Privacy policy

FriDogs, Ruelle des Berges 3A, 1632 Riaz, Switzerland. For any question about your personal data, write to us at info@fridogs.ch.

This policy complements article 12 of the admission contract, which sets out the principle of confidentiality. The contract binds FriDogs and the dog owner; this policy, by contrast, covers every processing operation carried out on this website, including for people who have signed no contract.

We only collect the data the service needs. It falls into six groups:

• Account: name, email address, phone number, occupation, display language and password, the latter stored encrypted and never in clear text.
• Dog: name, breed, date of birth, sex, weight, microchip number, neutering, social behaviour, situations of discomfort, particularities, medication, allergies, meals, and the photo you add.
• Health and vaccinations: the photo of the vaccination record you upload, your confirmation that the DHPPI and kennel cough vaccinations are up to date, plus the validity date, the review comment and, where applicable, the note of vaccinations still to be completed, recorded by FriDogs.
• Reservations and payments: daycare days, courses, events, booked treatments, free-form requests and their messages, packages, subscription, credit balance, amounts paid and payment method.
• Technical and security data: IP address and browser attached to your sessions, two-factor authentication settings, anti-abuse counters and the security event log.
• Launch waiting list: if you ask to be told when booking opens, from the pre-launch page, we keep your first name, last name and email address.
• Opening-party RSVP: if you tell us you are coming via the pop-up on the site, we keep your first name, last name, the number of people you announced and, if you provide it, your email address. No account is created.

Your postal address and how you heard about FriDogs are used to manage our customer relationship; they are not used to create a public or advertising profile. The contact form is an exception: your name, email address and message reach us by email and are not recorded in the website database.

Every processing operation rests on a legal basis under the Swiss Federal Act on Data Protection (FADP) and, where you reside in the European Union, the GDPR.

Performance of the contract justifies managing your account, your reservations, your payments and your dog's health follow-up. A legal obligation requires us to keep the accounting records tied to payments. Our legitimate interest in protecting the website underpins the security and anti-abuse measures. Your consent, finally, covers any publication of photos in the gallery as well as the audience measurement described in section 10, which you may decline with no consequence whatsoever for your access to the site.

We sell no data and carry out neither profiling nor automated decision-making.

Before your first payment, you sign the admission contract directly on screen. We then keep the image of your handwritten signature, the date and time of signing, the version of the contract signed and the language it was shown to you in.

These elements are the proof of your agreement. They are never altered afterwards and serve no other purpose.

The vaccination records you upload let us check that your dog meets the health conditions required by article 3 of the contract, in the interest of every dog we look after.

These documents are never publicly accessible: they pass through a protected channel that checks your permissions on every request. Only you and the FriDogs team can open them.

Card and TWINT payments are handled by Payrexx AG, in Thun (Switzerland). You enter your banking details on the secure Payrexx page: they never pass through our servers and we never store them.

We keep only the amount, the currency, the payment method used, the transaction status and the technical identifiers needed for tracking and refunds.

Your data is passed only to the providers strictly necessary to run the website. Each acts on our instructions and solely for the purposes described here:

• Payrexx AG (Thun, Switzerland) — card and TWINT payment processing.
• Infomaniak Network SA (Geneva, Switzerland) — hosting of the website, the database, uploaded documents and the mailbox; contact form messages are kept there.
• Sentry (European region, Germany) — technical error detection. Security incident reports may contain the email address of the account concerned.
• Google Ireland Limited (Dublin, Ireland) — audience measurement of the site with Google Analytics, and only if you accepted it from the banner. Google then receives the pages you view, your device type, your browser, an approximate location derived from your IP address and a random identifier stored on your device; those data may be processed in the United States by Google LLC, on the basis of the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. If you decline, no Google script is loaded and nothing is sent to it.
• Telegram — the FriDogs team internal alert channel. Security alerts may contain the email address of the account concerned and travel through servers located outside Switzerland and the European Union.

Hosting, the database and the documents you upload remain in Switzerland. No data is sold or rented, and we use none of it for advertising purposes.

We keep your data only as long as necessary:

• Account, dog, vaccination records and reservation history: for the whole duration of the relationship, then three years after the last contact.
• Contract signature and payment-related records: ten years, in line with Swiss accounting retention obligations.
• Sign-in sessions: until they expire or you sign out.
• Security event log and anti-abuse counters: twelve months at most.
• Google Analytics audience measurement, if you accepted it: fourteen months at most, then deleted automatically by Google.
• Messages sent through the contact form: for as long as it takes to handle your request.
• Launch waiting list: until the opening announcement is sent, then deleted.
• Opening-party RSVPs: until the event, then deleted.

Once the period ends, the data is deleted or anonymised.

At any time you may:

• access the data we hold about you;
• have it corrected if it is inaccurate;
• request its deletion, subject to the legal retention periods set out above;
• object to processing based on our legitimate interest;
• receive your data in a machine-readable format, so you can pass it elsewhere;
• withdraw a consent already given, without calling into question what was done beforehand.

Some of these actions are available directly from your customer area. For the rest, write to us at info@fridogs.ch: we reply as promptly as we can. If our answer does not satisfy you, you may contact the Federal Data Protection and Information Commissioner (FDPIC), in Bern.

The site sets two kinds of cookie, and only one of them is left to your choice.

The cookies essential to its operation — keeping your session alive, security and abuse prevention — are always active: without them you could neither sign in nor book. They serve no advertising and track your browsing on no other site.

Audience-measurement cookies, on the other hand, are set only if you accept them from the banner shown on your first visit. These are Google Analytics, which tells us which pages are viewed, from what kind of device, and through which channel visitors found us. If you decline, no Google script is loaded and no such cookie is set. That measurement also covers the public pages only: your customer area and the administration are excluded from it.

Your browser remembers your answer to the banner locally; that value never leaves your device. To change your mind, clear the data your browser has stored for this site: the banner will be offered to you again.

Our error-detection tool measures a sample of loading times in order to spot outages. It sets no cookie and records neither your keystrokes, nor your screen, nor your browsing.