Privacy policy

1. Controller

The controller for personal data processed through label24 (www.label24.ch, dashboard.label24.ch) is ClickOn GmbH, Chappelistrasse 1, 8604 Volketswil, Switzerland (CHE-115.038.420). Contact: [email protected].

2. Legal framework

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to users in the EU/EEA, we also observe its requirements. Processing takes place to perform the contract, to meet legal obligations or on the basis of our legitimate interest in a secure, abuse-free service.

3. Data we process

• Account data – your e-mail address (sign-in by link, no password), name, team membership and the time of your last sign-in.
• Swiss Post credentials – client ID, client secret and franking licence of your business customer account. The secret is stored encrypted (AES-256-GCM) and used solely to call the Swiss Post API on your behalf.
• Content you enter – sender address, recipient addresses, labels, tracking numbers, printer configuration and address book. You are the controller of your recipients' data; we process it on your behalf to provide the service.
• Shipment data – status and events we fetch from Swiss Post for your tracking numbers.
• Technical data – server logs (IP address, browser, timestamps) for security and troubleshooting, usually kept for 30 days.

4. Purposes

We use this data to provide and improve the service (creating, printing and tracking labels), to send service e-mails such as sign-in links and team invitations, and to keep the service secure and free of abuse. We do not sell personal data and do not use it for third-party advertising.

5. Hosting

The application and its database are operated in Switzerland or in the European Union. Backups are kept encrypted in the same location.

6. Service providers and recipients

• Swiss Post Ltd, Bern – recipient addresses, product and weight details and your franking licence are transmitted to Swiss Post's Digital Commerce API for address validation, label creation and tracking. Swiss Post's privacy policy applies to that processing.
• Resend (Resend, Inc.) – delivery of service e-mails through the EU region (Ireland). E-mail address, subject and content of the respective message are transmitted.
• Cloudflare (Cloudflare, Inc.) – DNS, content delivery and attack protection for www.label24.ch and dashboard.label24.ch. Cloudflare sees IP addresses and connection data and is bound by the Swiss-U.S. Data Privacy Framework and EU standard contractual clauses.
• Address search – while entering an address, suggestions may be fetched from a geocoding service (Photon / OpenStreetMap); only the typed address text is transmitted.
• Billeo (ClickOn GmbH) – only if you enable the integration yourself: lookup of your Billeo customer addresses with your own API key.

7. Cookies

www.label24.ch sets no cookies and uses no analytics or tracking services. dashboard.label24.ch sets only technically necessary cookies: an encrypted session cookie for sign-in and a cookie for the chosen language.

8. Retention

Account and content data are kept for as long as your account exists. Labels and shipment data serve as evidence towards Swiss Post and therefore remain, even after individual records are deleted, until the account is deleted. Sign-in links expire after 15 minutes. After account deletion, data is removed from the active systems within 30 days.

9. Your rights

You have the right to access, rectify, delete and receive a copy of your data, and to object to processing, to the extent provided by applicable law. Contact [email protected]. Users in the EU/EEA may also lodge a complaint with their competent supervisory authority; in Switzerland the Federal Data Protection and Information Commissioner (FDPIC) is responsible.

10. Changes

We may amend this privacy policy. The current version is published on this page; the date of the last change is shown at the top.