Information on the processing of health data

1. Controller

The controller responsible for processing your personal data is:

Anida AG, Förrlibuckstrasse 189, 8005 Zurich, privacy@anidalab.ch

2. What is this about?

When booking our training offerings you may provide information about your state of health. This includes in particular information about health or physical complaints, medical treatments, pain, cardiovascular or respiratory problems, operations, illnesses, allergies, medical recommendations or contraindications, and pregnancy.

This information constitutes health data and therefore sensitive personal data.

You give your express consent to the processing of this health data during the online booking process by ticking a separate checkbox. The health questionnaire is only unlocked afterwards.

3. Purposes of processing

We process your health data exclusively in order to:

• assess training-related risks;
• ensure the safe delivery of the training you have booked;
• take appropriate precautions or make adjustments for the booked training where necessary; and
• clarify, enforce or defend against any claims in connection with the booked training.

We do not use your health data for marketing, advertising, profiling or any other purposes unrelated to the booked training.

4. Access and disclosure

Access to the specific answers in the health questionnaire is limited to the instructors of the class you have booked and to those people who strictly need it for administrative purposes, for data protection or for the clarification of a specific legal case. Every access outside the circle of instructors of the booked class is logged.

For the storage and technical processing of your health data we may use processors, in particular providers of booking, hosting, cloud and IT support services. They process your data exclusively on our behalf and in accordance with our instructions. Further information about the processors we use and about the processing of data abroad is available in our Privacy Policy.

We do not pass your health data to independent third parties for their own purposes. Processors under this section and statutory obligations remain reserved.

5. Retention period

The specific answers and any free-text information from the health questionnaire are deleted at the latest 24 hours after the booked class. This also applies if you do not attend the class.

We keep a reduced evidence record for each booking. This comprises in particular:

• the time and version of this information;
• the time and version of the health questionnaire;
• the fact that the health questionnaire was submitted; and
• the status "no training-relevant restrictions reported" or "training-relevant restriction reported; instructor informed".

This evidence record is kept exclusively for the purposes set out in section 3, in particular to ensure training safety and to clarify, enforce or defend against any claims, for a maximum of ten years from the delivery of the booked class. After that period the evidence record is deleted or anonymised. The evidence record is also treated confidentially and is accessible only to a limited group of people.

6. Voluntary nature, accuracy and withdrawal

Providing health data is voluntary. However, without the necessary information we cannot assess whether the booked training can be delivered safely for you. In that case we may refuse participation in the training or allow it only subject to certain conditions.

Please answer the questions completely and truthfully. Please tell the responsible instructor if your health situation changes significantly between completing the questionnaire and the training.

You may also inform the responsible instructor of your current health situation and any restrictions relevant to the safe delivery of the training by other means (e.g. verbally) at any time before the training begins.

You may withdraw the consent given during the booking process at any time with effect for the future, using the email address given in section 1. Withdrawal does not affect the lawfulness of the processing up to the point of withdrawal. After a withdrawal we can only deliver the training to the extent this is safely possible without the health data concerned.

The withdrawal does not affect the processing of data that we continue to need in order to comply with statutory obligations or to clarify, enforce or defend against specific claims.

7. Storage for future bookings

If you give separate consent during the booking process, we store your health information in your customer account so that it can be shown at future bookings and confirmed or updated by you. This additional consent is voluntary, is not pre-ticked and is separate from the consent for the specific booking.

You can view the information stored in this way and the associated consent in your customer account at any time. You may withdraw this additional consent at any time with effect for the future via your customer account or via the email address given in section 1, and arrange for the deletion of the health data stored for future bookings.

The withdrawal or deletion in your customer profile does not affect the separately archived evidence record for a class booking that has already taken place, as described in section 5.

Irrespective of any storage in your customer account, you confirm or update your health information at every new booking. If your consent dates back more than twelve months, or if this information has changed, we obtain your consent again and ask you to complete the questionnaire afresh.

8. Privacy Policy and your rights

In all other respects we process your personal data in accordance with our Privacy Policy.

Within the statutory requirements you may request information about the data processed about you and apply for its rectification or erasure. You may also withdraw a consent given during the booking process at any time with effect for the future. For such matters please contact the email address given in section 1.