With this privacy policy, we inform you about the collection, processing, and use of personal data in accordance with both the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DPA). This statement applies to the use of our app, through which you can upload photos of your BeeHomes and record information about fostering activities in your garden.

Responsible party within the meaning of Art. 4 GDPR or Art. 5 DPA:

Wildbiene + Partner AG
Heinrichstrasse 267A
Phone number: +41 43 505 10 25
Email: datenschutz@wildbieneundpartner.ch

Data Protection Officer:
DATA-ORG GmbH, Jürgen Maurer
Email: j.maurer@data-org.de

We process personal data exclusively for the following purposes:

• Management of user accounts and app access
• Reception, storage, and evaluation of user contributions (photos, texts, promotion data)
• Improvement of our services and communication
• Compliance with legal requirements

Legal bases according to GDPR:

• Art. 6 para. 1 lit. a GDPR – Consent
• Art. 6 para. 1 lit. b GDPR – Performance of a contract
• Art. 6 para. 1 lit. f GDPR – Legitimate interest

Legal bases according to Swiss DPA:

• Art. 6 DPA – Processing for the performance of a contract or with consent
• Art. 31 DPA – Principles of lawful data processing

The app requires the following device permissions:

• Camera access: For photographing your BeeHomes and bee observations
• Location access: For geographical assignment of your observations
• Push notifications: For reminders and news
• Device information: Operating system, app version, device ID

Collected data:

• Photos (with optional location data, EXIF metadata)
• Promotion data (e.g., information on garden design, number of trees, nesting sites, date, location)
• Profile and contact data (name, profile picture)
• Authentication data (Auth-Tokens, User-IDs)
• Usage data (page views, interactions, session data)
• Device tokens (for push notifications: FCM/APNS)
• Technical data (IP address, browser, screen resolution)

Photos are considered personal data if individuals are directly or indirectly identifiable. In this case, your explicit consent is required. You have the right to revoke this consent at any time (GDPR: Art. 7; DPA: Art. 6).

Data will not be disclosed to third parties, except:

• You have given explicit consent
• There is a legal obligation (e.g., GDPR Art. 6 para. 1 lit. c)
• Data is transferred to commissioned service providers (processor/"Auftragsbearbeitung" according to Art. 9 DPA) with contractual safeguards
• Data transfer abroad only occurs if an adequate level of data protection is ensured (GDPR: Art. 44 et seq.; DPA: Art. 16 et seq.)

Services used:

• Firebase Authentication
• Google Sign-In and Apple Sign-In
• Cloudflare (Hosting, DB, Media, Analytics)
• Google Analytics, Cloudflare Web Analytics
• Firebase Cloud Messaging (Push Services)
• Shopify Storefront API (Product retrievals)
• Stadia Maps, MapLibre GL, CARTO (Map Services)
• ONNX Runtime (local AI image recognition without server transfer)

Your data will only be stored for as long as necessary for the stated purposes or as required by legal retention obligations. Thereafter, they will be deleted or anonymized.

According to GDPR (EU):

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent (Art. 7 para. 3)
• Right to lodge a complaint with a data protection supervisory authority (Art. 77)

According to Swiss DPA:

• Right of access (Art. 25)
• Right to rectification and erasure (Art. 32)
• Right to object to unlawful processing (Art. 30)
• Right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC)

We implement state-of-the-art technical and organizational security measures (e.g., encryption, access controls) to protect your data against unauthorized access, loss, or misuse.

We reserve the right to amend this privacy policy at any time. The current version will always be available in the app.