Privacy policy for the SCQM patient registry and the Online Reporting Dashboard

This is a translation of the original document in German. In case of conflict, the German version shall prevail.

Version 1.0 – 14.11.2024

SCQM protects the data provided by the user by means of suitable technical and organisational measures and treats (obtains, processes and uses) it carefully in accordance with Swiss data protection law (in particular the Federal Act on Data Protection, "FADP", Ordinance to the Federal Act on Data Protection, "OFADP") and medical professional secrecy in accordance with Art. 321 of the Swiss Criminal Code.

Each time the patient register is accessed, a range of general data and information is collected. This general data and information is stored in the server log files. The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the date and time of access to the patient register, (4) an internet protocol address (IP address), (5) the internet service provider of the accessing system and (6) other similar data and information used for security purposes in the event of attacks on our IT infrastructure.

This data and information is required to (1) correctly display the content of the patient registry, (2) optimise the content of the patient registry, (3) ensure the long-term functionality of the patient registry with regard to the IT infrastructure and technology and (4) provide law enforcement authorities with the necessary information in the event of a cyberattack.

Personal data is stored exclusively in data centres in Switzerland or in countries with at least the same level of data protection legislation (e.g. Germany) and is deleted at the latest after expiry of the statutory retention period. Caution: Register data will only be deleted if the user (data subject) revokes their consent; more information on this can be found in the declaration of consent.

In order to offer the user the best possible service, technical analysis tools are used. For this purpose, SCQM may compare such data in anonymised form with information from third parties or compile statistics and share these statistics with third parties.

Newsletter for users in healthcare institutions

After successful registration on the patient registry, the newsletter is automatically subscribed to in order to inform the user about important changes/adjustments to the patient registry and information about SCQM. Data provided by the user, in particular their email address and name, can be used for the regular dispatch of our newsletter. The newsletter is sent either directly via the patient registry or via a specialised company. The user can unsubscribe from the newsletter at any time (via the link in the newsletter footer). The personal data remains with SCQM and, if necessary, with the company commissioned to send the newsletter.