ViaSlim AG Privacy Policy
(as of 10/2026)
Table of contents
- Who is responsible for your personal data?
- Which personal data do we process?
2.1 When you visit our website
2.2 When you take the ViaSlim Check and create a ViaSlim account
2.3 When you use our services and the ViaSlim App
2.4 When you apply for a job with us
2.5 When we receive data about you in a business context - For what purposes do we process your personal data?
- Electronic communication, customer information and newsletter
- In which cases do we pass your personal data on to third parties?
- Disclosure abroad
- Cookies, analytics and marketing tools on our website
- Social media presences
- Data security
- How long do we retain your personal data?
- Your rights
- Right to lodge a complaint
- Further information
1. Who is responsible for your personal data?
The controller responsible for the processing of your personal data is ViaSlim AG, Asylstrasse 104, 8032 Zurich, CHE-202.708.921, with locations in Zurich, Bern and Basel ("ViaSlim", "we"). For data protection matters, you can reach us at datenschutz@viaslim.ch or by post at the address stated above.
This privacy policy explains how we process your personal data when you
- use our website and our online services such as the ViaSlim Check,
- create a ViaSlim account or use the ViaSlim App,
- make use of our medical, nutritional therapy and coaching services,
- communicate with us or subscribe to information from us,
- apply for a job with us, or
- deal with us as a contact person of a partner, referring physician, supplier or service provider.
The Swiss Federal Act on Data Protection (FADP) is authoritative. Where the EU General Data Protection Regulation (GDPR) applies in an individual case, Section 13 applies in addition.
Personal data means all information relating to an identified or identifiable person. Health data constitutes sensitive personal data. We process it only with your express consent or to the extent necessary for your treatment and its billing and permitted by law.
If you provide us with data about other persons, for example family members or an emergency contact, we assume that you are authorised to do so and have informed the person concerned.
2. Which personal data do we process?
2.1 When you visit our website
When you visit our website, our systems log technical data such as IP address, browser, operating system, date, time, pages accessed and the page you came from. We need this data for the secure operation of the website and to analyse its use. Section 7 explains which cookies and tools we use.
If you contact us via a contact form, by email, telephone, chat or WhatsApp, we process the information you provide to us in order to respond to your request.
2.2 When you take the ViaSlim Check and create a ViaSlim account
With the ViaSlim Check (online eligibility assessment), you make use of a service provided by ViaSlim: we evaluate your answers according to medically defined criteria and prepare a personal programme recommendation for you. So that you can save your result, continue the Check and access the ViaSlim App, we create a ViaSlim account for you using your email address. You confirm your email address with a code that we send to you.
In doing so, we process:
- account data: email address, language, time of account creation and confirmation, technical data of your device;
- your answers in the Check: for example height, weight, age, sex, weight-related pre-existing conditions, medication, previous weight-loss attempts, goals, lifestyle and insurance situation;
- the result of the Check, in particular the programme recommendation and the assessment of whether coverage of costs by basic insurance may be possible;
- your response to our messages, for example whether an email was opened or a link was clicked.
Your answers in the Check are health data. When you create your account, we obtain your express consent to process this data for the evaluation, your account, your treatment and the communication described in Section 4. We document the wording, time, source and technical origin (IP address) of your consent. You can withdraw it at any time (Section 11). Without this consent, we cannot evaluate the Check or maintain an account, because we cannot prepare a recommendation without health information.
2.3 When you use our services and the ViaSlim App
When you use our services (medical consultations on site and by video, nutritional counselling, health coaching, laboratory tests, medication prescriptions and our programmes), we process:
- identification data: name, sex, date of birth and, where necessary, ID or insurance number;
- contact data: address, email address, telephone number;
- health data: medical history, diagnoses, weight-related conditions, medication, measurements such as weight, height, body composition, blood pressure, ECG, laboratory values and biomarkers, the content and course of treatment, and reports from co-treating physicians;
- behavioural, lifestyle and preference data: physical activity, nutrition, use of the App, and data from wearables that you voluntarily connect;
- health insurance data: insurer, insurance number, AHV number, cost approvals;
- communication content: messages in the App, content of video consultations (no recording without your consent), emails and telephone notes;
- payment data: invoicing and payment information; credit card data is processed exclusively by our payment service provider;
- technical data: logins, logs and usage data of the App;
- other data that you voluntarily provide to us or that we are required to process due to legal obligations.
