Privacy policy

Status: 01.06.2023

In this privacy policy, we inform you about what personal and company data we collect and store from you when you use our portal, and how we use this data, as well as with whom we may share this data. The processing of personal data always takes place in accordance with the applicable country-specific data protection regulations.

In addition, you will receive information on what rights you have with regard to the use of your data against us:

Where we get data from

In order to exercise and improve the service we provide to our benefits, we collect data in the following ways:

• As a provider, you register with Health Solutions & Support AG and provide us with your contact details and offer profile.
• As a prospective buyer, you inform us of your needs via questionnaire and telephone or verbally, including your contact details.
• Data that we receive from the prospective buyers about the mediated sellers.
• Data we obtain about you through your use of Health Solutions & Support AG.ch, such as your operating system, IP address, system activity, browser or location. See also Google Analytics.
• In the context of marketing campaigns, we receive the contact details and needs of prospective buyers directly from partners.
• As an applicant, we receive your personal information that you send us in the application.
• Health Solutions & Support AG may obtain creditworthiness information about prospective buyers and suppliers from credit rating companies. Health Solutions & Support AG has no direct access to the creditworthiness information of the prospective buyers.
• ·Name and address of the controller

Responsible in the sense of the applicable data protection laws of Switzerland and the EU and its member states is:

Health Solutions & Support AG Kannenbühlweg 4

CH-6280 Hochdorf Switzerland

Tel.: +41 41 531 50 20

E-mail: info@healt-sol.ch

Website: https://www.health-solutions-support.ch

How we use the data

All existing data:

We use data that we receive from users via health-solutions-support.ch to provide our services and to maintain, protect and improve our platform. In addition, we use this data to offer you new services and information and to achieve added value.

Furthermore, we use this data to suggest services and information that may be of interest to you, based on your profile.

By using a website (health-solutions-support.ch) or a mobile application, as well as advice by e-mail, telephone or chat from the specialists of Health Solutions & Support AG, you consent to the processing of your personal data, as well as non-personal data, in accordance with these data protection provisions and accept these data protection provisions.

Data we receive through your registration as a buyer:

We use this data, such as product range or application area, to be able to offer our range and service to the prospective buyer and the visitor. Health Solutions & Support AG regularly obtains feedback from prospective buyers about the products they have purchased.

All details including address are NOT publicly viewable

Contact possibility via the website

The website health-solutions-support.ch contains data that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or by filling out a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purpose of processing or contacting the data subject. No disclosure of this personal data to third parties will take place.

Data security

Health Solutions & Support AG does everything in its power to protect itself and its users from unauthorized access to the data we store, or to prevent it from being altered, disclosed or destroyed.

In particular:

·        we encrypt all transmitted data using SSL/TLS

·        we encrypt the stored data, which are located in different system structures

·        we limit access to personal information to employees and contractors

Data storage in the cloud

 To enable the new functions of the Provider Cockpit, Health Solutions & Support AG stores additional data of prospective buyers and providers of Health Solutions & Support AG in the cloud. This enables prospective buyers and providers to access the functions of the provider cockpit at any time, regardless of location.

The security of this data is of great concern to us.

Health Solutions & Support AG works with the Swiss hoster Infomaniak AG for the storage of the data. Infomaniak operates your server centers in Switzerland and is ISO 27001 (information security), as well as ISO 9001 (quality management) certified. Due to the server locations in Switzerland, we guarantee data protection according to Swiss law.

The connection to our servers is made via SSL encryption.

Change of the privacy policy

This privacy policy may be amended from time to time. In the event of significant changes, we will inform the providers registered with us by e-mail. Please read the data terms regularly.

The current privacy policy can also be accessed on our website at any time.

Collection of general data and information

The website of Health Solutions & Support AG collects a series of general data and information with each call-up of the website by a data subject or automated system. This general data and information is stored in the log files of the server. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, Health Solutions & Support AG does not draw any conclusions about the data subject. Rather, this information is needed

(1) to deliver the contents of our website correctly, (2) to optimize the contents of our website and the advertising for these, (3) to ensure the long-term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, the Health Solutions & Support AG analyzes anonymously collected data and information on one hand, and on the other hand, with the aim of increasing the data protection and data security of our enterprise, and ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.

Disclosure of personal data to third parties

All personal data collected when you contact Health Solutions & Support AG may be processed for marketing purposes. Furthermore, you have the option to object to this disclosure and processing at any time.

You can exercise your right to object by sending an e-mail to info@healt-sol.ch. Please enclose a copy of your identity card with the request. We would like to point out at this point that there is no possibility to object to general advertising on Internet pages. This is the same type of advertising that you would find in a print daily newspaper or magazine.

Your personal data may also be disclosed to third parties outside HSS who perform technical or organizational services on behalf of HSS that we need to fulfill the above purposes or general business activities. This may be, for example, a hosting partner, a printing company or a delivery organization. We contractually obligate these service providers to process your personal data exclusively on our behalf and in accordance with our specifications and to ensure the protection of your personal data through appropriate security measures of a technical or organizational nature.

These service providers are primarily located in Switzerland and the European Union, where adequate protection of personal data is provided. If a service provider is located in a country whose data protection laws do not ensure a level of protection of personal data comparable to the Swiss level, we oblige these service providers by contract to comply with the Swiss level of data protection.

The disclosure of personal data by law, for example to a law enforcement agency or for the prosecution and detection of unlawful activities, remains reserved.

