Proxymm Science AG – CMEx™ (fully owned by Proxymm Science AG)
Effective Date: September 1st 2026 | Last Updated: September 1st 2026
This Privacy Policy explains how Proxymm Science AG and CMEx™ (fully owned by Proxymm Science AG) ("we", "us", "our", or the "Company") collects, uses, discloses, and protects personal data in connection with our platform and services, which connect:
This Privacy Policy applies to all users of our website and platform, including Learners, Hosts, Experts, Mentors, Mentees, Speakers, Consulting Clients, and co-promotion partners (collectively, "you" or "users").
Proxymm Science AG is a company incorporated under the laws of Switzerland, with registered address Scheuchzerstrasse 83, 8006 Zürich, Switzerland. CMEx™ is fully owned by Proxymm Science AG and is the name of the platform used for medical education purposes.
For the purposes of applicable data protection laws, Proxymm Science AG generally acts as the data controller for the personal data described in this Privacy Policy. Where a Host or Partner Organization elects to independently manage its own profile on the platform, that Host or Partner Organization becomes responsible for determining the purposes and content of its own profile data, and Proxymm Science AG's access to that data is thereafter restricted to designated administrative personnel (currently our Chief Technology Officer and Founder/CEO) for administrative, security, support and payment-processing purposes.
Our platform includes an Experts feature, through which medical experts, thought leaders, and subject-matter experts may be booked for on-demand mentorship and consulting. Depending on the learning objectives of a session, participants may discuss clinical case information — including test results and other clinical details relevant to diagnosis or treatment management. Participants are expected to anonymize or de-identify any patient-identifying information before or during these discussions. However, we do not control the content of these discussions and cannot guarantee that all identifiable patient information will be excluded.
Where such sessions are recorded (see Section 2.4, Session Recording, below), any clinical case information discussed may be retained as part of that recording. We intend to restrict access to session recordings to the participating Mentor/Mentee or Consultant/Consultee, and we are assessing additional encryption measures to further protect this content from unauthorized access.
We may record and store sessions conducted through the platform, including Expert consulting, mentorship, speakership, and peer-to-peer consultation sessions. Retention periods for recordings depend on your subscription package. Recordings are intended to be accessible only to the relevant session participants, and we are working to implement additional access and encryption controls.
Where Learners are placed with a Host clinic, hospital, or healthcare facility, they may encounter third-party patient information in the course of their on-site placement. Any such patient information is governed by the Host facility's own confidentiality obligations and applicable healthcare privacy laws, and is not directly collected by the Company. Some Host facilities require Learners to sign the Host's own observership or confidentiality guidelines prior to placement; where a Host has not provided such a document, we may apply our own baseline observership/confidentiality guideline to provide an initial layer of protection.
Healthcare Learning Facilities as Hosts may require other personal data information such as Birth Date, Gender, Marital Status and Passport information for their own record and further verification purposes.
We use personal data for the following purposes:
Where required under applicable data protection laws (including the EU/UK GDPR and the Swiss Federal Act on Data Protection ("Swiss FADP")), we rely on the following legal bases:
We may share personal data with:
We do not sell personal data to third parties.
Our servers and primary data processing infrastructure are located in Germany. Our Hosts, Experts, Learners, and other users are located in a range of jurisdictions worldwide. Accordingly, personal data may be transferred outside the European Economic Area (EEA), the United Kingdom, or Switzerland.
Where such transfers occur, we implement appropriate safeguards, such as the European Commission's Standard Contractual Clauses (together with, for transfers subject to the Swiss FADP, the addendum recognized by the Swiss Federal Data Protection and Information Commissioner for use with those Clauses), to protect your personal data.
We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the purpose for which it was collected.
Session recordings are retained according to your subscription package; please refer to your subscription plan terms for further detail. Credential verification records may be retained for the duration of your active participation on the platform plus any additional period required for compliance or safety purposes.
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; request data portability; and withdraw consent where processing is based on consent.
To exercise these rights, contact us at privacy@proxymm.com. We will respond to verified requests within the timeframes required by applicable law.
Our website uses cookies and similar technologies to operate the platform, remember preferences, and analyse usage. You can manage cookie preferences through your browser settings or our cookie consent tool, where available. Disabling certain cookies may affect platform functionality.
We apply security measures appropriate to our current stage of operations. As at the date of this Policy, these include restricting server access via SSH to a limited set of authorised usernames, and managing user authentication through our authentication provider, BetterAuth and Veriff. We are in the process of assessing further measures, including encryption for session recordings and regular security testing, which may include third-party security assessments in the future.
We do not yet have a fully documented incident response plan. In the event of a confirmed personal data breach, our current practice is to take remedial action as soon as possible and notify affected users within twenty-four (24) hours of confirming the breach, with further details provided as they become available. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our Services are intended for users who are at least 18 years of age or the age of digital consent in their jurisdiction. We do not knowingly collect personal data from individuals below this age. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.
Our platform may contain links to third-party websites or services, including those of Hosts, Experts, or co-promotion partners. This Privacy Policy does not apply to third-party sites, and we encourage you to review their privacy policies separately.
We have not currently appointed a formal Data Protection Officer, as we do not consider this necessary given our current scale of operations. We will reassess this position as our operations and processing activities grow, in line with applicable data protection laws. In the meantime, please direct any privacy inquiries to privacy@proxymm.com.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date, and where required by law, we will provide additional notice of material changes.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
