Published on 23 September 2026

Data protection policy for the SAT-Admin app

1. Data protection policy for the SAT-Admin app

The SAT-Admin app (SAT-Admin app) is operated on behalf of the Swiss Armed Forces’ Training and Education Command (TEC) and developed by the Federal Office of Information Technology, Systems and Telecommunication (FOITT) (Dienstmanager).

It is an application developed by the Swiss Armed Forces to support shooting clubs and other organisations closely affiliated with the Armed Forces (e.g. military societies and umbrella organisations) SAT-Admin is used for the digital planning, implementation and monitoring of non-service activities and pre-service training, as well as for the administration of the members of these organisations.

The present data protection policy informs users of the SAT-Admin app about which of their personal data (data relating to an identified or identifiable individual) and what other data is collected and processed, and for what purposes.

By downloading the SAT-Admin app, you agree to the terms of use as set out on the Swiss Armed Forces website (www.armedforces.ch) and to this data protection policy.

2. Applicable legislation

The processing of personal data in the SAT-Admin app is subject to the following legislation:

  • Federal Act on Military and Other Information Systems within the DDPS (MISA; SR 510.91), which regulates the processing of personal data in the systems concerned.
  • Ordinance on Military and Other Information Systems within the DDPS (MISO; SR 510.911), insofar as it applies to the respective systems concerned.
  • Federal Act on Data Protection (FADP; SR 235.1).
  • Federal Act on Information Security in the Confederation (ISA; SR 128).
  • Ordinance on the Processing of Personal Data when Using the Federal Government’s Electronic Infrastructure (VBNIB; SR 172.010.442).
  • Ordinance on Federal Identity Management Systems and Directory Services (IAMO; SR 172.010.59), which regulates the responsibilities, the processing and disclosure of personal data, and the information security requirements for the Federal Government’s identity management systems (IAM systems), directory services and central identity repository.

The SAT-Admin app forms part of the SAT-Admin information system, as regulated in Articles 72gbis–72gsexies MISO. The data reported to SAT-Admin concerning pre-service and non-service activities, training and performance (Art. 17c para. 1 let. k MISA) is derived from the Personnel Information System of the Armed Forces and Civil Protection (PISA), as regulated in Articles 12–17 MISA. These provisions govern the body responsible for data processing, the purpose of processing, which data can be processed and the collection, disclosure and retention of data. Some of this data is processed using the SAT-Admin app.

3. Data controller

Within the Defence Group, the TEC is responsible for data processing using the SAT-Admin app. It determines the purposes and means of processing. The IT service providers commissioned by TEC within the framework of the statutory requirements are subject to the same data protection requirements as TEC.

For enquiries regarding the SAT-Admin app, please contact the TEC Data Protection Officer:

Schweizer Armee
Gruppe Verteidigung, Kommando Ausbildung
Guisanplatz 1D
3003 Bern

Email
Data protection: Rights of Armed Forces personnel

4. Data processed when using the SAT-Admin app

4.1. Personal data

The SAT-Admin app processes the following personal data:

  • First name and surname
  • Email address
  • Date of birth
  • Social insurance (AHV) number
  • Mobile telephone number
  • Postcode and town/city
  • Rank, allocation and function
  • Club details (club name and organisation number)
  • Serial number of service weapon
  • Information you have provided in a contact form

This data is derived in accordance with Article 17c MISA from source systems or has been provided by you.

4.2. Usage data

When using the app, the responsible Training and Education Command (TEC) processes the following data and device information in particular:

  • IP address
  • Device's operating system
  • Type of device
  • iOS or Android version (on your smartphone or tablet)
  • App version used
  • Date and time of access
  • Non-personal content that you have accessed (e.g. whether you have viewed your marching order)
  • Content that you provide

The operator of the relevant app store (e.g. Apple App Store or Google Play Store) processes some of this usage data when the SAT-Admin app is installed, acting on its own responsibility and in accordance with its own data protection policy.

5. Purpose of data processing

The SAT-Admin app allows club officials to record attendance and results for their non-service activities for SAT-Admin via a mobile device. In addition, the SAT-Admin app enables the electronic authentication and identification of users.

Data is processed in accordance with the applicable legislation on data protection and information security.

