Privacy Policy

1. General

Protecting your personal data is important to us. We process your data exclusively on the basis of applicable law (Swiss FADP and, where applicable, the GDPR). This privacy policy informs you about the main aspects of data processing in connection with api-hub.ch.

2. Controller

Email: kontakt@hedinger-digital.ch

3. Website visits

When you visit our website, general information is collected automatically. This information is stored in server log files and includes:

• Browser type and version
• Operating system used
• Referrer URL (the previously visited page)
• Hostname of the accessing computer
• Time of the server request

This data cannot be attributed to specific individuals. It is not merged with other data sources to identify persons.

4. Subscriptions and payment

For subscriptions and payments we use Stripe Checkout. Stripe processes the payment; we receive and store the customer data needed for access and billing, in particular the customer email address and Stripe customer and subscription IDs. Payment card data is handled by Stripe and is not stored by us.

Stripe (Stripe Payments Europe Ltd. or Stripe, Inc.) acts as a processor. Stripe may process data outside Switzerland; Stripe's contractual safeguards apply. Further information: stripe.com/privacy.

5. API usage

When you use our APIs we process API keys (stored hashed where applicable), request metadata, and usage metering data for billing and abuse prevention.

6. Cookies

We only use cookies that are technically necessary for the operation of the site. We do not use marketing cookies that require consent. If Umami is used for reach measurement, it runs cookieless on our own infrastructure in Switzerland, without full IP addresses and without personal user profiles.

7. External services

Stripe — payment and subscription processing (Stripe Payments Europe / Stripe, Inc.).

Umami — optional self-hosted reach measurement in Switzerland (cookieless, no personal profiles).

8. Your rights

You generally have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object

If you believe that the processing of your data violates data protection law, you may lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

9. Data security

We implement technical and organisational measures (TOMs) to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorised access.

10. Retention

We retain personal data only as long as necessary for contract performance, legal obligations, or the establishment, exercise, or defence of legal claims.

11. Changes

We may update this privacy policy so that it continues to meet current legal requirements or to reflect changes to our services.