Privacy policy

1. Who is responsible

Kimo Strupler, Salomon-Landolt-Weg 5, 8193 Eglisau, e-mail hello@seatline.ch, is responsible for this website and for the data Seatline processes for its own purposes (for example billing). We follow the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

2. Your employer’s data — our role

When a company uses Seatline, it decides which data about its employees is processed (for example who sits where). For that data the company is responsible and we process it only on its behalf. If you are an employee with a question about your data, please contact your employer first; we support them in answering.

3. What we process

Website: we use no tracking, no analytics, no advertising and no third-party cookies. Our servers record technical logs (IP address, time, page, browser) for security and error analysis.

Sign-in: from your Microsoft work account we receive your name, e-mail address and Microsoft user and organisation IDs. Your password never reaches us.

People directory: if your company’s Microsoft 365 admin approves it, Seatline reads each employee’s name, e-mail, department, job title and whether the account is active, once a night. Nothing else.

Seating: seats, floor plans, assignments, reservations, planned moves, and a history of who changed what and when.

Billing: company name, billing e-mail, address and VAT number entered during checkout. Card and payment details are handled by Stripe only; we never see full card numbers.

Error reports: if something breaks in your browser, the error message and the page address, with personal details removed.

4. Why

To provide Seatline and support, to keep it secure, to bill subscriptions and to meet legal duties. Under the GDPR the legal bases are the contract (art. 6(1)(b)), our legitimate interest in a secure and working service (art. 6(1)(f)) and legal obligations (art. 6(1)(c)). We do not sell data and do not use it for advertising.

5. Where your data is stored

All Seatline data, backups and logs are stored in Switzerland, in Microsoft Azure’s region Switzerland North (Zurich).

Sign-in runs through Microsoft Entra ID, part of your company’s own Microsoft 365. Payments are processed by Stripe Payments Europe Ltd. (Ireland); Stripe may transfer data to the USA under recognised safeguards (Swiss–US and EU–US Data Privacy Framework, standard contractual clauses).

6. Service providers

Microsoft (hosting and sign-in, Switzerland), Stripe (payments, Ireland/USA), Hostpoint (domain and e-mail, Switzerland). They process data only as needed for their service and under contracts that protect it.

7. Cookies

Only cookies that are needed for Seatline to work: an encrypted sign-in cookie (ends when you sign out, at the latest after 10 hours), a short-lived cookie during Microsoft sign-in (a few minutes) and, if you choose a language, a language cookie (1 year). No consent banner is needed because nothing tracks you.

8. How long we keep data

Seat history: as long as your company sets (12 months to 10 years; 24 months unless changed). People who left are anonymised after that period.

When a company stops using Seatline, we delete its workspace on request, and otherwise at the latest 6 months after the subscription or trial ended. Technical logs: 30 days. Billing records: 10 years, as Swiss law requires.

9. Security

Encrypted connections (HTTPS) and encrypted storage, strict separation between companies in the database, sign-in only through Microsoft, keys kept in a secured vault, and access limited to what is needed.

10. Your rights

You may ask what data we have about you, have it corrected or deleted, receive it in a common format and object to processing. Write to hello@seatline.ch. If you think we handle your data wrongly, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to your EU data protection authority.

11. Changes

We update this policy when Seatline changes. The date at the top shows the current version.