Questo documento è disponibile solo in inglese.

Privacy Policy (OpeningTimes)

Effective Date: October 19, 2025 Last Updated: January 28, 2026

This Privacy Policy explains how SwissOps Sàrl ("we," "us," "our," or "OpeningTimes") collects, uses, discloses, and protects information when you use our Service, including our website, web application, API, and embeddable widgets.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Who This Policy Applies To

This Privacy Policy applies to three categories of individuals:

  • Website Visitors: Individuals who browse our website (openingtimes.io) without creating an account
  • Customers: Businesses and individuals who create accounts and use our platform to manage POI data ("you" or "Customer")
  • End Users: Individuals who interact with our widgets embedded on Customer websites or access data via Customer applications

2. Information We Collect from Website Visitors

When you visit our website (openingtimes.io) without logging in or creating an account, we collect limited information to provide you with a functional and secure browsing experience.

2.1 Our Consent Management Approach

We respect your privacy and use a consent-first approach:

  • No tracking by default: We do not load analytics or marketing scripts until you provide consent
  • Consent banner: When you first visit, you will see a cookie consent banner where you can accept, reject, or customize your preferences
  • Your choice is remembered: Your consent preferences are stored in your browser for future visits
  • Easy to change: You can modify your preferences at any time by clicking "Cookie Settings" in our website footer

2.2 Data Collected Without Consent (Essential Only)

Even without your consent, we collect minimal data necessary for the website to function:

  • Technical logs: Your IP address, browser type, and access times may be temporarily logged by our servers for security and operational purposes
  • Essential cookies: Session cookies required for basic website functionality and to remember your consent preferences

2.3 Data Collected With Your Consent

If you consent to analytics cookies, we may collect:

  • Pages you visit and time spent on each page
  • How you navigate through the website
  • Your approximate geographic location (country/region level)
  • Device and browser information
  • Referring website (how you found us)

This data helps us understand how visitors use our website and improve the user experience.

2.4 External Content (Click-to-Load)

Our website may contain embedded content from third-party services (such as YouTube videos). To protect your privacy:

  • External content is not loaded automatically — no data is sent to third parties when you load the page
  • You must click to load — external content only loads after you explicitly click on it
  • Informed consent — by clicking to load external content, you acknowledge that data will be transmitted to the third-party service (e.g., YouTube/Google)

2.5 Locally Hosted Resources

To minimize third-party data transfers, we host resources locally whenever possible:

  • Fonts: All fonts are served from our own servers, not from external font services
  • Images and assets: Hosted on our infrastructure

3. Information We Collect from Customers (Logged-In Users)

When you create an account and use our Service, we collect:

3.1 Account Information

  • Name
  • Email address
  • Company name
  • Payment information (processed by our payment provider)
  • Account credentials (encrypted)

3.2 POI Data You Upload

  • Business names, addresses, and locations
  • Opening hours and schedules
  • Photos and images
  • Reviews and ratings
  • Contact information (phone, email, website)
  • Categories, features, and amenities
  • Notices and announcements
  • Any other data you choose to upload to the Service

Important: By uploading data to our Service, you grant us the right to host, process, store, and use this data to provide, maintain, improve, and promote the Service.

3.3 Usage Data

  • IP addresses
  • Browser type and version
  • Pages visited and features used
  • Time and date of visits
  • API requests (endpoints, timestamps, parameters, response codes)
  • Device information
  • Referring website

4. Information We Collect from End Users

When End Users interact with widgets embedded on your website or access data through your application:

4.1 Widget Interaction Data

  • IP addresses
  • Geographic location (derived from IP)
  • Browser type and device information
  • Widget views, interactions, and clicks
  • Search queries entered in widgets
  • Time spent viewing widget content
  • Referring page URL

4.2 Analytics Data

  • Session recordings and heatmaps
  • User behavior patterns
  • Feature usage statistics
  • Performance metrics

Important: We collect this data automatically when End Users interact with our widgets. This data helps us improve widget performance, analyze usage patterns, and enhance our Service.

