Privacy policy

This policy describes the personal data we process, why and how, in accordance with the Federal Act on Data Protection (nLPD) and its ordinance (OPDo).

1. Data controller

Michaël Ambass
Switzerland
Contact : contact form

For audio guides, each client organization (municipality, museum, tourist office, etc.) is the controller of its visitors’ data. We act on its behalf as a data processor under a data processing agreement.

2. Data processed

Audio guide visitors

Using an audio guide requires no account or identifying information. To measure usage (pages viewed, audio plays started and completed, language, device type and operating system, QR code scans and arrival channel: QR code, direct link, search engine, social network or campaign), the guide stores a random identifier in a cookie specific to the guide. This identifier is pseudonymous: it contains no name or IP address and is not shared with any third party. No IP addresses are stored in the statistics.

Progress, favourites and tours downloaded for offline listening are stored only on the visitor’s device. When the visitor allows it, GPS location is used on their phone to suggest nearby stops and is not sent to our servers.

Contact form

Name, organization, organization type, email address, optional phone number and message, so we can respond to your request. This data is kept for as long as needed to follow up on your request.

Studio users

Name, email address and encrypted password of content creators, as well as the content they publish (texts, images, recordings).

3. Hosting

Data is hosted in Switzerland by Infomaniak Network SA (Geneva), in its Swiss data centres.

4. Data processors

Some studio features use artificial intelligence services. Only tour texts are sent to these services, when a studio user starts the action; no visitor data is sent to them.

• OpenRouter (United States): automatic translation of tour texts, generation of voiceovers and ambient music. OpenRouter sends requests to model providers: Mistral AI (France) for voices and Google for music.

These transfers abroad are subject to appropriate contractual safeguards under the nLPD. [Transfer basis to review and complete]

External services loaded by audio guides

• OpenStreetMap: map tiles are downloaded by the visitor’s browser from tile.openstreetmap.org, which receives their IP address and the area displayed. The map is only loaded on pages that display one.
• YouTube (youtube-nocookie.com domain) and Vimeo: only on stops that include a video.
• Code added by the organization: an organization may integrate its own tools (analytics, chat, etc.). It is responsible for these tools and must inform visitors and obtain their consent where necessary.

5. Cookies

No advertising cookies are used. The cookies below are set by our own servers:

• guide_visitor — audio guides: random identifier for audience measurement, 1 year.
• guide_visit — audio guides: how the current visit started, 30 minutes extended on each page.
• guide_locale — audio guides: chosen language, 1 year.
• guide-audioch-session, XSRF-TOKEN — this site and the studio: session and form protection, for the duration of the session.

Progress, favorites and offline tours are stored locally in the visitor’s browser and are not sent anywhere.

6. Your rights

You can request access to, correction or deletion of your data, and object to its processing. Write to us using the contact form. You can also contact the Federal Data Protection and Information Commissioner (FDPIC).

7. Security

Data is encrypted in transit (HTTPS), passwords are stored in encrypted form, and access to data is limited to those who need it.