Data protection

Data protection

1. Public statement

At Unilabs, our motto is CARE BIG. Our corporate culture is committed to protecting what matters most to our customers, including the sensitive data used in diagnostics, and to ensuring the security of your personal data.

Our commitment to meeting the highest data protection standards, in accordance with regulations such as the Swiss Data Protection Act and the European General Data Protection Regulation, reinforces our determination to earn and maintain your trust over the long term.

We understand the importance of protecting your personal data. This reflects our fundamental belief in preserving your trust in our brand.

For Unilabs, data protection is not only a priority, but also a fundamental commitment that we uphold with pride.

 

Where does Unilabs Switzerland stand on data protection?

Unilabs complies with the Swiss Data Protection Act and is also committed to complying with the GDPR across all its entities.

Whether we process patient data, employee records, customer information, supplier data or any other personal data as part of our business activities, compliance with legal data protection requirements and fundamental ethical standards is our highest priority.

As part of our commitment to continuous improvement, our team of data protection experts, supervised by the Group Data Protection Officer, ensures that best practices are applied consistently across the Unilabs Group.

You can be confident that your personal data is managed with the greatest care and in strict compliance with applicable legal requirements.

Data processing

Unilabs is authorised to collect and process personal data only for specific and legitimate purposes.

We maintain a Record of Processing Activities, known as ROPA, which documents our data processing operations, each with its own purpose and legal basis. This record is reviewed regularly to reflect changes in business practices.

We take particular care when engaging data processors to process personal data on our behalf. We put contractual data processing agreements in place to ensure that the rights of data subjects are respected.

We also carry out appropriate due diligence to ensure that data processors are able to meet and implement their data protection obligations.

Transparency

Both the Swiss Data Protection Act and the GDPR require appropriate measures to control personal data throughout its lifecycle.

Unilabs carries out regular checks to:

ensure that only the minimum amount of personal data is collected;

allow personal data to be corrected and updated;

delete personal data when it is no longer necessary or relevant.

Unilabs is transparent about how personal data is processed by Group companies.

Personal data is managed to allow its collection, storage, use, modification or deletion in accordance with Swiss and European legal requirements and with requests from data subjects.

Data security

Data security is of the utmost importance to Unilabs.

We continuously assess and improve our security systems, organisational measures and business practices in order to reduce vulnerability to threats.

By implementing rigorous security controls, we ensure that personal data remains accessible to the business when needed, while being protected at all times against malicious actors.

2. Information notices

The Swiss Data Protection Act and the GDPR require data controllers to provide data subjects with information about the processing they carry out, related matters and the rights of data subjects in a concise, transparent, clear and easily accessible way, using plain language.

Unilabs information notice for healthcare professionals

Unilabs information notice for patients

Unilabs information notice for candidates

Unilabs information notice for journalists

Unilabs information notice for suppliers

Unilabs information notice for website visitors

Unilabs information notice for employees

3. Information about your rights

Under Swiss and European legislation, every individual, as a data subject, has a number of rights regarding the processing of their data.

Data subjects should be aware that the rights granted under the GDPR are not always absolute and that restrictions provided by law may apply. For example, the right to erasure may not apply where processing is required in the public interest or is relevant in connection with legal proceedings.

Below is a summary of the most important information. Where necessary, please consult the full regulations using the relevant official sources.

3.1 Access

You have the right to ask whether we process personal data concerning you and to request access to that data.

You have the right to know why we collect this data and how we process it, as well as the type of personal data we process, the organisations that receive it and how the data is stored.

3.2 Objection to processing

You have the right to object to the processing of personal data on grounds relating to your legitimate interests.

However, if our grounds for processing are legitimate and compelling, and if they override your interests, rights and freedoms, we may be entitled to continue processing the data.

Where processing is based on consent, you may withdraw your consent for Unilabs to use your personal data. This will not affect the use of your information before the withdrawal of consent.

3.3 Objection to processing for direct marketing

You always have the right to object to the processing of personal data concerning you for direct marketing purposes.

3.4 Rectification

You have the right to request the correction of inaccurate or incomplete personal data, the restriction of our processing, and the completion of incomplete personal data.

3.5 Erasure

You also have the right to request the deletion of personal data concerning you in certain circumstances, for example when the information is no longer necessary.

3.6 Restriction of processing

You have the right to request that the processing of personal data concerning you be restricted.

We may not be able to provide our services while such processing is restricted.

3.7 Data portability

In certain circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transmit that data to another controller.

This right is limited to personal data that you have provided to us, where the processing is carried out to perform a contract with you or is based on your consent.

3.8 Questions and complaints

For any questions about the processing of your personal data, please contact us by email at:

dpo@unilabs.com

If you wish to lodge a complaint about how we process personal data concerning you, you may do so with the Data Protection Authority in your country.

For Switzerland, this is the Federal Data Protection and Information Commissioner.

For the European Union, please consult the relevant EU data protection authority.

3.9 Data subject rights request portal

You can access the portal to submit a data subject rights request through the following link:

Privacy Web Form

 

4. Cookies

4.1 Unilabs uses cookies to receive and record information, and we may also use other technologies for this purpose, referred to as automatic data collection.

This may include personal information collected from your browser.

4.2 In short, cookies are small text files sent to your browser on your computer, mobile phone or other technical device.

Cookies are used to store information on that device and act as a memory. This means that when you visit the website again, the website remembers your device.

There are two types of cookies: session cookies and persistent cookies.

Session cookies last only until you close your browsing session on the device. Persistent cookies remain for a longer defined period.

4.3 The information collected through cookies may include:

Geolocation

Time of visit, pages viewed and time spent on each page

Referring website details, such as the URI link through which the user reached the website

Domain, browser type and language

Country and time zone

Browsing behaviour

Operating system type

Flash version, JavaScript support, processing capacity, screen resolution and screen colour

Network location and IP address

Document downloads

Clicks on links to external websites

Errors when users complete forms

Clicks on videos

Scroll depth

Interactions with website-specific applications or widgets

4.4 Unilabs uses cookies to receive information about how the website is used.

This information helps us improve our website and services.

In general, you can change your browser settings to disable all cookies, refuse new cookies or set your device to notify you when new cookies are sent.

Unilabs uses cookies to receive information about how the website is used.

This information helps us improve our website and services.

In general, you can change your browser settings to disable all cookies, refuse new cookies or set your device to notify you when new cookies are sent.

4.5 To change cookie settings, use your browser settings.

Each web browser is different, but you can use the Help menu in your browser to learn how to modify your cookie settings. This change must be made on every browser you use if you want your cookie settings to be the same across all browsers. Please note that if you disable cookies, some website services may not function properly.

4.6 Information that can be used to identify website users may be disclosed to third parties, such as Google Analytics.

Information that cannot be linked to the identity of a user may also be disclosed.

The period for which information obtained through cookies is stored depends on how frequently you visit the website.

5. Other questions

For any questions, please contact us by email at:

dpo@unilabs.com