Privacy Policy

Diagnostisches und Therapeutisches Herzzentrum AG
Prof. Dr. Steffen Glökler
Kappelistrasse 35
8002 Zürich
Phone: +41 44 461 00 67
Email: deinteam@dth.zuerich

The Swiss Data Protection Act (nDSG) applies, as well as the EU General Data Protection Regulation (GDPR) where applicable.

Under Swiss data protection law, every person is entitled to the protection of their privacy and to protection against the misuse of their personal data. We comply with these provisions. Personal data is treated in strict confidence and is neither sold nor passed on to third parties.

When You visit this website, certain data is processed for technical reasons. Registration is not required to visit the website.

Personal data is any information relating to an identified or identifiable person. Processing covers any handling of personal data, such as collecting, storing, using, modifying, disclosing or destroying it.

We process personal data in accordance with Swiss data protection law. Where the GDPR applies, We base the processing in particular on Your consent, the performance of a contract, legal obligations and our legitimate interests in the secure and economical operation of this website.

This website is delivered via Cloudflare Workers (Cloudflare, Inc., USA). For technical reasons, Cloudflare processes IP addresses to deliver the content and protect against attacks. The servers are located primarily in the EU (Frankfurt). Cloudflare is certified under the EU-U.S. Data Privacy Framework.

The content is managed via a content management system (EmDash) operated on Cloudflare Workers with a D1 database and R2 storage.

Legal basis: Legitimate interest in the secure and reliable operation of the website (Art. 31 para. 1 nDSG).

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in Your browser bar. This means the data You transmit to Us cannot be read by third parties.

When You access this website, information that Your browser transmits is collected automatically, such as browser type and version, operating system, referrer URL, host name of the accessing computer and the time of the request. This data cannot be attributed to specific persons. It is not merged with other data sources. We reserve the right to review this data retrospectively if We become aware of concrete evidence of unlawful use.

This website partly uses cookies, small text files that make it possible to store specific information on the user's device. Cookies help to make the use of the website easier and more user-friendly. You can deactivate or restrict the setting of cookies at any time in Your browser settings. You can delete cookies that have already been stored at any time.

We use Alchemy Scribe, our own first-party analytics system (server: opus.alchemy.zuerich), to evaluate website usage. No data is passed on to advertising networks or other third parties. In particular, We collect:

• page views and time on page
• an anonymous, session-based visitor ID
• device information (browser, operating system, screen size)
• the referrer (where You come from)
• scroll depth and click behaviour

Legal basis: Legitimate interest in the statistical evaluation of website usage (Art. 31 para. 1 nDSG). Statistics tracking is active by default.

Personalisation, such as linking to an email address or recognising You across sessions, only takes place with Your express consent. To merge sessions, a browser fingerprint may be created; this happens exclusively when statistics consent is active. You can withdraw Your consent at any time.

For online appointment booking, We embed the booking widget of OneDoc (OneDoc SA, Geneva, Switzerland) on our appointment pages. When You book an appointment via this widget, the data You enter (e.g. name, email address, phone number, desired appointment and appointment type, and an optional message) is transmitted directly to OneDoc and processed there as our data processor.

When the widget loads, OneDoc may already process data (e.g. IP address) for technical reasons. OneDoc operates the booking platform in Switzerland. The privacy provisions of OneDoc apply in addition.

Legal basis: Contractual or pre-contractual performance (arranging an appointment).

For the encrypted transmission of sensitive medical data, We use HIN (Health Info Net) with the highest possible level of encryption. Encrypted communication may require a one-time registration if You do not already hold a HIN address. Administrative matters such as rescheduling can, at Your request, also be handled via unencrypted email; in that case You are aware of the associated risk.

Magic-link sign-in for our content team is delivered via Resend (Resend, Inc.) as a technical email-delivery processor.

The analytics, forms and email infrastructure above is operated on Our behalf by Alchemy Labs (Alchemy Zürich) as a data processor under a data processing agreement. Data is hosted in Switzerland and the EU.

On a transitional basis, We additionally use Google Analytics 4 (Google Ireland Limited) for reach measurement. Data may be transmitted to Google in the USA. Google is certified under the EU-U.S. Data Privacy Framework. Processing is based on Your consent. You can withdraw Your consent at any time, for example via Google's browser extension or by deactivating cookies.

This website embeds tools from companies based in the USA (such as Cloudflare and Google). When these tools are active, Your personal data may be passed on to the US servers of the respective companies. We point out that, in the view of the competent authorities, the USA is not a third country with a level of data protection comparable to that of Switzerland or the EU. The providers named are, however, certified under the EU-U.S. Data Privacy Framework.

You have the right at any time to:

• Information about the data stored about You
• Correction of inaccurate data
• Deletion of Your data
• Objection to the processing
• Data portability in a common, machine-readable format
• Withdrawal of consent given, at any time and without giving reasons

For medical data, the statutory retention periods apply in addition (medical records: 20 years after the last treatment). For data protection requests You can reach Us at deinteam@dth.zuerich.

The copyright and all other rights to content, images and files on this website belong exclusively to Diagnostisches und Therapeutisches Herzzentrum AG or to the specifically named rights holders. Written consent from the copyright holders must be obtained in advance for any reproduction.

We may adapt this privacy policy at any time. The current version published on this website applies.

Last updated: 12 June 2026