Privacy policy

1Controller

The controller for operating the platform is persist GmbH, Rütisteig 1, 5210 Windisch (see imprint). The tenant itself is responsible under data protection law for the content data recorded within its tenant; persist GmbH acts as a processor in this respect.

2Legal bases

We process personal data on the basis of the Swiss Data Protection Act (DSG) and, where applicable, the GDPR. Legal bases are contract performance (providing the platform), the legitimate interest in secure operation and statutory retention obligations.

3Processors

All connections are encrypted exclusively via HTTPS; media are delivered through signed, time-limited URLs. Appropriate agreements are in place with all processors. For place search and the base maps we call services of swisstopo (Swiss Federal Office of Topography): the text you type is sent server-side, without your IP address, to the swisstopo search service to resolve addresses, communes, cantons and parcels.

4What data we process

• Account data: name, email, role and tenant membership, for authentication (invite-only, no self-registration).
• Capture data: observations and actions with taxon, timestamp, location (lat/lng), notes and dynamic fields.
• Media: photos and audio (max. 3 per entry, ≤ 5 MB). EXIF location data is removed on upload; the site location is recorded separately only.
• Logs: auth events (login, logout, recovery) and administration audit (invites, roles, configuration).

5Cookies & local storage

We use exclusively technically necessary cookies (session, auth) as well as local storage for the language setting and, in the mobile app, offline drafts (local SQLite). There is no advertising or cross-site tracking. Details and your choice in the cookie banner.

6Retention

Auth events

90 days (configurable)

Admin audit

2 years (configurable)

Domain history

Unlimited: scientific integrity, no personal reference

7Your rights

You have the following rights. Account holders can exercise access and export directly in the settings.

8Data sharing

There is no sharing with third parties for advertising purposes. Any future transmission to ecological reference databases (karch, GBIF, Info Fauna/Flora) takes place exclusively for approved activities and only after explicit tenant configuration. Tenant data never leaves its own tenant (row-level security).

9Data protection contact

For data protection matters: hello@persist.ch, persist GmbH, Rütisteig 1, 5210 Windisch.