Privacy Policy

1. Introduction

Mederis operates this webinar registration platform to provide accredited medical education content to licensed healthcare professionals in Switzerland. This Privacy Policy describes what personal data we collect, why we collect it, who we share it with, and what rights you have under the Swiss Federal Act on Data Protection (nFADP / nDSG), in force since 1 September 2023.

By submitting a registration form on this platform, you acknowledge that you have read and understood this policy.

2. Data Controller

The data controller responsible for the processing described in this policy is:

For any question or request concerning your personal data, please contact us at the address above. We will respond within 30 days.

3. Data We Collect

3.1 Registration data (provided by you)

• First and last name
• Professional email address
• Institution / employer
• Professional role (Physician, Nurse, Other)
• Phone number (optional)

3.2 Professional identity verification (via Swiss RX Login)

Registration of your healthcare professional status is verified through Swiss RX Login, a third-party identity service for Swiss HCPs. Upon successful verification, we receive and store the following data from their service:

• AccType — account type confirming your category (e.g. authorised healthcare professional)
• AccID — pseudonymous identifier assigned by Swiss RX Login
• AccGrp — professional group classification
• SRXL email address — the email associated with your Swiss RX Login account, which may differ from the email entered in the registration form

This verification ensures that clinical content is accessible to qualified professionals, in compliance with applicable Swiss pharmaceutical and medical education regulations.

3.3 Technical data (collected automatically)

• IP address
• Browser type and version (user agent)
• Preferred language setting
• Registration timestamp

3.4 Video viewing data (on-demand webinars only)

When you access an on-demand video, we record:

• Total seconds watched and percentage of video completed
• Unique content coverage (segments viewed)
• Number of viewing sessions and their timestamps

3.5 Feedback / post-webinar survey data

At the end of a webinar you may be invited to complete a short satisfaction survey (3 rating questions and 1 optional open-text comment).

• On-demand webinars — your responses are linked to your registration record (name, email) via your personal join token.
• Live webinars — the survey is completed anonymously. To prevent multiple submissions from the same participant we generate a one-way, pseudonymised hash (SHA-256) of your IP address, browser identifier and the webinar ID. This hash cannot be reversed to reveal your IP address or browser identifier, and is not linked to your registration record. A cookie is also set for the same anti-duplicate purpose.

Submitting the survey is entirely voluntary. Aggregated, anonymised results (e.g. average ratings and anonymised summaries of open-text comments) may be shared with the event sponsors and with the scientific committee/speakers to evaluate and improve the educational content. Individual, identifiable responses are not shared with these parties.

3.6 Live webinar interaction data

4. Purpose and Legal Basis

5. Data Processors (Third Parties)

We engage the following third-party processors who act on our documented instructions. Each processor is bound by a data processing agreement and is prohibited from using your data for their own purposes.

6. International Data Transfers

Where your data is processed outside Switzerland, we ensure an adequate level of protection by one or more of the following means:

• Processing within the EU/EEA, which the FDPIC recognises as providing adequate protection equivalent to the nFADP
• Standard contractual clauses (SCCs) approved by the relevant supervisory authority
• Documented processor agreements with binding data protection obligations

7. Data Retention

Personal data is kept for as long as necessary to fulfil the purposes described in this policy. As a general rule:

• Registration and verification data — retained for a maximum of 3 years after the webinar date, or after the last on-demand viewing activity, whichever is later.
• Technical log data — retained for up to 12 months.
• Video viewing data — retained for the same period as the associated registration record.
• Feedback / survey data — identified (on-demand) responses are retained for the same period as the associated registration record; anonymous (live) responses, including the anti-duplicate hash, are retained for up to 3 years after the webinar date.

You may request earlier deletion at any time by contacting us at info@mederis.com.

8. Your Rights

Under the Swiss nFADP you have the following rights with respect to your personal data:

• Right of access (Art. 25 nFADP) — request a copy of the personal data we hold about you.
• Right to rectification (Art. 32 nFADP) — ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 32 nFADP) — request deletion of your data, subject to any overriding legal retention obligations.
• Right to data portability (Art. 28 nFADP) — receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 30 nFADP) — object to processing carried out on the basis of legitimate interest.

To exercise any of these rights, send a written request to info@mederis.com. We may ask you to verify your identity before processing the request. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable Swiss data protection law, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

FDPIC — Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter
www.edoeb.admin.ch

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available at this page.