Patient information regarding the handling of personal data

The purpose for which the Medi24 medical practice collects, stores or transfers your personal data is described below. You can also find information about your rights and how you can exercise them within the framework of data protection.

Responsible bodies

Medi24 AG is the body responsible for processing your personal data and in particular data related to your health. If you have any questions about data protection or if you wish to exercise your rights under data protection law, please contact the office staff or

Collection and purpose of data processing

The processing (collection, storage, use and retention) of your data is based on the agreed type of treatment and the legal requirements for fulfilling this type of treatment as well as any statutory obligations. The initial collection of data takes place during the consultation with your doctor. In addition, we also receive data from other doctors and healthcare professionals from whom you have received or are receiving treatment where you have provided consent to such. Only data in your medical history that is related to your medical treatment will be processed. Your medical history includes the personal data provided on the patient form such as personal information, contact information, insurance information and any information gathered during the doctor/patient consultation to determine the type of treatment, e.g. prior health data, case histories, diagnoses, therapy recommendations and findings.

Period of retention

Your medical history remains on file for 20 years following your last appointment for treatment. The information will remain on file longer with your express consent, otherwise it will be deleted or destroyed in a secure manner.

Transfer of data

We only transfer your personal data and in particular your medical data to external third parties if this is permitted or required by law or if you have consented to the transfer of the data within the framework of your treatment agreement.

  • The data is transmitted to your health insurance company or to the accident or disability insurance company for the purpose of billing any services that have been provided to you. The type of data transmitted is based on the legal requirements.
  • Data is transferred to cantonal and national authorities (e.g. cantonal medical service, health departments, etc.) on the basis of statutory reporting obligations.
  • Optional: we may transfer any required patient and billing data to a debt collection agency for the purpose of collecting outstanding debts.

In individual cases, depending on your type of treatment and the consent you provide, data may be transferred to other authorised recipients (e.g. laboratories, other doctors).

Revocation of your consent

You may revoke your consent at any time, in whole or in part, even in cases where express consent to data processing was given over the phone. The revocation or request to amend consent must be made in writing. Processing will be terminated as soon as we receive your written revocation and no other legal basis exists for processing your data without your consent. The legality of the data processed up to the revocation remains unaffected.

Information, review and release

You have the right to receive information about your personal data at any time. You can review your medical history or request a copy of it. There may be a charge for providing a copy. You will be informed in advance of any costs, which depend on the time and effort required to produce the copy.

Right to data transmission

You have the right to have data that we automatically or digitally process handed over to you or a third party in a common, machine-readable format. This also applies in particular to the transfer of medical data to a healthcare professional of your choice. Direct transfer of your data to another controller, if requested, will only be carried out to the extent technically feasible.

Rectification of your data

If you determine or believe that your data is incorrect or incomplete, you may request rectification of the data. If neither the correctness nor the incompleteness of your data can be established, you have the option of attaching a note of dispute.