Privacy Policy – xdiva.ch

GDPR / Data Protection

This Privacy Policy explains how xdiva.ch (hereinafter “the Website”) collects, uses, and protects your personal data when you browse the Website, create an account, publish an ad, or use its features.

We apply the following principles: data minimization (collect only what is necessary), purpose limitation (use data for a specific purpose), security (protect your data), and limited retention.

Data Collected

2.1. Data Provided by the User

• Account: email, phone number, username, password (securely hashed/encrypted).
• Ad: text, photos/media, location, published contact information, availability.
• Support: messages sent via forms/email (support, reports, inquiries).

2.2. Automatically Collected Data

• Technical data: IP address, browser, device, visited pages, date/time, logs.
• Security data: abuse detection (login attempts, spam, attacks, etc.).

2.3. Sensitive Data (Important)

The Website does not intend to collect sensitive data (within the meaning of GDPR), except for information voluntarily published by users in their ads. We strongly recommend not publishing excessive personal information (e.g., identity documents, medical information, etc.).

Processing Purposes

• Create and manage your user account.
• Publish, display, and manage advertisements.
• Ensure Website security (fraud prevention, spam, attacks, abuse).
• Handle support requests and reports.
• Measure usage and improve the Website (if enabled).
• Comply with legal obligations and respond to lawful authority requests.

Legal Bases (GDPR)

• Contract performance: providing the service (account, ads).
• Legitimate interest: security, abuse prevention, Website improvement.
• Consent: non-essential cookies (analytics/marketing), if used.
• Legal obligation: retention/disclosure when required by law.

Cookies

A cookie is a small file stored on your device (computer, smartphone) that helps the Website function properly, secure access, and possibly measure audience data.

4.1. Essential Cookies

• Session management (login/logout).
• Preferences (e.g., language), if applicable.
• Security and anti-abuse protection.

4.2. Analytics Cookies

If the Website uses analytics tools, these cookies help us understand traffic (page views, time spent, traffic sources). Consent may be required depending on configuration.

4.3. Managing Cookies

• You can delete or block cookies through your browser settings.
• Blocking essential cookies may affect certain features (login, security).

Retention Period

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, after which it is deleted or anonymized, unless legal obligations require otherwise.

Examples (to adapt to your operations)

• Account data: while the account is active, then deleted/anonymized after request or prolonged inactivity.
• Ads: during publication + limited retention for moderation/management.
• Technical/security logs: limited retention for security and diagnostics.
• Support/reports: retained as long as necessary for processing, then archived if needed.

Data Sharing

We do not sell your data. Some data may be shared with technical service providers strictly for operating and securing the Website.

Possible Categories of Recipients

• Hosting providers (servers, storage, CDN).
• Security/maintenance services (anti-spam, firewall, monitoring).
• Analytics providers (if enabled).
• Transactional email providers (account creation, password reset).

Transfers Outside Switzerland/EU

If a service provider is located outside Switzerland/EU, appropriate safeguards (e.g., contractual clauses) may be implemented to protect your data.

Security

We implement reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, or disclosure.

• Encrypted communications (HTTPS).
• Secure password storage (hashing).
• Access control and limited privileges.
• Logging and abuse detection systems.

User Rights

Depending on applicable law, you may exercise the following rights:

• Access: obtain a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data, subject to legal obligations.
• Objection: object to certain processing activities.
• Restriction: request limitation of processing in certain cases.
• Data portability: receive certain data in a structured format (if applicable).
• Withdraw consent: for consent-based processing (e.g., cookies).

How to Exercise Your Rights

Send your request to: [email protected], specifying your account email, the nature of your request, and any relevant details. Identity verification may be required.

Protection of Minors

The Website is strictly reserved for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided data, please contact us immediately.

Policy Updates

We may update this Privacy Policy at any time. The current version is the one published on this page. Continued use of the Website implies acceptance of the updated version.

Contact

For any privacy-related questions or requests:

• Privacy email: [email protected]
• Support: [email protected]