Privacy Policy

The controller responsible for your personal data is Huemul David Nasillo, trading as ClinicaLister (Sole proprietor — incorporation pending), based in Saas-Fee, Canton of Valais, Switzerland.

For any privacy question or to exercise your rights, contact us at privacy@clinicalister.com.

We keep waiting-list data until the product launches and for up to 12 months afterwards, or until you ask us to delete it or withdraw consent — whichever is sooner. Enquiry emails are kept for as long as needed to handle your request and a reasonable follow-up period. Technical logs are kept for a short period for security and diagnostics.

Some processors are located outside Switzerland and the EEA (for example, in the United States). Where we transfer personal data internationally, we rely on appropriate safeguards: the European Commission's Standard Contractual Clauses (SCCs) with the Swiss addendum, and the EU-US and Swiss-US Data Privacy Framework where the recipient is certified.

Depending on where you live, you have rights to:

• Access the personal data we hold about you, and obtain a copy (portability)
• Correct inaccurate data and delete your data
• Object to or restrict certain processing
• Withdraw consent at any time (without affecting prior processing)
• Not be subject to solely automated decisions with legal effect (we make none)
• Lodge a complaint with your data protection authority

To exercise any right, email privacy@clinicalister.com. We respond within 30 days (EU/Switzerland) or 45 days (US); we may need to verify your identity first. You can change cookie choices anytime via Cookie Settings in the footer.

If you are in the European Economic Area or the UK, the GDPR/UK GDPR applies and you hold all the rights listed above. You may complain to your local supervisory authority. As a Switzerland-based controller offering a low-risk waiting list, we do not currently appoint an EU Article 27 representative in reliance on the Art. 27(2) exemption (occasional processing, low risk, no special-category data); we will revisit this if our processing changes.

We are based in Switzerland, so the revised Federal Act on Data Protection (revFADP) applies. You have equivalent rights of access, correction, and deletion, and you may contact or lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

If you are a US resident (e.g., California/CCPA-CPRA, Virginia, Colorado, Connecticut, Utah, and similar), you have rights to know, access, correct, delete, and obtain a copy of your personal information, and to not be discriminated against for exercising them.

We do not sell or share your personal information and we do not use it for targeted advertising or profiling — so no opt-out of sale/sharing is required. Our analytics is first-party measurement, not cross-context behavioural advertising, and we do not disclose it to anyone for their own purposes. We honor the Global Privacy Control (GPC) browser signal: if your browser sends it, analytics stays off even if a previous consent is stored, and you do not need to interact with the banner. You may use an authorized agent, and (where your state allows) appeal a declined request by replying to our response.

We may update this policy; we will revise the "last updated" date above and, for material changes, provide a more prominent notice.