LEGAL PAGE

Privacy Policy

Introduction

This Privacy Policy describes how DRUESELEN & CO. KLG | The Woman With The Hat ("we", "us", or "our") collects, uses, and protects personal data in the course of our MedTech consulting services and the operation of our website twwth.com.

Data Collection

We collect the following types of personal data:

  • Contact information (name, email, telephone number, company details)

  • Business information in the context of consulting activities

  • Communication records

  • Billing and invoicing information

  • Project-related information in the context of consulting services

  • Website usage data (see Section "Website Hosting & Analytics")

  • Newsletter subscription data (see Section "Newsletter and Email Communication")

Purpose of Data Processing

We process your personal data for the following purposes:

  • Provision of consulting services

  • Communication regarding project scope and deliverables

  • Invoicing and financial management

  • Fulfilment of legal and regulatory requirements

  • Maintenance of business relationships

  • Monthly pool management and reporting

  • Website analytics and improvement (see Section "Website Hosting and Analytics")

  • Newsletter delivery (see Section "Newsletter and Email Communication")

Legal Basis for Data Processing

Our data processing is based on:

  • Explicit consent

  • Fulfilment of contractual obligations

  • Fulfilment of legal obligations

  • Legitimate business interests

Data Protection and Security

We implement appropriate technical and organisational measures to protect your data:

Technical Measures

  • Password-protected and encrypted work devices

  • Encrypted email communication

  • Secure cloud storage with two-factor authentication

  • Use of client-specified secure platforms where required

  • Regular encrypted local backups

  • Multiple redundancy: local devices + external backup + cloud storage

Organisational Measures

  • Access controls for confidential information

  • Regular review and updating of security measures

  • Secure deletion of data after contract termination

  • Training and awareness for data protection

Legal Basis

  • Swiss Federal Act on Data Protection (DSG): Contract fulfilment (Art. 31(1) DSG), legitimate interest

  • For EU clients: Additional GDPR provisions by separate agreement

We continuously review and improve these measures in accordance with current best practice.

Data Retention

We store personal data only for as long as necessary:

  • For the duration of the consulting relationship

  • To fulfil legal and accounting requirements

  • Generally up to 10 years for accounting purposes

Your Rights

You have the right to:

  • Access your personal data

  • Rectification of inaccurate data

  • Deletion of your data

  • Withdrawal of consent to data processing

  • Object to data processing

  • Data portability

Data Disclosure

We do not sell or rent your personal data to third parties. Disclosure occurs only:

  • With your explicit consent

  • To fulfil legal obligations

  • To data processors (under strict confidentiality agreements) — see Section "Data Processes"

Cross-Border Data Transfer

For clients in Switzerland and the EU, we ensure:

  • Compliance with cross-border data protection regulations

  • Appropriate safeguards for international data transfers

  • Compliance with Swiss and EU data protection standards

Newsletter and Email Communication

When subscribing to our newsletter "Regulatory Runway":

  • We collect your email address and first name

  • We use double opt-in for registration

  • You may unsubscribe at any time via the link in each email

  • Data is processed exclusively for newsletter delivery

  • Usage is analysed only in anonymised form

Project-Related Communication

For pool-based consulting:

  • Documentation of services rendered

  • Monthly reports and evaluations

  • Coordination between departments

  • Tracking of pool hours and additional services

Country Profiles and Downloadable Content

When you request a country profile or other downloadable content via our website:

  • We collect your email address and first name via a form hosted on systeme.io

  • Your data is used to deliver the requested content and, where you have consented, to subscribe you to the newsletter

  • Requested profiles are sent via automated email through systeme.io

  • Your contact is tagged with the specific profile requested for internal reference only

Website Forms and Contact Requests

When you submit a contact form or enquiry on our website:

  • The data you enter is processed and stored via systeme.io

  • Data is used exclusively to respond to your enquiry

  • Contact data is retained for the duration of any resulting business relationship, or deleted upon request if no engagement follows

Website Hosting and Analytics

Website Hosting

This website is operated via the platform systeme.io. When you visit the website, technical data is automatically collected (IP address, browser type, operating system, access time). This data is stored on systeme.io servers in the European Union.

Provider: systeme.io SAS, France Privacy information: https://systeme.io/privacy-policy

Google Analytics 4

We use Google Analytics 4 to analyse website usage. Google Analytics uses cookies that enable an analysis of your use of this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server.

  • IP anonymisation is enabled

  • No data is shared with Google for advertising purposes

  • Data processing only with your consent (cookie banner)

  • Retention period: up to 14 months

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Privacy information: https://policies.google.com/privacy

Google Search Console

We use Google Search Console to analyse the discoverability of our website in Google Search. No personal data of website visitors is collected in this process. The data relates to aggregated search queries and clicks.

Cookie Consent Management (Cookiebot)

We use Cookiebot to manage your cookie consent preferences. Cookiebot stores your consent settings so they are respected on future visits.

Provider: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark Privacy information: https://www.cookiebot.com/en/privacy-policy/ For full details on cookies used, please refer to our Cookie Policy.

Data Processors

Third-party providers process personal data on our behalf can be requested. All EU-based data processors are subject to the GDPR. For Swiss visitors, the provisions of the Swiss Federal Act on Data Protection (DSG) apply in addition.

Contact Information

For data protection enquiries, please contact:

Annika Lörtscher DRUESELEN & CO. KLG | The Woman With The Hat Email: annika.loertscher@twwth.com UID: CHE-314.322.078

Changes to This Policy

We reserve the right to update this Privacy Policy as needed. You will be informed of material changes.

Version

Version: 2.0 Last updated: July 2026