Privacy.
We take the protection of your data — and especially of children's data — seriously. This is the long version. The short version: we collect only what we need, we store it on Swiss servers, and we never sell anything.
Who we are
Verein Waldkinder Uster (see Impressum). The data controller is Natasha Nagel, reachable at datenschutz@waldkinderuster.ch.
What we collect, and why
Website visitors
- Server logs — IP address, user agent, page accessed. Retained 14 days for security.
- Contact form submissions — name, email, message. Retained until the conversation is closed plus 12 months.
- No third-party tracking, no Google Analytics, no Facebook Pixel. We use a self-hosted, anonymised analytics tool (Plausible) that sets no cookies and reports no personal data.
Enrolled families
- Child profile — name, DoB, language, allergies, medical conditions, vaccinations.
- Photographs — see "Photo consent" below. Stored on Infomaniak (Swiss) servers, encrypted at rest.
- Banking — IBAN, mandate. Processed by ZKB; we never see the full card number.
Photo consent — how it works
Photographs of your child are governed entirely by the consent toggles in your parent portal. There are four levels:
- Private family album — visible only to signed-in parents. The default.
- Public website & social — opt-in. By default we restrict to "hands and backs only" — never the child's face.
- Press & printed materials — separate opt-in.
- Anonymised research — opt-in, faces blurred, no names.
You can change these at any time in the portal. Changes apply going forward — we will withdraw photos from active circulation, but cannot guarantee retrieval from a printed flyer already in someone's bag.
Your rights
Under both Swiss FADP and EU GDPR you have the right to: access your data; correct it; delete it ("right to be forgotten"); export it in a portable format; object to processing; and lodge a complaint with the EDÖB (Eidg. Datenschutzbeauftragter) at edoeb.admin.ch.
To exercise any of these, email datenschutz@waldkinderuster.ch. We respond within 30 days.
Cookies
We set one functional cookie, wku_session, only when you sign in to the parent portal. It expires when you sign out. We set no advertising cookies and no third-party cookies, ever.