Zermatt Marathon Staff Radio

This Privacy Policy explains how Gornergrat Zermatt Marathon ("we", "us", or "our") collects, uses, and protects information when you use the Zermatt Marathon Staff Radio mobile application (the "App"). This App is intended exclusively for authorised event staff and volunteers.

1. Who We Are

The App is operated by the Gornergrat Zermatt Marathon organisation. For data-related enquiries, contact us at:

2. Information We Collect

We collect the following categories of information:

a) Account Information

• Full name
• Email address
• Password (stored in hashed form — never in plain text)
• Profile photo (optional, uploaded by you)
• User role (e.g. staff, volunteer, administrator)

b) Device Information

• Firebase Cloud Messaging (FCM) token — used to deliver push notifications to your device
• Device type and operating system version (collected automatically by Firebase)

c) Voice Communication Data

• Audio transmitted during push-to-talk (PTT) sessions is processed in real time via Agora's voice SDK. Audio is not recorded or stored by us.

d) Usage Data

• Channel activity (which channels you join and when)
• Communication timestamps used for analytics dashboards visible to administrators

3. How We Use Your Information

• To create and manage your staff account
• To authenticate you and grant access to communication channels
• To send push notifications — including emergency alerts, account approval confirmations, and event communications
• To display your name and profile in the in-app staff directory
• To generate anonymised analytics for event coordination supervisors
• To maintain the security and integrity of the platform

4. Legal Basis for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process your data under the following bases:

• Contract performance — to provide you with access to the App as part of your role at the event
• Legitimate interests — to ensure the safety and coordination of event operations
• Consent — for push notifications, which you may withdraw at any time in your device settings

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with the following service providers, strictly to operate the App:

All other data is stored on our own servers hosted in a secure environment. We do not share your data with any other third parties.

6. Data Retention

• Account data is retained for the duration of your engagement with the event and for up to 12 months afterwards, after which it is deleted or anonymised.
• Push notification tokens are removed when you log out or uninstall the App.
• Voice audio is never stored and is discarded immediately after transmission.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request deletion of your account and associated data
• Withdraw consent — disable push notifications at any time in your device settings
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at info@zermattmarathon.ch. We will respond within 30 days.

8. Security

We take reasonable technical and organisational measures to protect your data, including:

• Passwords are stored using industry-standard hashing (bcrypt)
• All data in transit is encrypted using HTTPS / TLS
• Access to administrative functions is restricted by role-based permissions
• Account registration requires manual approval by an administrator before access is granted

9. Children's Privacy

This App is intended for use by adults in a professional event-staff capacity. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has submitted data through the App, please contact us immediately.

10. International Data Transfers

Data processed by third-party providers (Agora, Google Firebase) may be transferred to and processed in countries outside Switzerland or the European Economic Area (EEA). These providers maintain appropriate safeguards under applicable data protection law (e.g. Standard Contractual Clauses).

11. Push Notifications

The App may send push notifications for:

• Emergency alerts broadcast by administrators
• Account approval confirmations
• New user registration alerts (administrators only)

You can disable push notifications at any time through your device's notification settings. Disabling notifications does not affect your ability to use the App.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact: