Privacy Policy

Kneely takes the protection of your personal data seriously. This policy explains what data is collected, why, and how it is handled. Processing is governed by the Swiss Federal Act on Data Protection (revDSG / nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller within the meaning of revDSG Art. 5(j) and GDPR Art. 4(7) is the operator of the Kneely research project, a private individual in Switzerland (first-name contact: Sven), reachable at contact@kneely.ch. Kneely is a non-commercial research project operated by a private individual; it is not a registered company. Full operator identity and a postal contact can be provided on legitimate request — for example, in response to a data-subject rights request under revDSG Art. 25–32 / GDPR Art. 15–22.

2. Data We Collect

Technical data: when you visit this website, your browser transmits an IP address, browser type, and time of access. Such data is stored in short-lived server logs (up to 30 days) and then deleted. Survey and form data: if you voluntarily complete a survey or contact form, we collect the information you provide. When you submit a survey, the browser identifier (user agent) and the language/source of the submission are stored alongside your responses, for the integrity of the research dataset (e.g. fraud detection) and kept together with the survey data per section 4. Email addresses are collected only if you explicitly opt in at the final screen of a survey. Essential cookies are used to remember your selected language (NEXT_LOCALE); no tracking cookies, no fingerprinting, and no third-party analytics are used. This website is not primarily directed at children; surveys concerning families affected by Juvenile Osteochondritis Dissecans (JOCD) are intended to be completed by parents or legal guardians. Minors under 16 should not submit personal data without a parent or guardian acting on their behalf.

3. Purpose and Legal Basis

Technical data is processed to deliver the website securely and reliably (overriding legitimate interest — revDSG Art. 31(2)(c), GDPR Art. 6(1)(f)). Survey and form data are processed on the basis of your explicit consent (revDSG Art. 31(1), GDPR Art. 6(1)(a)) for the following purposes: (a) medical device research, needs-finding, and product development; (b) publication of aggregated, anonymised findings — in academic papers, on kneely.ch, in presentations, in investor and partner communications, and in any materials supporting the Kneely research project; (c) regulatory, ethics-committee, and funding submissions where anonymised survey insight is relevant. Verbatim quotation of an individual response in a public-facing context (e.g. as a direct quote on the website or in a pitch deck) is only done with that individual's explicit prior consent, separately obtained. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

4. Processors, Storage, and International Transfers

We do not sell or share your personal data. Access is limited to the Kneely operator and the following data processors, each under a data processing agreement: Vercel Inc. for web hosting, Supabase Inc. for database (production data stored in Frankfurt, Germany), and Resend for transactional email. Although some processors are headquartered in the United States, production personal data is stored in EU regions. Any transfer to a third country occurs under appropriate safeguards, including EU Standard Contractual Clauses. Survey data is retained for the duration of the research project plus two years; opt-in email addresses are retained only as long as needed for follow-up.

5. Your Rights and Supervisory Authority

You have the right to access, rectify, delete, restrict, and port your personal data, and to withdraw consent at any time (revDSG Art. 25–32, GDPR Art. 15–22). To exercise these rights, contact contact@kneely.ch. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (EDÖB / PFPDT, edoeb.admin.ch) or, where applicable, with your local EU supervisory authority.