Definitions

The definitions below apply to all documents published on this privacy center. They are aligned with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, with the General Data Protection Regulation (GDPR).

Personal data

Any information relating to an identified or identifiable natural person. This includes for example a name, a phone number, an e-mail address, an online identifier or biometric identification elements.

Sensitive data

A special category of personal data whose processing requires enhanced safeguards. It includes data concerning health, intimate life, ethnic origin, religious or philosophical beliefs, and political opinions.

Data subject

The natural person to whom the personal data relates. In Carewell’s context this is primarily healthcare professionals and the staff of client institutions.

Controller

The (natural or legal) person who decides the purposes and means of the processing. Carewell acts as controller for data it collects directly (e.g. user accounts, missions published on Carewell Work).

Processor

The person who processes data on behalf of the controller, without determining the purposes. When a client institution uses Carewell Pool, Carewell acts as processor for the data entered by the institution’s staff.

Processing

Any operation performed on personal data, whether automated or not: collection, recording, organisation, storage, modification, consultation, disclosure, erasure, etc.

Recipient

Person, authority or body to whom personal data is disclosed, whether or not they are a processor.

Pseudonymisation

A processing technique whereby a direct identifier is replaced by an indirect identifier (e.g. an internal ID) so that the data can no longer be attributed to a specific person without additional information. Pseudonymised data remains personal data.

Anonymisation

An irreversible process making re-identification of a person practically impossible. Anonymised data is no longer personal data.

Consent

A freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they accept a processing. Consent can be withdrawn at any time.

Personal data breach

A breach of security leading, accidentally or unlawfully, to the destruction, loss, alteration, unauthorised disclosure of or access to personal data.

Data Protection Officer (DPO)

Person appointed to advise the controller, monitor compliance with data protection obligations and act as the point of contact for data subjects and authorities. For Carewell: dpo@carewell.ch.

Carewell Work

Platform for institutions (nursing homes, home-care services, staffing agencies) to manage temporary staff placements and the related missions.

Carewell Pool

Service for institutions to manage their internal pool of healthcare professionals (scheduling, availability, documents).

Federal Data Protection and Information Commissioner (FDPIC)

The Swiss supervisory authority for data protection. Data subjects may lodge a complaint with the FDPIC if they consider that their rights are not respected.