Who is responsible
MediRapp AG, Klosbachstrasse 104, 8032 Zurich, Switzerland, is responsible for the processing of personal data on this website. For any question about your data or to exercise your rights, write to info@medirapp.ai.
We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies to visitors from the European Economic Area, the EU General Data Protection Regulation (GDPR).
This policy covers the website medirapp.ai only. The processing of patient data in the EchoRapp software is governed by the agreements we conclude with our customers.
What we process and why
Visiting the website. When you open a page, our hosting provider processes technical data that your browser sends, such as your IP address, the date and time, the page requested, and browser and device information. We need this data to deliver the website securely and to detect and fix errors.
Contact, quote and job application forms. When you send us a form, we receive the details you enter (for example your name, email address, phone number, institution, echo volume and message; for applications also your CV and cover letter). We use them only to answer your request, prepare a quote or handle your application. The forms are delivered to us by email through Microsoft 365.
Booking a walkthrough. The “Book a walkthrough” and event slot buttons open Microsoft Bookings. The details you enter there are processed by Microsoft on our behalf to schedule the appointment.
Health-professional notice. Your answer to the notice shown on your first visit is stored only in your own browser (local storage), so the notice is not shown again. It is not sent to us.
Services from third parties
- Hosting: Microsoft Azure (website and forms).
- Email and bookings: Microsoft 365 and Microsoft Bookings.
- Spam protection: Cloudflare Turnstile checks that forms are sent by a person. Cloudflare processes technical data of your browser for this purpose.
- Fonts: the website loads its fonts from Google Fonts, which receives your IP address when the fonts are loaded.
- Analytics: we use Google Analytics. Consent for analytics storage and advertising is set to “denied” by default, so no analytics cookies are stored.
- Videos and posts: embedded YouTube videos and LinkedIn posts are loaded from YouTube (Google) and LinkedIn. These providers receive your IP address and may set their own cookies when the content loads; their own privacy policies apply.
Some of these providers may process data outside Switzerland, including in the United States. Where this happens, we rely on the safeguards provided for by data protection law, such as the Swiss-U.S. and EU-U.S. Data Privacy Frameworks or standard contractual clauses.
How long we keep data
We keep form submissions and correspondence as long as needed to handle your request and for the retention periods required by law. Job applications are deleted when the recruitment process ends, unless you agree that we keep them for future positions. Technical server data is kept only for a short period for security purposes.
Your rights
You can ask us for information about the personal data we hold about you, and ask us to correct or delete it, to restrict or object to its processing, or to receive it in a common format. Where processing is based on your consent, you can withdraw it at any time. You also have the right to lodge a complaint with a data protection authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).
Changes
We may update this policy when our website or the law changes. The current version is always available on this page.