Privacy policy
1. Controller
Swisstoggel, SwitzerlandEmail: info@swisstoggel.ch
This policy follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). We have not appointed a data protection advisor or a representative in the EU, as we are not obliged to do so under Art. 27 GDPR.
2. Summary
- This website sets no cookies. For anonymous visitor statistics we use Cloudflare Web Analytics, without cookies, without fingerprinting and without user profiles.
- Fonts and images are loaded from our own server. The only exception is Cloudflare's statistics script (see section 3). No content from Google, Facebook or other third parties is embedded.
- The server keeps technical access logs (server logs) for a short time.
- If you email us, we process your details in order to reply.
3. Hosting and server logs
The website is hosted on a server we operate ourselves in Switzerland. It is fronted by the Cloudflare service of Cloudflare, Inc., San Francisco (USA). Cloudflare provides the encrypted connection (HTTPS), protects the website against attacks and forwards requests to our server over an encrypted connection. In doing so, Cloudflare processes the technical data listed below, in particular the IP address, as a processor under Cloudflare's contractual terms. Cloudflare is certified under the Swiss-U.S. and the EU-U.S. Data Privacy Framework. With every request, the web server automatically processes the following data in log files:
- IP address of the requesting device
- date and time of access
- page or file requested, amount of data transferred, HTTP status code
- browser type and version, operating system, previously visited page (referrer), if transmitted by the browser
The purpose is the secure and stable operation of the website and defence against attacks. The legal basis is our overriding legitimate interest (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR). The logs are deleted or anonymised after 14 days at the latest and are not combined with other data.
Visitor statistics. For anonymous visitor statistics we use Cloudflare Web Analytics by Cloudflare, Inc., San Francisco (USA). It records the page visited, the previously visited page (referrer), browser and operating system, country and loading times in aggregated form. No cookies are set, no local storage in the browser is used, and visitors are not recognised across visits. The purpose is to understand which content is used and to improve the website. The legal basis is our overriding legitimate interest (Art. 31 para. 1 FADP; Art. 6 para. 1 lit. f GDPR). The transfer to the USA takes place under the Swiss-U.S. and the EU-U.S. Data Privacy Framework, under which Cloudflare is certified.
4. Contact by email
If you contact us by email (at info@swisstoggel.ch), we process your email address, the content of your message and any attachments in order to answer your request. The legal basis is the handling of your request (Art. 31 para. 2 lit. a FADP; Art. 6 para. 1 lit. b GDPR). We delete the data once the request has been dealt with and no statutory retention obligations apply. Our mailbox is hosted by Infomaniak Network SA, Geneva (Switzerland).
Contact form. If you write to us using the contact form at swisstoggel.ch/kontakt or swisstoggel.ch/en/contact, we process the type of message, the subject, your description, your email address and, if provided, your name, the app version and your device in order to handle your message and ask follow-up questions. The details are not stored on the web server but sent directly by email to our mailbox at Infomaniak Network SA, Geneva (Switzerland), and are not passed on to third parties. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time by email. We delete the message once it has been dealt with and no retention obligation applies.
5. Beta tests
If you sign up for a beta test of an app (using the form at swisstoggel.ch/beta or swisstoggel.ch/en/beta, or by email), we process the email address of your Google account and, if provided, your name in order to invite you to the test. The details from the form are not stored on the web server but sent directly by email to our mailbox at Infomaniak Network SA, Geneva (Switzerland). The legal basis is your consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time by email. The invitation is handled via Google Play (closed testing) or Apple TestFlight. The respective store operator receives your email address or account; its privacy policy applies. After the test has ended, we delete the list of testers.
6. YouTube and social networks
The video on the app page is played directly from our own server; nothing is loaded from YouTube. There is also a link to the same video on YouTube. Only when you click it does YouTube open in a new window. Your browser then connects to YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and transmits, among other things, your IP address. Google's privacy policy applies: policies.google.com/privacy.
The links to Instagram and YouTube in the footer are plain links. Only when you click them does the respective platform open; its privacy policy applies there (Instagram: Meta Platforms Ireland Limited).
7. Disclosure and transfer abroad
We do not pass on your data to third parties unless this is necessary to fulfil your request (e.g. store operators for the beta test) or required by law. A transfer abroad only takes place as described in this policy; Cloudflare, Inc., Google LLC and Apple Inc. are based in the USA. Switzerland recognises the Swiss-U.S. Data Privacy Framework for certified US companies; the EU recognises the EU-U.S. Data Privacy Framework.
8. Your rights
You have the right to information about the data concerning you, to rectification, erasure, restriction of processing, data portability, and the right to object to processing or to withdraw consent given. Please contact info@swisstoggel.ch. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with your competent supervisory authority.
9. Security
The connection to this website is encrypted with TLS (HTTPS). The server is updated regularly.
10. Changes
We update this policy when the website or the legal situation changes. The version published here applies.