/strong><\/p>\r\n\r\n\r\n\r\n Data marked as required are necessary to provide the requested services; if not provided, services may not be available. Data for optional purposes (e.g., non-essential analytics, marketing) are processed only with consent and the lack of consent does not affect core services.<\/p>\r\n\r\n\r\n\r\n 6. Processing methods and security<\/strong><\/p>\r\n\r\n\r\n\r\n Data are processed using manual and electronic means, following principles of lawfulness, fairness, transparency, minimisation and integrity. We implement appropriate technical and organisational measures to prevent unauthorised access, loss, disclosure or misuse.<\/p>\r\n\r\n\r\n\r\n 7. Recipients<\/strong><\/p>\r\n\r\n\r\n\r\n An up-to-date list of processors is available upon request.<\/p>\r\n\r\n\r\n\r\n 8. International transfers<\/strong><\/p>\r\n\r\n\r\n\r\n Data may be processed in Switzerland (covered by an EU adequacy decision) and, if necessary, in other non-EEA countries. In such cases, transfers occur pursuant to GDPR arts. 44\u201349 (e.g., Standard Contractual Clauses plus supplementary measures). More details are available on request.<\/p>\r\n\r\n\r\n\r\n 9. Retention<\/strong><\/p>\r\n\r\n\r\n\r\n Data are kept only as long as needed for the purposes above, following these criteria: (i) account\/contract data: for the duration of the relationship and statutory limitation periods; (ii) technical\/security logs: per technical cycles and security needs; (iii) marketing: until consent is withdrawn; (iv) [if applicable]<\/em> health data: for as long as the account is active or until deletion is requested, subject to legal obligations.<\/p>\r\n\r\n\r\n\r\n 10. Your rights<\/strong><\/p>\r\n\r\n\r\n\r\n 11. How to exercise your rights<\/strong><\/p>\r\n\r\n\r\n\r\n\r\n
\r\n
\r\n
\r\n