Right to information, correction or deletion

You are entitled to assert your data protection rights at any time. You can request information about which personal data is processed by us. With proof of your

identity, you can have your data corrected, blocked or deleted. Please contact us in writing at the following address:Health Solutions & Support AG, Kannenbühlweg 4,CH-6280 Hochdorf or by e-mail to info@health-sol.ch.

Please note that even after a request to delete your personal data, we must retain some of this data within the scope of legal and contractual retention obligations. The deletion of your personal data may mean that you can no longer use our services.

Health Solutions & Support AG grants the data subjects the legal rights to which they are entitled.

E-mail advertising / online advertising

By using a service of our SME portal, you agree that we may also use your personal data for personalized advertising measures. These include, among other things, advertising by e-mail (newsletter). Unsubscribing from the newsletter is possible at any time. We are entitled to commission external partners with the technical processing of advertising measures and to pass on your data for this purpose.

E-mail addresses of prospective buyers outside Switzerland and Liechtenstein are not included in the newsletter distribution list. Health Solutions & Support AG has defined an internal process that excludes these addresses.

Tracking and analysis tools, cookies

This website uses cookies. Cookies are small text files that are permanently or temporarily stored in your computer when you visit this website via an Internet browser. The purpose of the cookies is in particular the analysis of the use of this website for statistical evaluation as well as for continuous improvements.

Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific internet browser can be recognized and identified via the unique cookie ID.

Through the use of cookies, the Health Solutions & Support AG can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

By means of a cookie, the information and offers on our website can be optimized in the sense of the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-

enter his or her access data each time he or she visits the website, because this is done by the website and the cookie stored on the user's computer system.

In your browser, you can disable cookies in full or in part at any time in the settings. This is possible in all common Internet browsers. If cookies are deactivated, not all functions of this website may be available to you.

Health Solutions & Support AG.ch uses Google Analytics, Facebook Pixel, Twitter Analytics and other analysis tools to measure user activity on the platform. Within the scope of legal regulations, these companies are obliged to pass on the data to third parties. For this purpose, information about the use of the website is transmitted to servers of the providers and stored there. Health Solutions & Support AG may, in addition to the tools listed below, integrate and use further analysis and tracking services on the website. No tools are used that record the identity or company of the user.

Google Analytics

Health Solutions & Support AG.ch uses Google Analytics, a web analytics service provided by Google, Inc ("Google").

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us showing the activities on our website, and to provide other services related to the use of our website.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie (including your IP address) about your use of this website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google does not merge your IP address with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. The browser add-on to disable Google Analytics gives the website visitor more control over what data about websites visited is collected by Google Analytics. The add-on tells the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. If you want to use this feature, download and install the add-on for your current web browser (http://tools.google.com/dlpage/gaoptout?hl=de).

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.

Privacy policy on the use and application of GoogleAds (Google AdWords)

The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to place ads in Google's search engine results as well as in the Google advertising network. Google AdWords enables an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google's search engine results exclusively when the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords.

The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying interest- relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website.

If a data subject accesses our website via a Google ad, a so-called conversion cookie is stored by Google on the data subject's information technology system. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. The conversion cookie is used to track whether certain subpages on our website have been accessed, provided that the cookie has not yet expired. Through the conversion cookie, both we and Google can track whether a data subject who has accessed our website via an AdWords ad has generated or canceled a revenue-relevant transaction.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google by means of which the data subject could be identified.

By means of the conversion cookie, personal information, for example the internet pages visited by the data subject, is stored. Each time the data subject visits our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This

personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical procedure to third parties.

The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from any of the internet browsers he or she uses and make the desired settings there.

Further information and the applicable Google privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.

Privacy policy on the use and application of YouTube

This website uses plugins from the YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited and which video you have viewed.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. For more information about YouTube, please see YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Privacy policy on the use and application of Google AdSense

This website may use Google AdSense, an advertising integration service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic to these pages can be analyzed. The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats will be transmitted to and stored by Google on servers in the United States. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you. You can prevent the installation of cookies by selecting the appropriate settings on your browser software. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Privacy policy on the use and application of LinkedIn

The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect with existing business contacts and to make new business contacts. Over 400 million registered individuals use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For data protection issues outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each individual call-up of our website that is equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the data subject to download a corresponding representation of the component from LinkedIn. Further information on LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical procedure, LinkedIn receives knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to LinkedIn at the same time, LinkedIn recognizes which specific subpage of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject. If the data subject activates a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.

LinkedIn always receives information via the LinkedIn component that the data subject has visited our website if the data subject is logged into LinkedIn at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, he or she can prevent the transmission by logging out of his or her LinkedIn account before accessing our website.

LinkedIn provides the ability to unsubscribe from email messages, SMS messages, and targeted ads, as well as manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn's applicable privacy policy is

available at https://www.linkedin.com/legal/privacy-policy. LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

Privacy policy on the use and application of Facebook

The controller has integrated components of the company Facebook on this website. Facebook is a social network.

A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate and interact with each other in virtual space. A social network can serve as a platform for sharing opinions and experiences or enables the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos and network via friend requests, among other things.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

By each call of one of the individual pages of this website, which is operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. Within the scope of this technical procedure, Facebook receives knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, for example the "Like" button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.

The data policy published by Facebook, which is available at https://de- de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

Legal or contractual requirements to provide the personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes, in order to conclude a contract, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before providing personal data by the data subject, the data subject must contact one of our employees. Our employee will explain to the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of not providing the personal data would be.

Original text in German. Document was translated with automatic translation program