Privacy Policy
Last updated: February 6, 2025
This Privacy Policy describes how CareRing (“the Company”, “We”, “Us”, or “Our”) collects, uses, discloses, and protects your personal data when you use our website (https://carering.life) or any related services (collectively, “the Service”).
We are committed to protecting your privacy and processing your personal data lawfully, transparently, and securely in accordance with the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP), and relevant provisions of the EU Artificial Intelligence Act (AI Act) and EU Data Act.
Interpretation and Definitions
Interpretation
Words with initial capital letters have meanings defined below. These definitions apply whether they appear in singular or plural.
Definitions
- Account – A unique account created for you to access our Service.
- Company – CareRing (carering.life), based in Switzerland.
- Cookies – Small data files stored on your device to enhance site performance and analytics.
- Country – Switzerland.
- Device – Any device capable of accessing the Service (e.g., computer, smartphone, tablet).
- Personal Data – Any information that identifies or can identify an individual.
- Service – The website and related features operated by CareRing.
- Service Provider – Any third-party organization or individual assisting us in providing the Service.
- Usage Data – Data collected automatically during Service use (e.g., IP address, session duration, device type).
- You – The individual using the Service, or the legal entity represented by that individual.
Collecting and Using Your Personal Data
While using our Service, we may collect the following categories of data:
- Identification data (name, email, phone number)
- Contact and address information
- Usage data (pages visited, session duration, device type, IP address)
- Cookies and tracking data
- Health or medical data, where relevant for patient support or digital care functionalities — handled under strict confidentiality and security protocols as “special category data” under Article 9 GDPR and Swiss FADP.
Use of Personal Data
We use your personal data for the following purposes:
- To provide and maintain our Service, including user authentication and system monitoring.
- To manage your Account and deliver tailored user experiences.
- To communicate with you regarding updates, service notifications, or regulatory information.
- To ensure compliance with GDPR, FADP, and other applicable data protection laws.
- To improve the performance, safety, and personalization of our website and applications.
- To conduct lawful analytics, AI-driven health insights, and research to enhance patient care — with appropriate safeguards and anonymization where possible.
Legal Basis for Processing
Our legal bases under GDPR and Swiss law include:
- Consent – For data you actively provide (e.g., signing up, submitting a form, or allowing cookies).
- Contract performance – Where processing is required to deliver our Service.
- Legal obligation – To meet applicable regulatory or statutory requirements.
- Legitimate interests – For internal security, analytics, and improvement activities, provided these interests do not override your rights.
Relevant Legislation
- GDPR (EU Regulation 2016/679): Sets out principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.
- Swiss FADP (rev. 2023): Aligns Swiss data protection rules with GDPR, requiring lawful, proportional, and transparent data processing for residents of Switzerland.
- EU Data Act (Regulation 2023/2854): Introduces new data access and usage rules for connected services — effective September 2025.
- EU AI Act (adopted 2024): Establishes obligations for high-risk AI systems. CareRing ensures AI transparency, risk management, human oversight, and documentation for AI-assisted health tools.
Retention of Data
We retain your data only for as long as necessary for the purposes stated, unless a longer retention period is required by law (e.g., for medical records). Usage data may be retained briefly for analytics, security, or diagnostic purposes.
Transfer of Data
Personal data may be processed in Switzerland, the EU, or other jurisdictions offering adequate protection. Transfers outside these areas occur only where sufficient safeguards (such as Standard Contractual Clauses) are in place.
Disclosure of Data
- Legal requirements: We may disclose data if required by authorities or applicable law.
- Business transfers: Data may be transferred in case of merger or acquisition, with notice provided in advance.
- Service providers: We share limited data with trusted third parties to provide functionality, under data protection agreements.
AI and Automated Decision-Making
CareRing may use AI to assist in patient monitoring, triage, or health insights. No decision producing legal or significant effects on you will be made solely by an automated system without human oversight. You have the right to request human review and an explanation of automated decisions as required under the AI Act and GDPR Article 22.
Security of Your Data
We implement robust technical and organizational measures, including encryption, pseudonymization, access controls, and regular security reviews. However, no method of transmission or storage is fully secure; we continuously strive to minimize risk.
Your Rights
Under the GDPR and FADP, you have the right to:
- Access and obtain a copy of your personal data
- Request correction or deletion (“right to be forgotten”)
- Withdraw consent at any time
- Restrict or object to processing
- Data portability (where technically feasible)
- Lodge a complaint with your national authority (EU Data Protection Authority or Swiss FDPIC)
Children’s Privacy
Our Service is not intended for individuals under 13 years of age. We do not knowingly collect information from children. If you believe a minor has submitted personal data to us, please contact us immediately.
Links to Other Websites
Our website may link to third-party sites. We are not responsible for their content or privacy practices. We encourage you to review those policies before interacting with them.
Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or our practices. Updates will appear on this page with a revised “Last updated” date. In the event of significant changes, we will notify you directly.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
