Privacy Policy for the DIM ZS Wallet App
1. Privacy policy for the DIM ZS Wallet app
The DIM ZS Wallet app (DIM ZS Wallet) is operated on behalf of the Armed Forces Staff (AFS) and was developed by the Federal Office of Information Technology, Systems and Telecommunication (FOITT) (Service Manager, in German).
It enables conscripts and persons required to perform civil protection service to access and manage their civil protection service data and facilitates the electronic authentication and identification of users.
This privacy policy informs DIM ZS Wallet users about what personal data (i.e. data relating to an identified or identifiable individual) and other data is collected and for what purposes.
By downloading the DIM ZS Wallet app, you agree to the terms of use set out on the Federal Office for Civil Protection FOCP’ website (https://www.babs.admin.ch/de/zivilschutz) and to this privacy policy.
2. Legal provisions
Personal data is processed in DIM ZS Wallet in accordance with the following legal provisions:
- Federal Act on Military and Other Information Systems within the DDPS (MISA, SR 510.91), which governs the processing of personal data in the target systems.
- Ordinance on Military and Other Information Systems within the DDPS (MISO, SR 510.911), insofar as it applies to the respective target systems.
- Federal Act on Data Protection (FADP, SR 235.1).
- Federal Act on Information Security in the Confederation (ISA, SR 128).
- Ordinance on the Processing of Personal Data when Using the Electronic Infrastructure of the Confederation (PPDO, SR 172.010.442).
- Ordinance on Federal Identity Access Management Systems and Directory Services (IAMO, SR 172.010.59), which governs the responsibilities, processing and disclosure of personal data, and the information security requirements for the Confederation’s identity access management systems, directory services and central identity repository.
DIM ZS Wallet is part of the Service Manager information system, which is governed by Articles 17a–17f MISA, in conjunction with Article 5a and Annex 1b MISO. These provisions govern the body responsible for data processing, the purpose of processing, which data can be processed and the collection, disclosure and retention of data. Some of this data is processed in DIM ZS Wallet.
3. Organisational unit responsible
Within the Defence Group, the Armed Forces Staff (AFS) is responsible for processing data in DIM ZS Wallet and for determining the purpose and means of processing. The IT service providers commissioned by the AFS in accordance with the legal provisions are subject to the same data protection requirements as the AFS.
General contact details for the AFS data protection officer responsible for DIM ZS Wallet matters:
Swiss Armed Forces
Defence Group, Armed Forces Staff
Papiermühlestrasse 20
3003 Bern
Data protection: Rights of Armed Forces personnel
4. Data processed in DIM ZS Wallet
4.1. Personal data
The following personal data is processed in DIM ZS Wallet:
a. First name and surname
b. Email address
c. Date of birth
d. Social insurance (AHV) number
e. Mobile telephone number
f. Rank, division and function
g. Important information contained in requests, applications, notices, call-up orders, service announcements, rulings, etc. and required for general administrative and service purposes
h. Data from general surveys
i. Information you have provided in a contact form
This data is derived in accordance with Article 17d MISA from source systems or has been provided by you.
4.2. Usage data
The AFS processes the following app usage data:
a. IP address
b. Device's operating system
c. Type of device
d. iOS or Android version (on your smartphone or tablet)
e. App version used
f. Date and time of access
g. Non-personal content that you have accessed (e.g. whether you have viewed your call-up order)
h. Content that you provide
When you install the DIM ZS Wallet app, the relevant app store operator (Apple or Google Play) processes some of this data independently and in accordance with its own data protection policies.
5. Purpose of data processing
DIM ZS Wallet enables Swiss citizens who are liable for civil protection service to view and manage their civil protection service details at any time and from any location. In addition, it enables electronic user authentication and identification.
DIM ZS Wallet processes data in accordance with the applicable legislation on data protection and information security.
