Privacy
⚠ Draft. This statement has not yet been reviewed by a lawyer.
This site sets no cookies
confirmator.ch is a static site. It sets no cookies and embeds nothing from third parties – no counting pixel, no foreign script, no audience measurement. There is therefore no consent banner – where nothing needs consenting to, it is merely a nuisance.
⚠ We do keep a server log nonetheless, see the next section. It is created on our own server, never leaves it and serves operations only – but “no cookies” does not mean “no record”, and that should not be glossed over here.
Who processes
The operator (see legal notice).
What is processed
- When visiting this site: a log entry with a truncated IP address (the
last field is replaced by xxx), the time, the path requested without its query string (everything after ? is discarded) and, where available, the name of the connection. Its sole purpose is to see whether and from where this site is being visited; we set no cookies for it and create no identifier meant to tie a person's visits together. ⚠ That does not rule out attribution entirely: the same truncated address can appear in several entries. The full address is needed only to determine the connection name and is discarded within minutes. The entry is deleted automatically after 90 days – not truncated further, but removed.
- In the service at
confirmator.net: the account and appointment data you
enter, plus records of who confirmed what and when.
- When mail is sent: one log line per message with the recipient address,
the purpose, the delivery route, the delivery state and, in the case of a bounce, its reason. It is the only way to tell whether an invitation arrived, or why it did not. After 90 days the recipient address and the bounce reason are removed; the line remains without any reference to a person. After 365 days it is deleted entirely. The period is counted from the end of the appointment the message belongs to – an invitation sent months in advance therefore remains traceable until the appointment. If there is no such appointment, or it has been deleted, the time of sending counts.
If you share your booked times
Anyone working for several clients can set in their account that other planners on this platform may see that a period is booked. This setting is off unless you switch it on.
What is then shared is only the booked period – not the customer, not the appointment, not the place and not the title of the session. You can expressly exclude or expressly include individual organisations; the setting can be revoked at any time and takes effect immediately.
Legal basis
Performance of a contract and legitimate interest in secure operation. For invitations to participants, the prior consent of the inviting organisation applies; that organisation is responsible for its own legal basis.
Where it is processed
In a data centre in Nuremberg, Germany, certified to ISO/IEC 27001. The GDPR therefore applies; for Swiss customers, the revised Swiss Data Protection Act applies in addition.
Processors
- Email delivery provider. It receives the recipient address, subject and
message body – not your other appointment data.
Your rights
Access, rectification, erasure, restriction, objection and data portability. A message to datenschutz@confirmator.net is enough.
Retention
Mail log lines: the recipient address and the bounce reason for 90 days, the line itself for 365 days – each counted from the end of the corresponding appointment, or from the time of sending if there is none. Appointment data remains for as long as the account exists, then 90 days. Confirmation records are kept longer because they are the very purpose of the service; the period follows the statutory retention obligation of the inviting organisation.