Notice for participants
The contracting party and invoice issuer is the operator ([to follow]); Wichtli is one of its brands.
Taking part in Wichtli is voluntary. Here is what happens with your data.
Who is responsible
Your company, which invited you, is the controller. Its privacy contact (and, if any, its data protection officer) is named in your invitation. Wichtli ([to follow]) processes your data only on behalf of your company. The data comes from your company's invitation (name, work email, optionally team and location) and from you.
What we store
- name, work email, optionally team and location (from your company);
- your acceptance, questionnaire, wishlist, hints, office days, desk and fun facts (from you);
- your messages in the anonymous chat;
- voluntary: food no-gos and intolerances, only from age 16 and with your own consent, encrypted;
- your home address only if a home delivery is ordered for you, encrypted.
Who sees what
| Topic | What applies |
|---|---|
| Who drew whom | Only your Wichtel knows you are their Wichtelkind, until the reveal. HR never sees it. |
| Reported messages | Reported messages are read only by the Wichtli team, and only the reported message. |
| Sender of a report | The HR contact learns who wrote a message only on their written request after a report (logged). |
| Pair memory | If your company chooses it, we keep, encrypted and only until the next round (max. 13 months), who drew whom; deleted on cancellation or at your request. |
| Declines | Declines are reported to no one. Admins see only ‹joined› or ‹not joined›; you find fellow participants only by search. |
| Advent calendar | HR never sees what you do in the calendar individually. |
| Join page | Your company may use a public join page (wichtli.ch/…). It shows only the company name and the join deadline and never reveals whether an email address is known or has already joined. |
| Chat and Advent mails | You can switch chat and Advent mails on or off at any time under «Me»; HR never sees your choice. |
| Office days | Only your Wichtel sees your individual office days. HR sees only a count per office and day, and only from 5 people. |
| E-cards and personal GIFs | A card is seen only by its sender and recipient (team cards by everyone taking part), and only after signing in. Cards to your Wichtelkind are signed ‹Your Wichtel›, all others with the first name. The Wichtli team reads a reported card like a reported message. A personal GIF shows only your first name and is created only when viewed. |
| Emails | Emails never contain the name of your Wichtelkind or Wichtel and by default no message text. Email copies sit in your company mailbox, outside Wichtli's deletion. If the other person switched it on, they also get your messages by email at their company address. |
| Replies by email | If you reply to a notification, we take only the text (max. 1000 characters) into the app as a message and delete the email at once; we do not store the sender, headers or attachments. |
| Postcards | Postcard to the office: your name and the office address go to Swiss Post, the sender's name never does. Postcards can be read by anyone; the sender is Wichtli. |
| Address and intolerances | Seen by neither HR nor your Wichtel; the address goes only to the delivery partner and the parcel service, intolerances never by email. |
Recipients and countries
Only Wichtli's sub-processors receive your data (hosting, email and, for an ordered delivery, the delivery partner; the parcel service that delivers it is a controller in its own right). Stored in the EU (Cloudflare D1, EU jurisdiction). Some providers are US-based, safeguarded by the Data Privacy Framework and standard contractual clauses. The draw is random; there are no automated individual decisions.
Legal bases
| Processing | Legal basis |
|---|---|
| Invite and reminders | Legitimate interest of the employer (Art. 6(1)(f) GDPR / Art. 31 revDSG) |
| Participation, questionnaire, office presence and desk | Voluntary participation (Art. 6(1)(a)/(b) GDPR; in DE Art. 88 GDPR / §26 BDSG voluntariness) |
| Fun facts | Consent |
| Allergies and food intolerances | Explicit consent (Art. 9(2)(a) GDPR; Art. 6(7) revDSG) |
| Home address | Entered by the recipient for the requested delivery (Art. 6(1)(a) GDPR) |
Anonymous until the reveal
Until the reveal you stay anonymous as a Wichtel. At the reveal you decide whether you appear on the big screen or reveal yourself privately in the app.
Abuse
Anonymity ends with abuse. You can report any message and block the sender. We name the sender of a reported message only on written request of your company's HR contact after a report (logged). Reports: abuse@wichtli.ch.
Deletion
On 31 January we delete your data automatically; backups expire 30 days later at the latest. If you decline («No, thanks»), we delete your name and data at once; only a salted hash of your email stays until 31 January so you get no more reminders. If you do not answer by the join deadline, we delete your invitation one day later. Exceptions (reported messages 90 days, pair memory, delivery address 14 days after delivery) are in the privacy policy.
Your rights
You can export and delete your data and end your participation in the app under «Me» at any time. You can withdraw consents (fun facts, intolerances) at any time. You have the right of access, rectification, erasure, restriction, data portability and objection and can complain to the FDPIC (EDÖB) or the supervisory authority of your country.
Contact
First your company's privacy contact (named in your invitation). Questions to Wichtli: privacy@wichtli.ch