1. Who we are
Elibo Health GmbH, Schauenburgerstrasse 26, 4052 Basel, Switzerland ("we") is responsible for the processing of personal data described in this notice. Contact for privacy questions: elisabeth@elibohealth.com, +41 799623955.
This notice explains how we handle personal data when you visit our website or are in contact with us as a client, prospective client or business partner. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. What data we process and why
When: You visit our website,; Data: IP address, browser and device information, pages visited, time of access (server logs),; Purpose: Operating and securing the website; Legal basis (GDPR, where applicable):
Legitimate interest (Art. 6(1)(f))
When: You use the contact form or e-mail us; Data: Name, e-mail address, message, any details you provide; Purpose: Answering your enquiry, preparing proposal; Legal basis (GDPR, where applicable): Pre-contractual steps (Art. 6(1)(b)); legitimate interest
When: We work together; Data: Business contact details of client staff and of experts involved in projects (name, role, organisation, e-mail, phone); Purpose: Delivering our consulting services, communication, invoicing; Legal basis (GDPR, where applicable): Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)); legitimate interest
We do not process health data or patient-level data, we do not use your data for marketing newsletters, and we do not sell personal data.
3. Cookies and analytics
We use the privacy-friendly statistics of our host Infomaniak to understand how the website is used. Non-essential cookies are only set with your consent, which you can give or withdraw via the cookie banner.
4. Service providers
We use carefully selected providers who process data on our behalf under data processing terms: • Infomaniak Network SA, Switzerland – website hosting, e-mail and file storage; • Microsoft – Microsoft 365 (documents, Teams, file sharing); data stored in Switzerland; • video-conferencing tools chosen by our clients (e.g. Microsoft Teams, Zoom) when you join a call. Where a provider may access data from outside Switzerland or the EU/EEA, we rely on adequacy decisions or standard contractual clauses.
5. How long we keep data
• Server logs: according to our host's standard settings: 7 days for web hosting, 19 days for mail service. • Enquiries that do not lead to a mandate: deleted within 2 years. • Contracts, invoices and related correspondence: 10 years, as required by Swiss law. • Client project files: for the duration of the project, then deleted or returned within 12 months of completion. Earlier deletion applies if the client requests it or the contract requires it, except for one archive copy where the contract permits this.
6. Security
We protect personal data with appropriate technical and organisational measures, including multi-factor authentication, current security software, restricted access and secure backups.
7. Your rights
You can request access to your data, correction, deletion, restriction of processing and data portability, and you can object to processing based on legitimate interests. Contact us at the address above; we normally reply within 30 days. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you are in the EU/EEA, to your local data protection authority.
8. Changes
We may update this notice. The current version is always published on this page. Last updated: October 2026.
