Skip to content
S2DSR

Legal

Privacy Policy

Version 1.0 · Effective [DATE]

At a glance

  • No cookies, no tracking. S2DSR sets no cookies, uses no analytics, advertising or tracking technologies, and stores nothing on your device.
  • Your computations stay with you. Models you run in the viewer run on your own device. Images and results are never sent to us.
  • Technical logs only. The only personal data we process is the technical information every web server receives, such as your IP address. We use it solely to deliver the service and keep it secure, and delete it after [30] days.
  • We never sell your data and never share it for advertising.
  • You stay in control. You have the right to access, correct and delete your data, and to complain to a data protection authority (section 9).

1. Scope and who we are

This Privacy Policy explains how [COMPANY NAME] (“S2DSR”, “we”, “us”) processes personal data when you use our website at [DOMAIN], the S2DSR viewer and the imagery services behind them (together, the “Services”).

The controller responsible for your personal data is:

[COMPANY NAME]
[STREET AND NUMBER], [POSTCODE AND CITY], [COUNTRY]
Privacy enquiries: [privacy@example.com]

EU representative. Under Article 27 GDPR, our representative in the European Union is [NAME, ADDRESS, EMAIL].

Data protection officer. We have not appointed a data protection officer, as the law does not require one for our processing. Please send any privacy question to the address above.

This policy is designed to meet the Swiss Federal Act on Data Protection (FADP), the EU General Data Protection Regulation (GDPR) and the UK GDPR.

2. Our approach

We build S2DSR to need as little personal data as possible. Where a feature can work without personal data, it does. Where it cannot, we limit what is collected, keep it for as short a time as possible, and never use it for purposes other than those described here.

3. Personal data we process

3.1 Accessing the website and the viewer

When you visit our website or use the viewer, your browser automatically sends technical information to the servers that host our Services, which record it in log files.

Data
IP address; date and time of the request; the page or file requested and the server’s response; amount of data transferred; referring website, if your browser sends it; browser type and version; operating system.
Purpose
To deliver the Services; to keep them secure and available; to detect, prevent and investigate attacks and misuse; to diagnose technical faults.
Legal basis
Our legitimate interest in providing secure and reliable Services (Art. 6(1)(f) GDPR). Under the FADP, this processing complies with the processing principles and requires no consent.
Retention
Deleted automatically after [30] days. Kept longer only where needed to investigate a specific security incident, and only until it is resolved.

We do not combine log data with other data, use it to identify you, or use it to build profiles.

3.2 Imagery and background maps

The viewer loads satellite and aerial imagery from our servers. These requests are recorded as described in section 3.1.

To show where the imagery is located, the viewer displays background map tiles provided by OpenStreetMap Foundation. To deliver them, OpenStreetMap Foundation necessarily receives your IP address and the technical information your browser sends with each request, and processes it under its own privacy policy: https://osmfoundation.org/wiki/Privacy_Policy.

3.3 Models you run on your device

The viewer lets you run a super-resolution model in your browser. The model file is downloaded from our servers, as described in section 3.1.

The computation itself takes place entirely on your device. The input images, the results and any measurements remain on your device and are never transmitted to us or to anyone else.

3.4 When you contact us

Data
Your email address; your name, if you provide it; the content of your message and any information you choose to include.
Purpose
To respond to your enquiry.
Legal basis
Our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR); where your enquiry relates to a contract or to steps before entering into one, the performance of that contract (Art. 6(1)(b) GDPR).
Retention
Deleted once your enquiry has been resolved, unless we are legally required to keep it for longer.

3.5 Are you required to provide personal data?

You are not required to provide any personal data. However, the technical data described in section 3.1 is transmitted automatically by every browser and is needed to deliver the Services; without it, the Services cannot be displayed. Contacting us is entirely optional.

4. Cookies, local storage and tracking

The Services set no cookies and store no data on your device: no local storage, session storage or similar technologies. We use no analytics, advertising, social media plugins, tracking pixels or fingerprinting.

Your browser may keep downloaded files, such as images, in its standard cache to load pages faster. This cache is controlled entirely by your browser, and you can clear it at any time.

Because we set no cookies and do not track you, we do not display a cookie consent banner. For the same reason, there is nothing to opt out of: browser signals such as Global Privacy Control or Do Not Track are respected by design.

5. Service providers and other recipients

We use carefully selected service providers to operate the Services. They receive personal data only to the extent required for their task.

