Novacorpus, a company founded and led by a medical professional, adheres to the following principles for the collection and use of your personal data, in compliance with current regulations.
Introduction
This privacy policy applies to the current website (as well as to the CRM of Novacorpus International Healthcare Sàrl, https://www.novacorpus.info, hereinafter referred to as the “CRM”), and its purpose is to provide information to users of the site about:
How their personal data is collected and processed. Personal data includes all data that can identify a user.
Who is responsible for processing the collected and processed personal data.
What rights users have regarding this data.
To whom this data is transmitted.
The site’s cookie policy.
Legal Contacts
The site is published by Novacorpus International Healthcare Sàrl, headquartered at 33, chemin du Vieux-Vésenaz, 1222 Vésenaz.
The publishing director is Novacorpus International Healthcare Sàrl.
The site is hosted by Kinsta.com in Paris.
Definitions of Terms Used
The terms “personal data,” “data subject,” “processor,” “processing,” and “sensitive data” are defined according to the GDPR regulation.
Personal data: All information relating to an identified or identifiable person (Federal Data Protection Act, Article 3, Section 1).
Processing: Any operation related to personal data, including collection, recording, storage, use, modification, communication, archiving, erasure, or destruction of data.
User: An internet user visiting and/or using the mentioned site. Information
Collected and Purpose
In General
We only process personal data of our users to the extent necessary to provide a functional website, as well as our content and services. The processing of personal data of our users is generally done after obtaining their consent. However, there are situations where it may be necessary to process data without prior consent due to factual circumstances, and such processing is authorized by law.
We process your data for various purposes, which can be grouped into the following categories:
i. Services: Novacorpus International Healthcare Sàrl collects and processes personal data voluntarily provided by you as part of our service offerings.
ii. Communication: Novacorpus International Healthcare Sàrl collects and processes personal data to facilitate, manage, and conduct communication with clients, whether by mail, phone, or electronic means. This also includes organizing and conducting market research and opinion surveys.
iii. Analysis: The use of websites may be recorded and analyzed in a personalized or anonymous manner based on your needs and interests (see also below). In addition, Novacorpus International Healthcare Sàrl may link and analyze this data with other information from Novacorpus International Healthcare Sàrl, especially for marketing purposes.
iv. Statistics: Novacorpus International Healthcare Sàrl produces statistical evaluations based on anonymous user data. These evaluations are intended to continuously improve our websites and services.
Activity and Usage Data
Whenever you visit our website, our system automatically collects data and information from the computer system being used.
The following information is collected:
(1) Information about the type and version of the browser used.
(2) User’s operating system.
(3) User’s internet service provider.
(4) Anonymous IP address of the user.
(5) Date and time of access.
(6) Websites from which the user’s system accesses our website.
(7) Websites accessible by the user’s system via our website.
(8) Language and country settings.
(9) Data related to the website.
Personal Data You Provide Online
This may include data you send to us, such as by filling out online forms, registering, subscribing to newsletters or other information, or installing applications. Name, first name, date of birth or age, gender, address, telephone numbers, email addresses, photos, and video recordings made at our premises, photos you provide to us, client numbers, payment methods, and language preferences are included in this personal data. When registering or ordering, we will inform you about the type, scope, and purpose of data processing, as well as the storage period and your rights of objection, referring you to this privacy statement.
For the sending of our emails (e.g. appointment confirmations, administrative communications), we use the Postmark service operated by Wildbit LLC, based in the United States. This involves the transfer of certain personal data (email address, minimal content necessary for the communication, technical metadata) to the United States. Such transfer is governed by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (SCC), incorporated into our processing agreement with Postmark (Data Processing Addendum). We limit sensitive information transmitted through this channel to what is strictly necessary. Attachments, forms and medical documents are managed separately in our secure systems, which may include AWS infrastructure in Switzerland and Dropbox.
Personal Data in Relation to Other Communication Methods
Personal data in relation to communications by phone, fax, email, voicemail, text messages (SMS), photo messages, video messages, or instant messaging. If you contact us through the available contact options, your contact details and associated content will be recorded and may be used to process and respond to your request.
Protection of Personal Data
In accordance with the GDPR and Swiss data protection laws, Novacorpus International Healthcare Sàrl, as the data controller, informs the user that it processes personal data concerning them.
The user understands and accepts that the information they provide via forms on the site or by email to the addresses provided on the site is intended for authorized personnel of Novacorpus International Healthcare Sàrl for administrative and commercial purposes.
Unfortunately, transmitting information over the Internet is not entirely secure. While we make every effort to protect your personal data, we cannot guarantee the security of the data you transmit to us; any transmission is at your own risk.
For any requests regarding the protection of personal data, you can contact the data protection officer at info@novacorpus.com.
Purpose
https://www.novacorpus.co.uk/ may process all or part of the data for the following purposes:
Facilitate site navigation and manage services and products ordered by the user: login data, order history, etc.
Prevent and combat computer fraud: computer hardware used, password, IP address.
Improve site navigation: login and usage data.
Conduct communication campaigns (SMS, email): phone number, email address.
Novacorpus International Healthcare Sàrl does not commercialize personal data and uses it only out of necessity for statistical and analytical purposes.
Responsibility
For personal data collected during the creation of a user account and while browsing the site, the data controller for personal data processing is Novacorpus International Healthcare Sàrl.