5. How We Use Your Information

5.1 Website Visitor Data

We use Website Visitor data to:

  • Website Functionality: Ensure the website works properly and securely
  • Analytics (with consent): Understand how visitors navigate our website to improve content and user experience
  • Security: Detect and prevent malicious activity, fraud, and abuse
  • Service Improvement: Identify areas for improvement and develop new features

5.2 Customer Data

We use Customer data to:

  • Provide the Service: Host, process, and deliver your POI data via API, widgets, and web interface
  • Account Management: Manage your account, subscriptions, and billing
  • Communication: Send service updates, security alerts, and support messages
  • Improvements: Analyze usage patterns to improve features and performance
  • Marketing: Send promotional materials about our Service (you may opt-out)
  • Legal Compliance: Comply with legal obligations and enforce our Terms of Service
  • Operational Purposes: Train algorithms, improve data quality, develop new features, and create anonymized datasets

By using our Service, you acknowledge and agree that we may use your uploaded POI data for operational purposes, including but not limited to service improvement, algorithm training, quality assurance, and developing new features. This data may be analyzed, aggregated, and used internally to enhance our platform.

5.3 End User Data

We use End User data to:

  • Widget Functionality: Deliver widget content and enable interactive features
  • Analytics: Understand how End Users interact with widgets
  • Performance Optimization: Improve widget loading times and responsiveness
  • Service Improvement: Develop new features and enhance user experience
  • Aggregate Insights: Create anonymized statistics about widget usage
  • Security: Detect and prevent fraud, abuse, and security threats

6. Customer Obligations Regarding End Users

IMPORTANT: If you embed our widgets on your website or use our Service in applications accessed by End Users, you MUST:

6.1 Disclose Our Data Collection

You must inform your End Users in your privacy policy or terms of service that:

  • OpeningTimes widgets and services collect data about their interactions
  • Data collected includes IP addresses, location, device information, and usage analytics
  • This data is processed by OpeningTimes (SwissOps Sàrl) in accordance with this Privacy Policy
  • OpeningTimes may use this data for operational purposes, analytics, and service improvement

6.2 Obtain User Consent

You must obtain appropriate consent from your End Users for:

  • The use of cookies and tracking technologies by our widgets
  • The collection and processing of their data by OpeningTimes
  • The transfer of their data to Switzerland (where our Service is operated)

6.3 Provide Privacy Controls

You must provide your End Users with:

  • A link to this Privacy Policy
  • Information about how to opt-out or manage their privacy preferences
  • Contact information for privacy-related inquiries

Failure to comply with these obligations may result in suspension or termination of your account.

7. How We Share Your Information

7.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information or POI data to third parties for their marketing purposes.

7.2 Service Providers

We share data with trusted third-party service providers who assist us with:

  • Hosting Infrastructure: Cloud servers and CDN providers
  • Payment Processing: Secure payment gateways (they handle payment data directly)
  • Email Services: Transactional and marketing email delivery
  • Analytics Tools: Usage analytics and performance monitoring
  • Support Tools: Customer support ticket systems

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

  • Comply with legal processes
  • Enforce our Terms of Service
  • Protect our rights, property, or safety
  • Protect the rights, property, or safety of others

7.4 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity.

7.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot identify you or your End Users with third parties for research, marketing, or business purposes.

8. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: SSL/TLS encryption for data in transit
  • Access Controls: Role-based access with multi-factor authentication
  • Monitoring: Security monitoring and intrusion detection
  • Regular Backups: Automated backups with secure storage
  • Security Audits: Regular security reviews and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Data Retention

9.1 Customer Data

  • Account Data: Retained while your account is active
  • POI Data: Retained while your account is active and for 90 days after account deletion (unless you request immediate deletion)
  • Billing Records: Retained for 7 years for tax and accounting purposes
  • Usage Logs: Retained for 12 months

9.2 End User Data

  • Widget Analytics: Retained for 24 months
  • IP Addresses: Retained for 12 months
  • Aggregated Data: May be retained indefinitely in anonymized form

You may request deletion of your data at any time by contacting privacy@openingtimes.io

10. Your Rights (GDPR & Swiss DPA)

If you are in the European Economic Area (EEA) or Switzerland, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Request restriction of processing
  • Right to Data Portability: Request transfer of your data to another service
  • Right to Object: Object to processing of your data for certain purposes
  • Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  • Right to Lodge a Complaint: File a complaint with your supervisory authority

To exercise these rights, contact us at privacy@openingtimes.io

11. International Data Transfers

Our Service is operated from Switzerland. If you access our Service from outside Switzerland, your data will be transferred to and processed in Switzerland.

We ensure appropriate safeguards are in place for international transfers, including:

  • Standard Contractual Clauses (SCCs) where required
  • Adequacy decisions by the European Commission
  • Other lawful transfer mechanisms as applicable

By using our Service, you consent to the transfer of your data to Switzerland.

