Privacy policy
This policy explains which personal data Onconic processes, why and how, in line with the Swiss Federal Act on Data Protection (FADP).
Controller
Nicolas Desbaillets, Onconic, Lausanne, Switzerland · contact@onconic.ch
No patient data
Onconic is not designed to process patient data. Entering patient data in any form or area of the site is not allowed. Tools planned for the member area work with anonymised data.
Data processed
Contact form and access requests
Name, email address, institution, message, language, date sent and status of the request. Purpose: to answer your request and, for a membership request, to review it and open your access. The request is forwarded by email to Onconic administrators.
Member accounts
Email address, name, role (physician, assistant, pharmacist, administrator), password (stored only as an irreversible hash), creation and sign-in dates, and technical sign-in logs (IP address, timestamp). Purpose: authentication, role-based access control and security of the service.
Conferences and courses
Approved members can add or edit events and state that they will attend. Each change is recorded with its author and date. Other members see your attendance under your name only if you allow it in “My account”; your email address and phone number are shown to them, so they can reach you by email or WhatsApp, only if you also agree to be contacted. Both options are off by default and can be withdrawn at any time; without them, other members only see that a member is attending. This information is never public. Purpose: helping Hive members meet at conferences.
Members who attend an event can add the title of their talk (visible to other members under their name only if they allowed it in “My account”) and, once the event has started, a short written note about what they took away (“takeaway”), shown to other members in the same way. These contributions can be edited or deleted by their author at any time; an administrator can delete a note for moderation. A private calendar link lets your calendar app (Apple, Google, Outlook) read the events you attend, their deadlines and your talks; it contains a secret code that you can renew at any time on the Conferences page, which makes the old link stop working.
Notifications
If you turn on notifications in “My account”, your browser gives us a technical address for your device (a push subscription: an address at the push service of your browser vendor and two encryption keys). It is used only to tell you when another member attends a conference you attend. It is deleted when you turn notifications off on that device or when the push service reports it as expired. Messages are encrypted: Apple, Google or Mozilla, which run the push services, relay them without being able to read them.
Visiting the site
As with any website, the servers delivering the pages and technical libraries receive your IP address and technical information about your browser. Onconic uses no audience measurement, no advertising and no tracking cookies. To keep you signed in, your browser stores a session token in its local storage; it is removed when you sign out.
Providers and processing locations
- Supabase (Supabase Inc., USA): accounts, database and files, hosted in the Zurich region (Switzerland).
- Infomaniak Network SA (Geneva, Switzerland): sending and receiving email.
- GitHub Pages (GitHub Inc., USA): delivery of the public pages.
- jsDelivr: delivery of a technical library required for sign-in.
Some of these providers are based in the United States. Where data may be accessible there, the safeguards required by the FADP apply, in particular the Swiss-U.S. Data Privacy Framework or standard contractual clauses. Your data is neither sold nor used for advertising.
Retention
- Contact requests: no more than 24 months after they are handled.
- Member accounts: while the account is active; deleted on request.
- Technical logs: limited period set by the providers.
Your rights
You may request access to your data, its correction or deletion, and object to its processing, by writing to contact@onconic.ch. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).
Changes
This policy may be updated. The version published on this page applies.
Last updated: 30.10.2026