Privacy policy

In short

• We use no advertising cookies and do not track you across other websites.
• Our visitor statistics work without cookies and only show us aggregated numbers.
• We only store what the website needs or what you give us yourself — for example your email address for the free account, your list or a bathing spot.
• Our database and our server functions run in Frankfurt (Germany). Some service providers are US companies; we only work with providers that offer recognised safeguards.
• You can ask for information and have data corrected or deleted at any time: [E-MAIL]. You can delete your free account yourself.

1. Who is responsible

[VORNAME NAME bzw. FIRMA] [STRASSE NR.] [PLZ ORT] Switzerland

Email for privacy matters: [E-MAIL]

We run the website 0–100° (previously also «SaunaFinder.ch»). This policy applies to the website, the free account, the venue access and our emails.

2. What data we process and why

2.1 When you visit the website

Each time a page is loaded, your browser sends technically necessary information to the servers of our provider Vercel: IP address, requested address, time, browser and operating system, language and the previous page. We need this to deliver the website, find errors and fend off attacks. Delivery runs over Vercel’s global network (usually from a location near you); our server functions run in Frankfurt. Vercel keeps the logs we can see only briefly (one hour to one day depending on the plan).

2.2 Visitor statistics

We use Vercel Web Analytics to see which pages are visited and how often. No cookies are set. Page views are counted with page address, previous page, country or region, device type, browser and operating system. A visit is recognised by a key derived from the request and discarded after 24 hours. We only see aggregated numbers, never individuals.

On listing pages we also count views and clicks (for example on «Website», «Phone» or «Directions») — as a plain number per day and listing, without cookies, without IP address and without any information about you. Only we and the venue concerned see these numbers.

2.3 Maps, place search, location and water temperatures

• Maps and aerial images are loaded by your browser directly from swisstopo (Federal Office of Topography, Switzerland), which receives your IP address. If swisstopo is unavailable, we load the map from OpenFreeMap instead (Hyperknot Software Kft., Hungary; uses Cloudflare’s delivery network).
• 3D view: only when you click «3D» on a map does your browser load elevation data (Mapzen Terrain Tiles) from Amazon Web Services (Amazon Web Services, Inc., USA), which then receives your IP address. Before that click, nothing is sent to Amazon.
• Place search: what you type into the search field is passed to swisstopo via our own server — without your IP address.
• Location: if you tap «Near me» or «My location», your browser asks for permission first. The location is only used to calculate distances or to place the dot on the map, and is passed in the page address for that purpose. We do not store it. When you add a bathing spot, we only store the point you set on the map yourself.
• Water temperatures are fetched by our server from the monitoring stations of the Federal Office for the Environment (via existenz.ch) and the City of Zurich. No data about you is transmitted.

2.4 List

Without an account, your browser stores the list only on your device (browser storage, see section 3). With an account, we store it in our database so you can see it on all your devices. If you share a list by link, the link only contains the saved places.

2.5 Free account

For the account we only need your email address. To sign in we send you a link by email; there is no password. You can optionally enter a display name; it appears publicly on bathing spots you add. We also store when the account was created and when you last signed in. Purpose: to let you use the list and add bathing spots, and to prevent abuse.

You can delete your account yourself at any time (Account → «Delete account»). We then delete your account, your list and your display name; what happens to bathing spots is explained in section 2.6.

2.6 Adding bathing spots (community)

When you add a bathing spot, we store: location on the map, name and type of the spot, description, access, safety notes, season, photos, your confirmations (photo rights, swimming allowed, rules for contributions), your account and your display name. The spot is shown publicly with your display name once it has been approved. We reduce photos in your browser; hidden camera data (for example the location where the photo was taken) is removed in the process. Photos are kept in publicly accessible storage so they can appear on the website.

If you delete your account, your published spots stay online without any link to your account and with «Community» instead of your display name. Spots that are not yet published are deleted together with their photos. If you also want published spots removed, delete them in your account beforehand or write to us.

If you suggest a change or report a problem, we store your suggestion or report with your account. The person who added the spot sees suggestions about it. An email informs us about new spots and reports.

2.7 Enquiries to a venue

With some partner venues you can send an enquiry through a form. We store name, email address, optionally phone, preferred date, number of people, type of enquiry, your message and the language. We forward the enquiry by email to the venue (which can reply to you directly) and show it in the venue’s area. You receive a confirmation by email. From receipt onwards, the venue is responsible for your data.

2.8 «For venues» contact form and emails to us

We store name, email address, optionally phone, venue, website, canton, requested package and message, and receive a copy by email. Purpose: to answer your enquiry and, if you wish, to prepare a contract. The same applies to emails you write to us directly.

2.9 Newsletter

When you sign up, we store your email address and the time and place of sign-up. You can unsubscribe at any time via the link in every newsletter or by email to [E-MAIL].

