Privacy Policy

Personal data protection

1. Data controller

The data controller for personal data collected on this website is:

Dr Sindy Monnier
Grangettes–Hirslanden Breast Centre
7, chemin des Grangettes – Bâtiment L
1224 Chêne-Bougeries, Geneva, Switzerland
Email: secretariat.monnier@hirslanden.ch
Phone: +41 22 545 28 66

2. Personal data collected

The website collects only the personal data strictly necessary for the purposes described below.

Via the appointment request form (patients):

• First name and surname
• Email address
• Telephone number
• Reason for consultation
• Supplementary hospital insurance (yes, no, don’t know)
• Message, if you write one

Via the form for referring doctors:

• Doctor’s name, email address and telephone number
• Patient’s name
• Patient’s phone number (optional)
• Reason for consultation and the patient’s supplementary insurance
• Clinical information, if the doctor provides it

The reason for consultation and clinical information are health data, which the FADP treats as sensitive. They are requested only as far as needed to arrange the appointment.

Automatically by the server:

• IP address (anonymised)
• Browser type and operating system
• Date and time of visit
• Pages viewed

This technical data is collected by our host Infomaniak for security and proper website functioning, and is not used for commercial or marketing purposes.

3. Purposes of processing

The data collected is used exclusively for:

• Responding to contact and appointment requests
• Ensuring communication between the medical secretariat and patients
• Guaranteeing technical security and proper website functioning
• Complying with applicable legal obligations (including medical record keeping for consulted patients)

No data is used for marketing, profiling or commercial prospecting purposes.

4. Legal basis for processing

Data processing is based on:

• Your request, when you fill in the contact form to obtain an appointment (steps preceding the medical mandate)
• Performance of a care contract (medical mandate) for patients
• Legal obligations applicable to the medical profession (notably the Geneva Health Act and the Federal Act on Medical Professions)

5. Data recipients

Personal data is processed by Dr Sindy Monnier and her medical secretariat. It is under no circumstances sold, transferred or communicated to third parties for commercial purposes.

Requests sent through the form are not stored on the website. They are forwarded by email to our medical secretaries’ mailbox (secretariat.monnier@hirslanden.ch), a secure mailbox hosted by Hirslanden, and to Dr Monnier’s professional mailbox, hosted by Infomaniak. The website and the mailbox are hosted in Switzerland; no data is transferred abroad. An acknowledgement is sent to the email address given in the request.

Data may only be communicated to the following recipients when necessary:

• Treating physicians and colleagues as part of medical care (with prior patient consent)
• Health insurers for billing (according to legal procedures)
• Infomaniak Network SA, Geneva, which hosts the website and Dr Monnier’s professional mailbox
• Competent authorities in case of legal obligation
• Hirslanden, which hosts our medical secretaries’ mailbox

6. Data retention period

Data is retained for:

• Contact form messages: 12 months maximum, unless a doctor-patient relationship is established
• Medical records: 20 years after the last contact, in accordance with Swiss law
• Technical server data: 30 days maximum
• Protection against automated submissions: a non-reversible fingerprint of the IP address and the time of form submissions, one hour at most

7. Data security

Dr Sindy Monnier implements all appropriate technical and organisational measures to guarantee a level of security adapted to the risk, including:

• Secure hosting in Switzerland (Infomaniak, ISO 27001 certified)
• Encrypted connection (HTTPS / SSL) on the entire website
• Restricted access to medical data (medical confidentiality)
• Regular and secure backups
• No storage of requests on the website’s server: they are only forwarded by email to our medical secretaries and to Dr Monnier

The website form is not designed for attachments. Please do not attach medical documents to it. You can send them to our medical secretaries’ secure mailbox (secretariat.monnier@hirslanden.ch). Sending from an ordinary email service, such as Gmail or Bluewin, is not end-to-end encrypted. If in doubt, call our medical secretaries, who will tell you the simplest way to send your documents.

8. Cookies

This website uses no cookies. The home page only stores, for as long as the tab is open, a technical marker (“sessionStorage”) so that the opening animation is not replayed. It contains no personal data and disappears when the tab is closed.

The website uses neither Google Analytics, nor Facebook Pixel, nor any advertising tracking tools.

The “Open the map in Google Maps” link leads to a Google service. No data is sent to Google unless you click that link.

9. Your rights

In accordance with the FADP and GDPR, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that data concerning you is being processed and receive a copy
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data, subject to legal retention obligations
• Right to restriction: request restriction of processing in certain cases
• Right to object: oppose certain processing
• Right to portability: receive your data in a structured format
• Right to withdraw consent at any time, without affecting the lawfulness of previous processing

To exercise these rights, please write to: secretariat.monnier@hirslanden.ch

10. Remedies

If you believe your rights are not being respected, you may report it to the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch. You may also assert your rights before the civil courts.

11. Policy modifications

Dr Sindy Monnier reserves the right to modify this privacy policy at any time to adapt it to legal or technical developments. The applicable version is the one published on the website at the date of your visit.

Last updated: October 2026