Privacy Policy
Last updated: April 2026
This policy explains how Ventve Mobile Screening GmbH ("Ventve", "we") processes personal data when you use ventve.ch, request a screening, or contact us about a company programme. It does not cover the clinical service itself: once a screening is performed, a separate patient information notice and informed consent apply.
1. Who is responsible
Ventve Mobile Screening GmbH, Zurich, Switzerland — privacy@ventve.ch.
We are the controller for the processing described here. For the clinical service, the treating physician and Ventve act as joint controllers for the medical record; you will receive the details before your appointment.
2. What we collect
| Category | Examples | When |
|---|---|---|
| Booking details | First and last name, email, phone, canton, package, preferred week | You submit the booking form |
| Company enquiry | Company name, size, sector, canton, objectives, frequency, participation, contribution level, contact name, email, phone, message | You submit the company form |
| Correspondence | Emails and messages you send us | You contact us |
| Technical data | IP address, browser type, requested page, timestamp | Every visit, in server logs |
We do not run analytics, advertising pixels or social plugins on this website, and we do not set marketing cookies. There is no profiling and no automated decision-making about you.
3. Health-related information
A booking request can reveal that you are interested in a cardiovascular screening. We treat that as sensitive information even before any examination. On this website we ask for the package and the canton, not for diagnoses, medication or findings.
Clinical data — examination results, images, reports — is collected only when a screening is performed, under a separate notice and with your explicit consent. It is stored in the clinical portal, not on this website.
4. Why we process it, and on what basis
- To handle your booking request (pre-contractual steps, art. 6(2)(b) nFADP): name, contact details,
package, preferred week, canton.
- To answer company enquiries (pre-contractual steps): the data you enter in the form.
- To operate and secure the website (legitimate interest, art. 6(1)(f)): technical logs, abuse prevention.
- To send you service updates you asked for (consent, art. 6(1)(a)): only if you ticked the box. You can
withdraw at any time by writing to privacy@ventve.ch; withdrawal does not affect processing already carried out.
We do not sell personal data and we do not use it for advertising.
5. Who receives it
| Recipient | Role | Country |
|---|---|---|
| Vercel Inc. | Hosting and the serverless function that receives forms | United States |
| Mueslimail | Mailbox provider that receives form submissions | Germany (EU) |
| Brevo | Fallback email delivery, only if the primary provider fails | France (EU) |
| Infomaniak | Mailboxes on ventve.com | Switzerland |
| Physicians, MTRA, laboratory, imaging archive | Clinical service only, under separate contracts | Switzerland / EU |
All providers act on our instructions under art. 9 nFADP. We disclose data to authorities only where the law requires it.
6. Transfers abroad
Our hosting provider is established in the United States. Form submissions therefore transit through, and may be stored on, infrastructure located outside Switzerland and the EU. We rely on the safeguards our provider offers (standard contractual clauses and, where applicable, its certification under the EU–US Data Privacy Framework) and we keep the data in the form to the minimum needed to contact you.
We tell you this plainly because a US provider is, in principle, subject to US disclosure requests. If you prefer not to have your request processed this way, write to privacy@ventve.ch and we will take your booking by email or telephone instead.
7. How long we keep it
| Data | Retention |
|---|---|
| Booking request without a concluded contract | 12 months, then deleted |
| Company enquiry | 24 months from the last contact |
| Correspondence | 24 months |
| Server logs | 90 days |
| Clinical records | Governed by medical record-keeping duties (10 years), separate notice |
8. Security
We protect data with transport encryption (TLS), access restricted to the people who need it, separate credentials per service, logging of administrative actions, pseudonymised identifiers in the clinical portal, and a rule that aggregate HR reporting is only produced for groups of at least ten participants. No system is perfect; if a breach is likely to result in a high risk to you, we notify you and the Federal Data Protection and Information Commissioner (FDPIC) as required by art. 24 nFADP.
9. Your rights
You may ask for access, correction, deletion, restriction, and portability of your data, and object to processing based on legitimate interest. Write to privacy@ventve.ch; we answer within 30 days. You may also complain to the FDPIC (www.edoeb.admin.ch).
Deletion may be limited where the law requires us to keep records — for example medical documentation or accounting records.
10. Children
The website and the screening service are intended for adults. We do not knowingly collect data from persons under 18. If you believe a minor has submitted data, write to us and we will delete it.
11. Changes
If we change this policy, we update the date above and, for material changes, tell you by email if we have your address. The version published here is the one that applies.
12. Contact
Ventve Mobile Screening GmbH, Zurich — privacy@ventve.ch.