Privacy policy
This policy explains which personal data Onconic processes, why and how, in line with the Swiss Federal Act on Data Protection (FADP).
Controller
Nicolas Desbaillets, Onconic, Lausanne, Switzerland · contact@onconic.ch
No patient data
Onconic is not designed to process patient data. Entering patient data in any form or area of the site is not allowed. Tools planned for the member area work with anonymised data.
Data processed
Contact form and access requests
Name, email address, institution, message, language, date sent and status of the request. Purpose: to answer your request and, for a membership request, to review it and open your access. The request is forwarded by email to Onconic administrators.
Member accounts
Email address, name, role (physician, assistant, administrator), password (stored only as an irreversible hash), creation and sign-in dates, and technical sign-in logs (IP address, timestamp). Purpose: authentication, role-based access control and security of the service.
Visiting the site
As with any website, the servers delivering the pages and technical libraries receive your IP address and technical information about your browser. Onconic uses no audience measurement, no advertising and no tracking cookies. To keep you signed in, your browser stores a session token in its local storage; it is removed when you sign out.
Providers and processing locations
- Supabase (Supabase Inc., USA): accounts, database and files, hosted in the Zurich region (Switzerland).
- Infomaniak Network SA (Geneva, Switzerland): sending and receiving email.
- GitHub Pages (GitHub Inc., USA): delivery of the public pages.
- jsDelivr: delivery of a technical library required for sign-in.
Some of these providers are based in the United States. Where data may be accessible there, the safeguards required by the FADP apply, in particular the Swiss-U.S. Data Privacy Framework or standard contractual clauses. Your data is neither sold nor used for advertising.
Retention
- Contact requests: no more than 24 months after they are handled.
- Member accounts: while the account is active; deleted on request.
- Technical logs: limited period set by the providers.
Your rights
You may request access to your data, its correction or deletion, and object to its processing, by writing to contact@onconic.ch. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).
Changes
This policy may be updated. The version published on this page applies.
Last updated: 28.10.2026