Privacy policy

Data controller

Personal data in the MyEqwal patient area is processed under the responsibility of Orthoconcept SA, Av. Beauregard 9, 1700 Fribourg, Switzerland. Contact: info@orthoconcept.ch.

Data processed and purposes

The patient space is only accessible by invitation from your practitioner. The data processed (identity, contact details, information about your device, journal and reports) is used solely to support your device follow-up and communication with the practitioners who support you. Your record can be consulted by practitioners across the Eqwal network, not only by your referring practitioner; every consultation by a practitioner who is not your referring practitioner is recorded.

No data is used or sold for commercial purposes. To run the service, some data is entrusted to contractually bound processors: the host of the application and the database, the provider storing your documents, and the providers delivering emails and text messages. Notifications sent to your browser travel through its own notification service, which does not see their content.

For the security of your account, each login records the device used, its operating system, browser, the country of connection, the IP address and the date. This information is used to detect unusual access and warn you about it. You can view your trusted devices and revoke any of them from your profile at any time.

Legal basis and consent

Processing is based on the Swiss Federal Act on Data Protection (FADP). Your consent to the processing of health data is collected on your first access to the space and can be withdrawn at any time via your practitioner.

Hosting and security

Data is hosted exclusively in Switzerland. Technical and organisational measures (encryption, access control, logging) protect your data. The emails and text messages we send you never repeat the content of your record; their subject line may, however, indicate that a device is due for renewal or that a document has been filed.

Retention periods

The data in your care record is retained for the duration of your follow-up, then for twenty years from the last activity recorded on that record. At that point it is anonymised: it no longer identifies you.

Login data (device, operating system, browser, country, IP address and date) is retained for 90 days, then automatically deleted by a scheduled task.

A notification subscription whose browser has not checked in for one year is deleted automatically.

The record of who has opened your file — which professional, and on which day — is retained for twenty years.

The log of changes made to your data is retained for three years.

The copy of your data you request from your space stays available for seven days, after which the file is deleted. You can request a new one at any time.

Your rights

You have the right to access, rectify, erase and object to the processing of your data. You exercise your right of access directly from your space, on the “My profile” page: you request a copy of your data there and download it once it is ready. For the other rights, contact your prosthetist. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).