Besnik Saiti, Lauetstr. 37, 8112 Otelfingen, Switzerland, contact: besnik.xperia@gmail.com.
(a) Account data: email address and a cryptographically hashed password (the password itself is never stored). (b) Family data: the family-tree content entered by members (names, life dates, places, relationships, optional details such as social-media links) — including information about third parties entered by members. (c) Technical data: session cookies (technically necessary) and short-lived technical logs (e.g. IP-based access limiting against abuse). There are no advertising trackers, no analytics cookies, and no sharing for advertising purposes.
Processing is carried out to provide the service (performance of contract), to secure the service (legitimate interest, e.g. abuse prevention), and on the basis of your consent to the extent you enter content voluntarily.
Family trees naturally contain information about relatives who do not have an account themselves. This is entered on the members' own responsibility (see Terms of Use section 4) and is visible only to members of the same family group — never public. Even without an account you may, as an affected person, request access, correction, or deletion of information concerning you (contact: section 1); the Operator forwards this to the responsible family group or implements it.
Data is stored on servers in the EU. Transmission is exclusively encrypted (TLS); storage uses encryption at rest (AES-256-GCM). Access to family data is strictly limited to the members of the respective family group; joining requires an invitation and the family's approval. The Operator accesses content only where strictly necessary for operation, security, or legal obligations.
No disclosure to third parties takes place, except to technical service providers (server hosting, EU) as processors or where a legal obligation exists.
Account data is stored until the account is deleted. Family data remains stored as long as the family group uses the service. Backups are overwritten on a rolling basis. Technical logs are short-lived.
You have the right to access, rectification, erasure, restriction of processing, data portability (export function in the app), and objection, as well as the right to lodge a complaint with a data-protection supervisory authority. Requests to the contact in section 1.