Privacy Policy
1. Glossary
- Plugin : refers to the company Plugin.ch Sàrl CHE-366.084.733; also referred to as “we”, “our”, “us” in this document.
- Application : refers to the Plugin.ch online booking platform, accessible from the domain names plugin.ch.
- Club(s) : refers to an entity represented by one or more administrators (association, municipality, company, etc.).
- User(s) : refers to persons who have an account in a club’s database.
- Administrator(s) : refers to the person or persons responsible for the club who have full or partial access to the -Administration- section of the application (president, manager, secretary, instructor, etc.).

2. Introduction
Plugin.ch Sàrl (CHE-366.084.733) provides an online booking platform (plugin.ch), also referred to as “we”, “our” and “our” in this document.
We attach great importance to the trust you place in us by choosing our online booking solution. We therefore diligently protect the privacy and confidentiality of your personal data.
This privacy policy applies to all our services, whether accessed online or through any other platform or device (hereinafter collectively referred to as “the application”).
By accepting this privacy policy, you consent to the processing of your personal data by Plugin for the purposes specified below.

3. Processing of personal data
Plugin processes your club and your personal data for the following purposes:
- Setting up your administrator account and your club account.
- Managing your administrator account and your club account.
- Contacting you about relevant matters associated with your personal user account or your club account.
- To monitor unauthorised use or abuse of our services, or to detect, investigate or prevent activities that may violate our policies or be fraudulent/illegal.
- To process your enquiries and provide technical support by e-mail or telephone.
- To process payments by the club for subscriptions to our services.
- To communicate with you directly, including by sending you newsletters, promotions and special offers.
- Analysing trends, administering or optimising our offerings, monitoring usage or traffic patterns.
- Creating your user account in the club in which you are registered.
- Verifying your identity using authentication mechanisms.
- Sharing your personal data with the administrators and users of the clubs with which you are associated (i.e. the clubs that include you in their list of users).
- Managing your bookings in the club where you make bookings.
- Informing the club administrators about your booking interactions (creating a booking, cancelling a booking, modifying a booking).
- Recording audit information on your booking interactions (for audit purposes by the club).
- To process your enquiries and provide technical support by e-mail or telephone.
- Contacting you about relevant matters associated with your personal user account or your club account.
- To monitor unauthorised use or abuse of our services, or to detect, investigate or prevent activities that may violate our policies or be fraudulent/illegal.
- Preventing fraudulent, illegal or malicious activities targeting the application and Plugin’s servers.
- To process payments you may make in the clubs (purchase of booking tickets, payment of a membership fee, etc.).
- Analysing trends, administering or optimising our offerings, monitoring usage or traffic patterns.

4. Data collected
Plugin collects the following personal data concerning club administrators/users:
- first name and last name,
- e-mail address,
- telephone number(s),
- organisation name (optional),
- Full address.
We also collect the following data at club level:
- club contact details (e-mail address and full postal address),
- club geolocation (latitude/longitude),
- telephone number(s),
- website URL,
- time zone and language information,
- payment API information (where applicable),
- information on bookable spaces (schedules),
- information on the club’s opening hours.
This information is necessary to set up your club account, manage the subscription to your account and contact you about relevant matters associated with your account.
We undertake that no data will be exchanged or sold to third parties on any medium whatsoever.

5. Site administrator & user
Our application is designed in such a way that a person with an administrator account in the club can also have a normal user account in the same club and also in another club registered on the platform.

6. Data processors
From time to time, we may use third-party service providers as data processors for the purposes specified above. Processing by these third parties takes place in accordance with our instructions. These parties are bound by data processing agreements and confidentiality agreements.

7. Security
In accordance with data protection laws, strict security procedures are observed within Plugin in order to prevent the misuse of personal data and site data and unauthorised access.
In order to protect and safeguard the personal data and club data provided to us, we have implemented and use appropriate professional systems and procedures. In addition, we have implemented and use security procedures and technical and physical restrictions for the access to and use of the club’s personal information. Only authorised employees may access personal information in the performance of their duties in connection with our services.

8. Data breaches
If we become aware that a data breach has occurred, we will notify the data subjects and the competent supervisory authorities no later than 72 hours after becoming aware of it.

9. Payment gateway API data protection
Plugin protects the private keys of the online payment gateway on several levels. Security measures include, but are not limited to:
- SSL encryption is used to transfer API information to Plugin’s application servers.
- API information is encrypted with the AES-256 algorithm before being stored on our servers.

10. Credit card information
Raw credit card information does not come into contact with the servers on which our application is hosted. All credit card information is handled by online payment gateways such as PayPal or Stripe or Twint, via a connection secured by the TLS protocol. Plugin and the clubs are unable to access unmasked credit card data.

11. Control of club details and data
You can view and modify the data you store with us in the “Members” section
The club or the administrator/user who proves their identity has the option of requesting from Plugin, by e-mail:
- the verification of the personal data concerning them or their club that has been collected by Plugin or by the club,
- the communication of a copy of this data, provided free of charge, insofar as such a request is not abusive, in particular by its repetitive and disproportionate nature.
The club may terminate its account at any time and request the permanent deletion of all corresponding data (settings, users, bookings, etc.). The termination request must be made by contacting us by e-mail or by post.

12. Competent authorities
We may share and disclose details and information concerning an administrator or a user of your club to a government or investigative authority if required by law (or any regulation having the force of law), legal proceedings, a criminal investigation, a court order or a subpoena. We may also disclose your personal data if this is strictly necessary for the prevention and detection of criminal acts.

13. Changes to this statement
Our application is constantly evolving and, as such, we may change the way in which we collect, transmit and process personal data and any other information we deem necessary. This statement may therefore be amended from time to time to reflect the latest changes.

Contact us
If you have any questions or would like further information, please contact us by one of the following means:
Postal address:
Plugin.ch
rte de La Lise 13
1937 Orsières
SWITZERLAND