Privacy

Controller

Rupert Quaderer is responsible for processing personal data and can be reached at rupert@derhirte.com.

Rupert Quaderer
Allmend 34
6023 Rothenburg
Switzerland
rupert@derhirte.com
www.derhirte.com

Scope

These notices cover swiss-sites.ch including accounts, listings, invoices, emails and admin features. They are not a substitute for individual legal advice.

What we process

Accounts: email, display name and authentication data. Listings: website URL, texts, place, category, logo, cover and optional gallery images. Invoices: billing address, amount, status and payment reference. Technical security and audit logs. With statistics-cookie consent: anonymous views and clicks on “Open website” without storing IP addresses. Contact emails: message content and sender address.

Purposes

Data is used to run the directory: registration, submission and review, public display, owner dashboard, premium invoices, support, abuse prevention and – only with consent – simple usage statistics for listing owners. Personal data is not sold and not used for third-party advertising.

Legal bases

We process data under the Swiss FADP, in particular to perform contracts (account, listing, invoice), based on overriding interests in running the directory securely, and based on your consent for optional statistics cookies. Where the EU GDPR applies, we additionally rely on Art. 6(1)(b), (f) and (a) GDPR.

Recipients and processors

Access is limited to us and technical processors needed for hosting, database, storage, email and operations (currently especially Vercel, Supabase and Resend). They receive only what is required for their task and may not use the data for their own purposes.

Disclosure abroad

Data may be processed by hosting and email providers in Switzerland, the EU/EEA or – if a provider operates servers elsewhere – in third countries. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent protections.

Retention

Accounts and listings are kept while the account or listing exists or legal retention duties apply. Invoice data is kept as long as commercial and tax rules require. Statistics and deduplication cookies expire according to the periods stated in the cookie notice. Logs are kept only as long as needed for security and auditability.

Cookies and similar technologies

Necessary cookies enable sign-in, session and security. The consent cookie stores your choice. Optional statistics cookies (e.g. ss_ev) prevent double-counting of views and clicks and are set only if you agree. There is no marketing tracking and no sharing with ad networks. You can change your choice at any time.

Open cookie settings

Your rights

Under the Swiss FADP you may request access, correction, deletion, restriction, data portability and objection where the law provides for it. You may withdraw cookie consent at any time. Write to the contact email. You can also edit public listings in the dashboard or ask for a review. Where available, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

Security

We take appropriate technical and organisational measures (access controls, encrypted connections, role-based permissions). Absolute security on the internet cannot be guaranteed.

Changes

We may update this privacy notice when the service, technology or legal situation changes. The current version is always published on this page.