In the ViaSlim App, we process your health and behavioural data in order to create and adjust your treatment plan and to share your progress with you and your treatment team.
2.4 When you apply for a job with us
In the application process, we process your identification and contact data, the information in your application documents regarding your career history and qualifications, with your consent information from references, and publicly available information from professional networks. If your application is successful, we use this data to prepare and conclude the employment contract.
2.5 When we receive data about you in a business context
From contact persons at referring physicians, partners, suppliers, insurers and service providers, we process identification and contact data as well as communication content in order to manage the collaboration.
Where does the data come from?
We receive most data directly from you or your device. In certain cases, we receive data from third parties: from referring or co-treating physicians, laboratories, pharmacies and health insurers in the context of your treatment and billing, from wearable providers whose data you share with us, and from publicly accessible sources.
3. For what purposes do we process your personal data?
We process your personal data for the following purposes:
- Provision of our services: evaluation of the Check, maintenance of your account, appointment scheduling, medical treatment, nutritional counselling and coaching, progress monitoring in the App, prescribing and supplying medication, coordination with laboratories, pharmacies, and referring and co-treating physicians.
- Communication with you: service messages, contextualisation of your result, customer information and newsletter in accordance with Section 4.
- Billing: invoicing you or your health insurer, obtaining cost approvals, payment processing, reminders and debt collection.
- Quality and further development: obtaining feedback, analysing treatment outcomes and usage data, improving our programmes, App and communication.
- Research: analysis in anonymised or pseudonymised form; assessing whether you are eligible for a study and contacting you about it on the basis of your consent.
- Security and compliance: protecting our systems, access controls, fulfilling legal obligations (such as documentation and retention obligations, therapeutic products law, accounting), and asserting or defending legal claims.
- Marketing on our website in accordance with Section 7.
Profiling
We analyse your information in order to tailor our recommendations and messages to your situation, for example according to the recommended programme, BMI class, insurance situation or the stage of your treatment. Insofar as we use health data for this purpose, this is based on your express consent given when creating your account (Art. 6 para. 7 FADP). To manage our communication, we use derived attributes, not your medical record.
Automated recommendation
The programme recommendation in the ViaSlim Check is generated automatically according to medically defined criteria. It serves as guidance and is not a treatment decision: admission to a programme, therapy and medication are always decided by a physician in personal contact with you. You can request at any time that a person reviews the recommendation, and you can state your point of view (Art. 21 FADP).
4. Electronic communication, customer information and newsletter
This section describes when and how we contact you by email, SMS, telephone and push notification, what this is based on, how you can unsubscribe, and which service providers we use for this purpose.
4.1 Service messages
As soon as you have created a ViaSlim account, we send you messages that form part of our service: the confirmation code for your email address, your result from the Check, appointment confirmations and reminders, information on prescriptions, invoices, replies to your enquiries, and security-related information about your account. These messages are not advertising. You receive them by email, as push notifications in the ViaSlim App and, for appointments, prescriptions and queries, also by SMS or telephone, for as long as your account exists or a treatment is ongoing.
4.2 Customer information for account holders and patients
Your ViaSlim account establishes a customer relationship with ViaSlim. On this basis and on the basis of your consent given when creating your account, we inform you by email and, in individual cases, by SMS or telephone about ViaSlim's own services: information that puts your result into context and explains how to get started with our programmes, medical information on obesity and metabolism, new programmes and offers, events and webinars, study results, and news from our locations in Zurich, Bern and Basel.
We inform you when collecting your contact data and in each of these messages that you can decline them (Art. 3 para. 1 let. o UCA). We inform patients who have received a service from ViaSlim on the same basis about our own similar services, provided they have not objected. Without an account and without having received a service, we send you such information only with your consent in accordance with Section 4.3.
