Privacy policy

Last updated: 14 April 2026

1. Who we are

The controller for personal data described in this policy is Anamedi GmbH, Kreuzstrasse 4, 4123 Allschwil, Switzerland (“we”, “us”, “Anamedi”). UID: CHE-447.545.421. Contact: info@anamedi.com.

This policy applies to the public websites and web applications we operate under anamedi.com, app.anamedi.com, anamedi-agents.com (together, the “Sites”). Other agreements govern hospital pilots and product deployments; those relationships are not fully described here.

2. What this policy covers

Today, the technical implementation we ship in this repository is a marketing and information website for Anamedi (including a product demo page with embedded video). We do not operate a separate “cloud product” for end users from this codebase beyond delivering those Sites through a hosting provider and the third-party tools listed below.

3. Data we process on the Sites

3.1 Technical and security data

When you visit the Sites, our hosting provider Contabo GmbH (Welfenstraße 2, 81541 Munich, Germany) processes server request data typically including IP address, browser type, referring page, time stamp, and similar technical metadata needed to deliver the page and protect the service (for example abuse detection). Exact fields and retention depend on the hosting configuration in our Contabo account.

3.2 Cookies and similar technologies

We use Cookiebot (Usercentrics A/S) to obtain consent where required, document consent, and control the loading of non-essential scripts in line with your choices. Cookiebot processes data such as consent state, an anonymised consent ID, and related log data in accordance with its own documentation and your consent configuration.

3.3 Analytics

We use Vercel Web Analytics (provided by Vercel Inc., United States) as implemented on the Sites, while the Sites themselves are hosted by Contabo GmbH. Depending on your Cookiebot choices, analytics measurement may be limited or deferred until you consent. See Vercel's documentation for what their Web Analytics product collects in its current version.

3.4 Embedded demo video (Vimeo)

On the demo page we embed videos from Vimeo. When you play or load the player, Vimeo may process data as described in Vimeo’s privacy notice (including potentially the United States). We embed the player only where necessary to show the demo; prefer loading after consent where your Cookiebot configuration requires it.

3.5 Email and booking links

When you use a mailto: link or leave our Site to book a meeting through an external scheduling provider, the respective provider processes data under its own terms. We do not receive the content of those messages solely because you clicked a link from our Site.

4. Purposes and legal bases (summary)

• Provide the Sites, ensure stability and security — legitimate interest and, where applicable, performance of steps at your request prior to a contract.
• Consent management (Cookiebot) — consent where EU/EEA/UK/Swiss law requires consent for non-essential cookies or similar technologies; necessary cookies where exempt.
• Respond to enquiries — if you email us, our legitimate interest and (where relevant) contractual correspondence.

This summary is not a substitute for legal analysis of your specific traffic and Cookiebot configuration; align banner categories with what you actually load.

5. Recipients and processors

Categories of recipients we use in connection with the Sites as currently implemented include:

• Contabo GmbH — website hosting and related infrastructure (Welfenstraße 2, 81541 Munich, Germany; see Contabo's privacy documentation).
• Vercel Inc. — web analytics only (Vercel Web Analytics), not hosting of the Sites.
• Usercentrics A/S (Cookiebot) — consent management platform.
• Vimeo, Inc. — video delivery for the demo page.

6. International transfers

Hosting for the Sites is located in Germany with Contabo GmbH. Other providers (for example Vercel Web Analytics, Vimeo, or Cookiebot) may process data in countries outside Switzerland or the European Economic Area. Where required, we rely on appropriate safeguards described by the respective provider (for example standard contractual clauses or other mechanisms). Details should be reflected in your vendor register and, where applicable, transfer impact assessments.

7. Retention

We retain personal data only as long as needed for the purposes above, unless a longer period is required by law. Technical logs retention follows the settings in our Contabo account; analytics retention follows the settings in our Vercel Web Analytics configuration. Cookiebot stores consent logs according to its product configuration.

8. Your rights

Subject to applicable law (including the Swiss Federal Act on Data Protection, FADP, and where relevant the GDPR), you may have the right to access, rectify, erase, restrict processing, object, and data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with a competent supervisory authority.

To exercise rights, contact info@anamedi.com. We may need to verify your identity.

9. Children

The Sites are directed at hospital professionals and partners, not at children. We do not knowingly collect personal data from children through these Sites.

10. Changes

We may update this policy when our processing or the Sites change. The “Last updated” date reflects the latest material revision. Material changes may also be announced on the Sites or by other appropriate means.

11. Items your counsel should confirm (not inferable from this codebase)

• Whether a formal data protection officer (DPO) must be appointed under Swiss or EU law for your full operations, and public contact details if yes.
• The exact retention windows and regions configured in your Contabo hosting account and your Vercel Web Analytics project for logs and analytics — align text with the live accounts.
• Whether app.anamedi.com and anamedi-agents.com should be covered by separate controller notices once product processing goes beyond marketing pages.
• Final list of subprocessors and transfer mechanisms for hospital contracts and processor agreements, including any US or other non-EEA/CH processing.