Legal

Privacy statement

Which data the platform processes, for what purpose, for how long, and which rights you have.

Draft

This text is a draft and has not yet been legally reviewed. It describes the state of the platform factually; the reviewed version will replace it.

1. Controller

The controller for the processing on this website and for the operation of the platform is To be added (see imprint). The school concerned is responsible for the photos of its learners; the operator processes them on its behalf.

Please send questions to kontakt@validportrait.ch.

2. Which data is processed

Website: no accounts, no trackers. A cookie remembers the chosen language when you switch it.

School console: username, display name, role and a session cookie after signing in. Logs contain identifiers and error codes, no names.

Learners: personnel number, e-mail address or phone number, optionally a label and the language, as the school records them. Also the photo taken, the target formats cut from it and the measurements of the check.

3. For what purpose

The data serves one purpose: to collect a person's portrait photo on behalf of their school, to check it, crop it and hand it over to the school. There is no face recognition, no biometric features for recognising anyone are computed, and faces are not altered generatively.

4. For how long

A photo stays stored until the school has collected it or the link has expired. After that, the photo, the target formats and the personal references (personnel number, recipient, label) are deleted after a fixed period; the default is 30 days. A log with identifiers and codes, without names and without images, is kept for traceability.

5. Subprocessors

Hetzner Online GmbH, Germany: servers for the database, the image store, the check and the cropping.

Infomaniak Network SA, Switzerland: additional check of the image by an image understanding model. Only a preview of 768 pixels edge length is sent, without personal references.

There are no other recipients. The school may use its own e-mail service to send the invitations.

6. No disclosure, no trackers

Data is neither sold nor used for advertising. The pages load no external fonts, scripts or analytics.

7. Your rights

You have the right to access, correct and delete your data. Learners first contact their school, which placed the request; schools and everyone else write to kontakt@validportrait.ch.

8. Status

This policy describes the state of the platform under development. It is updated when the processing changes; the version in force is on this page.