The SAT-Admin app processes personal data and other data for the following purposes:

  • App usage: Some personal and usage data are required to use the app. They are necessary for the app to function. With the data subject’s consent, further personal and usage data may be processed for specific functions.
  • Security and stability: We process usage data to improve the security and stability of the SAT-Admin app.
    We use cookies exclusively to authenticate users of the SAT-Admin App. No tracking, marketing or profiling cookies are used otherwise.
  • Statistics: Usage data may be processed for statistical purposes, such as analysing app usage, non-personal content, and the prevalence of different app versions.
    We use specially developed systems for this purpose, eliminating the need for third-party systems. These systems run on app servers managed by the FOITT. They process user-related data, but do not share any data with third parties.
  • Compliance with the legal and regulatory requirements of other Swiss authorities: Data may be processed for the purpose of preventing or investigating criminal offences. Data may also be disclosed in the context of civil or criminal proceedings.
  • Advertising: Personal data processed is neither sold nor used for advertising purposes or personalised advertising by the Training and Education Command (TEC). No data is passed on to third parties for commercial purposes.

6. Data disclosure

If necessary, your data may be disclosed to the following organisations:

  • Service providers: In certain areas, we work with external service providers who have access to your data in order to fulfil their obligations and who process this data on our behalf (e.g. for app development, hosting, support, maintenance and testing). These service providers are subject to contractual and/or statutory obligations regarding confidentiality and data protection.
  • a.   Public authorities and government departments: In certain circumstances, we may disclose your data to other authorities, government departments, courts and public bodies in connection with the exercising of rights, defence against claims or compliance with legal requirements. This could be in the context of administrative or judicial pre-trial or out-of-court proceedings, for example, or to fulfil statutory obligations to provide information or cooperate.
    Your data is processed not only by us, but also by other authorities and external service providers in Switzerland and abroad as part of contracts and collaborative projects. To ensure the app's high availability and performance, the FOITT uses its own servers to provide services. The app also uses push notification services from both Apple (APNS) and Google (Firebase Cloud Messaging). While these services have local branches and infrastructure in Switzerland, data may also be processed in other countries, including countries outside the EU or the European Economic Area (i.e. in third countries), depending on the service.

7. Processing period and deletion

Your data will only be stored for as long as necessary for the stated purposes or required by law. Once this period has expired (generally after five years), the data is securely deleted or anonymised.

Any data that is no longer required will be offered to the Federal Archives for archiving and subsequently destroyed.

  • Authentication logs are stored in accordance with the statutory retention periods.
  • Personal data will be deleted as soon as it is no longer required for authentication purposes, but no later than two years after the person concerned is no longer subject Art. 14 IAMO.

8. Technical and organisational security measures

We treat your data confidentially and implement appropriate technical and organisational security measures to safeguard its confidentiality, integrity and availability, to protect it against unauthorised or unlawful processing, and to mitigate the risk of loss, accidental alteration, unauthorised disclosure or unauthorised access. The following means are used for this purpose:

  • Encryption: All data is encrypted during transmission (TLS 1.3) and while in storage.
  • Access controls: Only authorised persons have access to the data.
  • Regular security audits: The systems are regularly checked for security vulnerabilities.
  • Logging: Authentication processes are logged to prevent misuse.

9. Your Rights

As a data subject, you generally have the right – subject to legitimate interests and certain restrictions and exceptions – to:

  • Information: You may request information at any time about what data is being processed in relation to you.
  • Correction: You may request the correction of inaccurate data.
  • Deletion or destruction: You may request your data to be deleted or destroyed if the legal requirements for processing are not met or are no longer met.
  • Data portability: You have the right to receive the data processed about you in a commonly used format.
  • Withdrawal of consent: You have the right to withdraw your consent to data processing at any time.

    Please send any such requests, providing proof of your identity (e.g. a copy of your identity card or passport), to the following address:

    Schweizer Armee
    Gruppe Verteidigung, Kommando Ausbildung
    Guisanplatz 1D
    3003 Bern

    Email
    Data protection: Rights of Armed Forces personnel
  • Complaints: In the event of breaches of data protection law, you may also contact the Federal Data Protection and Information Commissioner (FDPIC) at the following address:

    Federal Data Protection and Information Commissioner (FDPIC)
    Feldeggweg 1
    3003 Bern
    www.edoeb.admin.ch

10. Place of jurisdiction

Any and all disputes arising in connection with the use of the SAT-Admin app are governed exclusively by Swiss law.

The place of jurisdiction is Bern.

V1.0 dated 17 September 2026