Privacy Policy

1. Introduction

Inoo GmbH (hereinafter "we", "us" or "Inoo"), Eichstrasse 17a, 9450 Altstätten, Switzerland, operates the herdy.ch platform (hereinafter "Herdy" or "Platform"). The protection of your personal data is of paramount importance to us. In this Privacy Policy we inform you about which personal data we process in connection with your use of Herdy, for what purposes, and to whom we may disclose such data.

This Privacy Policy is governed by the Swiss Federal Act on Data Protection (DSG/LPD) and, to the extent applicable, the European General Data Protection Regulation (GDPR).

2. Controller

3. Data We Collect

We process the following categories of personal data:

a) Account data

When you register for and use Herdy, we collect: name, e-mail address, password (stored in encrypted form), farm information (e.g. farm name, TVD number) and voluntary profile details.

b) Usage data and animal data

In the context of herd management we process: animal master data (ear-tag numbers, breed, sex, date of birth), health and treatment records, breeding data (mating records, pedigree), weight data, group assignments and TVD notifications. Such data are ordinarily linked to your account and accordingly qualify as personal data.

c) Technical data

When you visit our website we automatically collect: IP address, browser type and version, operating system, time of access and the page requested. These data are used to ensure technical security and for troubleshooting purposes.

d) Communication data

When you contact us via the contact form or by e-mail, we process the information you provide (name, e-mail address, message content) in order to respond to your enquiry.

4. Purposes of Processing

We process your personal data for the following purposes:

• Provision and operation of the Herdy platform, including herd management, health journal and breeding management
• Submission of TVD notifications to the animal traffic database on behalf of the user
• User account management and authentication
• Communication with you, in particular to respond to enquiries and for service notifications
• Ensuring IT security and troubleshooting
• Compliance with statutory obligations
• Improvement and further development of the Platform

5. Disclosure of Data to Third Parties

We disclose your personal data only where this is necessary for the provision of our services or where a statutory obligation exists:

• Hosting and infrastructure: Our database and application infrastructure are hosted on servers located in Switzerland. We use Supabase as our database and authentication service provider.
• TVD / Identitas AG: If you use the TVD notification function, the required animal data are transmitted to the animal traffic database (Identitas AG). This is done exclusively on your instruction.
• E-mail delivery: For the dispatch of transactional e-mails (e.g. confirmations, password resets) we engage an e-mail service provider.

We have concluded data processing agreements with all processors that satisfy the requirements of Art. 9 DSG (LPD).

6. International Data Transfers

We endeavour to process and store your data exclusively in Switzerland. Should it be necessary in individual cases to transfer data to a country without an adequate level of data protection, we shall ensure adequate protection of your data by means of appropriate contractual safeguards (e.g. standard contractual clauses) or other measures provided for by law.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or destruction. These measures include, in particular: encryption of data transmissions (TLS), access controls at database level (Row-Level Security), encrypted password storage and regular security updates.

8. Retention Periods

We retain your personal data only for as long as is necessary to fulfil the purposes for which they were collected, or as required by statutory retention obligations. Following deletion of your account, your data will be irrevocably deleted within 90 days, unless statutory retention obligations preclude earlier deletion.

9. Your Rights

Under Swiss data protection law you have the following rights:

• Right of access (Art. 25 DSG): You may at any time request information as to whether and which personal data we are processing about you.
• Right to data portability (Art. 28 DSG): You may request delivery of your data in a commonly used electronic format. Herdy also provides a data export function.
• Right to rectification: You may request the correction of inaccurate personal data.
• Right to erasure: You may request the deletion of your personal data, provided no statutory retention obligations apply. You may delete your account yourself at any time.
• Right to object: You may object to the processing of your data at any time.

To exercise your rights, please contact us at datenschutz@herdy.ch. We will respond to your request as a rule within 30 days.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter, EDÖB).

10. Cookies

Information on our use of cookies can be found in our Cookie Policy.

11. Amendments to This Privacy Policy

We may update this Privacy Policy at any time. The current version is published on our website. In the event of material changes, we will notify you by e-mail or by means of a notice on the Platform.