Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data collected via this website is:

This Privacy Policy applies exclusively to the visit and use of the website auralinx.ch and the related processing of personal data.

2. Scope

This Policy applies to:

• Visitors to the website auralinx.ch
• Persons who use the contact form
• Persons who contact us by email

Not covered by this Policy:

Auralinx operates an AI phone assistant as a data processor for Swiss medical practices. The processing of patient data within this service is carried out on behalf of and under the responsibility of the respective medical practice. Patients requesting access, rectification or deletion of their data should contact their medical practice directly. The details of data processing within the phone assistant service are governed by a separate Data Processing Agreement (DPA) between the respective medical practice and Auralinx.

3. Applicable Law

The processing of your personal data is carried out in accordance with the revised Swiss Federal Act on Data Protection (revFADP / revDSG) and, where applicable, the General Data Protection Regulation of the European Union (GDPR).

4. Data We Process

4.1 Server Log Files

When you visit the website, our hosting provider automatically collects and temporarily stores the following technical data:

• IP address
• Date and time of access
• Pages and files accessed
• Referring website
• Browser and operating system used

This data is used exclusively for the secure operation of the website and is automatically deleted within 30 days.

4.2 Contact Form and Email

If you use the contact form on our website or contact us by email, we process the following data:

• Practice name
• Specialty
• Number of physicians
• Estimated call volume (optional)
• Contact name
• Phone number
• Email address
• Content of your message

We use this data exclusively to process your request and to contact you. We do not share this data with third parties, except for the data processors listed in Section 7, insofar as this is necessary for the provision of the website or our email service.

4.3 Cookies and Analytics

We use technically necessary cookies insofar as they are required to operate the website. No consent is needed for those.

Beyond that we use Google Analytics 4 and Google Ads conversion tracking, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These let us understand how the website is used and which adverts lead to an enquiry. The data recorded includes pages viewed, approximate location at city level, the device used, and events such as submitting the contact form. IP addresses are truncated (IP anonymisation).

These services load only after you have accepted in the cookie notice. If you decline, no Google script is loaded and no such cookie is set. The website works exactly the same either way. Your choice is stored locally in your browser; you can change it at any time by clearing this site’s data in your browser.

The legal basis is your consent (GDPR Art. 6(1)(a); revDSG Art. 31), which you may withdraw at any time with effect for the future. Google may also process data in the USA; such transfers rely on the European Commission’s Standard Contractual Clauses. Further information is available in Google’s privacy policy at policies.google.com/privacy.

For appointment booking we embed a booking form provided by our service provider. Opening that form transmits technically necessary data to their servers.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

• Legitimate interest in the secure and stable operation of the website (revFADP Art. 31; GDPR Art. 6(1)(f))
• Pre-contractual measures and contract initiation for requests via the contact form (revFADP Art. 31; GDPR Art. 6(1)(b))
• Compliance with statutory retention obligations (revFADP Art. 31; GDPR Art. 6(1)(c))

6. Retention Periods

• Server log files: maximum 30 days
• Requests via the contact form and by email: for the duration of processing your request plus statutory retention periods (typically up to 10 years under the Swiss Code of Obligations for business correspondence)
• Customer contract data: for the duration of the business relationship plus 10 years after termination

7. Data Processors and Cross-Border Data Transfers

We engage carefully selected service providers who support us in operating the website and our email communications. These service providers process data exclusively on our behalf and are contractually obliged to comply with data protection requirements.

7.1 Current Data Processors

Website hosting

• Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA (edge servers in the EU)

Domain registration (no personal data processing)

• IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany

Email services

• Google Ireland Limited (Google Workspace), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA)

7.2 Data Transfers to the United States

Vercel Inc. and Google LLC are based in the United States. A transfer of personal data to the United States can therefore not be excluded. Such transfers take place on the basis of the EU Standard Contractual Clauses (SCC) pursuant to Implementing Decision (EU) 2021/914 and additional safeguards provided by the respective providers, including certification under the EU-U.S. Data Privacy Framework.

You have the right to request a copy of the relevant safeguards. Please contact us at contact@auralinx.ch.

8. Your Rights

Under the revFADP and, where applicable, the GDPR, you have the following rights with regard to your personal data:

• Right to access the personal data we process about you
• Right to rectification of inaccurate data
• Right to erasure of your data, unless statutory retention obligations apply
• Right to restriction of processing
• Right to data portability (where the GDPR applies)
• Right to object to processing
• Right to withdraw consent with effect for the future

To exercise your rights, please contact us at contact@auralinx.ch.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

10. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. These include in particular:

• Encryption of data transmission using TLS (HTTPS)
• Access controls and authorisation management
• Regular review of our security measures
• Selection of service providers with recognised security standards

11. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time to adapt it to changes in the legal framework or to changes in our services. The current version is always available on our website. We will notify you separately of material changes.

12. Contact

For questions regarding data protection or to exercise your rights, please contact us at: