Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

2. General information on data processing

Wannja.ch is an online platform for coordinating dates and events. The protection of personal data is important to us. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Personal data is any information by which a person can be identified directly or indirectly.

3. Participation without a user account

A user account is required to create polls and sign-ups. Participation in a poll or sign-up is possible without an account. In this case, the following data may be collected:

• Title and description of the poll
• Dates and options
• Name or alias of the participants
• Optionally entered email addresses
• IP address and technical metadata

This data is used exclusively to conduct the poll.

4. User accounts and Pro features

When a user account is created, the following data is processed:

• User name
• Email address
• Password (stored only as a hash, never in plain text)

Pro users can additionally store the names and email addresses of participants in order to use them again for polls.

Login is exclusively by email and password. Social login (such as Google or Microsoft) is currently not offered.

5. Emails and notifications

Wannja.ch may send emails for date invitations and reminders. This function is available in particular to Pro users. Wannja sends these emails through its own mail server on the same server in Ireland; no external mailing service is involved.

Notifications are activated or deactivated by the respective creator of the poll. Individual participants cannot currently unsubscribe individually.

News about Wannja (optional): If you explicitly consent when registering, in the account step after creating a poll or event, or under «My account», you will occasionally receive emails with news about Wannja – not a regular newsletter. For this we use the email address, name and language of the account and store the time of consent as proof. You can withdraw your consent at any time: via the unsubscribe link in every such email or under «My account». After withdrawal the record is deleted; when the account is deleted, all data is deleted.

6. Payment processing

The payment service provider Stripe is used for paid Pro subscriptions. To pay, you are redirected to Stripe’s payment page; the data required for this purpose is transmitted directly to Stripe. Stripe may also process this data in the USA and is certified under the Swiss-U.S. Data Privacy Framework for this. Stripe cookies are only set on Stripe’s payment page, not on Wannja.ch. Stripe’s privacy policy applies.

Wannja.ch does not store any credit card or payment data.

7. Cookies

Wannja.ch uses the following types of cookies:

Essential cookies (always active)

• Session cookie (PHPSESSID) – Required for login and authentication
• Cookie settings (wannja_consent) – Stores your cookie preferences
• Answer memory (wj_pv_…, wj_sv_…, wj_ev_…) – Remembers on this device that you have answered a poll or sign-up, so you can change your answer instead of entering it twice. Contains only the edit key for that specific poll, no tracking. Valid until the poll expires, at most one year.

These cookies are required for the operation of the website and cannot be deactivated.

Functional cookies (optional)

• Google reCAPTCHA – Spam protection for forms

These cookies are only set with your express consent. You can change your settings at any time via the cookie banner.

8. Google reCAPTCHA

To protect against automated requests and spam, we use Google reCAPTCHA v3. This only happens if you have consented to functional cookies.

When reCAPTCHA is used, the following data may be transmitted to Google:

• IP address
• Browser information and time spent on the page
• Mouse movements and click behaviour

Without your consent to functional cookies, we use an alternative, privacy-friendly spam protection (honeypot method) that does not transmit any data to third parties.

Further information: Google Privacy Policy

9. Hosting and data location

The platform is operated on Microsoft Azure in a data centre in Ireland (EU). All polls, sign-ups, accounts and responses are stored there. Under Swiss law, the EU is considered to provide an adequate level of data protection.

Disclosure to the USA: Personal data can reach the USA in only two cases: with Google reCAPTCHA, and only with your consent (section 8), and when paying for a Pro subscription via Stripe (section 6). Google LLC and Stripe, Inc. are certified under the Swiss-U.S. Data Privacy Framework.

10. Retention period and deletion

Personal data is only stored for as long as is necessary for the intended purpose. Specifically:

• Polls and sign-ups: They are automatically archived 14 days after the response deadline has passed and once a set expiry date has been reached. Archived content can no longer be accessed via the shared links; the creator can still view or delete it in their account.
• Unconfirmed accounts: If an account is not confirmed within 48 hours, the account and the associated content are automatically deleted.
• Responses from participants: They are deleted as soon as the creator deletes the poll or sign-up – at the latest when their account is deleted.
• Security logs: To prevent misuse, IP addresses and the times of individual actions (e.g. login attempts, form submissions) are stored and automatically deleted after 24 hours.
• Server logs: For technical reasons, the web server logs every access (IP address, time, page accessed, browser identifier). These logs are rotated automatically; only a limited number is kept and older ones are deleted (this currently corresponds to around six months).
• Backups: The server is fully backed up every day (Microsoft Azure Backup, data centre in Ireland). Backups are kept for up to twelve months; deleted data may remain in backups for that period and is then removed automatically.
• Usage figures: Wannja counts per day how often certain actions occur (e.g. polls created, answers submitted, page views). Only the date, the type of action, the language and the number are stored – no IP address, no cookie, no information about individuals.
• Invoice and payment data: They are retained by the payment service provider within the scope of the statutory retention obligations.

Users can delete their account themselves at any time. In doing so, all associated polls, sign-ups, participant data and responses are removed.

11. Rights of data subjects

Data subjects have in particular the right to:

• Information about stored data
• Rectification of inaccurate data
• Erasure or restriction of processing
• Objection to processing
• Data portability (where applicable)

Requests are to be addressed to datenschutz@wannja.ch.

12. Changes to the privacy policy

This privacy policy may be amended at any time. The version published on Wannja.ch applies in each case.