Legal
Privacy Policy
Last updated: October 2026
Augury Medical GmbH ("Augury Medical", "we", "us") operates the website augurymedical.com (the "Site"). This policy explains what personal data we collect, why we collect it, and your rights regarding that data.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Depending on where you live, you may have additional rights under the data protection laws of your jurisdiction, including US state privacy laws. To exercise these rights, contact us using our contact form .
This policy covers augurymedical.com only. Our clinical decision support application has its own privacy notice.
1. Data controller
The data controller for personal data processed via this Site is:
Augury Medical GmbHc/o Bern University of Applied Sciences TI
Quellgasse 21
CH-2502 Biel/Bienne
Switzerland
2. Data we collect
We collect personal data in the following situations:
Early Access form
When you request early access, we collect your first name, last name, email address, organization, professional role, and any message you choose to include.
Contact form and direct contact
When you use our contact form, we collect your first name, last name, email address, and your message. If you contact us by email or other channels, we process the information you provide. We use this data to respond to your enquiry.
Spam protection
Our Early Access and contact forms are protected by Cloudflare Turnstile, which processes your IP address and limited browser and device information to confirm that a submission comes from a person.
Usage and technical data
When you visit the Site, our hosting provider records standard server log data (IP address, browser type, pages requested, timestamps). We do not use this data to profile individuals.
3. Purposes and legal basis
We process personal data to respond to Early Access requests and discuss pilot participation, to answer enquiries, and to keep the Site secure and protect it from spam and abuse.
Where the GDPR applies, we rely on the following legal bases:
Pre-contractual steps (Art. 6(1)(b) GDPR): handling your Early Access request and discussing a pilot with you.
Legitimate interests (Art. 6(1)(f) GDPR): responding to enquiries, operating and securing the Site, and preventing spam and abuse.
Legal obligation (Art. 6(1)(c) GDPR): where Swiss or EU law requires us to retain or disclose certain data.
4. Service providers
We use the following service providers, who process personal data on our behalf under data processing agreements:
Vercel, Inc. (USA)
Website hosting and delivery. Processes server log data, and form submissions in transit to our CRM.
HubSpot, Inc. (USA)
CRM and contact management. Stores form submissions and correspondence. Our account is hosted in HubSpot’s EU data region.
Cloudflare, Inc. (USA)
Turnstile spam protection on our forms.
We do not sell your personal data or share it for advertising purposes.
5. International transfers
Our service providers are based in the United States and may process personal data there. For these transfers, we rely on the providers’ certification under the Swiss–US and EU–US Data Privacy Frameworks or, where that is not available, on standard contractual clauses recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and approved by the European Commission.
6. Retention
We keep Early Access and contact form data for as long as needed to handle your request and any resulting pilot discussion or business relationship. If there has been no further contact, we delete it within 24 months of our last interaction, unless the law requires us to keep it longer or you ask us to delete it sooner.
Server log data is kept by our hosting provider for a limited period for security and operational purposes and is then deleted automatically.
7. Your rights
Depending on where you live, you may have the right to:
- —Access the personal data we hold about you
- —Have inaccurate data corrected
- —Have your data deleted ("right to be forgotten")
- —Object to or restrict processing of your data
- —Receive your data in a portable format
You also have the right to lodge a complaint with a data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU/EEA, it is the supervisory authority in your country of residence. Residents of certain US states may have additional rights under their state’s privacy laws.
To exercise any of these rights, please use our contact form or write to us at the address in Section 1. We may need to verify your identity before acting on your request. We will respond within 30 days, or within any shorter period required by applicable law.
9. Changes to this policy
We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
10. Contact
Questions about this policy or how we handle your data can be submitted via our contact form, or in writing to the postal address in Section 1.