Legal

Privacy Policy

1. Introduction

Alpinify GmbH ("Alpinify", "we", "us") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit the Alpinify website (www.alpinify.com) and when you or your clients use the Alpinify programs and services.

This policy applies in accordance with the Swiss Federal Act on Data Protection (FADP/DSG) and, where applicable, the European General Data Protection Regulation (GDPR).

2. Data Controller

The data controller for the processing of personal data on this website is:

Alpinify GmbH
Gerliswilstrasse 30
6020 Emmen­brücke, Switzerland
Email: [email protected]
Phone: +41 78 858 66 33

3. Data We Collect

3.1. Website Visitors

When you visit this website, we collect the following data:

  • Cookie consent preference: Your acceptance or rejection of cookies is stored locally in your browser using localStorage. This data is not transmitted to our servers.
  • Contact form submissions: When you use our contact form, we collect your name, email address, and message content. This data is used solely to respond to your enquiry.
  • Cloudflare Turnstile: Our contact form uses Cloudflare Turnstile for spam protection. Cloudflare may process certain technical data (such as IP address and browser information) in accordance with its own privacy policy.

3.2. Customers (Alpinify Program Users)

When you use the Alpinify programs as a customer, the following data may be processed:

  • Account information: Business name, contact person name, email address, phone number, and billing information.
  • Business data: Services, staff members, schedules, pricing, and other operational data you enter into the programs.
  • Usage data: Login activity, feature usage, and technical logs necessary for providing and securing the service.

3.3. End Users (Your Clients and Patients)

When your clients or patients use the Alpinify programs to make bookings or receive automated messages, the following data may be processed on your behalf:

  • Booking data: Name, email address, phone number, selected service, preferred staff member, and appointment date and time.
  • Health and sensitive data: Where the Alpinify programs are used by healthcare providers (dental clinics, medical practices, therapists), patient health records, treatment information, and other sensitive personal data may be processed. This data is processed by Alpinify solely on behalf of the customer as data processor.
  • Communication data: Automated appointment reminders, confirmations, and follow-up messages sent via SMS, email, WhatsApp, or Viber.

4. Purpose and Legal Basis

We process personal data for the following purposes:

  • To provide our services: Processing is necessary for the performance of our contract with the customer (Art. 6(1)(b) GDPR / Art. 31 FADP).
  • To respond to enquiries: When you contact us via the contact form, we process your data based on your consent and our legitimate interest in responding to your request.
  • To protect our services: Spam protection and security measures are based on our legitimate interest in maintaining a secure and functional website and service (Art. 6(1)(f) GDPR).
  • To comply with legal obligations: Where required by Swiss or EU law (Art. 6(1)(c) GDPR).

5. Data Processing on Behalf of Customers

When we process personal data of your clients or patients through the Alpinify programs, we act as a data processor on your behalf. You, as the customer, are the data controller and are responsible for ensuring that the collection and processing of such data has a lawful basis, including obtaining any required consents. The terms of our data processing relationship are set out in our Terms and Conditions (section 1.5).

6. Data Sharing and Third Parties

We do not sell personal data to third parties. We may share personal data with the following categories of recipients only as necessary to provide our services:

  • Cloud infrastructure providers: For hosting and storing data on servers located in Switzerland and/or the European Union.
  • Messaging service providers: SMS gateways, WhatsApp Business API, Viber Business Messages, and email delivery services, for the purpose of sending automated messages on behalf of the customer.
  • Spam protection: Cloudflare, for Turnstile captcha functionality on the contact form.

All third-party providers are bound by data protection obligations and are selected to ensure an adequate level of data protection.

7. Data Storage and Hosting

All customer and end-user data is stored on servers located in Switzerland and/or the European Union. We do not transfer personal data to countries outside of Switzerland or the EU/EEA unless adequate safeguards are in place as required by applicable law.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: Retained for as long as necessary to handle the enquiry, then deleted.
  • Customer account data: Retained for the duration of the contract and for the period required by applicable law thereafter.
  • End-user data (bookings, patient records): Retained for the duration of the customer's contract. Upon termination, data is returned or deleted within 30 days in accordance with our Terms and Conditions (section 1.5.8), unless retention is required by law.

9. Cookies and Local Storage

This website uses browser localStorage to store your cookie consent preference ("accepted" or "declined"). This is a technically necessary function and does not involve tracking or profiling.

You can manage or delete localStorage data through your browser settings at any time.

10. Mobile Applications

Alpinify publishes the mobile applications alpinDent, alpinMD and alpinFox for iOS and Android. The applications provide access to the same Alpinify programs described above; all processing, storage, retention, and sharing described in this policy applies to data accessed through them.

  • Data stored on your device: The application stores only the name of your portal, so that you do not have to type it again at the next sign-in. No personal data and no login credentials are stored on the device by the application itself.
  • Device permissions: The applications request no device permissions beyond internet access. They do not access your location, contacts, or calendar.
  • No tracking or advertising: The applications contain no advertising, no analytics or tracking technologies, and do not use an advertising identifier. No data is collected for advertising or profiling purposes.
  • Transmission: All communication between the application and the Alpinify programs is encrypted in transit (HTTPS/TLS).

10.1. Account and Data Deletion

The applications do not offer account registration. User accounts are created and managed by the practice or business you work for, which is the data controller for the data held in the Alpinify programs.

To request deletion of your user account or of personal data held about you, contact that practice or business directly, or write to us at [email protected] and we will forward the request to the responsible controller and act on their instruction. Requests are handled within the periods required by applicable data protection law. Data that we are legally obliged to retain (for example accounting records) is kept for the statutory retention period and then deleted.

11. Your Rights

Under applicable data protection law, you have the following rights regarding your personal data:

  • Right of access: You may request information about what personal data we hold about you.
  • Right to rectification: You may request correction of inaccurate or incomplete data.
  • Right to erasure: You may request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction: You may request that we restrict the processing of your data under certain circumstances.
  • Right to data portability: You may request to receive your data in a structured, commonly used, and machine-readable format.
  • Right to object: You may object to the processing of your personal data where it is based on legitimate interests.

To exercise any of these rights, please contact us at [email protected].

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, with a supervisory authority in the EU/EEA.

12. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit, access controls, and regular security reviews.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available on this page. We encourage you to review this policy periodically.

Last updated: 10 August 2026

14. Contact

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us:

Alpinify GmbH
Gerliswilstrasse 30
6020 Emmen­brücke, Switzerland
Email: [email protected]
Phone: +41 78 858 66 33