4.3 Newsletter for interested persons
You can also subscribe to our newsletter without an account, for example on our website, at an event or via a form in our practices. You subscribe by entering your email address and actively clicking or ticking the corresponding box; we do not use pre-ticked boxes. We then send you a confirmation email with a link. Your subscription becomes active only once you click this link (double opt-in). This ensures that nobody can subscribe someone else's address.
We use the data provided when subscribing exclusively for sending the newsletter and for performance measurement in accordance with Section 4.4. You can withdraw your consent at any time (Section 4.5); the processing carried out up to that point remains lawful.
4.4 Personalisation and performance measurement
Insofar as you have consented, we tailor the content and timing of our information to your situation: to your answers in the Check, your programme recommendation, your insurance situation, your location and your use of our services. For this purpose, we use derived attributes such as the recommended programme or type of insurance, not your medical record and not your individual answers from the Check.
Our emails contain a tracking pixel and individualised links. These allow us to measure whether an email was opened and which links were clicked, which content is relevant to you, and whether a message could be technically delivered. We use this analysis to improve our communication and to avoid sending you content that does not interest you. If you do not want this measurement, you can disable the automatic loading of images in your email program or unsubscribe. We do not pass the measurement data on to third parties, except to our dispatch service providers in accordance with Section 4.6.
4.5 Unsubscribing and withdrawal
You can unsubscribe from customer information and the newsletter at any time free of charge: via the unsubscribe link at the end of every email, in the settings of the ViaSlim App, by replying "STOP" to an SMS, or by email to datenschutz@viaslim.ch. Unsubscribing takes effect immediately, but at the latest within five working days; messages already prepared may still reach you during this period. We place your address on a suppression list so that the unsubscription remains permanently effective, even if you later sign up for a Check again.
You will continue to receive service messages in accordance with Section 4.1 for as long as your account exists or a treatment is ongoing. You can also withdraw only the personalisation; in that case you will receive our information without it being tailored to your details. The withdrawal of consent applies to the future; the processing carried out up to that point remains lawful.
4.6 Service providers for dispatch
For sending and analysing our emails, customer information and newsletters, we use Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA, as a processor (privacy policy: https://www.klaviyo.com/legal/privacy/privacy-notice). On our behalf, Klaviyo processes your email address, your first name, your language, the status of your account, the derived attributes required for personalisation (recommended programme, type of insurance, location), the details of your consent (time, text version, source), usage data relating to our emails (delivery, opens, clicks, unsubscriptions), and technical data such as IP address and device information. We do not transmit your medical record, your individual answers from the Check, diagnoses or laboratory values to Klaviyo. The processing takes place in the USA on the basis of a data processing agreement and the safeguards set out in Section 6.
For SMS, we use a specialised SMS service provider; the service provider receives your mobile telephone number and the message content. Push notifications of the ViaSlim App are delivered via the notification services of Apple and Google respectively, which receive a device identifier and the message content for this purpose. Service messages from our practice and patient system are sent by the processors named in Section 5.
4.7 Customer surveys and feedback
From time to time, we ask you by email, in the App or after an appointment for feedback on your satisfaction and your experience with our care. Participation is voluntary. We use your answers to improve our services and generally analyse them in anonymised form. We delete personally identifiable answers after the analysis, at the latest 24 months after the survey. If you review us on an external platform such as Google, the privacy policy of the platform operator applies.
4.8 Competitions and promotions
Occasionally, we offer competitions and promotions via our website, events or social media. We use the data requested in this context to determine and notify the winners and to deliver the prize; we delete it afterwards. Separate terms and conditions of participation apply to each competition. We do not link participation data with health data, and we do not give away prescription medicines or medical services that require a medical indication as prizes.
4.9 Limits of our communication and evidence
Our information does not contain any advertising to the public for prescription medicines (Art. 32 Therapeutic Products Act) and is not directed at minors. As a physician-led company, we adhere to the professional rules governing objective information. We document the time, wording, version and source of every consent and every unsubscription and retain this evidence for as long as we are required to demonstrate the lawfulness of our communication.
