Privacy and cookies

1. Responsible and scope

The data controller is Option Web Binggeli, Gregory Binggeli , Chemin du Bas-du-Crêt 40, 2013 Colombier, Switzerland. For any request relating to personal data: info@option-web.ch.

This policy affects SatellAItes on satellaites.osa.network. It does not describe other Option Web sites or sites opened by external links. It falls within the framework of the Swiss Federal Data Protection Act (LPD, revised, sometimes called nLPD) and the General Data Protection Regulation (GDPR) where applicable. The scope includes the home page, interactive map, analytics, alerts and the API portal.

2. Data and purposes

• Connection and security: the servers receive the information necessary for the connection, including the IP address, requested URL, date, time and browser information. A technical session protects exchanges with the application and its actions against unauthorized requests.
• Settings: language, theme, map/globe mode, filters, layers and visualization settings are saved in your browser to find your choices.
• Geolocation: The recenter button asks for browser permission. The position and its precision are used to place a mark and to center the view; this mark remains in memory of the page. Recentering causes the tiles corresponding to the area to be loaded. The analyzes or observations requested around a point transmit their coordinates to the server and, depending on the layer, to the provider concerned. Do not select a confidential location for a shared query.
• Consultations and analyses: the requested dates, zones, parameters and acquisitions can be kept with the results and their origin in the service's databases and caches. Observations and analyzes use a shared space: they do not constitute a private folder specific to your browser. Alert registrations and their professional profiles are kept separately in a private database, without a public list of subscribers.
• Subscribe to alerts: Your email address, name and boundaries of the monitored area are recorded to send you the requested alerts. Confirmation of the address is done by e-mail, without a password. Company, role, industry, and interests (timing, GNSS clocks, timing, and PNT) are optional. Agreement to be contacted by Option Web is a separate choice, unchecked by default; it is not necessary to receive alerts. Exportable commercial contacts are limited to confirmed addresses having given this agreement, with its date and version. The private link allows you to withdraw this agreement without stopping the alerts; unsubscribing also removes eligibility for commercial contact.
• Contact: if you write by e-mail, your address and the content of your request are used to respond to you and process your request for rights.
• Reception and language: the site uses the browser language, then your explicit choice. It does not infer your language from your location. Fonts, translations, logo and presentation scenes are served by the site. The browser does not contact a translation service to display the page.
• Account API: verified email address, declared site and purpose of use, quotas and resource requests are retained to manage access. Keys are stored as a hash; Account data is not exposed by the card. The API registration is separate from alerts and commercial consent.

Public aircraft, station, and event data comes from sources listed in the app. An identifier or a trajectory can, depending on the context, be linked to a person; a public origin does not remove applicable rights. The indicators are not used to make individual decisions that produce legal effects for you. AI illustrations are files prepared in advance: viewing them does not transmit your data to an AI model.

3. Fundamentals of treatments

When the GDPR applies, the operation and security of the service are based on the legitimate interest in providing reliable mapping and preventing abuse (art. 6, par. 1, let. f). Responses to a request for service may relate to pre-contractual measures or the contract (let. b), and compliance with legal obligations in let. c. Optional location and optional processing requiring consent is based on consent (let. a), which can be withdrawn. The Swiss LPD imposes in particular transparency, proportionality, finality and security; it does not reproduce the list of legal bases of the GDPR identically.

4. Cookies and storage in your browser

The site does not currently have an advertising tracker or audience measurement integrated by Option Web. It therefore does not require you to accept non-existent marketing categories. The rules relating to cookies and similar technologies also apply to local storage.

These settings are only used to find the functions and choices of the interface. You can delete them below or block storage in your browser; certain settings will then no longer be memorized. The HttpOnly cookie cannot be deleted using this button: use the “Clear data from this site” command in your browser. Refusing technical cookies may prevent access to the functions of the API.

The button does not delete acquisitions already saved on the server or downloaded exports. If unnecessary tools are added, their activation must be preceded by the required choice, with an equivalent possibility of refusal and withdrawal.

