Privacy policy

1. Data Controller

The controller responsible for processing personal data on findmydoc.ch is RC REPRESENT CONSULTING GmbH, Kappelenring 26B, 3032 Hinterkappelen, Switzerland (contact@represent.ch). This policy is based on the Swiss Federal Act on Data Protection (FADP).

2. What Data We Process

Classification in the conversation: What you type in the conversation (such as symptoms, duration, place or postcode, treatment language, insurance model) is sent in encrypted form to our server. From there, the conversation is passed, without your IP address or any other identifier, to an AI service from Infomaniak in Switzerland, which determines the relevant specialty; we then search for suitable practices. We do not store or log these texts. Under its contractual terms, Infomaniak keeps them only for the duration of processing and does not use them to train AI models. If the service is unavailable, a rule-based evaluation on our own server carries out the classification. Health data is particularly sensitive personal data: do not include names, contact details or information about other people in the conversation — the classification does not need them.

Preparation questions, photos and report: Your answers to the questions asked after the recommendation, attached photos and documents, and the report do not leave your device. They are neither sent to our server nor stored in your browser. The report is created in your browser and printed or saved as a PDF using its print function; you keep the copy yourself. If you close the page, the answers are gone.

Searches: Specialty, place and search terms (for example in the practice or medicine search) are sent to our server to deliver results and are not stored. They appear in the address of the page you open and therefore in your browser history; use a private window if needed. Images in package leaflets are fetched by our server from Refdata without passing on any information about you.

Technical data: When you visit the website, our server processes your IP address to the extent technically necessary and holds it only in working memory to prevent abuse (limiting requests per address). We do not keep an access log. The server's error logs contain none of your entries.

Usage statistics: We count per day how often certain steps occur (e.g. “report printed” or which specialty was recommended) — without content, without IP addresses and without any link to a person.

Practice directory: The directory contains information about medical practices such as the practice name (often the name of the doctor), address, phone number, email address and website where published, languages, and public information on whether new patients are accepted and on available appointments. The sources are OpenStreetMap, the practices' websites and public appointment information on OneDoc; a nightly update reads these public pages and keeps the source as evidence. The purpose is to make it easier to find a suitable practice. Doctors and practices can object at any time, have their listing removed or request corrections.

Requests to us: We process information from the form for removing a practice listing and emails sent to us only to deal with the request. For existing accounts in the internal area for practices, we process contact and profile data (login via email link, no passwords); to prevent abuse, the email address and IP address are briefly held in a counter. No new accounts are currently being opened.

3. Purposes and Legal Basis

We process personal data to provide the platform's functions (classification, preparation questions, practice and medicine search), for security and troubleshooting, and to further develop our services. You provide the information in the conversation voluntarily in order to use these functions. The practice directory is based on patients' overriding interest in finding a practice and on publicly available information. The classification is an automated orientation aid without legal effect; it does not replace a medical assessment. FindMyDoc is non-commercial: we do not create profiles, use no tracking or advertising, and do not sell personal data.

4. Data Processors and Disclosure Abroad

We use Infomaniak Network SA, Geneva, as a data processor: for operating the servers, the AI service for classification, sending emails and encrypted data backup (Swiss Backup). A further encrypted backup copy is kept on our own server in Switzerland. All processing takes place in Switzerland; no personal data is disclosed abroad. There are no other recipients; in particular, we do not pass any conversation content to practices, insurers or other third parties.

5. Cookies and Browser Storage

FindMyDoc does not use tracking or marketing cookies. We only set technically necessary cookies: the language you chose (one year) and the login to the internal area for practices. In your browser's storage we only record whether you have dismissed a notice and whether you visited the emergency page during this session (deleted when you close the window). We do not store any conversation content there.

6. Retention

We do not retain any content from the conversation or the report. The server's error logs are limited in size and continuously overwritten. Requests to remove a practice listing and emails are kept as long as necessary for handling them and as evidence. The database (practice directory and practice accounts) is backed up daily in encrypted form; backup copies are deleted after 14 days (locally), 30 days (second server) or at the latest after 12 months (Swiss Backup). Data from the discontinued appointment request function has been deleted, including the backup copies that contained it. We log search engine crawler requests without IP addresses (only the address, status code and time) in order to check findability; we do not log visitors' requests.

7. Data Security

The connection to the website is encrypted (HTTPS). Backup copies are stored in encrypted form, and access to the servers is restricted to the operator. No transmission over the internet can guarantee absolute security.

8. Your Rights

Under the FADP, you have the right to access, rectify and delete your personal data, the right to data portability and the right to object to processing. Please contact contact@represent.ch; to protect your data, we may ask for proof of your identity. Since we do not store conversation content, there is no data about it on which we could provide information. Practices can have their directory listing removed at any time. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

9. Changes

We update this policy when the platform changes, particularly during the beta phase. The version published here applies at any given time.