1. General Provisions

This Data Protection Declaration informs about the type, scope, and purpose of the collection and processing of personal data by Lab8 in connection with its activities and service offerings. Lab8 complies with Swiss data protection legislation ("DPA") and all other applicable data protection regulations.

By using Lab8's website and its electronic and online services, the user agrees to the collection and processing of their personal data in accordance with this Data Protection Declaration and accepts Lab8's General Terms and Conditions of Use.

The user acknowledges that LAB8 may, at its sole discretion and without prior notice, revise, amend, supplement, expand, delete, or otherwise update this document. Amendments take effect as soon as the Data Protection Declaration is published on the lab8.ch website. By continuing to use LAB8's website or internet services, the user agrees to any changes.

The security of personal data collected and processed by Lab8 is ensured by appropriate technical and organisational measures, particularly to protect this data from misuse and unauthorised access by third parties. Security measures are continuously updated alongside technological developments.

Any employee with access to confidential data or information is subject to a confidentiality obligation. Additionally, external collaborators and third parties involved are also bound by this confidentiality requirement. All collected personal data is stored on Lab8 servers hosted in Switzerland. Data stored by Lab8 is only accessible from abroad if required for service delivery and if the data protection standards in the respective country are equivalent to those in Switzerland. Where standards differ, Lab8 will obtain the consent of the individuals concerned.

Every individual has the right to access, modify incorrect data, block, or delete their data unless legal obligations to retain data or the necessity for contract execution apply. Consent to data processing may be revoked at any time with future effect.
For questions, modification requests, revocation or deletion, please contact info@lab8.ch.

2. Processing of Personal Data in the Context of LAB8's Services and Offers

a. Patient Data

Patient data includes:

• Data required for Lab8 to provide laboratory medical services,
• Patient data provided to LAB8 by an individual choosing to use LAB8's internet services.

Typically stored patient data includes: name, surname, gender, date of birth, address, language, insurance details, invoice recipient, and patient identification number, AVS/LAA number.

Purpose – Patient data is used by Lab8 to fulfil contracts and meet legal obligations.

Transmission – LAB8 may share patient data within Lab8 and with third parties if this is necessary to provide services. Apart from this, data will not be shared unless:

• the referring doctor agrees,
• there is a legal obligation or an order by authorities or the judiciary,
• service provision requires data transmission.

Retention – The duration for retaining request forms, analysis reports and examination material is determined by the time Lab8 needs to provide services or the legally required period, unless otherwise agreed in writing. Subject to the right of a patient to request deletion, reports may be kept for medical reasons or for potential future services. Data of deceased patients may continue to be used in a restricted form for scientific purposes.

b. Referrer Data

To execute a contract, Lab8 needs referrer data. The recorded information varies depending on the services provided, but generally includes: client number, name and surname, address, phone number, and selected language.

Purpose – Referrer data is solely used by Lab8 to fulfil contracts. Some referrer data also qualifies as patient data and is subject to patient data regulations.

Transmission – LAB8 may share referrer data within Lab8 and with third parties if this is necessary to provide services. Apart from this, data will not be shared unless:

• the referring doctor agrees,
• there is a legal obligation or an order by authorities or the judiciary,
• service provision or contract execution requires data transmission.

Retention – The duration of user data retention is based on the time needed to execute the contracts allowing service delivery. If referrer data is part of patient data, the retention rules for patient data apply.

c. Cookies and User Data

Lab8 needs user data to provide access and use of its internet services. Data is collected each time services are accessed. This data varies depending on the requested service. From the first registration and each time LAB8's website or other online services are accessed, LAB8 records user data to verify identities.

Cookies – When using the website or online service, cookies are stored on the user's device. Cookies collect usage data (including the IP address), which is generally transmitted to a server and stored there.

Using cookies allows Lab8 to offer optimal comfort and quality in its online services. The services can be used without cookies, but this may limit features and usability.
Individuals responsible for the website's functionality (developers or webmasters) are committed to respecting this privacy policy and will not extract any visitor data from the site.

Purpose – Lab8 processes, stores, and uses user data if necessary for the use of its internet services. Each time a service is used, the date, time, and relevant user data are logged. LAB8 reserves the right to retrospectively check user data if illegal use is suspected.

Transmission – LAB8 may share referrer data within Lab8 and with third parties if this is necessary to provide services. Apart from this, data will not be shared unless:

• the referring doctor agrees,
• there is a legal obligation or an order by authorities or the judiciary,
• service provision requires data transmission.

Retention – User data is retained for the duration necessary to deliver internet services or until the user opts out of the services.