Legal

Privacy Policy

This page is a translation. The German version is legally binding.

This policy describes what data arises when you visit this website, what we use it for and what rights you have. It applies to the website. Medical confidentiality and the agreements you make with the clinic apply to the treatment itself; patient data from treatment is not processed here.

Controller

Seegarten Klinik AG, Seestrasse 155A, 8802 Kilchberg, Switzerland. For questions about data protection, you can reach us using the details on the contact page and in the legal notice.

What arises when a page is called up

Like every web server, ours records that a page has been called up. This involves: your IP address, the date and time, the address called up, the previously visited page if your browser transmits it, and information about your browser and operating system. These entries serve the operation and security of the website, for example to detect faults and attacks, and are not combined with other data.

Retention: these entries are deleted after 14 days.

Audience measurement with Matomo

We want to know which pages are read and where visitors get stuck. For this we use Matomo, audience measurement software that we run on our own server at mdata.sgkswiss.ch. The data therefore stays with us and is not passed on to anyone; it is not transferred abroad.

We have configured Matomo so that it sets no cookies. It records the page called up, the previously visited page, approximate location, browser and screen size, and the time spent on the page. The IP address is used for assignment but is not stored permanently in plain text.

You can object to the measurement without having to write to us: if your browser sends the "Do Not Track" signal, we do not count your visit. You will find the setting in your browser's privacy settings, if it offers it. Not all browsers still do. If you would rather object explicitly, write to us via the contact page; we will record your objection and confirm it to you.

Cookies and browser storage

The public pages of this website set no cookies, neither their own nor third-party ones. They therefore need no consent banner. The only exception is the intranet for our staff, see below.

We store in your browser whether you have chosen the light or dark view. This value is called "sgk-theme", stays on your device and is never transmitted to us. You can delete it at any time in your browser settings; the website then works as before and shows the default view again.

When you fill in a form, your browser saves your answers so far ("sgk-zwischenspeicher") so that you can carry on later. This saved copy also stays on your device and is not transmitted to us; only what you send reaches us. It is deleted once you have sent the form, and it expires after 90 days. You can delete it at any time with "Delete saved answers" in the form or in your browser settings. If other people use your device, they can see the saved copy until it is deleted.

Forms

The website has several forms. What you enter there is sent to the clinic by e-mail and also logged on our server so that no request is lost. We use the information solely to deal with your request and do not pass it on.

  • Information and appointment request: name, date of birth, address, e-mail, telephone, whether you are a new or existing patient, the consultation or specialist you would like, your preferred way of being contacted, how you will send your records, and your message.
  • Registration for an SGK Academy talk: first name, surname, e-mail, telephone, your occupation, the number of participants and your message. This is used to create the attendance list for the talk, which contains the number, surname, first name, e-mail address and occupation. We no longer need it after the talk.
  • ME/CFS registration: your answers to the questions on the form. They contain information about your health and are treated with corresponding confidentiality.
  • Questionnaire "Canadian Criteria and Bell Score": the symptoms you have ticked, the Bell Score level you selected, the resulting evaluation, and your name, date of birth and e-mail address. This is also information about your health.
  • Health Questionnaire: your answers to the questions, your comments on them, your sex, first name, surname, date of birth, e-mail address and your remarks. This is also information about your health.
  • 10-minute standing test: date, time and your age, the blood pressure and pulse readings, whether you stopped the test early, the symptoms that occurred while standing, the medication taken on the day of the test, the resulting evaluation, and your first name, surname, date of birth, e-mail address and your remarks. This is also information about your health.
  • Questionnaire "Assessments to date": your answers on diagnoses already made, on work, disability insurance and daily life, on illnesses in your family, on medicines and intolerances and on previous investigations in each area, your comments on them, and your first name, surname, date of birth and e-mail address. This is also information about your health.
  • Questionnaire "Treatments to date": which medicines and treatments you have used and what effect they had, your comments on them, and your first name, surname, date of birth and e-mail address. This is also information about your health.
  • MCAS questionnaire: your answers on symptoms, triggers, findings, related conditions and previous treatment, the resulting evaluation, and your first name, surname, date of birth, e-mail address and your remarks. This is also information about your health.
  • Fibromyalgia questionnaire: the sites where you had pain, your answers on exhaustion, sleep, concentration, further symptoms and duration, the resulting evaluation, and your first name, surname, date of birth, e-mail address and your remarks. This is also information about your health.
  • Self-test of the obesity consultation (form in German): whether you are of age, your height and weight, your answers on related conditions, operations and medication, the resulting evaluation, and your first name, surname, date of birth, e-mail address and your remarks. This is also information about your health.
  • Consent to having your records analysed with AI: first name, surname, date of birth, e-mail address and the wording of your consent.
  • Personal details: first name, surname, date of birth, address, telephone and e-mail address, nationality, profession, marital status and gender, your details on insurance, family doctor and referral, how you became aware of us, and your signature if you sign on screen.
  • Newsletter: e-mail address and, if you wish, your name for the greeting.

