01About this policy
This Privacy Policy explains how McBrothers AG ("we", "us" or "our") collects and uses personal data in connection with swissspinesolution.com and enquiries submitted through the website. McBrothers AG operates the website under the Swiss Spine Solution brand, presenting ROBOSPINE and AQUASPINE.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Additional privacy information may apply to particular services or business relationships.
02Controller and contact details
The controller responsible for the processing described in this policy is: McBrothers AG Steinhauserstrasse 9, 6340 Baar, Switzerland Email: office@swissspinesolution.com Telephone: +41 76 339 93 60
Please contact us at the address above with any questions about this policy or requests concerning your personal data.
03Personal data we collect
Website use. When you visit our website, technical data such as your IP address, browser and device information, requested pages, referring page, and access times is processed to deliver website content, maintain security and diagnose technical problems.
Enquiries. When you contact us, we process the information you provide, such as your name, email address, organisation, telephone number and message. Form submissions may also include your professional role, the product of interest, the page or form used, and any calculator estimate you choose to send. Enquiries are transmitted and retained in our email system.
Fields marked as required are necessary to submit the relevant form. You may also contact us directly by email or telephone. Please do not include patient information, medical records or other health data in product or business enquiries.
04How we use personal data
We use personal data to operate and protect our website, respond to enquiries, provide requested product information, arrange demonstrations, prepare quotations, manage business communications, comply with legal obligations and establish, exercise or defend legal claims.
Where the GDPR applies, we rely on Article 6(1)(b) for steps taken at your request before entering into a contract with you; Article 6(1)(f) for our legitimate interests in website operation, security and business communications, including correspondence with company representatives; and Article 6(1)(c) where processing is required by law. Where processing requires consent, Article 6(1)(a) applies.
06Disclosure of personal data
We disclose personal data to personnel and service providers where necessary for the purposes described in this policy. These include providers of website hosting, technical infrastructure, media delivery, email services and embedded content. Providers may process information on our behalf or, for certain services, under their own responsibility.
Where necessary to handle your enquiry, we may share relevant contact details and enquiry information with an authorised distributor. We may also disclose information where required by law or where necessary and permitted to protect our legal rights. We do not sell personal data.
07International transfers
Personal data may be processed in Switzerland and abroad, including Ireland and the United States, in connection with the services described above.
International transfers are subject to applicable data protection requirements. Depending on the recipient and circumstances, protection may be provided by an applicable adequacy decision, a relevant Data Privacy Framework certification, or recognised standard contractual clauses with any necessary supplementary safeguards. You may contact us for information about the safeguards relevant to your data and, where applicable, a copy of them.
08Retention and security
We retain personal data for as long as necessary for the purposes for which it was collected, including reasonable enquiry follow-up, and to meet applicable legal obligations or address legal claims. Technical logs are retained according to operational and security needs. Records subject to statutory retention requirements are kept for the applicable legal period.
We use appropriate technical and organisational measures to protect personal data, including encrypted website connections and access restrictions. No method of electronic transmission or storage is completely secure.
09Your rights
Subject to applicable law and its conditions, you may request access to your personal data, correction, deletion, restriction of processing, or delivery or transfer of data in a commonly used electronic format. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.
Where the GDPR applies, you may object to processing based on legitimate interests on grounds relating to your particular situation. We will stop that processing unless compelling legitimate grounds override your interests, rights and freedoms, or the processing is necessary for legal claims. You may object to direct marketing at any time.
To exercise your rights, contact office@swissspinesolution.com. We may request proportionate information to verify your identity. We respond within the period required by applicable law, generally one month for GDPR requests, subject to permitted extensions.
You may complain to a competent data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch). Where the GDPR applies, you may also contact a supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement.
10External links and policy updates
Links to external websites and services, including WhatsApp, are subject to the relevant provider's privacy terms. If you contact us through another service, we use your message to handle your enquiry as described above.
We may update this policy to reflect changes in our activities or applicable law. The latest version is published on our website.