Privacy Policy Controller
Elibo Health GmbH
Schauenburgerstrasse 26
4052 Basel, Switzerland
Email: info@electricbadger.ch
Phone: +41 79 962 3955 
Elibo Health GmbH (hereinafter "we", "us") operates the website elibohealth.com (the "Website"). We are the controller for processing personal data via the Website. This Privacy Policy explains how we collect, use, and protect your data in compliance with the Swiss Federal Act on Data Protection (nFADP/DSG) and—where applicable to EU/EEA users—the EU General Data Protection Regulation (GDPR/DSGVO). Swiss law applies primarily; GDPR terms are used for clarity where processing involves EU/EEA individuals.
Data Collection via the Website
We collect personal data only as necessary for our services in health economics and outcomes research, health technology assessment and market access consulting. Our website is hosted by Switzerland’s Infomaniak. Infomaniak’s confidentiality policy can be viewed here: https://www.infomaniak.com/en/legal/confidentiality-policy Its cookie policy can be viewed here: https://www.infomaniak.com/en/legal/policy-use-cookies
Contact Form
The Infomaniak contact form collects full name, email address, and free-text message for handling enquiries (e.g., service requests). Data is emailed directly to info(at)electricbadger.ch . Legal basis: Legitimate interests (Art. 6(1)(f) GDPR; Art. 31 nFADP) to initiate or perform contracts; contract initiation where applicable (Art. 6(1)(b) GDPR). · 
Server Logs and Analytics
Infomaniak hosting automatically logs IP address, browser type, device info, and pages visited for security, optimization, and error diagnosis (provider defaults, potentially including Infomaniak Web Analytics or Google Analytics). Legal basis: Legitimate interests (website security and functionality). ·
Other Collections
No login areas, comments, event registration, cookies requiring consent beyond essentials (handled by Infomaniak's standard cookie banner), or social media links. No sensitive personal data (e.g., health data) is processed via the Website.

Newletter subscription

We offer a newsletter subscription service to share additional insight and inform you about our latest news, products, or services. By subscribing, you consent to receive periodic emails from us. When you subscribe to our newsletter, we collect the following personal data: - Email address (mandatory), Name, First Name - IP address and timestamp of subscription (automatically recorded for security and compliance). The processing of your data for the newsletter is based on your explicit consent (double opt-in). You will receive a confirmation email upon subscription; your address will only be added to our mailing list after you click the confirmation link. Your subscription data is managed using the Infomaniak Newsletter service. Infomaniak acts as a data processor (subcontractor) on our behalf. All data is hosted exclusively in secure data centers located in Switzerland, complying with the Swiss Federal Data Protection Act (nLPD) and the EU General Data Protection Regulation (GDPR). Infomaniak guarantees that no data is transferred outside of Switzerland. The collected data is used solely for: - Sending the requested newsletter content. - Managing your subscription status (active, unsubscribed, or deleted). - Analyzing campaign performance (e.g., open rates, click-through rates) to improve our communication. We retain your subscription data as long as you remain subscribed to the newsletter. You may unsubscribe at any time by clicking the "Unsubscribe" link included in every newsletter email or by contacting us directly. Upon unsubscription or deletion request, your data will be removed from our active mailing lists. If you request complete deletion ("right to be forgotten"), your data will be irrecoverably removed from Infomaniak's systems after 30 days. Under the GDPR and nLPD, you have the right to: - Access your personal data. - Rectify inaccurate data. - Request deletion of your data. - Withdraw your consent at any time (unsubscribe). - Lodge a complaint with a supervisory authority. To exercise these rights, please contact us at info@electricbadger.ch We and our provider Infomaniak implement rigorous technical and organizational measures to protect your data against unauthorized access, loss, or alteration. This includes encryption, regular security audits, and physical isolation of client data.

E-commerce and order processing

Our shop uses external payment providers, specifically Stripe, Paypal and Twint. Financial transaction data (credit card numbers, billing details) is processed directly by these providers according their privacy policies, not stored by us or Infomaniak. The shop collects the following data: Identity & Contact: Full name, shipping/billing address, phone number, email; Transaction Data: Order history, products purchased, amounts paid, payment method used; Technical Data: IP address (recorded for fraud prevention and security). This data is processed for Contract Execution: To process orders, arrange shipping, and issue invoices (Legal basis: Performance of a contract); Legal Obligations: To retain accounting/tax records for the legally required duration (e.g., 10 years in Switzerland/EU for invoices); Legitimate Interest: Fraud prevention and security monitoring. Order/Customer data is kept for the duration of the contractual relationship in addition to the mandatory legal retention period for accounting documents (usually 10 years). While customers can request deletion of their profile, invoice and order data will be anonymized or retained as required by tax law, even if the personal profile is deleted. Infomaniak's system allows deletion of customer profiles, but order information related to accounting is often retained for legal compliance. Shop users have the right to receive their order history and personal data in a structured, machine-readable format (CSV),

Purposes and Legal Bases
Beyond what is described above in the context of the newsletter service and the shop, we process data solely for: 
· Responding to enquiries and discussing potential consulting mandates (e.g., scheduling calls).
· Website security, stability, and improvement.
No marketing beyond service-related follow-up. All rely on legitimate interests or contract performance, proportionate for our SME. 
Recipients and Transfers
Data is shared minimally: ·
Hosting/Email
Infomaniak (Switzerland; DPA in place via service terms). ·
Collaboration Tools
(post-enquiry): Microsoft 365/OneDrive (EU servers for Swiss clients; adequacy decision/SCCs for any third-country access) and Infomaniak kDrive (Switzerland). ·
Other
Adobe Acrobat (for PDFs; privacy policy at adobe.com/privacy). No processors outside CH/EU/EEA without safeguards. No automated transfers to third countries via the Website.
Retention Periods
Enquiries/emails: As required by law (e.g., 5-10 years for potential contracts); deleted sooner if no mandate pursued.
Enquiries/emails: As required by law (e.g., 5-10 years for potential contracts); deleted sooner if no mandate pursued.Project files: Duration of project + 10 years (commercial/documentation obligations).
Server logs: Infomaniak defaults (typically 6-12 months). Data is securely deleted or anonymized thereafter.
Your Rights
Under nFADP/GDPR, you have rights to access, rectification, erasure, restriction, portability (where applicable), and objection to processing. To exercise these, contact us at info(at)electricbadger.ch We respond within 30 days (extendable if complex). Complaints: Swiss Federal Data Protection and Information Commissioner (FDPIC/edoeb.admin.ch) or EU supervisory authority in your country. 
Security Measures
As a low-risk controller, we implement proportionate technical/organizational measures (TOMs): MFA on all accounts, encrypted email/storage available on request (Infomaniak options), no shared accounts, device encryption, regular updates, and access limited to the owner. Breaches are reported to FDPIC if high-risk.
Last Updated
February 2026. We review annually or on material changes.