5. In which cases do we pass your personal data on to third parties?
We pass on personal data only to the extent necessary for the purposes stated, where you have consented or where the law requires it. We disclose health data to third parties outside your treatment team only with your consent or on the basis of a legal obligation. We do not sell or rent personal data.
Processors
Service providers that process data exclusively on our behalf and in accordance with our instructions (Art. 9 FADP), are contractually bound to confidentiality and data security, and may not use the data for their own purposes:
- IT hosting and operation of our systems, the App and the patient administration system;
- Klaviyo, Inc., Boston, USA, for sending and analysing our emails and customer information; Klaviyo receives contact data, the derived attributes from your account and the Check required for personalisation, and usage data relating to our emails, but not your medical record and not the complete answers from the Check;
- telecommunications and SMS service providers for confirmation codes, appointment reminders and queries;
- providers for video consultations, appointment booking and customer support;
- payment service providers as well as service providers for billing, reminders and debt collection;
- analytics and marketing tools on our website in accordance with Section 7.
Medical partners
As part of your treatment, we work with referring and co-treating physicians, hospitals, laboratories, nutritional counselling services and pharmacies. We obtain reports and send medical reports to the extent that you wish or that it is necessary for the treatment you have requested. Your general practitioner or another healthcare provider can be given access to your data in the ViaSlim App if you request this.
If you wish to have medication delivered, we transmit the data required for this to the mail-order pharmacy (contact data, delivery and billing address, insurance data, prescription and order). Our mail-order pharmacies are MediService AG (privacy policy, terms and conditions) and Zur Rose Suisse AG, Frauenfeld (privacy policy and terms and conditions at www.zurrose.ch). An order placed with the pharmacy is subject to its terms and conditions and privacy policy.
Health insurers and billing agencies
For billing services covered by compulsory health insurance and for obtaining cost approvals, we transmit to your health insurer, its medical examiner or a billing agency the information required by law for this purpose (insurance number, diagnosis codes, services provided, medication).
Research
For research and quality evaluations, we use data in anonymised or pseudonymised form; data is passed on to research institutions in this form or, if you remain identifiable to the research institution, only with your consent. We assess internally whether you are eligible for a study; you will only be contacted if you have agreed to this.
Other recipients
Authorities, courts and external advisers, to the extent that we are legally obliged to do so, need to ensure IT security and data protection, or assert, defend or ward off legal claims. In the event of a transfer of our company or parts of it, data may be passed to the parties involved; the purpose limitation remains in place.
We do not pass on any information from your Check, your account or your treatment to advertising platforms such as Google or Meta. Reach and conversion measurement on our website is carried out using pseudonymous data in accordance with Section 7 and your cookie settings.
6. Disclosure abroad
As a rule, we process and store personal data in Switzerland and the European Economic Area. Some service providers are based or have servers in the USA or in other countries without an adequate level of data protection recognised by the Swiss Federal Council; this applies in particular to Klaviyo (USA) and to the analytics and marketing tools named in Section 7.
In these cases, we base the disclosure on the recipient's certification under the Swiss-U.S. Data Privacy Framework or on the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner, supplemented where necessary by additional technical and organisational measures (Art. 16 and 17 FADP). Your medical record does not leave Switzerland and the EEA. You can obtain a copy of the safeguards on request at datenschutz@viaslim.ch.
7. Cookies, analytics and marketing tools on our website
Our website uses cookies and similar technologies. We set technically necessary cookies (for example for login, language and security) without consent. All other tools run only once you have given your consent in the cookie banner; you can change or withdraw your selection there at any time. Details of the individual cookies, their providers and lifetimes can be found in our Cookie Policy.
With your consent, we use the following tools, depending on the configuration:
- Google Analytics and Google Tag Manager (Google Ireland Ltd., Dublin; Google LLC, USA) to analyse website usage with truncated IP addresses;
- Google Ads conversion tracking and remarketing (Google Ireland Ltd.) to measure and manage our advertisements;
- Meta Pixel (Meta Platforms Ireland Ltd., Dublin; Meta Platforms Inc., USA) to measure and manage advertisements on Facebook and Instagram;
- tools to improve the user experience, for example for A/B testing or embedding videos and maps.
