Privacy Notice

Controller

The controller is Verein GABL.COM, represented by Harald Gabl, President.

Privacy contact

For privacy questions and requests, contact Harald Gabl using the details above.

No data protection adviser or Data Protection Officer is currently formally appointed. If an appointment becomes necessary for the actual processing activities or under applicable law, the contact details will be published here.

Scope and development status

This notice covers the public PAL Ecosystem information and partnership pages. The described functions involving PAL ID, HAI Link, HAI Session, HAI Action, HAI Content, sensors, coaching, examinations, employment, scouting and security are in concept or development stages and do not run on these landing pages. Product- and pilot-specific notices, role models, consent or contractual flows and any required impact assessments will be completed before processing begins.

Data currently processed

Necessary technical access may process IP address, timestamp, requested resource, data volume, browser/device details, referrer, security events and error logs. If you email us, we process the contact details, content and metadata you provide to respond and document the communication.

Purposes and legal bases

Processing supports secure and stable delivery, troubleshooting and abuse prevention, responses to enquiries, partnership preparation and legal obligations. It follows Swiss data-protection law and, where applicable, GDPR Article 6(1)(b), (c) and (f). Consent is used only where it is actually required and freely given.

Cookies, analytics and embeds

The static production pages currently use no non-essential cookies, advertising trackers or web analytics. Fonts and interface assets are served locally. Access-protected preview environments may use technically necessary security or session mechanisms. Appropriate information and consent controls will be added before any non-essential analytics, marketing, map, video or social-media service is enabled.

Recipients, hosting and international transfers

Technical data may be received by the hosting, security, email and IT providers engaged for the service. Private previews may be delivered through OpenAI Sites and infrastructure partners; public production is planned on Hostinger. Before public activation, the selected server region, subprocessors and safeguards for international transfers will be checked against the actual configuration and this notice will be updated.

Retention and rights

Technical logs and communications are retained only as long as needed for operations, security, responding, documentation and legal retention duties, then deleted or anonymised. Subject to applicable law, you may request access, correction, deletion, restriction, portability and objection, or withdraw consent for the future. You may also contact the Swiss Federal Data Protection and Information Commissioner and, where the GDPR applies, a competent EU/EEA authority.

Children, biometrics and high-risk functions

This information website does not intentionally collect children’s data and does not perform biometric identification, behavioural scoring or automated decisions. Before such functions are used, age-appropriate information, guardian processes, access and deletion controls, data minimisation, safeguards and applicable legal assessments will be implemented.

Security and updates

We apply organisational and technical measures appropriate to the current risk and project stage. No transmission path is risk-free. This notice will change when functions, providers or data flows change.