Last updated: August 2026

​

1. Scope

This Privacy Notice explains how heyPatient AG processes personal data in connection with the operation and use of the website www.heypatient.com.

​

Separate privacy notices may apply to the heyPatient App, the heyPatient Patient Experience Platform, and other products and services.

​

​

2. Data controller

The controller responsible for processing personal data is:

​

heyPatient AG
Technoparkstrasse 2
8406 Winterthur
Switzerland

​

Email for privacy-related inquiries: dpo@heypatient.com

​

​

3. Legal bases and purposes of processing

We process personal data in accordance with the Swiss Federal Act on Data Protection.

 

Where the European Union General Data Protection Regulation applies, we process personal data in particular:

​

• to provide, secure, and improve our website;

• to respond to inquiries;

• to take steps before entering into a contract or to perform a contract;

• based on your consent, for example for newsletters or certain cookies;

• to comply with legal obligations;

• to pursue legitimate interests, particularly in operating a secure, user-friendly, and commercially viable website.

​

​

4. Website operation

Our technology development is focused on the heyPatient Patient Experience Platform. We therefore use the established website platform provided by Wix.com Ltd., Israel, to build and operate this website.

 

When you visit our website, the following data may be processed:

​

• IP address;

• date and time of access;

• pages and content accessed;

• browser, operating system, and device type;

• referring website and technical identifiers;

• interactions with the website;

• error, security, and log data.

 

This data is used to provide the website, ensure security, analyze technical issues, and generate usage statistics.

​

Wix may use affiliated companies and subprocessors in different countries. Further information is available in the Wix Privacy Policy and the Wix Data Processing Agreement.

​

​

5. Wix Analytics

We use the analytics features integrated into Wix to understand how our website is used and to improve our content and services. This may include analyzing page views, visit duration, traffic sources, approximate location, device type, and interactions.

​

Where possible, data is analyzed in aggregated or pseudonymized form. Non-essential analytics functions are used according to the preferences selected through the cookie banner.

​

We currently do not use Google Analytics or active Google Ads tracking. However, our public website may be indexed by search engines such as Google and displayed in search results.

​

​

6. Cookies and similar technologies

Our website uses cookies and similar technologies. Some cookies are technically necessary to ensure that the website operates securely and correctly. Others may be used for analytics, external content, or marketing purposes.

​

When you first visit the website, you can manage your preferences through the cookie banner. Non-essential cookies are used according to your selection. You can change your preferences at any time through the cookie settings.

​

Blocking certain cookies may result in some website features being unavailable or functioning only to a limited extent.

​

​

7. Contact forms

If you contact us through a contact form, we process the information you provide, which may include:

​

• name;

• email address;

• telephone number;

• organization;

• role or position;

• content of your message;

• technical information related to the submission.

 

We use this data to process your inquiry, respond to follow-up questions, and initiate or manage a business relationship.

Please do not submit health information, medical documents, insurance numbers, identity documents, or other confidential patient information through our general website forms.

​

​

8. AI-powered website chat

We use Wix Smart Chat on this website. The AI-powered chat is intended to provide automated answers to general questions about heyPatient.

​

When you use the chat, your messages, technical usage data, and any contact information you voluntarily provide may be processed. This processing is necessary to conduct the conversation, respond to your inquiry, operate the chat securely, and, if requested, enable our team to contact you.

​

Chat conversations may be stored in the Wix Inbox and viewed by authorized heyPatient AG team members. Wix may use additional service providers and subprocessors to provide its AI-powered services.

​

Please do not enter health information, laboratory results, medical documents, insurance numbers, identity information, or other confidential personal data into the chat. The website chat does not perform medical assessments and does not provide individual diagnoses, treatment recommendations, or therapy recommendations.

​

AI-generated answers may be incomplete or incorrect. Please verify important information before relying on it.

The website chat does not make automated decisions that have legal or similarly significant effects on individuals.

​

​

9. Mailchimp newsletter

We use Mailchimp to distribute our newsletter. Mailchimp is a service provided by The Rocket Science Group LLC in the United States and is part of the Intuit group.

​

If you subscribe to our newsletter, we process your email address and any additional information you voluntarily provide. This data is used to distribute the newsletter and, where enabled, to analyze delivery, email opens, and clicked links.