12. Cookies and Tracking Technologies

12.1 Our Consent Management Platform

We use a Consent Management Platform (CMP) to ensure compliance with GDPR and other privacy regulations. Our CMP implements Consent Mode v2, which means:

  • All non-essential cookies are blocked by default until you provide consent
  • Analytics and marketing scripts only load after you grant permission
  • Your consent preferences are stored in your browser and remembered for future visits
  • You can change your preferences at any time using the "Cookie Settings" link in our website footer

12.2 Cookie Categories

Necessary Cookies (Always Active):

  • Authentication and session management
  • Security and fraud prevention
  • Consent preference storage
  • Core service functionality

These cookies are essential for the website to function and cannot be disabled.

Analytics Cookies (Require Consent):

  • Usage analytics and performance monitoring (WireBoard Analytics)
  • A/B testing and feature optimization
  • Error tracking and debugging
  • Page view and session tracking

Analytics cookies are only set after you explicitly consent. We use privacy-focused analytics that can operate in cookieless mode when consent is not granted.

Marketing Cookies (Require Consent):

  • Advertising effectiveness measurement
  • Personalized content delivery
  • Cross-site tracking for marketing purposes

Marketing cookies are only set after you explicitly consent to this category.

12.3 Third-Party Services and External Content

YouTube Videos: Our website may contain embedded video content from YouTube. To protect your privacy, we use a click-to-load approach:

  • Video players are not loaded until you explicitly click to watch
  • No data is transmitted to YouTube (Google) until you choose to load a video
  • By clicking to load a video, you consent to YouTube's privacy policy and the transfer of data to YouTube's servers
  • YouTube may set cookies and collect data once the video is loaded

Other Third-Party Services: When you consent to analytics or marketing cookies, the following third-party services may process your data:

  • WireBoard Analytics: Privacy-focused analytics platform (cookieless mode available)
  • Google Analytics 4: Web analytics (only loaded with analytics consent)

All third-party services are subject to their own privacy policies.

12.4 Managing Your Cookie Preferences

You have several options to manage cookies:

  • Cookie Settings: Click the "Cookie Settings" link in our website footer to open the consent dialog and modify your preferences at any time
  • Accept or Reject All: When the consent banner appears, you can accept all cookies or reject all non-essential cookies with a single click
  • Granular Control: Choose which specific categories of cookies you wish to allow
  • Browser Settings: Configure your browser to block or delete cookies (note: this may affect website functionality)

12.5 Consent Withdrawal

You can withdraw your consent at any time by:

  1. Clicking "Cookie Settings" in our website footer
  2. Adjusting your preferences in the consent dialog
  3. Clicking "Save Preferences" to apply your changes

When you withdraw consent for a cookie category, we will stop setting new cookies in that category. Existing cookies may remain in your browser until they expire or you delete them manually.

13. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

If you believe we have collected information from a child under 16, please contact us immediately at privacy@openingtimes.io

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to Know: What personal information we collect, use, disclose, and sell
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
  • Right to Non-Discrimination: Not be discriminated against for exercising your rights

To exercise these rights, contact us at privacy@openingtimes.io

We do not sell personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via:

  • Email notification to your registered email address
  • Prominent notice on our website
  • In-app notification

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

16. Data Protection Officer

For privacy-related inquiries, contact our Data Protection Officer:

Email: privacy@openingtimes.io Address: SwissOps Sàrl, Sur-la-Croix 147, 1020 Renens, Switzerland

17. Complaints and Supervisory Authority

If you believe we have not handled your data properly, you have the right to lodge a complaint with a supervisory authority.

Swiss Federal Data Protection and Information Commissioner (FDPIC) Website: https://www.edoeb.admin.ch Email: info@edoeb.admin.ch

18. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data:

SwissOps Sàrl Email: privacy@openingtimes.io Support: info@openingtimes.io Website: https://openingtimes.io

19. Summary of Key Points

  • You share data with us when you use our Service, and we use it to provide, improve, and promote our platform
  • We collect End User data through widgets and APIs
  • You must disclose our data collection to your End Users if you use our widgets
  • You must obtain user consent for cookies and tracking
  • We use a Consent Management Platform that blocks non-essential cookies by default until you consent
  • External content (like YouTube videos) is only loaded after you click to view it, protecting your privacy
  • We do not sell your data but use it for operational purposes
  • Data is processed in Switzerland with appropriate safeguards
  • You have rights to access, correct, delete, and control your data
  • You can manage your cookie preferences at any time via the "Cookie Settings" link

By using OpeningTimes, you acknowledge that you have read, understood, and agree to this Privacy Policy.