Privacy policy

Version: 05 February 2026

This Privacy Policy describes how XANNONCE processes personal data when you visit our site, create an account, use the platform’s features, or contact us. XANNONCE operates a platform accessible in Switzerland and intended exclusively for users located in Switzerland.

1. Data Controller

The data controller within the meaning of the Swiss Federal Act on Data Protection (LPD) is:

XANNONCE
Email: [email protected]
 

If you have any questions regarding data protection, please contact us using the details above.

2. Processing principles

We process personal data lawfully, in good faith and proportionately. We process it for specific purposes and implement appropriate technical and organisational measures to protect data.

3. What data we process

3.1 Data you provide

  • Account data: username, email address, password (encrypted), account status, settings.
  • Profile / listing data (advertisers): content, photos, categories, descriptions, prices/indications, contact methods, location information (if provided).
  • Support and communications data: content of requests via forms/email, metadata (date/time, delivery information).
  • Billing / transaction data: purchased services (e.g., credits/promotions), dates, amounts, billing information (if necessary). Payment data (e.g., card details) is generally processed directly by the payment provider.

3.2 Data collected automatically

  • Technical access data: IP address, date/time, pages visited, referrer URL, browser/device information, language settings.
  • Logs and security data: system events, error logs, abuse and fraud signals.
  • Cookie / tracker data: information from cookies or similar technologies (see Section 8).

4. Purposes of processing

We process personal data in particular for the following purposes:

  • Provide, operate and secure the site and platform.
  • Register, manage and authenticate user accounts.
  • Publish and manage profiles/listings (for advertisers), including moderation and abuse prevention.
  • Provide agreed services (e.g., credits, featured placements, premium features) and handle billing.
  • Communicate with users (support, system notifications, security alerts).
  • Analyse and improve platform features, quality and performance (generally in aggregated or pseudonymised form).
  • Detect, prevent and counter abuse, fraud, illegal activities and security incidents.
  • Enforce our terms and conditions and establish, exercise or defend legal claims.

5. Legal bases (LPD)

In accordance with the LPD, we rely on the following bases for processing, depending on the circumstances:

  • Contractual necessity: where processing is necessary to manage an account or provide services.
  • Consent: where we explicitly ask you (e.g., optional/marketing cookies, where applicable).
  • Overriding interest: in particular for operating the service, IT security, fraud prevention, combating abuse, improving the service, and legal protection.
  • Legal obligation: where we must retain or disclose data in accordance with applicable law.

6. Recipients and categories of service providers

We only disclose personal data where necessary or where an appropriate basis exists. Recipients may include:

  • IT and hosting providers (operation, maintenance, infrastructure, content delivery, monitoring).
  • Payment providers (payment processing, fraud prevention). Payment data is generally processed directly by the payment provider.
  • Support / communications providers (e.g., ticketing systems, email delivery), if used.
  • Analytics / measurement providers (e.g., analytics), depending on configuration and cookie preferences.
  • Authorities or courts, where required by law.

Our service providers act as processors and are contractually required to comply with confidentiality and data security obligations.

7. Transfers abroad

Depending on the service providers used, data may be processed or stored outside Switzerland. In such cases, we ensure an adequate level of protection, in particular through:

  • transfers to countries recognised as providing an adequate level of protection, or
  • contractual safeguards (e.g., standard contractual clauses) and, where necessary, additional protective measures.

8. Cookies and similar technologies

We use cookies and similar technologies to ensure the site operates, to remember preferences and to maintain security. Depending on configuration, analytics cookies may also be used.

  • Strictly necessary cookies: login, session, security and essential functions.
  • Analytics / measurement cookies (optional): audience measurement and service improvement (generally aggregated/pseudonymised).

You can restrict or delete cookies via your browser settings. Please note that some features may not function correctly. If we implement a cookie banner, you can manage your preferences there.

9. Retention period

We retain personal data only for as long as necessary for the purposes described or to comply with legal obligations. Typical criteria include:

  • Account data: for the duration of the active account; afterwards deletion or anonymisation, subject to retention obligations.
  • Billing / accounting data: in accordance with statutory retention periods.
  • Logs and security data: as long as necessary for operation and security; afterwards deletion, aggregation or anonymisation.

Username reservation: if an account is deleted, we may mark the username as reserved to prevent identity misuse. This reservation generally contains no other account data and is retained only for as long as necessary for abuse prevention.

Suspensions / abuse: in the event of serious violations of our terms, we may retain certain data (e.g., email address, technical signals) for as long as necessary to prevent abuse, protect our overriding interests, or defend legal claims.

10. Your rights

Under the LPD and depending on the circumstances, you have the following rights in particular:

  • Right of access: obtain confirmation that we process data about you and, where applicable, access it.
  • Right to rectification: have inaccurate data corrected.
  • Right to erasure: request deletion, subject to overriding interests or legal obligations.
  • Right to data delivery / portability: request, under certain conditions, the delivery or transfer of data (in particular in the case of automated processing).
  • Withdrawal of consent: withdraw consent at any time with effect for the future.

To exercise your rights, contact us at [privacy@…]. We may request appropriate proof of identity.

You may also lodge a complaint with the competent authority: the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

11. Minors (18+)

Use of the platform is restricted to persons at least 18 years old or who have reached the age of majority. We do not knowingly collect personal data from minors. If you believe that minors’ data has been provided, please contact us so that we can take appropriate measures.

12. Security and confidentiality

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. This may include: encryption (e.g., TLS/HTTPS), access controls, logging, backups, patch management and vulnerability management.

Despite appropriate measures, no transmission or storage of data can guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy as necessary, in particular if our services, the technologies used, or legal requirements change. The current version is published on this page.