Privacy notice
Last updated: [date of publication]
1. Who is responsible
HealthSeed AG, Weidmannstrasse 5, 8046 Zurich, Switzerland, is responsible for the personal data processed on zinos.com. ZINOS is a business of HealthSeed AG.
Questions about your data: privacy@zinos.com.
We process personal data under the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to you, we also meet its requirements. [EU representative under Art. 27 GDPR: name and address, or delete this sentence if counsel confirms none is needed.]
2. What this notice covers
This notice covers zinos.com and the ways you can contact us through it. It does not cover the ZINOS software a hospital runs. Inside a hospital, the hospital is responsible for its own data, and a separate agreement governs any processing we do for it.
3. What we collect, and why
When you visit the website. Our hosting provider records technical data your browser sends: IP address, date and time, pages requested, browser type, and referring page. We use it to deliver the website and keep it secure. We keep server logs for [30] days.
Measurement. With your consent, we use analytics cookies to count visits and actions, such as which pages are read and which buttons are used. They are set only after you accept them in the cookie banner, and you can withdraw your consent at any time under "Cookie settings" at the foot of every page. [EU-hosted analytics provider] processes this data in the EU. We do not use it to identify you or for advertising. The legal basis is your consent.
When you contact us. If you book a demo, request documentation, ask a question, or call us, we collect what you give us: name, work email, institution, role, country, and your message. We use it to reply, send what you asked for, arrange a call, and keep a record of our exchange. The legal basis is our legitimate interest in answering enquiries and, where you ask for a demo or documents, steps you have requested before any contract.
Documents we send you. We share documents only after a call and a signed NDA. They go as personal links that expire after 30 days. We record when a link is opened, so we know the document reached the right person. We may use that record to send you at most two follow-up messages; you can stop them at any time.
Automated replies. Replies to enquiries, document delivery, booking confirmations, and follow-ups are prepared automatically from approved information and say so. A person reviews the record and takes part from the first call onward. We do not make decisions about you that have legal or similarly significant effects by automated means alone.
The website assistant. [If launched:] The assistant on our pages says that it is an AI when a conversation starts. It answers from approved information only. What you type is processed by [provider] in the EU, is not used to train its models, and is kept for [period].
4. Who processes data for us
We use service providers under data processing agreements. They process personal data only on our instructions.
| Purpose | Provider | Where data is processed |
|---|---|---|
| Website hosting | [Vercel Inc.] | [EU region, with transfers to the United States under safeguards] |
| Contact records | Attio Ltd. | [to confirm] |
| Booking calls | Calendly LLC | United States, under the safeguards in section 5 [safeguard to confirm with Calendly's data processing agreement] |
| Email delivery | Brevo (Sendinblue SAS) | EU |
| Analytics (with your consent) | [EU-hosted analytics provider] | EU |
| AI replies and the website assistant | Anthropic's Claude, through [cloud provider] in an EU region | EU, no training on inputs |
The table above lists every provider that processes your data through this website. Hospitals evaluating ZINOS receive the platform's sub-processor register after a call, under NDA.
We do not sell personal data, and we do not share it for advertising.
5. Transfers abroad
Where a provider processes data outside Switzerland or the EU and EEA, we transfer it only to countries the Federal Council recognises as adequate, or under safeguards such as the standard contractual clauses recognised by the FDPIC and the European Commission.
6. How long we keep data
| Data | Kept for |
|---|---|
| Server logs | [30] days |
| Analytics data | [14] months |
| Your cookie choice | 12 months, then we ask again |
| Enquiries, documents sent, and call records | 24 months after our last exchange, then deleted, unless a contract follows |
| Data we must keep by law | As long as the law requires |
7. Cookies
zinos.com uses two kinds of cookies, and no advertising cookies.
Necessary cookies keep the website working and remember your cookie choice. They need no consent.
Analytics cookies measure how the website is used. We set them only after you accept them, and nothing is measured before you choose.
| Cookie | Kind | Purpose | Expires |
|---|---|---|---|
| [consent cookie name] | Necessary | Remembers your cookie choice | 12 months |
| [analytics cookie names] | Analytics | Counts visits and actions | [period] |
You can change your choice at any time under "Cookie settings" at the foot of every page. Rejecting analytics cookies does not limit anything on the website. [If the booking tool or assistant sets its own cookies when opened, name them here, with their purpose and duration.]
8. Your rights
You can ask for access to your data, for correction, for deletion, for restriction or objection to processing, and for a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to privacy@zinos.com; we reply within 30 days.
You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC). If you are in the EU or EEA, you can also complain to the data protection authority where you live or work.
9. Changes
We update this notice when our processing changes. The date at the top shows the current version.
---