With the questionnaires "Canadian Criteria and Bell Score" and "Health Questionnaire", nothing is transmitted while you are only filling them in: the evaluation is calculated by your own browser on your device. Your answers are only sent to us when you click "Send to the clinic". You can print the result instead, in which case we learn nothing about it. Your answers are only saved on your device (see "Cookies and browser storage").

The same applies to the 10-minute standing test, to the questionnaires "Assessments to date" and "Treatments to date", to the MCAS questionnaire and to the self-test of the obesity consultation: the evaluation and the preview are produced in your browser, and nothing is transmitted until you click "An die Klinik senden" (send to the clinic).

The B-score calculator on the “Osteoporosis Advice” page is different: it calculates on our server. The figures you enter there (bone density, body weight, year of the measurement, manufacturer of the scanner) and the result are stored for statistical evaluation, without your name, without your IP address and without your browser identifier. It is therefore not possible to identify you.

The same applies to the “Mitochondrial Activity” calculator on the “Mitochondria” page: it calculates on our server. The values you enter there (cTCO₂, cSO₂, lactate) and the result are stored for statistical evaluation, without your name, without your IP address and without your browser identifier.

The log on our server contains the information from the form and a note of whether delivery succeeded. Your IP address and browser identifier are not recorded there.

Records for preliminary review: if you send us medical records using the form “Submit your records”, your details and the files are transmitted to Seegarten Klinik as an e-mail. The files are not stored on the website’s server; the form log contains only your personal details and the names of the files. We use the records for the preliminary review and, if you become a patient, for your medical record. If no treatment follows, we delete them after six months.

For SGK Academy talks there is a second record: a list for each talk, from which we create the attendance list. If you cancel your registration, you are removed from the list. Both records are kept on our server in an area that cannot be reached via the internet.

Retention: we delete the log on our server after six months. Anything that is added to your medical record, such as the Health Questionnaire, is kept, like the rest of your medical record, for 20 years after your last treatment. For the newsletter: you can unsubscribe at any time, after which we delete your address.

Comments

You can write a comment below some pages. For this we store the name or pseudonym you enter, your text, the language of the page and the time, but no e-mail address and no IP address. The comment is sent to the clinic by e-mail and appears only once we have approved it. It is then visible, with the name or pseudonym, to everyone who visits the page.

Comments that we do not publish are deleted. We will delete a published comment at your request; write to office@sgk.swiss and give the page, the name and the date. If you write about your health in a comment, you are making this information public yourself. Please therefore choose a pseudonym and do not mention anything by which you could be identified.

Intranet for staff

Under /intranet there is a protected area for the clinic's staff with internal working instructions. No patient data is processed there. Accounts are issued by the clinic with a name and password. For each account we store the name, role and the time of the last login, and the password only as an irreversible hash.

Only after login does the intranet set a cookie called "sgk_intranet". It is technically necessary to keep you logged in, applies only to the intranet and ends when you log out, after 60 minutes without activity, or at the latest after 12 hours. To protect against attacks, we count failed logins per name and per IP address, both only as a hash, and delete these counters after 24 hours. So that we can resolve login problems, we record the time, account and reason of every failed login for 30 days, never the password entered; for an unknown name only its beginning.

Every login and logout in the intranet, including automatic ones, is recorded with the time, name, role and duration of the session, without IP address and without browser details. The log serves the security of the intranet and accountability. Only the clinic's administration can view it. We delete it after 12 months.

Anyone authorised to approve working instructions signs the approval by hand on the screen in the intranet. For this we store the name, e-mail address, time, the signature as an image and the approved working instructions. This information is our evidence for the supervisory authority and is therefore kept even after someone stops working with us.

Anyone who changes a working instruction in the intranet is recorded with their name and the time of the change. Every version is kept as evidence, even after someone stops working with us.

When staff confirm that they have read a working instruction, we store the account (for the shared account, the name entered), the version and the time. This is the record of their training.

When staff fill in a checklist, a control sheet or a tick list in the intranet, we store the entries with their name and the time as evidence for the supervisory authority.

We also keep the minutes of our internal meetings in the intranet. They contain the names of the participants and of the people assigned tasks. We also record who created, changed, approved, supplemented or confirmed reading a set of minutes, and when. Patient data does not belong in these minutes. The minutes are kept as a record of decisions, even after someone stops working with us.

The data is kept on our server in an area that cannot be reached over the internet. When someone stops working with us, we block and delete their account.

No third-party content

This website does not load anything from third-party providers. The fonts are on our own server, and there are no embedded maps, no videos and no social media buttons. If you follow a link to another website, that website's privacy policy applies from then on. We have no influence over it.

Your rights

You have the right to request information about the data we process about you, to have incorrect data corrected, to request its deletion and to object to its processing. Please contact office@sgk.swiss.

You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

Changes

We will adapt this policy if anything changes on the website that affects it. The version published on this website applies. Last updated: 24 October 2026.

Questions about data protection

Contact us at office@sgk.swiss or +41 44 716 48 48. Details of who operates the website can be found in the legal notice.