The app processes personal and other data for the following purposes:
a. To enable conscripts and persons required to perform civil protection service to access and manage their own data
b. How the app works: Data that is required for DIM ZS Wallet to operate is generated automatically when using the app. Other data may be processed for specific purposes with your consent.
c. Security and stability: We process data in order to improve the security and stability of DIM ZS Wallet. We only use cookies to authenticate DIM ZS Wallet users. No other tracking, marketing or profiling cookies are used.
d. Statistics: Data is processed for statistical purposes, such as analysing app usage, non-personal content, and the prevalence of different app versions. We use specially developed systems for this purpose, eliminating the need for third-party systems. These systems run on app servers managed by the FOITT. They process user-related data, but do not share any data with third parties.
e. Communication: We use data to communicate with you, for example to send you service-related documents or respond to enquiries submitted via the contact form. We therefore process data relating to the nature and timing of these communications.
f. Compliance with the legal and regulatory requirements of other Swiss authorities: Data may be processed for the purpose of preventing or investigating criminal offences. Data may also be disclosed in the context of civil or criminal proceedings.
g. Advertising: The AFS will not sell your personal data or use it for advertising or personalised marketing purposes. Nor will your data be disclosed to third parties for commercial purposes.
6. Disclosure of data
If necessary, your data may be disclosed to the following organisations:
a. Service providers: In certain areas, we work with external service providers who have access to your data in order to fulfil their obligations and who process this data on our behalf (e.g. for app development, hosting, support, maintenance and testing). These service providers are subject to contractual and/or statutory obligations regarding confidentiality and data protection.
b. Public authorities and government departments: In certain circumstances, we may disclose your data to other authorities, government departments, courts and public bodies in connection with the exercising of rights, defence against claims or compliance with legal requirements. This could be in the context of administrative or judicial pre-trial or out-of-court proceedings, for example, or to fulfil statutory obligations to provide information or cooperate.
Your data is processed not only by us, but also by other authorities and external service providers in Switzerland and abroad as part of contracts and collaborative projects. To ensure the app's high availability and performance, the FOITT uses its own servers to provide services. The app also uses push notification services from both Apple (APNS) and Google (Firebase Cloud Messaging). While these services have local branches and infrastructure in Switzerland, data may also be processed in other countries, including countries outside the EU or the European Economic Area (i.e. in third countries), depending on the service.
7. Processing period and deletion
Your data will only be stored for as long as necessary for the stated purposes or required by law. Once this period has expired, your data will be securely deleted or anonymised.
Any data that is no longer required will be transferred to the Federal Archives for archiving and subsequently destroyed.
a. Authentication logs are stored in accordance with the statutory retention periods.
b. Personal data will be deleted as soon as it is no longer required for authentication purposes, but no later than two years after the person concerned is no longer subject to Article 14 IAMO.
8. Technical and organisational security measures
We treat your data confidentially and implement appropriate technical and organisational security measures to safeguard its confidentiality, integrity and availability, to protect it against unauthorised or unlawful processing, and to mitigate the risk of loss, accidental alteration, unauthorised disclosure or unauthorised access. The following means are used for this purpose:
a. Encryption: Your data is encrypted during transmission (TLS 1.3) and while in storage.
b. Access controls: Only authorised persons have access to your data.
c. Regular security audits: The systems are regularly checked for security vulnerabilities.
d. Logging: Authentication processes are logged to prevent misuse.
9. Your rights
As a data subject, you generally have the right – subject to legitimate interests and certain restrictions and exceptions – to:
a. Information: You may request information at any time about what data is being processed in relation to you.
b. Correction: You may request the correction of inaccurate data.
c. Deletion or destruction: You may request your data to be deleted or destroyed if the legal requirements for processing are not met or are no longer met.
d. Data portability: You have the right to receive the data processed about you in a commonly used format.
e. Withdrawal of consent: You have the right to withdraw your consent to data processing at any time.
Please address any such requests, providing proof of your identity (e.g. a copy of your identity card or passport), to the following address:
Federal Office for Civil Protection FOCP
Guisanplatz 1B
3003 Bern
Email
Data protection
f. Complaints: In the event of breaches of data protection law, you may also contact the Federal Data Protection and Information Commissioner (FDPIC) at the following address:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern
www.edoeb.admin.ch
10. Place of jurisdiction
All disputes arising in connection with the use of the DIM ZS Wallet app are governed exclusively by Swiss law.
The place of jurisdiction is Bern.
V0.3 of 2026-08-27