With this Privacy Policy, BlooRidge Company AG (hereinafter “Company”, “we”) informs you which personal data we process in connection with our website, newsletter, beta testing and events – what, how and where we process it, how long we keep it, whether it is passed on to third parties in Switzerland or abroad, and which rights you have.
We are subject to Swiss data protection law and, where applicable, to foreign data protection law, in particular the General Data Protection Regulation of the European Union (GDPR).
1. Contact Address
The controller responsible for processing personal data is:
- BlooRidge Company AG
- Kirchstrasse 68
- 8957 Spreitenbach
- Switzerland
- info@myleihealth.ch
2. Terms and Legal Bases
2.1 Terms
Personal data is any information relating to an identified or identifiable natural person. Processing means any handling of personal data, for example collecting, storing, using, disclosing, archiving or deleting it.
2.2 Legal Bases
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and its Ordinance. Where the GDPR applies, we rely on at least one of the following legal bases:
- Art. 6 para. 1 lit. a GDPR – your consent
- Art. 6 para. 1 lit. b GDPR – performance of a contract or pre-contractual measures
- Art. 6 para. 1 lit. c GDPR – compliance with a legal obligation
- Art. 6 para. 1 lit. f GDPR – our legitimate interests, in particular operating our website and communication securely, reliably and user-friendly, protecting against misuse and enforcing legal claims
3. Personal Data (Type, Scope, Purpose and Duration)
We process the personal data needed for our activities, in particular contact data (e.g. first name, e-mail address), browser and device data, usage data (e.g. time of registration, IP address, opening and click rates) and content you send us.
We keep personal data only as long as needed for the respective purpose or as required by law, and then delete or anonymise it. We may have personal data processed by carefully selected service providers (see section 6).
4. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or destruction. Data transmission over the internet (e.g. by e-mail) can nevertheless have security gaps; complete protection cannot be guaranteed.
5. Cookies and Server Log Files
5.1 Cookies
Our website itself does not set any cookies. The sign-up form provided by Brevo (section 6.3), which is embedded on our subscription page, may use technically necessary cookies. You can block or delete cookies in your browser settings; some functions may then be limited.
5.2 Server Log Files
When you visit our website, our hosting provider automatically records information your browser transmits: date and time of access, IP address, requested page or file, amount of data transferred, success status, browser type and version, operating system and referrer URL. We use this data to deliver the website, keep it stable and secure, analyse errors and ward off attacks. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f GDPR).
6. Services of Third-Party Providers
We use the following carefully selected service providers. Where they process personal data on our behalf, we have concluded data processing agreements with them.
6.1 Hosting (Google Firebase)
Our website is hosted on Firebase Hosting, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor under the Google Cloud Data Processing Addendum. When you visit our website, Firebase Hosting processes your IP address and the server log data described in section 5.2 for the purposes stated there; according to Google, IP addresses are retained for a few months. Firebase Hosting delivers our website via Google’s global content delivery network, so data may also be processed outside Switzerland and the EU/EEA (see section 8). The legal basis is our legitimate interest in providing our website securely and reliably (Art. 6 para. 1 lit. f GDPR). More information: firebase.google.com/support/privacy
6.2 Google Fonts
To display our website in a consistent design, we use Google Fonts, a service of Google Ireland Limited (address above). When you open our website, your browser loads the fonts directly from Google’s servers and transmits your IP address and technical browser information to Google. According to Google, no cookies are set and the data is not used to create user profiles. The legal basis is our legitimate interest in a uniform presentation of our website (Art. 6 para. 1 lit. f GDPR). More information: developers.google.com/fonts/faq/privacy
6.3 Newsletter and Forms (Brevo)
For sending our newsletter and managing registrations via our sign-up forms (including the form embedded on our subscription page), we use Brevo (Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France). Brevo may process your e-mail address, first name, your form entries, time of registration, IP address and newsletter usage data such as opening and click rates. Brevo’s servers are located in the European Union. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time via the unsubscribe link in every e-mail. More information: brevo.com/legal/privacypolicy
7. Beta Testing and Launch Event
7.1 Registration
If you register for our beta testing and launch event, we process your first name, e-mail address, your choice whether you attend in person or watch the recording, your acceptance of the participation terms and the time of registration. We use this data to organise the beta testing and the event, plan attendance and send you information and the recording. Registration and related e-mails run via Brevo (section 6.3). The legal basis is the participation agreement (Art. 6 para. 1 lit. b GDPR) and your consent (Art. 6 para. 1 lit. a GDPR).
7.2 Photos and Videos
Our events are photographed and filmed. Recordings may show participants and are published on our website, in our newsletters and on our social media channels. The legal basis is our legitimate interest in documenting our events (Art. 6 para. 1 lit. f GDPR) and, where you are clearly identifiable, your consent given at registration (Art. 6 para. 1 lit. a GDPR). If you do not wish to be photographed or filmed, please tell us before or at the event. You can withdraw your consent or object to publication at any time by e-mail to info@myleihealth.ch; we will then remove the content from our own channels where possible. Content already shared by third parties may not be fully removable. On social media, the privacy terms of the respective platform also apply.
7.3 Feedback
During the beta testing, we process the feedback you provide together with your name and contact details to improve our products. We may also use feedback in anonymised form.
7.4 Retention
We keep registration data until the end of the beta testing and delete it no later than 12 months afterwards, unless you have subscribed to our newsletter or we are legally required to keep it longer. Photos and videos remain published until you withdraw your consent or object, or until we remove them.
8. Data Transfer to Third Countries
Our service providers (Google Firebase, Google Fonts, Brevo) or their subcontractors may process data outside Switzerland and the EU/EEA. Through Firebase Hosting’s global content delivery network and Google Fonts, data may be processed by Google LLC (USA) and other Google companies. Google LLC is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework; in addition, Google’s data processing terms provide for the EU Standard Contractual Clauses.
Where data is transferred to a country without an adequate level of data protection and no such safeguards apply, there is a risk that authorities there could access it without effective legal remedies for you. We limit such transfers to what is necessary.
9. Your Rights as a Data Subject
Under applicable data protection law, you have the right to:
- request information about the personal data we process about you
- have inaccurate data corrected or incomplete data completed
- have your data deleted or its processing restricted
- receive your data in a structured, machine-readable format or have it transferred
- object to processing based on our legitimate interests
- withdraw your consent at any time with effect for the future
You also have the right to lodge a complaint with a supervisory authority: the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or the data protection authority of your EU member state.
10. Changes to this Privacy Policy
We may update this Privacy Policy at any time, for example when we introduce new services. The version published on this website applies.
11. Contact
For questions about data protection or to exercise your rights, please contact us at info@myleihealth.ch.
Last updated: 14 October 2026