Data protection
Privacy policy
This policy describes how ClaimFlow 360 SA processes personal data according to the principles of the revised Swiss federal act on data protection and its implementing ordinance.
1. Controller
ClaimFlow 360 SA, Geneva, Switzerland. Any question about data protection can be sent to contact@claimflow360.com.
2. Data processed by this site
When you fill in the contact form, we process the data you send us: name, role, company, number of employees, canton, annual number of long term absence cases, browsing language, work email address, optional phone number and the content of your message. The technical server logs also record the IP address, the date and time of the request and the browser type, for security and availability reasons.
3. Purposes and legal bases
The form data is used solely to answer your request, to prepare a demonstration and, where applicable, to draw up an offer. The processing is based on your consent, given by ticking the box provided, and on our legitimate interest in answering the requests addressed to us. No data is used for behavioural advertising, nor resold.
4. Hosting and location
The database is hosted in Switzerland, in Zurich. Medical data is partitioned at database level, through row level security policies, and every consultation of a medical document is logged.
5. Processors
We use processors for hosting, for sending transactional emails and for technical monitoring. Each processor is bound by a contract imposing a level of protection equivalent to our own, limiting its action to our instructions and forbidding any use of the data for its own purposes. The current list of processors and their countries of establishment is provided on request. Where data is transferred to a state whose legislation does not ensure adequate protection, that transfer is covered by the protection clauses recognised by the Federal Commissioner.
6. Retention period
Contact requests are kept for twenty four months after the last exchange, then deleted. Technical logs are kept for twelve months. Legal retention obligations, in particular accounting ones, are reserved.
7. Your rights
You have a right of access, rectification and erasure of your data. You may also request the restriction of, or object to, a processing activity, withdraw your consent at any time and ask for your data to be handed over or transmitted in a common format. Send your request to contact@claimflow360.com. We answer within thirty days of receiving the request. We may ask you to prove your identity where that is necessary to avoid disclosing data to a third party.
8. Security
Access to the systems is logged and sessions can be terminated remotely. Technical and organisational measures protect the data against unauthorised access.
9. Cookies
The detail of the trackers in use is set out on the page about cookies.
10. Supervisory authority
You may lodge a report with the Federal Data Protection and Information Commissioner, in Bern.