Ypsomed
Privacy Policy

In this document we will explain how Ypsomed (also “we”, “us”) processes personal data of Test Users. You will be given an overview about which data we process in detail, how we use it and about your rights according to the applicable data protection laws.

Responsible

Responsible within the meaning of the data protection laws is:

Ypsomed AG
Brunnmattstrasse 6
P.O. Box
3401 Burgdorf / Switzerland

Telephone +41 (0)34 424 41 11
E-mail: info@ypsomed.com

You can contact our data protection officer by mail at the address provided or directly by e-mail at privacy@ypsomed.com.

How is personal data collected and processed?

1. Registration as a Test User

If you have agreed with Ypsomed to participate in studies concerning the use of our products, we will transmit your contact details to our service provider TestingTime AG. TestingTime manages the registration of study participants and the invitations to participate in our studies on our behalf.

TestingTime invites you by email to register in Ypsomed’s private pool on the TestingTime platform. The following data is collected: Name, e-mail address, telephone number, gender, age, postcode, country. In addition, your IP address and the date and time of registration are stored to prevent misuse of the service.

TestingTime only processes your data as instructed by Ypsomed and, in particular does not use it for marketing and advertising purposes or for its own purposes. TestingTime has no access to the studies.

The personal data collected by TestingTime on behalf of Ypsomed will be stored in accordance with the statutory retention and documentation obligations and subsequently deleted.

You have the right to delete your data from the database at any time.

2. Invitation to a study

If we select you to participate in a study, TestingTime will send you a brief reminder with details of how to complete the study.

This reminder will also ask you to provide TestingTime with your IBAN or PayPal details so that your remuneration can be processed and submitted, if applicable.

3. Participation in a study

The studies are carried out by Ypsomed itself or by its contracted service providers. There are three types of studies:

  • In-house Studies: Test User will be invited to a Ypsomed location or other premises designated to carry out the study.
  • Online Questionnaires: Test User is asked to answer a questionnaire online.
  • Remote Testing: Test takes place via a video conference tool.

In the case of In-house Studies and Remote Testing, Test Users may be recorded on video while testing and evaluating the products and packaging material. These recordings are used exclusively for documentation purposes and analysing the tests that serve the development of Ypsomed products. Ypsomed deletes the recordings after completion of the analyzation. Any further use of the test data will only take place anonymously.

Ypsomed uses service providers for online surveys to answer the online questionnaires.

If Ypsomed uses service providers to carry out the study and to analyse the data, Ypsomed obliges them to process the data exclusively for the stated purposes and to comply with the provisions of the applicable data protection laws.

Recipients of data

Ypsomed only passes on data to recipients outside Ypsomed if this is required by law or the contractual services or if you have consented to the transfer.

Under these conditions, the following recipients may, for example, receive personal data:

  • Within Ypsomed, your personal data is accessed by persons who need it to fulfil the purposes described in this Privacy Policy. These are, for example, employees who are involved in the development of our products.
  • Service providers and processors contracted by Ypsomed may receive personal data for the following purposes:
    • Service providers for hosting, SAAS solutions or platform providers;
    • Consulting.

The service providers and processors engaged by us are obliged to comply with data protection standards.

If required by law or by an authority, Ypsomed may process and disclose your personal data without prior notice or consent. This may be due to a court order or other regulatory obligation.

Ypsomed or its service providers do not sell personal data to third parties.

Where will your personal data be processed?

Your personal data (registration and study content) is generally processed in Switzerland or the EU.

Some service providers who provide tools for video conferencing or online questionnaires, may have their headquarters in a third country (i.e. countries outside the European Economic Area – EEA). In order to provide the services, certain technical data that do not allow a direct reference to the person may be transmitted to these third countries.

Third countries such as the USA or China are considered by the European Court of Justice and the Federal Data Protection and Information Commissioner (FDPIC) to have an inadequate level of data protection according to Swiss and EU standards. There is a risk that foreign authorities may gain access to the data stored there for control and monitoring purposes. You cannot defend yourself against this, as your data protection rights are restricted in some third countries.

Ypsomed contractually obliges the service providers used in a third country to comply with the EU data protection standards and the instructions given by Ypsomed. In order to ensure adequate protection of your personal data abroad, the standard contractual clauses of the EU Commission adapted to Switzerland and the UK, where applicable, form part of such contracts.

Consent to processing

For successful registration in the Ypsomed private pool and participation in our studies, you must agree to the Terms of use and the processing of your personal data.

Furthermore, you agree to treat all information, documents, tests and test results made available orally, in writing or in any other form within the scope of the study, including all records and copies made thereof, as confidential at all times and not to use, exploit or disclose them to third parties for commercial or own purposes.

You can revoke your consent or have your data deleted from the database at any time without giving reasons.

4. Your rights

Insofar as the legal requirements are met, you have the right to:

  • receive information and a copy of your data;
  • rectification and deletion of your data;
  • restrict the processing of your data;
  • have your data transferred in a structured, common and machine-readable format;
  • complain to the competent supervisory authority of your place of residence, your place of work or the place of the alleged infringement;
  • withdraw your consent to data processing without giving any reason;
  • object if the data is processed on the basis of a legitimate interest of Ypsomed.