​

You can withdraw your consent at any time by using the unsubscribe link included in each newsletter. Your email address will then be removed from the active mailing list. Limited storage may remain necessary to document your withdrawal and prevent further mailings.

​

Mailchimp may process data in the United States and other countries. Data processing is governed by the Mailchimp Data Processing Addendum and the safeguards described therein.

​

​

10. Appointment scheduling with Microsoft Bookings

We use Microsoft Bookings to schedule appointments. When you book an appointment, the following data may be processed:

​

• name;

• email address and telephone number;

• organization;

• selected appointment;

• information you voluntarily provide;

• technical usage data.

 

This information is used to schedule, confirm, conduct, and, where appropriate, follow up on the appointment.

Please do not enter health information or confidential patient information when scheduling an appointment.

 

Microsoft may process data in different countries as part of providing its services.

​

​

11. Shop, orders, and payments

Selected products or services may be ordered through the Wix Store on our website. A customer account is not required.

​

In connection with an order, we may process:

​

• name and contact information;

• billing and delivery address;

• products or services ordered;

• order value and transaction information;

• selected payment method;

• communications required to process the order.

 

Payments are processed by the payment providers offered during checkout. Information required for payment is transmitted directly to the selected payment provider. The provider’s privacy policy also applies, depending on the payment method selected.

​

Complete payment card or bank account details are generally processed directly by the payment provider. We receive the transaction information required to confirm and process the order.

​

Order and accounting information may be retained for up to ten years where required by statutory documentation and retention obligations.

​

​

12. Links to social networks

Our website may contain links to our social media profiles or to individual posts on Instagram and Facebook.

​

Simply visiting our website does not result in data being transferred to the operators of these platforms. Data may only be transferred after you click the respective link and leave our website. From that point onward, the privacy policies of the respective platform operator apply.

​

​

13. Recipients and service providers

We disclose personal data only where necessary for the purposes described in this Privacy Notice, where required by law, or where you have provided your consent.

​

Potential recipients include:

​

• Wix and its subprocessors;

• Mailchimp;

• Microsoft;

• payment providers;

• IT, hosting, communication, and support providers;

• public authorities where disclosure is required by law.

 

Service providers receive only the data required to perform their respective tasks.

​

​

14. International data transfers

Some of our service providers process personal data outside Switzerland or the European Economic Area.

​

Where data is transferred to a country that has not been recognized as providing an adequate level of data protection, we use appropriate contractual safeguards where required, particularly recognized standard contractual clauses.

 

Where permitted by law, a transfer may also be based on your consent, contractual necessity, or another statutory exception.

​

​

15. Data retention

We retain personal data only for as long as necessary for the respective processing purpose or where legal, contractual, or technical reasons require continued retention.

​

The following criteria apply in particular:

​

• Contact and chat inquiries are retained for as long as necessary to process the inquiry and conduct appropriate business-related follow-up communication.

• Newsletter data is processed until you unsubscribe or withdraw your consent.

• Appointment information is retained according to the requirements of appointment organization and follow-up.

• Order and accounting records may be retained for up to ten years where required by law.

• The retention of technical logs and cookie data depends on their purpose and the settings of the respective service.

 

Data that is no longer required is deleted or anonymized unless statutory retention obligations apply.

​

​

16. Data security

We use appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

​

However, transmitting data over the Internet may involve security risks. Absolute protection cannot be guaranteed.

​

​

17. Your rights

Subject to applicable data protection law, you may have the following rights:

​

• access to the personal data processed about you;

• correction of inaccurate data;

• deletion of data;

• restriction of or objection to certain processing activities;

• receipt or transfer of data, where applicable;

• withdrawal of consent with effect for the future.

 

To exercise your rights, please contact dpo@heypatient.com. We may request reasonable proof of identity to prevent unauthorized disclosure.

​

You may also contact the Swiss Federal Data Protection and Information Commissioner or another competent data protection authority.

​

​

18. External links

Our website contains links to third-party websites and services. The respective third-party privacy policies apply to their content and processing of personal data.

​

19. Changes to this Privacy Notice

​

We may amend this Privacy Notice if our website, the services we use, or applicable legal requirements change. The version published on this website at the relevant time applies.