Privacy Policy

1. Data controller

Dr Nicolas Villard, FMH specialist in radiology
E-mail: secretariat@drvillard.ch
Phone: +41 58 255 3 144

For any question about the protection of your data, you can write to the address above.

2. Scope

This policy describes how personal data is processed when you use the website radiologie-interventionnelle.ch. Data processed as part of medical care (patient records) is also subject to professional secrecy (Art. 321 of the Swiss Criminal Code) and to cantonal health legislation.

3. Data processed and purposes

• Visiting the website: IP address, date and time, pages viewed, browser. This technical data is used to operate and secure the website.
• Contact form: profile (patient, healthcare professional, partner), name, e-mail, subject, message and optional attachment, to answer your request.
• “Refer a patient” form (for healthcare professionals only): the physician’s details and the patient’s data, including health data (reason, diagnosis, medical documents), to organise the patient’s care.
• Online booking: the data entered in the booking module embedded in the website, to schedule and manage the appointment.
• Audience measurement: visit statistics (Google Analytics, via Google Tag Manager), to improve the website’s content.
• Internal counter: number of views of each procedure page, per day and per language, without cookies or IP addresses (no personal data).
• Protection against automated submissions: Google reCAPTCHA on the contact form.

Health data is sensitive personal data within the meaning of Art. 5 let. c FADP. By sending it through the referral form, the referring physician confirms that they are entitled to do so, in particular with the patient’s consent. We do not make automated individual decisions and do not carry out profiling.

4. Recipients and processors

Your data is neither sold nor used for advertising. It is accessible to Dr Nicolas Villard and his office. We use the following processors (Art. 9 FADP), who may only process the data according to our instructions:

• Infomaniak Network SA, Geneva (Switzerland): hosting of the website and data;
• the provider of the online booking module;
• Google Ireland Ltd / Google LLC: audience measurement, reCAPTCHA and fonts (Google Fonts);
• jsDelivr: delivery of some of the website’s technical files (icons).

Beyond this, data is only disclosed to third parties where required by law.

5. Disclosure of data abroad

The website and form data are hosted in Switzerland. The Google and jsDelivr services may involve disclosing technical data (in particular the IP address) to other countries, including the United States. Such disclosure is based on the Federal Council’s recognition of the Swiss-U.S. Data Privacy Framework for certified companies, or on standard contractual clauses (Art. 16 FADP).

6. Retention period

• Contact messages: as long as needed to handle the request, then deleted, unless their content has to be added to the medical record.
• Data and documents of referred patients: added to the medical record and kept in accordance with the applicable cantonal law, as a rule for 20 years after the last treatment (cf. limitation period of Art. 128a of the Swiss Code of Obligations).
• Server technical logs: as a rule no more than 30 days.
• Google Analytics statistics: no more than 14 months.

7. Data security

Communication with the website is encrypted (HTTPS). Documents sent through the forms are stored in a non-public area, accessible only after logging in to the website administration. E-mail notifications sent to the office contain neither the content of messages nor medical documents. The forms must not be used in an emergency: call 144.

8. Cookies and third-party services

The website uses technical cookies required for it to work, as well as audience-measurement and bot-protection cookies. Details and how to refuse them are given in our cookie policy (Art. 45c of the Telecommunications Act).

9. Your rights

You may at any time request access to your data (Art. 25 FADP), its handover or transfer in a common electronic format (Art. 28 FADP), its rectification (Art. 32 FADP), or object to its processing and request its erasure, subject to statutory retention obligations, in particular those applying to medical records. We reply as a rule within 30 days, free of charge (Art. 18 and 19 DPO). Please send your request, together with proof of identity, to:

secretariat@drvillard.ch

You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — www.edoeb.admin.ch

Last updated: October 2026