Privacy Policy
Last updated: July 2026
Data controller
The company named in the Legal Notice (referred to below as "LogSheet", "we") is responsible for processing personal data in connection with this website and the LogSheet application. Contact: info@logsheet.ch. This policy addresses both the Swiss Data Protection Act (nFADP) and, where applicable — in particular for users and customer companies based in the EU — the EU General Data Protection Regulation (GDPR).
What data we process
In the course of operating LogSheet, we process in particular: account and profile data (name, email address, role, date of birth, start/end date, canton), timesheet data (working hours, categories such as home office or vacation, remarks), holiday and absence data including approval status, company data (company name, team and department structure), and technical data (IP address, device type, access time, approximate region) generated automatically when visiting the website. Absence data includes health-related categories — in particular sickness, and where applicable parental leave and military service. Access to the reason is restricted: a sickness absence is visible in full only to the employee concerned, to company administrators, and to the people the employer has designated to approve absences. All other colleagues see a neutral "Absent" in the team calendar, with no reason and no comment. This restriction applies by default and does not require the employer to enable it.
LogSheet's role: processing on behalf of customer companies
For the personal data of employees recorded in the application, the registered customer company is generally the data controller under data protection law; LogSheet processes this data as a processor within the meaning of Art. 9 nFADP or, for customer companies established in the EU, as a processor within the meaning of Art. 28 GDPR, under a data processing agreement and exclusively on the instructions of the respective company. Employees who have questions about their data recorded in LogSheet should contact their employer first.
Purpose and legal basis of processing
We process personal data to perform the agreement with the respective company (Art. 6(1)(b) GDPR), to comply with statutory retention obligations (Art. 6(1)(c) GDPR), and to ensure the security and stability of the application and for troubleshooting, based on our legitimate interest (Art. 6(1)(f) GDPR). As part of analyzing visits to our public website, we process data to improve our offering, where consent is required for this (Art. 6(1)(a) GDPR).
Recipients and service providers used
For hosting, authentication, database, and website analytics, we use services provided by Google LLC / Google Ireland Limited (Firebase Authentication, Firebase Hosting, Cloud Firestore, Firebase/Google Analytics). These providers process data as our processors and may not use it for their own purposes.
Processing abroad
The service providers named above may also process data in the USA or other countries outside Switzerland and the EU. Google LLC is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, both recognized as providing an adequate level of protection by the European Commission and the Swiss Federal Council respectively. In addition, standard contractual clauses approved by the European Commission, together with additional technical and organizational measures taken by our providers, ensure the required level of protection.
Retention period
We retain personal data for as long as necessary to provide our services or as required by statutory retention obligations. It is deleted or anonymized thereafter.
Your rights
You have the right to request information about the personal data we process about you, as well as its rectification, deletion, restriction of processing, data portability, or to object to the processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. We respond to requests for information within 30 days (Art. 25 para. 7 nFADP) or within one month (Art. 12(3) GDPR); please contact info@logsheet.ch. You also have the right to lodge a complaint with the competent supervisory authority — in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the data protection authority of your place of residence or work.
Cookies and analytics
We use technically necessary cookies to enable login and operation of the application, as well as Firebase/Google Analytics to statistically evaluate the use of our public website. You can restrict data collection by analytics tools through your browser or device settings.
Data security
We protect your data through technical and organizational measures, in particular encryption of data transmission (TLS), role-based access permissions, and strict separation of data per customer company.
Changes to this policy
We may update this privacy policy to reflect changes in law or in the application. The version published on this page at any given time is authoritative.
Contact
For questions about data protection, please contact us at info@logsheet.ch.
EU representative (Art. 27 GDPR)
As we also process personal data of users located in the European Union without being established there, we have appointed a representative in the EU pursuant to Art. 27 GDPR: designation in progress. For data protection matters, you may contact either our EU representative or us directly at info@logsheet.ch.
Deleting your account in the iPhone app
The LogSheet iPhone app lets you delete your account from within the app (Account → Delete my account). Doing so permanently removes your sign-in and your personal details — display name and email address — and you can no longer sign in on any device. Your recorded working time, absences and customer-work entries are NOT deleted: under labour law they are your employer's documentation, which they are required to retain, and they remain associated with an internal identifier that no longer resolves to a named person in LogSheet. Employment parameters needed to interpret those records (employment percentage, weekly schedule, vacation allowance) are likewise retained. If you want your employer to erase the records themselves, contact them — they are the data controller for that data (see section 3).