Your places. Your choice.
We show town centres or voluntarily marked public places. Do not enter private addresses. For example a railway station, indoor pool or park. No private addresses.
Participation is voluntary, free of charge and independent of treatment. No name, account or email address is required. After automatic or manual screening, the public map shows the town centre or voluntarily marked public place, optional year, category, optional short text and photo. The globe on the practice homepage uses the same published contributions.
Submitting without a name does not guarantee complete anonymity. Do not submit health or therapy information, real people, private addresses, number plates or identifying details. Unambiguous statues are allowed. Photos are resized to a maximum edge length of 1800 pixels and re-encoded without metadata such as geotags.
Map and place data are served locally by Green hosting in Switzerland. Viewing the map does not contact an external map service. A necessary session cookie named niedermoser_map protects the form and management area. Salted IP identifiers limit abuse and are not full anonymisation. They expire within one hour and are removed upon the next use after expiry. The hosting provider also maintains technical server logs.
Text screening uses a local word and pattern filter. Entries without a photo and without a reason for review are published automatically. Racist, sexist, insulting and other flagged texts are held for review. The filter may misinterpret context, irony and unfamiliar or disguised expressions. Review reasons, method and time are recorded in the private database. Contribution text is not sent to an external AI service for screening.
Photos are reviewed manually unless optional automatic image checking is enabled and the contributor chooses it separately. When enabled, clear landscapes, places and objects can be published automatically. Real or possible people, identifying details, unsafe content, uncertainty and technical errors require manual review. Automatic detection cannot guarantee that every person will be found.
Only when image checking is enabled and the contributor makes the separate voluntary choice in the form is the resized photo without metadata sent from Green to OpenAI in the USA. Place, contribution text and visitor identifier are not sent. Leaving the choice unchecked allows manual review. Response storage is disabled in the request. OpenAI does not use API content for training by default; content may normally be retained for up to 30 days for abuse monitoring and longer in certain exceptions. Before enabling the service, the owner must check the data processing and international transfer terms applying to the API account. Details: https://developers.openai.com/api/docs/guides/your-data
Each submission triggers an attempted email notification to the practice linking to protected management. The photo without metadata is attached. Green and forwarding to Google/Gmail are involved; Google also processes data outside Switzerland, particularly in the USA. This creates a separate mailbox copy that must be considered separately for removal requests. Failed sending attempts remain visible. Automatically published contributions are reported as requiring no action; held contributions require manual review.
Published contributions remain in the travel album until removed. Contributions and photos are stored in the private map application separately from patient records. Only the owner can manually approve, hide or delete entries. For access, correction, objection to a review or removal, describe the place and approximate submission time; the contribution identifier may also help. Legal rights remain unaffected. Removing active data does not immediately remove hosting backups or copies made by others.
Rejected contributions and contributions held for content review are retained privately for at least 60 calendar months from rejection or quarantine under the practice policy. They are not public in that state. Subsequent approval does not shorten retention. The regular deletion function is locked during the period. This is a practice policy, not a blanket statutory retention duty. After expiry the owner reviews continued necessity. Individual privacy requests and mandatory requirements are considered separately.
The worldwide basemap uses OpenFreeMap with OpenStreetMap data. Our server retrieves only needed map tiles and map-label glyphs. The optional Swiss detailed map comes from swisstopo/geo.admin.ch. Map resources are temporarily cached on our server and in your browser; the server-side map cache is limited to 100 MB. Your browser connects only to this website. Map providers receive our server IP and the requested map areas, not your browser IP. Contribution text, photos, account data and device location are not transmitted. Public-place search runs only when you click: the selected town and search term are sent to geo.admin.ch through our server. Private-address search is excluded. Short-lived salted IP identifiers only limit map requests and are removed within 24 hours on the next use.
Dr. phil. Daryl Niedermoser · Praxis Niedermoser · c/o MedBasel · Steinenvorstadt 75 · 4051 Basel
info@niedermoser.ch