  • Recipient
    [HOSTING PROVIDER]
    Purpose
    Hosting of the website, viewer and imagery servers, including the log files in section 3.1
    Location
    [COUNTRY]
    Safeguard
    Data processing agreement; [SAFEGUARD]
  • Recipient
    OpenStreetMap Foundation
    Purpose
    Delivery of background map tiles in the viewer (section 3.2)
    Location
    United Kingdom; tiles are delivered through a worldwide network of cache servers
    Safeguard
    Adequacy decision for the United Kingdom

Service providers that process data on our behalf do so only on our documented instructions and are contractually bound to protect it.

We may also disclose personal data where we are legally required to, for example to comply with a binding order of a court or authority, or where necessary to establish, exercise or defend legal claims.

We do not sell personal data, and we do not share it for advertising purposes.

6. International data transfers

We aim to process personal data in Switzerland and the European Economic Area (EEA). Switzerland and the EEA recognise each other as providing an adequate level of data protection.

Where a service provider processes personal data in another country, we transfer it only if:

  • the Swiss Federal Council and the European Commission have recognised that country as providing adequate protection, including transfers to companies certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework; or
  • the transfer is protected by standard contractual clauses approved for this purpose.

The countries to which personal data may be transferred are listed in section 5. You may request a copy of the safeguards we use by contacting us.

7. Retention

We keep personal data only for as long as necessary for the purposes described in this policy.

  • Data
    Server log files
    Retention
    [30] days; longer only to investigate a specific security incident
  • Data
    Correspondence with us
    Retention
    Until your enquiry is resolved, unless a longer period is required by law

8. Security

We protect personal data with technical and organisational measures appropriate to the risk. All connections to the Services are encrypted using HTTPS. Access to personal data is restricted to those who need it, data is minimised by design, and log files are deleted automatically.

9. Your rights

Subject to the conditions of applicable law, you have the right to:

  • Access: confirm whether we process your personal data and obtain a copy of it.
  • Rectification: have inaccurate personal data corrected.
  • Erasure: have your personal data deleted where there is no legal ground for us to keep it.
  • Restriction: have the processing of your personal data restricted.
  • Objection: object to processing based on our legitimate interests, on grounds relating to your particular situation.
  • Data portability: receive personal data you have provided to us in a structured, commonly used, machine-readable format, where applicable.

How to exercise your rights. Email [privacy@example.com]. Exercising your rights is free of charge. To protect your data, we may ask you to verify your identity. We respond within 30 days; where a request is complex, we may extend this period as permitted by law and will tell you why.

As log files contain only technical data, we usually cannot attribute them to a person from an IP address alone. To locate data relating to you, we may need details such as the date, time and IP address of your visit.

10. Supervisory authorities

You have the right to lodge a complaint with a data protection supervisory authority, in particular:

  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch
  • European Economic Area: the supervisory authority of your habitual residence, place of work or the place of the alleged infringement
  • United Kingdom: Information Commissioner’s Office (ICO), ico.org.uk

We would appreciate the opportunity to address your concern first, so please feel free to contact us.

11. Information for specific regions

EEA and United Kingdom. The legal bases for each processing activity are set out in section 3, your rights in section 9 and the supervisory authorities in section 10.

Switzerland. This policy fulfils the information duties of Art. 19 FADP. The recipients, and the countries to which data may be transferred, are listed in sections 5 and 6.

United States. We do not sell or share personal information for cross-context behavioural advertising. We do not process sensitive personal information, and we do not use personal information to make decisions that produce legal or similarly significant effects. Where the privacy law of your state gives you rights to access, correct or delete your personal information, you may exercise them as described in section 9. We will not discriminate against you for doing so.

Other countries. We apply the same high standard of protection to every user, wherever you are located.

12. Children

The Services are not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Links to other websites

The Services may contain links to websites operated by third parties. We are not responsible for their privacy practices. Please review the privacy policy of every website you visit.

14. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects for you.

15. Changes to this policy

We may update this policy to reflect changes to the Services or to applicable law. The current version is always available on this page, with its version number and effective date. Where changes are significant, we will give prominent notice on the website before they take effect.

16. Contact

For any question about this policy or the processing of your personal data, please contact:

[COMPANY NAME]
[STREET AND NUMBER], [POSTCODE AND CITY], [COUNTRY]
Privacy enquiries: [privacy@example.com]