1. Data Controller

For the purposes of applicable data-protection law, the controller determines why and how personal data is processed through Stadia Vitae, except where a third-party provider acts as an independent controller for its own processing activities.

2. Scope of this Policy

This Policy applies to personal data processed through the Stadia Vitae website and connected services, including account features, assessments, community areas, contact forms, purchases, media submissions, newsletters or messages where enabled, and administrative integrations used to manage Stadia Vitae content.

It does not replace the privacy policies of independent third-party services. When you use a third-party service, that provider may process personal data under its own privacy terms.

3. Personal Data We May Collect

Some features may allow you to submit information relating to other people, for example a historical photograph containing identifiable persons. Please submit such material only where you have a lawful basis and appropriate permission to do so.

4. Why We Use Personal Data

We process personal data only for legitimate and defined purposes, including:

• operating, maintaining and securing Stadia Vitae;
• creating and managing user accounts;
• providing assessments, reports, downloads and other requested services;
• processing purchases and providing order support;
• responding to messages, requests and support enquiries;
• receiving, reviewing, moderating and, where approved, publishing community contributions;
• protecting the website from abuse, fraud, attacks and unauthorized access;
• measuring how visitors use the website where analytics tools are enabled and permitted;
• managing Stadia Vitae pages and content on connected platforms such as LinkedIn;
• complying with legal, accounting, tax and regulatory obligations.

5. Legal Bases

Stadia Vitae is based in Switzerland and processes personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU/EEA General Data Protection Regulation (GDPR) applies, processing may be based on one or more of the following legal grounds:

• Contract: processing necessary to provide a service or product you request.
• Consent: where you voluntarily agree to a specific processing activity, such as certain non-essential cookies or publication of submitted material where consent is the appropriate basis.
• Legitimate interests: operating, securing and improving the service, preventing fraud and managing communications, provided those interests are not overridden by your rights.
• Legal obligation: processing necessary to meet accounting, tax, regulatory or other legal requirements.

6. Purchases, WooCommerce and Stripe

Stadia Vitae uses WooCommerce to manage products, orders and checkout functions. When you place an order, we may process your name, email address, billing details, order contents, payment status and information needed to fulfil the purchase.

Order records may need to be retained for accounting, tax, fraud-prevention, contractual and legal purposes even if an account is later deleted. Where permitted, data that is no longer required may be deleted or anonymized.

7. Community Contributions, Photographs and Stories

Stadia Vitae may invite visitors to contribute photographs, memories, recipes, historical information, marine observations, corrections and other community material.

Contributions are not automatically guaranteed publication. They may be reviewed, edited for formatting or clarity, rejected, removed, or held for moderation before publication.

Approved contributions may become publicly visible and may therefore be indexed by search engines, shared by visitors and remain visible in cached or archived copies outside our direct control.

8. LinkedIn Integration and Stadia Vitae Command Center

Stadia Vitae may use an administrative integration with LinkedIn to authenticate an authorized page administrator, identify LinkedIn Pages that the administrator is permitted to manage, publish content to the Stadia Vitae LinkedIn Page, retrieve posts, and access page or post analytics where LinkedIn has granted the required permissions.

Data that may be received from LinkedIn

• LinkedIn member or administrator identifiers required for authentication and authorization;
• organization/Page identifiers and administrator roles;
• content created or managed through the integration;
• post, page and engagement statistics where the relevant API permissions are enabled;
• OAuth access tokens and related authorization metadata needed to maintain the connection.

How LinkedIn data is used

LinkedIn API data is used only to provide the requested Stadia Vitae page-management, publishing, verification and analytics functions. It is not sold to advertisers or data brokers and is not used to train a general-purpose artificial-intelligence model.

OAuth access tokens are administrative credentials. They are not intended to be displayed publicly and should be retained only for as long as needed to maintain the authorized connection. An authorized administrator may disconnect the LinkedIn integration, and deletion of locally stored LinkedIn connection data may also be requested using the contact details below.

LinkedIn remains an independent provider and may process information in accordance with its own privacy policy, developer terms and API rules.

9. Cookies, Local Storage and Analytics

Stadia Vitae may use cookies or similar local-storage technologies for essential functions such as login sessions, security, language preferences, shopping-cart operation, checkout and account management.

Non-essential analytics or measurement tools may be activated to understand website usage, page performance and visitor interactions. Where consent is required by applicable law, non-essential tracking should be activated only after the appropriate consent has been obtained.

Analytics configuration may change over time. This Policy will be updated when a new service materially changes the categories of personal data collected or the purposes for which they are used.

10. Service Providers and Recipients

Personal data may be disclosed only where necessary to providers that support the operation of Stadia Vitae or where required by law.

We may also disclose data to professional advisers, authorities, courts or regulators where disclosure is legally required or necessary to establish, exercise or defend legal claims.

11. International Data Transfers

Some service providers may process personal data outside Switzerland, including in the European Economic Area, the United Kingdom or the United States. Where required, appropriate safeguards may include an adequacy decision, participation in a recognized data-protection framework, standard contractual clauses, contractual guarantees or another mechanism permitted by applicable law.

The destination country and applicable safeguards depend on the provider and service being used at the relevant time.

12. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to legal, accounting, tax, contractual, fraud-prevention and security requirements.

• Account data is normally retained while the account remains active and for a reasonable period afterward where necessary.
• Order and transaction records may be retained for statutory accounting, tax and legal periods.
• Support messages may be retained while the issue remains relevant and for a reasonable follow-up period.
• Security and technical logs are retained for a limited period appropriate to troubleshooting, abuse prevention and security.
• Community contributions approved for publication may remain part of the public archive until removed, anonymized or otherwise updated.
• OAuth tokens and external-service connection data are retained only while needed to maintain the authorized integration or until the connection is revoked, subject to technical backup cycles.

13. Security

Stadia Vitae uses technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss or misuse. These measures may include encrypted HTTPS connections, access controls, restricted administrative credentials, software updates, backups, authentication controls and security monitoring.

No internet service can guarantee absolute security. Users should protect their passwords and avoid sending sensitive information through channels that are not intended for it.

14. Your Data-Protection Rights

Depending on where you live and which law applies, you may have rights including:

• the right to know whether personal data about you is being processed;
• the right to request access to your personal data;
• the right to request correction of inaccurate data;
• the right to request deletion or anonymization where legally available;
• the right to object to certain processing;
• the right to restrict processing in circumstances provided by law;
• the right to withdraw consent where processing is based on consent, without affecting processing already carried out lawfully;
• the right to data portability where applicable;
• the right to lodge a complaint with a competent data-protection authority.

To exercise a privacy right, contact contact@stadiaorg.com. We may need to verify your identity before acting on a request. Certain data may need to be retained where deletion would conflict with legal or regulatory obligations.

15. Children and Minors

Stadia Vitae is not designed to knowingly collect personal data from children who cannot lawfully provide the required consent under applicable law. Where a minor wishes to submit a photograph, story or other contribution, involvement of a parent or legal guardian may be required.

16. Changes to this Privacy Policy

This Policy may be updated when Stadia Vitae changes its services, adds or removes providers, introduces new analytics or community features, changes payment or social integrations, or when legal requirements change.

The date shown at the top of this page identifies the latest published version. Material changes should be communicated in an appropriate manner where required.

17. Contact