1. Data controller
Marco Schulz · Schulz Media
Eichenstrasse 13, 8280 Kreuzlingen TG
info@blogpilot.ch
2. Collection and processing of personal data
We only collect and process personal data that we need to provide our services or that you provide to us voluntarily (e.g. via the contact form). Processing takes place in accordance with the Swiss Data Protection Act (FADP) and, where applicable, the EU GDPR.
3. Hosting & server logs
This website is hosted by Vercel Inc. (USA). Server logs are created on every visit (IP address, date/time, user agent, referrer). This data is used solely for security and performance purposes and is automatically deleted after 30 days.
4. Contact form & e-mail
If you contact us via the contact form or by e-mail, we store the data you submit (name, e-mail, phone, message) to process your enquiry. We do not pass this data on to third parties.
5. SEO check tool
If you use our SEO check tool, we store the URL analysed, the scores and your IP address for a maximum of 60 days for statistics and spam prevention. No personal data about you is collected (no name, no e-mail).
6. Cookies & analytics
We do not use tracking cookies. We may use Plausible Analytics (cookie-free, privacy-friendly) for anonymous traffic measurement, with no personal data and no profiles.
7. Your rights
You have the right to information, correction, deletion and restriction of the processing of your data. A short e-mail to info@blogpilot.ch is enough.
8. Embedded third-party content
This website loads 3D content from Spline (spline.design) and fonts from Google Fonts. When these resources are called, data is transmitted to the respective providers (IP address, browser information). We only load third-party content when necessary.
Security check (Cloudflare Turnstile). We protect the registration, website check and workshop sign-up forms from automated requests using the Turnstile service provided by Cloudflare, Inc. (USA). When the form is loaded and submitted, technical information (including IP address, browser information and the result of the check) is transmitted to Cloudflare. Entries you make in the form, such as name, e-mail or phone number, are not transmitted to Cloudflare. The legal basis is our legitimate interest in protection against misuse. If the service is unavailable, you can still submit the form.
Privacy in the Schulz Media app (iOS)
The following sections apply in addition if you use the Schulz Media app (customer portal, app ID ch.schulzmedia.blogsystem). The app is intended exclusively for existing Schulz Media customers.
9. Account and login data
A personal user account is required to use the app. We process your e-mail address (login and identification), your password (stored exclusively encrypted/hashed, never in plain text) and your name or company name (assignment to your customer account). The legal basis is the performance of the contract with you (Art. 31 revFADP or Art. 6(1)(b) GDPR). This data is stored for the duration of the customer relationship and then deleted in line with statutory retention periods.
10. Content in the customer portal
In the app, you manage and approve the blog posts created for you. We store the approval status, timestamps of actions (e.g. approvals) and the associated content in order to handle the approval and publishing process.
11. Push notifications (Firebase Cloud Messaging)
If you enable push notifications, we inform you about new posts awaiting approval. We use Firebase Cloud Messaging (FCM), a service provided by Google Ireland Limited or Google LLC, for sending these. For this purpose, a device- or installation-specific push token is generated and transmitted to Google so that the notification can be delivered to your device. This transfer may involve processing in third countries (including the USA); Google is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition. You can disable push notifications at any time in your device settings. More information: Firebase privacy.
12. Data storage and backend (Supabase)
App data (account, content, approvals) is stored in an encrypted database at Supabase. The server location is the European Union (Frankfurt, AWS eu-central-1). As a rule, no storage takes place outside the EU; the exception is the delivery of push messages via Google described in section 11.
13. Data security
We protect your data with technical and organisational measures that reflect the current state of the art:
- Encrypted transmission: All communication between the app and server is exclusively TLS-encrypted (HTTPS).
- Encrypted storage: The database is encrypted at rest.
- Password protection: Passwords are stored exclusively as a cryptographic hash and are never known to us in plain text.
- Access restriction: Access is restricted to the respective customer account via authentication and row-based permissions (Row Level Security).
- Data minimisation: Only the data required to operate the portal is collected.
14. No tracking in the app
The app uses no analytics, advertising or tracking services. There is no tracking across apps or websites (in the sense of App Tracking Transparency). Your data is not sold or passed on to third parties for advertising purposes.
15. Your rights regarding the app
You have the right to access, correction, deletion, restriction of processing and data portability. On request, we'll delete your app account and the associated personal data. A short e-mail to info@blogpilot.ch is enough.