5. Recipients and external connections

Option Web and its technical service providers access the data necessary for operation. The deployment uses MaxiHoster hosting. The processing and duration of its logs and backups must be distinguished from the application storage described below; contact Option Web to obtain contractual details specific to this hosting.

• OpenFreeMap / Hyperknot Software Kft. (Hungary, EU) : basemap, styles and tiles downloaded directly by the browser. The provider receives the requested connection data and tile areas. See his privacy policy , including security logs and its CDN.
• NASA GIBS / Earthdata (United States) : terrestrial and cloud imagery downloaded by the browser. The queries contain the dates and areas of the imagery as well as the technical connection information. See NASA — confidentiality .
• RainViewer / Meteolab Inc. (United States) : the radar module, when used, contacts the service and its tiles. See his privacy policy . The processing specific to its mobile application or its site does not mean that these tools are integrated into SatellAItes.
• Resend: ensures the sending of confirmation and alert emails. This service receives the recipient address, the name and boundaries of the zone appearing in the message as well as the private management link. Professional fields are not added to alert emails; the confirmation message recalls the commercial contact agreement if you have chosen it.
• Sources queried by our server : notably Open-Meteo, adsb.lol, CelesTrak, NOAA and NASA EONET. They receive the parameters useful for the request and the IP address of the server, without transferring the session cookie from your browser. Some weather or air requests include the coordinates of the chosen point. Links and sources appear in the application files.
• Photon / Komoot: Location searches entered into the map are sent to Photon, which uses the OpenStreetMap data. The provider receives the search and connection information; enter locations useful for your analysis and avoid unnecessary personal information.

Mapping services involve international communications, including to the EU and the United States. Broadcast outlet countries may vary. An HTTPS connection does not, in itself, constitute a legal guarantee of transfer. The actual processing locations, applicable adequacy decisions and, if necessary, contractual guarantees must be verified for the service providers used; no general certification of all these transfers is announced here.

You can disable optional layers and remove location permission in your browser. The basemap loads when the application is opened. This information page does not load any maps or remote services.

6. Conservation and security

Active or paused registrations and their profiles are retained for requested tracking. Expired or unsubscribed registrations and associated profiles are deleted at the latest after thirty days of retention during service transitions. Sending logs are also subject to a thirty-day retention. This private data is not exposed by public observation exports.

Sessions are kept in server memory until they expire or are restarted. Local preferences remain until cleared. The recenter position disappears when you remove it or leave the page, without erasing any previously transmitted queries or data.

Observation and analysis archives are persistent and subject to storage budgets; the current version does not perform automatic age-based purging. Their deletion is therefore a management operation, to be requested from Option Web if any data concerns you. Contact exchanges are kept to process the request and any associated obligations or disputes. The exact durations of the hosting and backup rotation logs are not attested by the application code.

Protections include HTTPS, session cookie attributes, origin and query controls, and collection and storage limits. They do not constitute an absolute guarantee. Do not enter sensitive data into this shared space.

7. Your rights and choices

Write to info@option-web.ch , specifying “SatellAItes” and the data or processing concerned. You can request access, rectification, erasure and, depending on applicable law and its conditions, limitation, opposition and delivery or portability of your data. You can withdraw consent without affecting the lawfulness of the processing already carried out. Proportionate identity verification may be necessary; do not spontaneously send a copy of your identity document.

A response is normally provided within the applicable deadlines: in principle 30 days for an access request according to the LPD, and one month according to the GDPR, subject to justified legal extensions. Certain rights may be limited by a retention obligation or the rights of third parties.

You can contact the Federal Data Protection and Transparency Officer (PFPDT) in Switzerland or to the competent supervisory authority in the EEA where the GDPR applies. Reading this policy does not constitute obligatory acceptance or a waiver of your rights.

8. Evolution of this policy

This page is updated when treatments evolve. Modifications requiring new consent do not take effect simply by continuing to browse.