Data privacy policy
A About us
Meeting Kitchen GmbH (www.meeting-kitchen.com; hereinafter referred to as "Meeting Kitchen" or "we") is a Swiss company, that develops and markets solutions and online tools for structuring joint decision-making processes.
B The application 'EverAsk'
'EverAsk' is a Web application – which means it is not a mobile app, but rather a website. EverAsk supports you as a patient in preparing, conducting and following-up on consultations with doctors. Using this application you are able to formulate and record your goals, topics and questions with regard to an upcoming doctor’s consultation. These are all summarised on a “cheat sheet”.
'EverAsk' has been developed on behalf of KPT Health Insurance (www.kpt.ch) by Meeting Kitchen GmbH.
C Transmission and storage of data
All the data you transmit will be transferred using "hypertext transfer protocol secure" (HTTPS). This guarantees confidentiality and integrity in technical communication between the server we use and the Web browser you use (e.g., on your smartphone).
The data is stored on a server rented by Meeting Kitchen from the Swiss company Hostpoint AG (www.hostpoint.ch; hereinafter "Hostpoint" or "Hoster").
Our relationship to Hostpoint is regulated by the Vereinbarung zur Auftragsdatenvereinbarung (Agreement on Contracted Data Processing) of May 2018, which is published on the Hostpoint website. The subject of this agreement is in particular to ensure data security in accordance with European (EU GDPR) and Swiss (DSG) legislation.
D Collection of personal data
No registration is required to use ‘EverAsk’. Using the application works without entering any personal data.
All topics, goals and questions, which you record in 'EverAsk' and which are summarised in your cheat sheet, remain anonymous. When formulating your topics, goals and questions, please do not name any people to ensure this anonymity remains guaranteed.
KPT is not made aware of your topics, goals and questions.
E Data storage
Your topics, goals and questions, which are summarised in the cheat sheet, will be stored on a server.
Your entries will be deleted automatically and irrevocably 24 hours after you close ‘EverAsk’.
If you interrupt your use of ‘EverAsk’, but wish to complete your entries later, you can download and save a digital ‘Access Key’ and/or a ‘Reminder’ to your device. Your topics, goals and questions will then remain available to you on the server until you delete the consultation when closing ‘EverAsk’. From this point in time all your entries are deleted irrevocably and can no longer be viewed by anyone. However, see below: Evaluation.
F Evaluation
In ‘EverAsk ’you will find examples of questions, topics and goals which you could be inspired by.
We would like to regularly check, expand and continually improve these examples. In addition, we would like to be able to make the topics, goals and questions, which are recorded with and in ‘EverAsk’ available to research institutions that deal with doctor-patient communication.
After you have used ‘EverAsk’ and subject to your consent, the questions, topics and goals you have entered will still be stored on the server – even if you delete the consultation when you close ‘EverAsk’. In this case deleting the consultation means that only authorised persons at Meeting Kitchen and selected academic institutions will have access to the data.
You can refuse consent for the long-term use of your data and still use ‘EverAsk’.
G Storage of other data
When you use 'EverAsk', we or the Hoster, automatically receive technical information, such as the type of mobile device you are using, a specific device identifier (for example, the IMEI number of your device, the MAC address of your device's wireless network interface, or the mobile phone number used by the device), mobile network information, your mobile operating system and software version number, IP address, type of mobile browser you are using, country and language code, and time zone settings.
Such data is processed exclusively with the aim of enabling you to use ‘EverAsk’.
Further, we record information related to your use of ‘EverAsk’, such as protocol and administrative data, so that we or the Hoster can guarantee smooth operation of the application.
The data processing processes carried out in this respect are thus in our legitimate interest to ensure you get the best benefit.
H Cookies
No cookies are used.
I Your rights as a user
Right to confirmation
Every data subject has the right to request confirmation from us whether personal data pertaining to data subjects is being processed. If you would like to make use of this right to confirmation, you can contact the data privacy officer at any time with such a request.