These tools process pseudonymous usage data (device information, IP address, pages accessed, clicks) and may transmit data to the USA (Section 6). We do not transmit answers from the ViaSlim Check, the contents of your account or information about your treatment to these providers. You can additionally disable interest-based advertising in your Google and Meta account settings and via www.youronlinechoices.com.
8. Social media presences
We maintain profiles on LinkedIn (https://www.linkedin.com/company/viaslim), Instagram, TikTok, Facebook and YouTube. If you interact with us there or send us messages, we process this information in order to respond to you. The platform operators additionally process your data in accordance with their own privacy policies and for their own purposes, such as advertising and market research, in some cases on servers outside Switzerland; we have no influence over this. The privacy policies of LinkedIn, Meta (Instagram, Facebook), TikTok and Google (YouTube) are authoritative.
Please do not share any health data with us via social media. For medical matters, use the ViaSlim App or contact us directly. We are entitled to review and delete third-party content on our profiles and to report it to the platform operator.
9. Data security
We protect your data with state-of-the-art technical and organisational measures:
- storage in certified data centres in Zurich (Switzerland) and redundantly in Berlin (Germany);
- encryption in transit and at rest;
- access only for employees who need it for their tasks, with two-factor authentication;
- logging of access to and changes to health data;
- contractual obligation of all service providers to confidentiality and data security.
Our physicians and medical professionals are bound by professional secrecy (Art. 321 Swiss Criminal Code). All employees are bound to confidentiality and receive data protection training.
10. How long do we retain your personal data?
We retain personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations:
- patient records and medical documentation: in accordance with cantonal health law, at least 10 years after completion of treatment, longer if required by a legal obligation or a legitimate interest;
- billing and accounting records: 10 years (Art. 958f CO);
- information from the ViaSlim Check of persons who do not receive a service from ViaSlim: deletion or anonymisation at the latest 12 months after the last activity in the account;
- evidence of consent and unsubscription: for as long as we are permitted to contact you, and thereafter for as long as we are required to demonstrate the lawfulness of our communication; an unsubscription remains permanently on our suppression list;
- application documents: 6 months after completion of the process, longer only with your consent;
- website log data: generally 30 days.
Upon expiry, the data is deleted or anonymised. Data that we need to assert or defend legal claims is blocked from any other processing until the matter is resolved.
11. Your rights
Under data protection law, you have the following rights:
- information about whether and which personal data we process about you (Art. 25 FADP); we generally respond within 30 days;
- rectification of inaccurate data;
- deletion, insofar as no statutory retention obligation prevents this;
- receipt of your data in a commonly used electronic format or transfer to another body (Art. 28 FADP);
- objection to processing, in particular to customer information and the newsletter (Section 4);
- withdrawal of consent with effect for the future; the processing carried out up to that point remains lawful;
- review of an automated recommendation by a person (Section 3).
To exercise these rights, please contact datenschutz@viaslim.ch or write to the postal address in Section 1. You can also arrange the deletion of your account directly in the ViaSlim App. To protect against misuse, we may request proof of identity. We may refuse or defer a request in whole or in part where the law so provides, for example to protect business secrets or the rights of third parties; in that case we will inform you of the reasons.
12. Right to lodge a complaint
If you do not agree with our data processing, please contact us first at datenschutz@viaslim.ch; we will address your concern directly. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.
13. Further information
Links to other websites: Our website may contain links to third-party websites. We are not responsible for their content or data protection practices.
Data protection in the EEA: Insofar as the GDPR applies to individual processing activities, we rely on the performance of a contract or pre-contractual measures (Art. 6 para. 1 let. b GDPR), on legal obligations (let. c), on legitimate interests (let. f) or on your consent (Art. 6 para. 1 let. a and Art. 9 para. 2 let. a GDPR). In this case, you may also contact the supervisory authority in your country of residence.
Language versions: In the event of discrepancies between the language versions of this privacy policy, the German version shall prevail.
Amendments: We may amend this privacy policy at any time. The version published on our website and in the ViaSlim App at the relevant time applies. In the event of material changes affecting your consent, we will inform you in the App or by email.



