PRIVACY NOTICE
Your plans.
Your information.
Version 2026-10-13 · Contact: [email protected]
1. Who is responsible
The controller operating kalendar.cc is Digiter.org, Zürich, Schweiz. Contact [email protected] for privacy questions or requests. This notice covers the calendar and Digiter Account on kalendar.cc. External websites, including Digiter.org and PayPal, have their own notices.
2. Information processed and why
| Information | Purpose and basis where a legal basis is required |
|---|---|
| Name, email, account ID, protected password credentials and confirmation/security records | Create, verify and secure your account; perform the service contract and protect the service against abuse. |
| Calendars, tasks, dates, notes, projects, resources, dependencies, progress and settings | Store and display your plans and collaborate with people you authorise; performance of the contract. |
| Invitation email addresses, role, sender, acceptance, expiry and membership | Deliver and control sharing requested by a calendar owner; contract performance and legitimate interests in secure collaboration. |
| PayPal subscription and transaction identifiers, payment amount/currency/status, access period and accepted terms version/time | Process the annual subscription, confirm access, prevent duplicate grants, resolve disputes and meet recordkeeping duties; contract and legal obligations. |
| Hashed free access codes, label, redemption, expiry and revocation records | Grant and enforce invitation access, prevent misuse; contract or legitimate service-administration interests. |
| Server/security logs, IP and request information, account activity and support correspondence where generated | Operate, troubleshoot and protect the service; legitimate interests and legal duties where applicable. |
Calendar contents are not sent to PayPal by this billing integration. We do not receive or store your full payment-card number through this checkout. PayPal handles payment instruments and may independently process information under its own terms.
3. Who can see the information
Calendar owners and authorised members see shared calendar information according to their roles. Owners see member and invitation email addresses to manage access. Site administrators have privileged operational access needed to host and support the service; ordinary accounts cannot use WordPress administration. The calendar API does not grant an uninvited administrator automatic membership in every private calendar.
Hosting and email providers process information to operate the service. Hosting provider: Pending confirmation. Hosting/backup processing locations: Pending confirmation. Email provider and locations: Pending confirmation. PayPal processes payments as described in its privacy statement. We may disclose information when legally required or to establish, exercise or defend legal claims.
4. International transfers
The service is offered worldwide. Your information may be processed outside your country by the identified hosting, mail and payment providers. Where required, the controller must use an applicable adequacy decision or appropriate contractual and supplementary safeguards for restricted transfers. Contact [email protected] for the relevant processing locations and safeguards. We do not treat acceptance of these terms as a blanket waiver of transfer protections.
5. Cookies and browser storage
WordPress and Digiter Account use necessary session, authentication and security cookies to maintain sign-in and protect forms. Calendar preferences, saved views and appearance may be stored locally in your browser. Clearing this storage may reset preferences without deleting server-stored tasks. PayPal may set its own cookies when you visit its checkout. This calendar billing module does not add advertising trackers or analytics cookies. Any subsequently enabled non-essential tracking requires a separately accurate notice and consent mechanism where applicable.
6. Retention and deletion
Account and calendar information is kept while needed to provide the account and requested collaboration. Subscription expiry does not automatically delete it. Ask for deletion when you no longer need the account. Shared records may require coordination with the owner and other users; we may retain limited records for legal obligations, fraud prevention or disputes.
Financial retention policy: To be completed by the controller before paid launch according to applicable recordkeeping duties.. Backups and operational logs follow the hosting provider’s documented retention cycle. Expired invitation links no longer grant access after seven days, although the invitation record may remain for administration. Free codes are stored as keyed hashes, not recoverable plaintext. Payment-card credentials remain with PayPal.
7. Your choices and rights
Depending on the law that applies, you may request access, correction, deletion, restriction, portability or object to certain processing. Where processing relies on consent, you may withdraw it for the future. Contact [email protected] from your registered email; we may request proportionate identity verification and respond within the applicable legal time limit. You may complain to your competent data-protection authority, including the Swiss FDPIC where relevant or the authority in your EU/EEA country.
You can change account details in Digiter Account, remove sharing as a calendar owner, cancel renewal in the subscription panel and clear browser preferences. Account deletion and payment cancellation are separate; cancel an active PayPal subscription before requesting deletion.
8. Security and updates
Access checks, account confirmation, expiring invitation tokens, request nonces, hashed access codes and verified payment notifications protect the service. No online service can guarantee absolute security. Use a unique password, keep your email account secure and report unexpected account or payment activity promptly. Material changes to this notice will be published with a revised version and communicated where required.