DIYTRACKER

1. Controller

The controller for the processing of personal data within the meaning of the revised FADP is:

2. Data processed

• Account data (for invited contributors): email address, hashed password, admin status, invitation and login timestamps.
• Submitted content: event data, venue information, uploaded flyers, genres, links.
• Server logs: IP address, user agent, requested URL, HTTP status code, timestamp — stored in the logs/ directory for security and diagnostic purposes.
• Session cookie: a single, technically necessary cookie used to maintain the login session (Flask session). No tracking, no profiling.

3. Purposes of processing

The data are processed exclusively for operating the platform: authenticating invited contributors, displaying the event calendar, moderating submissions, and technical security (log analysis, abuse detection). No commercial exploitation, advertising or profiling takes place.

4. Legal basis

Processing is based on the overriding interest in operating a non-commercial community platform (Art. 31 para. 2 let. a revised FADP) and — for account data — on the contractual relationship with invited contributors.

5. Retention

• Account data: until the account is deleted on request or after prolonged inactivity.
• Submitted and published event data: retained as part of the archive.
• Server logs: rotated according to hosting configuration (max. 90 days).
• Session cookies: at most seven days from last access.

6. Recipients and third parties

The platform is hosted at [hosting provider, country of data processing]; the hosting provider necessarily has access, in the course of operations, to technical data and to the contents stored in the database.

No third-party tracking services are used. In particular, neither Google Analytics, Meta Pixel, Hotjar nor similar tools are deployed. Fonts, JavaScript and CSS libraries are, where possible, served locally to avoid data flows to third parties.

7. International data transfers

Personal data are transferred abroad only insofar as the hosting provider is located outside Switzerland. In that case, it is ensured that the recipient country provides adequate protection within the meaning of the revised FADP, or that suitable contractual safeguards are in place.

8. Your rights

Vis-à-vis the controller, you have the following rights: access to the data processed about you, rectification of inaccurate data, deletion of your data (subject to overriding interests), restriction of processing and objection to specific processing operations. Please send requests to kontakt@diytracker.ch.

9. Right to lodge a complaint

If you believe your data-protection rights are being violated, you can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) — www.edoeb.admin.ch.

10. Changes to this policy

This policy may be amended if the processing or the legal framework changes. The current version is always available on the platform; the date under "As of" indicates the most recent change.