Privacy

Markto.ch operates as a Swiss vehicle marketplace connecting buyers and sellers, collecting personal data like account details, contact info, and vehicle listings. This Privacy Policy draft complies with Switzerland's Federal Act on Data Protection (FADP), effective since September 2026.​

1. Data Controller

Markto (insert full legal name, address, UID/VAT number) acts as the controller for personal data processed via https://markto.ch ("Platform"). Contact: [email protected] or postal address. The responsible person under FADP is the managing director (or designated Data Protection Officer if applicable).​

2. Data Collected

• Registration/Account: Name, email, phone, address, date of birth (for age verification), payment details (if services offered).​

• Listings/Transactions: Vehicle details, photos, mileage, ownership docs; communication between users.​

• Technical: IP address, browser data, cookies, usage logs for analytics and security.​

• Optional: Marketing preferences, profile photos.​

No sensitive data (e.g., health, biometrics) is processed unless explicitly required for verification (e.g., ID for disputes).​

3. Purposes and Legal Basis

Data processing serves:

• Platform operation and user matching (necessary for contract performance).​

• Fraud prevention, security (legitimate interests).​

• Marketing (with opt-in consent or opt-out where permitted under UCA).​

• Legal compliance (e.g., retention for tax/audit).​

Profiling occurs minimally for personalized listings (opt-out available); high-risk profiling requires explicit consent,,​

4. Data Sharing

• Service providers (hosting, email, analytics like Google Analytics – with adequacy safeguards).​

• Buyers/sellers (limited contact data for transactions).

• Authorities if legally required.
  No sale of data; transfers outside Switzerland only to adequate-protection countries (e.g., EU) or with safeguards.​

5. Cookies and Tracking

Session cookies for functionality; analytics/marketing cookies require prior consent via cookie banner (opt-in for non-essential). Users can object anytime. IP addresses qualify as personal data​

6. Storage and Security

Data retained as needed (e.g., 10 years for accounting) or until account deletion. Security measures: encryption, access controls, regular audits ("Privacy by Design"). Breaches notified to FDPIC and affected users promptly.​

7. Your Rights

Under FADP:

• Access, rectification, erasure ("right to be forgotten").

• Objection to processing (including profiling).

• Data portability.

• Withdraw consent anytime (no effect on prior processing).
  Requests free, processed within 30 days; appeals to FDPIC (edoeb.admin.ch).​

8. Children's Data

No services for under-18s; parental consent required if discovered.​

9. Changes

Updates notified via Platform/email. Continued use implies acceptance.​

10. Complaints

Contact us first; then FDPIC (Preisbergstrasse 104, 3018 Bern).​