Privacy
[OWNER: fill in and have this reviewed for the Swiss FADP (revDSG) and, for EU visitors, the GDPR.]
Controller. [OWNER: fill in name and postal address of the person responsible.]
Hosting. This static site is served by Cloudflare Pages. Cloudflare processes technical data (IP address, time, requested page) to deliver and protect the site. [OWNER: confirm and link Cloudflare's privacy policy.]
Map tiles. The interactive map loads map images from OpenStreetMap and, inside Switzerland, from swisstopo (geo.admin.ch). Your browser sends your IP address to these services.
Alerts. The alert sign-up is not live yet. When it is, your email address and chosen passes will be stored with [OWNER: email provider] only to send the alerts you asked for, and deleted when you unsubscribe.
Affiliate links. When you click "See best price", the shop and affiliate network may set cookies to record the referral. Passklar itself sets no tracking cookies. [OWNER: update if analytics are added.]
Pass planner. [OWNER: have this reviewed by a professional, FADP and GDPR.] - *Purpose:* calculating drive times from your start to the passes. No profiling, no advertising. - *What data:* the town or postcode you type, or, only if you tap "Use my location" and your browser allows it, your location. - *Rounding on your device:* your browser immediately rounds the location to the centre of the nearest postcode, or outside Switzerland to a grid of about 2 km. Only the rounded point is used; your exact location never leaves your device. - *No storage:* Passklar stores neither your start, your location nor your plans. For Swiss starts the whole calculation runs in your browser. - *Recipients:* (1) swisstopo (Federal Office of Topography, Switzerland): only when a typed name is not in our postcode table, your browser sends the search text and your IP address to the geo.admin.ch place search. (2) HeiGIT gGmbH (openrouteservice, Heidelberg, Germany): only for a start outside Switzerland; our server sends it the point rounded to 2 decimals, with no IP address or identifier. (3) Cloudflare (hosting, USA): processes the IP address and the rounded point for this request; the answer is cached for 24 hours per rounded point, with no link to you. Coordinates are not logged. [OWNER: confirm the US safeguards (Data Privacy Framework/standard contractual clauses) and Cloudflare logging; check whether HeiGIT offers a processing agreement.] - *Legal basis (for EU visitors):* [OWNER: confirm, e.g. GDPR Art. 6(1)(b) or (f).] - *Map apps:* "View route" opens Google Maps or Apple Maps with the waypoints (your rounded start and the pass ends). What happens there is governed by Google's or Apple's privacy policy.
Your rights. You can ask for access, correction or deletion: [OWNER: fill in contact email].
Notifications (pass openings, price alerts, weekend tour)
What is stored: your choices (passes, products, whether you want closings and the weekend tour), the language, the time of your consent and either your email address or your browser's push subscription (an address at the push service with two keys). No IP address, no device name, no location.
Where: in Cloudflare's KV storage (Cloudflare, Inc., USA) [OWNER: check the data location and safeguards: EU-US Data Privacy Framework / standard contractual clauses, data processing agreement]. Emails are sent through [OWNER: name the provider, e.g. Brevo (Sendinblue SAS, Paris)] under a data processing agreement [OWNER: sign the DPA]. Push messages go through your browser's push service (e.g. Google Firebase Cloud Messaging, Mozilla Push Service, Apple Push Notification service); their content is encrypted (RFC 8291) and the service only sees the delivery.
Purpose and legal basis: only sending the messages you asked for, based on your consent (Art. 6(1)(a) GDPR; Switzerland: Art. 6 and 31 FADP) [OWNER: have this reviewed]. You can withdraw it at any time with the unsubscribe link in every email or on the Notifications page.
How long: until you unsubscribe. Unconfirmed email sign-ups are deleted after 7 days, push subscriptions your browser ended at the next send. Against abuse, an encrypted hash of your IP address is counted for one hour (at most 10 sign-ups per hour); the IP itself is never stored.
On your device: with push, an unsubscribe key in browser storage (localStorage) so you can switch push off here again. The service worker keeps pass pages you visited for the offline view in the browser; these copies never leave the device.
Controller and requests: [OWNER: name, address, email address for privacy requests].