Privacy

1. Controller

The controller is Said Zejjari, acting under the name PilatusWeb, Weinberglistrasse 9, 6005 Lucerne, Switzerland, app@hipsmile.com, phone +41 76 460 65 60.

2. Scope and applicable law

The Swiss Federal Act on Data Protection (FADP) applies in the first instance. Where Regulation (EU) 2016/679 (GDPR) or UK law applies, those rules apply in addition. For users residing in the Kingdom of Morocco, Law 09-08 remains unaffected where mandatory. The same applies to other applicable rules, including in Tunisia, Egypt, the United Arab Emirates, Senegal, Côte d’Ivoire and other states where HipSmile is used. Rights exist only to the extent granted by the law that applies.

3. Categories of data

Website: technical server logs (IP address, time, resource, user-agent) as needed for operation and security. App, where used: account and profile data, location for the map, listings, messages, ratings, block and report lists, device and log data. The operator does not collect payment data for help between users unless expressly stated.

4. Purposes and legal bases

Processing is for operating the platform, displaying listings, security, abuse and fraud detection, handling enquiries and complying with the law. Where the GDPR applies: performance of a contract, legitimate interest in a secure service, consent where obtained, legal obligation. Under the FADP: processing that is suitable and necessary for the stated purpose. Consent may be withdrawn with effect for the future; withdrawal does not affect prior lawfulness.

5. Location

Location is used to show help nearby. Continuous tracking of movement is not the purpose. Location features can be limited in device settings; map functions then work only in a limited way.

6. Recipients

Data are not sold. Recipients may include technical processors, in particular hosting and Google Firebase; app stores under their terms; authorities and courts where legally required; partner organisations only where the help path requires it and the user chose that path.

7. Third countries

Transfers to countries without an equivalent level of protection occur only with a legal justification, in particular standard contractual clauses, an adequacy decision or valid consent where allowed.

8. Retention

Data are deleted or anonymised when no longer needed for the purpose, unless a legal retention duty applies. Server logs are overwritten after a short period; account and listing data last while the account exists or a matter is handled; reports last as long as needed to prevent abuse.

9. Rights

Where applicable law grants them: access, rectification, erasure, restriction, objection, portability, withdrawal of consent. Requests: app@hipsmile.com. There is no right to compel processing where legal duties or overriding interests stand in the way, in particular to prevent abuse.

10. Complaints

Switzerland: Federal Data Protection and Information Commissioner (FDPIC). EU/EEA: supervisory authority of the place of residence. Morocco: CNDP, where applicable. Other local authorities remain competent.

11. Children

HipSmile is not directed at minors. Children’s data are not collected knowingly. See Child safety.

12. Security and liability

Appropriate technical and organisational measures are taken. Absolute security of internet services is not warranted. The operator is liable for data-protection breaches only as mandatory law requires; otherwise the limits in the Terms of use apply.