Introduction

Scope and applicability

This policy explains how personal data is collected, used, disclosed and retained by Olivorn in connection with its provision of sanatorium care for pensioners. The policy applies to residents, prospective residents, authorised representatives, family members, visitors and other persons whose personal data we process. The statements below describe categories of data processed, the purposes for processing, the lawful bases relied upon, recipients or categories of recipients, retention principles and the rights available to data subjects under applicable data protection laws.

Data Controller Information

Identity and contact details of the controller

Olivorn, operating in Switzerland as a provider of sanatorium care for pensioners, acts as the data controller for the processing described in this policy. For questions or to exercise data subject rights contact Olivorn at accounts@olivorny.com . Telephone contact: +41 78 750 35 68 . Business number: CHE-491.791.926 . Address details: Bahnhofstrasse 10, 8001 Zurich, Switzerland . The controller determines the purposes and means of processing and makes operational decisions about personal data handling.

Data We Collect

Categories of personal data processed

• Identification data: name, date of birth, personal identifiers and contact information.
• Health and care information: medical histories, care plans, treatment notes and other health-related data necessary for provision of care and coordination with health professionals.
• Administrative data: contractual and admission records, correspondence and scheduling information required to manage stays and services.
• Website and technical data: usage data, cookies and analytics related to interactions with our online services.

Purpose of Processing

Why we process personal data

Olivorn processes personal data to provide, manage and coordinate sanatorium care and related accommodation; to communicate with residents, families and authorised representatives; to comply with legal and regulatory obligations; to maintain records necessary for the delivery of clinical and administrative services; and to perform internal administrative functions such as quality reviews, internal reporting and management of admissions and scheduling. Processing may also be carried out for legitimate organisational purposes connected to operational management, health and wellbeing support, and legal compliance.

Legal Basis

Lawful bases for processing under applicable law

• Contractual necessity: processing necessary for the performance of agreements to provide care and accommodation.
• Legal obligations: processing required to comply with applicable Swiss law and regulatory duties.
• Consent: where required by law, processing of certain categories of data (including health-related data) is based on explicit consent given by the data subject or their authorised representative.
• Legitimate interests: limited processing carried out for legitimate organisational interests where such interests are not overridden by the rights and freedoms of data subjects.

Data Sharing and Transfers

Recipients and categories of recipients

Personal data may be disclosed to third parties where necessary for the provision of care, for administrative processing or where disclosure is required by law. Typical recipients include authorised healthcare professionals, service providers acting on our behalf for administrative purposes, emergency responders, and public authorities where required. Disclosures are limited to data elements necessary for the recipient’s purpose and are governed by appropriate contractual or legal arrangements.

Data Retention

Retention principles and criteria

• Personal data is retained only for as long as necessary to fulfil the purposes described in this policy, subject to statutory retention periods under Swiss law.
• Records relating to clinical care, admissions and other regulated matters are retained in accordance with legal and professional requirements.
• When personal data is no longer required, it will be deleted or rendered anonymous in a manner consistent with applicable law and internal retention policies.

Data Subject Rights (Access, Rectification, Erasure, Portability, Restriction, Objection)

How to exercise your rights

Data subjects have rights in relation to their personal data, including the right to request access to records, rectify inaccurate information, request erasure where applicable, receive a copy of personal data in a structured commonly used format (portability), request restriction of processing, and object to certain types of processing. Requests should be submitted to the contact points provided below. Responses to valid requests will be handled within timeframes required by law, subject to applicable exemptions and procedural steps to verify identity.

• Access: request a copy of personal data we hold.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion where retention is no longer lawful.
• Portability: request transfer of data in a structured format where applicable.
• Restriction: request limitation of processing activities in certain circumstances.
• Objection: object to processing based on legitimate interests or direct marketing where applicable.

Cookies & Tracking

Use of web technologies on our site

Our website uses cookies and similar technologies to support essential site functionality, to collect analytics that inform site performance and user experience, and to remember preferences. Where required by law, non-essential cookies are activated only with consent. Users may manage cookie preferences through available consent mechanisms or by adjusting browser settings, recognising that disabling certain cookies may affect site functionality.

Protective Measures

Technical and organisational measures

Olivorn implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Measures include access controls, encryption where appropriate, physical controls over premises, audit logging, staff training and contractual safeguards with third-party processors. These measures are reviewed periodically to align with operational requirements and legal obligations.

International Data Transfers

Transfers outside Switzerland

• Transfers of personal data outside Switzerland may occur where necessary for the purposes described in this policy.
• Where transfers occur, Olivorn relies on appropriate safeguards such as adequacy arrangements, contractual protections or other measures permitted by applicable law.

Supervisory Authority Contact

Right to lodge a complaint

• If you consider that your rights under applicable data protection law have been infringed, you may lodge a complaint with the competent supervisory authority in Switzerland or with another competent authority as permitted by law.

Changes to Policy

Updates and notification

This policy may be amended from time to time to reflect changes in our processing activities, legal requirements or organisational practices. Material changes will be published on our website and, where appropriate, notified to affected persons by email or other suitable means. The version published on the site is the authoritative public statement of our practices at the time of publication.