As the data controller for the data it collects, Novacorpus International Healthcare Sàrl commits to comply with applicable legal provisions. It is the responsibility of Novacorpus International Healthcare Sàrl, in particular, to establish the purposes of its data processing, to provide its prospects and clients with complete information on the processing of their personal data, and to maintain a register of processing activities in accordance with the law. Whenever Novacorpus International Healthcare Sàrl processes personal data, it takes all reasonable measures to ensure the accuracy and relevance of this data based on the purposes of processing.
Right to Access, Object, or Rectify Data
In accordance with Swiss data protection law and European regulations, users of the site https://www.novacorpus.co.uk/ and its CRM have the following rights:
The right to access, update, and correct their personal data, as well as to supplement it if necessary.
The right to block or erase their personal data if it is found to be inaccurate, incomplete, ambiguous, outdated, or if its collection, use, transmission, or storage is prohibited.
The right to object to the processing of their personal data.
The right to withdraw their consent at any time.
The right to limit the processing of their personal data.
The right to decide the fate of their personal data after their death, including its transmission (or not) to a previously designated third party.
The right to data portability for the data they have provided when such data is subject to automated processing based on their consent or a contract. If a user wishes to know how their personal data is being used by Novacorpus International Healthcare Sàrl, request rectification, or object to its processing, they can contact the company in writing at the following address: info@novacorpus.com.
In this context, the user must specify the personal data concerned and the corrections to be made, providing identification documents (ID card or passport) for identification purposes.
Requests for the deletion of personal data will be processed in accordance with the legal obligations that apply to https://www.novacorpus.co.uk/, particularly regarding data retention and archiving. Finally, users of https://www.novacorpus.co.uk/ can file a complaint with the relevant regulatory authorities.
A response is provided within 30 days from the date of receipt of the request. Novacorpus International Healthcare Sàrl reserves the right to restrict, defer, or refuse access, rectification, or erasure of data and will communicate the reasons for such refusal or limitation. Once the reasons and interests that justified this refusal or limitation have disappeared, Novacorpus International Healthcare Sàrl undertakes to provide the requested information, to the extent that it is not impossible or disproportionately complex.
Data Retention
Enquiries that do not lead to a medical consultation or treatment remain in progress while we are handling them. If you do not tell us your decision and we receive no further update from you for 12 months from the last exchange about your case, we mark the case as closed without proceeding. We then retain the case data for three years from that status change, after which we delete or anonymise it.
Records of people who have had a medical consultation or treatment, including surgery, are retained for 20 years from the last medical consultation or treatment.
Accounting records are retained for the applicable statutory periods. We may retain certain data for longer where required by law or by ongoing legal proceedings.
Confidentiality
We disclose personal data to relevant healthcare partners where necessary to handle your request, and to technical providers only to the extent needed to deliver the services described in this policy. These providers process the data on our behalf, under our instructions and the applicable data processing agreements.
For the storage of and collaboration on certain files, including where applicable documents containing health data, we use Dropbox (Dropbox International Unlimited Company / Dropbox, Inc.) as a data processor. Dropbox may process or transfer personal data outside the United Kingdom, including to the United States. For transfers to the United States, Dropbox states that it relies, where applicable, on the UK Extension to the EU-U.S. Data Privacy Framework and, where that framework does not apply, on contractual or other transfer mechanisms recognised under applicable UK data protection law.
In certain circumstances, we may also be required or consider it necessary to disclose your personal data to comply with applicable laws and regulations, in the context of legal proceedings, in response to requests from courts or competent authorities, or to meet other legal obligations in order to protect and defend our rights and property.
Novacorpus International Healthcare Sàrl takes all necessary measures to preserve the security of information, ensuring that it is not accessible to unauthorized persons. In the event of an incident affecting the integrity or confidentiality of a client’s information, Novacorpus International Healthcare Sàrl is committed to promptly inform the client and provide information about corrective measures taken.
The personal data of the user may be processed by the subsidiaries of Novacorpus International Healthcare Sàrl and by subcontractors (service providers), solely for the purposes of this policy.
Cookies and similar technologies
We use necessary cookies to operate the website and remember your choices. With your consent, we may also activate optional audience-measurement or advertising trackers, including Google Analytics, Meta Pixel (Facebook/Instagram), Google Ads and trackers associated with embedded YouTube videos. You can accept or reject the optional categories separately and change your choice at any time in “Cookie settings”.
The site uses cookie techniques to improve users’ browsing experience. A cookie is a file stored by the site on the user’s hard drive, containing information about their browsing habits.
Medical Confidentiality
Novacorpus International Healthcare Sàrl and its employees are bound by medical confidentiality.
However, Novacorpus International Healthcare Sàrl would like to emphasize that sending confidential information and/or personal data by email or via an electronic form carries risks to the confidentiality of this data.
By choosing to send us queries by email, you explicitly accept these risks. It is always possible to contact us by phone.
Modification
Novacorpus International Healthcare Sàrl reserves the right to modify the content of this legal notice at any time and without notice. Users are therefore invited to consult it regularly.
Applicable Law and Jurisdiction
This site is subject to Swiss law. Any legal action related to this privacy policy falls under the exclusive jurisdiction of the ordinary courts of the Republic and Canton of Geneva. The option to appeal to the Federal Court in Lausanne remains reserved.
User Acceptance of the Privacy Policy
By browsing the site, the user declares to have read and understood this privacy policy and accepts its terms, particularly with regard to the collection and processing of their personal data, as well as the use of cookie files.