2.10 Venue access, registration and packages

For venue access we store email address, name, optionally phone, role at the venue, related listings, your message and our decision. We log changes to listings with date, account and email address so that we can trace and undo them. For packages we also process billing and payment data (billing address, amount, receipt of payment).

2.11 Website sync and translations with AI

For partner venues we automatically fetch the venue’s website and have an AI from the provider Anthropic detect changes to opening hours, prices and closures. We also translate the «From the venue» text into French, Italian and English with Anthropic. Editorial texts (listing descriptions, guide) are translated with DeepL or Anthropic. Only texts from venues or from us are transmitted — no visitor data. If a venue’s text contains names (for example of the team), these are transmitted too.

2.12 Videos

Some partner venue pages include videos from YouTube or Vimeo. They only load when you click «Play» — before that, nothing is sent to YouTube or Vimeo. After the click, the provider receives your IP address and technical information; we load YouTube in «no cookies» mode (youtube-nocookie.com) and Vimeo with the «do not track» setting. The privacy policies of Google or Vimeo also apply.

2.13 Google reviews and links to Google Maps

For some listings we show reviews from Google Maps. Our server fetches them from Google, and we show them for at most 30 days after the last fetch. They contain the reviewer’s name, rating and text. The small profile pictures are loaded by your browser directly from Google, which receives your IP address. Links to Google Maps (directions, map) only open Google when you click them.

2.14 Data about venues from public sources

For the directory we collect information about venues from public sources — mainly the venue’s website, municipalities, Google Maps and other public directories: name, address, venue contact details, opening hours, prices, offering, photos. For sole proprietorships this can be personal data. The purpose is a complete and up-to-date directory. Venues can have information corrected at any time or tell us if they do not want to appear.

2.15 No automated decisions, no profiling

We do not build profiles about you and do not make automated decisions that affect you legally. One exception of this kind: anyone with three approved bathing spots has new spots published immediately — a simple rule you can see in your account.

3. Cookies and browser storage

We only use what the website needs to work or what you choose yourself. You can delete or block cookies and browser storage in your browser settings at any time; sign-in, the list without an account and saved settings will then no longer work.

We set no advertising or tracking cookies. The visitor statistics (section 2.2) work without cookies. That is why there is no cookie banner on our site.

4. Who receives data

Only [VORNAME NAME] and people we expressly engage have access to personal data. We do not sell data.

Data is also received by:

• the venue you send an enquiry to (section 2.7), and the person who added a bathing spot, for suggestions about their spot (section 2.6);
• all visitors for content shown publicly (bathing spots with display name and photos);
• our service providers, who process data on our behalf:

We only hand over data to authorities if we are legally required to do so.

5. Data abroad

Our database (Supabase) and our server functions (Vercel) run in Frankfurt, i.e. in the EU. Some of our providers also process data in the USA (see table) — and because Vercel, Supabase, Resend and Anthropic are based in the USA, access from the USA (for example for support) cannot be ruled out even for data stored in Frankfurt.

For the EU, the Swiss Federal Council has found an adequate level of data protection. For the USA, this applies to companies certified under the Swiss-US Data Privacy Framework (since 15 September 2024). Where a provider is not certified, we rely on the European Commission’s standard contractual clauses, which are recognised by the Federal Data Protection and Information Commissioner (FDPIC) and included in our contracts with these providers. A copy of the safeguards is available on request.

6. How long we keep data

After that we delete or anonymise the data.

7. Data security

We protect your data with encrypted transmission (https), access rules in the database (everyone only sees their own data), sign-in without passwords, access only for authorised people and regular updates. Risks on the internet can never be ruled out entirely.

8. Your rights

At any time and free of charge you can:

• request information about the data we process about you,
• obtain your data in a common format,
• have incorrect data corrected,
• request deletion or object to processing — unless we are legally required to keep it,
• withdraw consent (for example for the newsletter) at any time.

Write to [E-MAIL]. We usually reply within 30 days. To make sure nobody gets hold of someone else’s data, we may ask for proof that the data is yours.

If you are not satisfied with our answer, you can contact the Federal Data Protection and Information Commissioner (FDPIC, Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch).

9. For people in the EU and EEA

Where the EU General Data Protection Regulation (GDPR) applies, we rely on:

• contract (Art. 6(1)(b) GDPR) for the account, venue access, packages and forwarding your enquiry,
• consent (lit. a) for the newsletter, location and loading videos,
• legitimate interest (lit. f) for operating and securing the website, cookie-free visitor statistics, the directory of venues and handling community contributions,
• legal obligation (lit. c) for keeping accounting records.

You also have the right to restrict processing and can lodge a complaint with the data protection authority in your country of residence.

10. Changes

We update this policy when our website or the law changes. The version on this page applies. We inform account holders about significant changes by email.