Privacy policy
Last updated: 16.10.2026
1. Who is responsible
AVF Sàrl, trading as Corsalis, Ch. du Miroir 32, 1090 La Croix (Lutry), Switzerland, is the controller of the personal data described in this policy. Contact for data protection questions: welcome@corsalis.ch.
This policy follows the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, in particular to visitors and customers in the European Union, it applies as well.
2. What data we process
1. Contact data: name, title, practice or company name, postal address, email, telephone.
2. Professional data: medical specialty, MedReg or GLN number, proof of professional status, needed to verify that medical devices are sold only to qualified professionals.
3. Order and contract data: products, quantities, prices, delivery addresses, invoices, payments, reminders, leasing or loan contracts.
4. Device traceability data: serial numbers and lot numbers of the devices and sterile consumables delivered to you, and related service, maintenance, complaint and safety records, which we keep as importer of medical devices.
5. Communication data: the content of emails and messages you send us.
6. Website data: technical data (IP address, browser, pages visited, date and time). Analytics or advertising cookies are only set with your consent.
We do not process health data of your patients.
3. Why we process it
1. To answer enquiries and prepare offers.
2. To verify your professional status before selling medical devices.
3. To conclude and perform contracts, deliver, invoice, collect payments and provide after-sales service and training.
4. To meet our legal duties, in particular accounting and tax retention, and medical device traceability, vigilance and recall obligations.
5. To send professional information about our products, if you have not objected, or with your consent where required.
6. To operate, secure and improve our website.
Where the GDPR applies, the legal bases are the performance of a contract, compliance with legal obligations, our legitimate interests (secure operation, professional communication) and your consent (cookies, newsletter).
4. Who receives the data
1. Eufoton S.r.l., Trieste, Italy, manufacturer, for direct deliveries, warranty, service and medical device vigilance.
2. Carriers and customs agents (in particular DHL Express and GLS) for deliveries.
3. Our banks and payment providers (UBS Switzerland AG, Wise, Payrexx AG) for payments.
4. Our accountants and auditors.
5. IT providers acting on our behalf: Google (email, documents, cloud hosting in Switzerland and the EU), Infomaniak (website hosting in Switzerland), and the providers of our order and invoicing platform.
6. Authorities, in particular Swissmedic, where the law requires it.
5. Transfers abroad
Data may be processed in the European Union and the European Economic Area, which Switzerland recognises as providing adequate protection. Some providers may process data in the United States; in that case we rely on the Swiss-US Data Privacy Framework or on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner.
6. How long we keep it
Accounting records and invoices: ten years. Device traceability records: at least ten years after the last device was placed on the market, or longer where the law requires it. Enquiries without a contract: up to two years. Website logs: twelve months.
7. Your rights
You may request access to your data, its correction or deletion, object to its processing, withdraw your consent and, where the GDPR applies, request restriction or data portability. Legal retention duties may prevent deletion. Write to welcome@corsalis.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, with your local supervisory authority.
8. Security
We use technical and organisational measures appropriate to the risk, including restricted access, encrypted connections and logs of access to sensitive records.
9. Changes
We may update this policy. The version published on this website applies.