Right to information
Every data subject affected by processing of personal data has the right to receive free of charge from us information about the personal data stored and to receive a copy of this information. Furthermore, information about the following topics can be given, if necessary:
- Purpose of processing
- Categories of personal data being processed
- The recipients to whom the personal data has been or will be disclosed
- If possible, the envisaged duration for which the personal data will be stored, or if this is not possible, the criteria for determining this duration
- The existence of a right to rectification or erasure of the personal data pertaining to them or to restriction of processing by those responsible or a right to object to this processing
- The existence of a right to lodge a complaint with a supervisory authority
- If the personal data is not collected from the data subject: All available information about the origin of the data
Furthermore, the data subject has a right to information about whether personal data has been transferred to a third country or an international organisation. If this is the case, the data subject also has the right to receive information about appropriate guarantees in connection with the transfer.
If you would like to make use of this right to information, you can contact our data privacy officer at any time with such a request.
Right to rectification
Every data subject affected by processing of personal data has the right to request immediate rectification of inaccurate personal data pertaining to him or her. Furthermore, the data subject has the right, while taking into consideration the purpose of processing, to request completion of the incomplete personal data - also by means of a supplementary declaration.
If you would like to make use of this right to rectification, you can contact our data privacy officer at any time with such a request.
Right to erasure (right to be forgotten)
Any data subject affected by processing of personal data has the right to request from us that his or her personal data be deleted without undue delay provided one of the following reasons applies and insofar as the processing is not necessary:
- The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- The data subject revokes his or her consent, on which processing was based, and there is no other legal ground for processing the data.
- The data subject lodges an objection to the processing on grounds relating to his or her particular situation and there are no overriding legitimate grounds for processing, or the data subject objects to the processing in the event of direct marketing and related profiling.
- The personal data was processed unlawfully.
- The personal data was collected in connection with an information society service offered directly to a child.
Provided one of the grounds mentioned above applies and you would like to have erased the personal data stored with us or the Hoster, you can contact our data privacy officer at any time with such a request. The data privacy officer will promptly ensure that the request for erasure is complied with.
Right to restriction of processing
Any data subject affected by processing of personal data has the right to request restricted processing of data, provided one of the following conditions applies:
- The data subject disputes the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
- The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
- The officer no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- The data subject lodges an objection to the processing on grounds relating to his or her particular situation pending verification of whether the legitimate grounds of the officer override those of the data subject.
Provided one of the conditions mentioned above applies and you would like to request that the processing of the personal data stored with the operator of this website be restricted, you can contact our data privacy officer at any time with such a request. The data privacy officer will arrange the restriction of processing.
Right to data portability
Any data subject has the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format. The data subject also has the right to transmit this data to another officer if the legal conditions are fulfilled.
Furthermore, the data subject has the right to cause the personal data to be transmitted from one officer to another officer, provided this is technically possible and insofar as this does not adversely affect the rights and freedoms of others.
To assert this right you can contact our data privacy officer at any time.
Right to object
Any data subject affected by processing of personal data has the right to object to the processing of his or her personal data at any time on grounds relating to his or her particular situation.
We will no longer process the personal data in the case of an objection unless we can demonstrate compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or if processing serves to establish, exercise or defend against legal claims.
To exercise this right to object you can contact our data privacy officer at any time.
Right to revoke consent under data protection law
Any data subject affected by processing of personal data has the right to revoke consent for the processing of personal data at any time.
If you wish to assert your right to revoke consent, you can contact our data privacy officer at any time.
J Responsibility for the processing of the data
The responsibility for the processing of your personal data lies with
Meeting Kitchen GmbH
c/o LLK Treuhand
Lange Gasse 4
4052 Basel
Switzerland
Phone +41 (0)78 319 1404
Please send any questions you may have on the topic of data privacy to this address:
dataprotection@meeting-kitchen.com
Source
Paragraph J (Your rights as a user) largely corresponds to the template of SwissAnwalt.
Version: 07.06.2022