Handli.ch
Back to home

Privacy Policy

Last Updated: August 2026

1. General Principles and Data Controller

1.1. Handli.ch is committed to respecting user privacy in accordance with the revised Swiss Federal Act on Data Protection (revDSG / nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1.2. The Data Controller responsible for data processing on this platform is:

2. Collection and Processing of Personal Data

We process personal data only to the extent necessary to provide a functioning marketplace and secure user authentication:

  • Account & Contact Information: Name, email address, Swiss phone number (+41), profile details.
  • Authentication & Fraud Prevention Data: OTP verification logs, IP addresses, user agent strings, and bot detection signals (Cloudflare Turnstile token verification).
  • Transaction & Billing Data: Purchase history of platform credits/boosts, invoice details, transaction IDs. Payment details (credit card numbers, TWINT tokens) are processed directly by our PCI-DSS certified payment processor and are never stored on Handli.ch servers.
  • Listing Data: Media uploads, listing descriptions, pricing, and communication metadata between users.

3. Purpose of Processing and Legal Basis

Data processing occurs for the performance of our contract with you (Art. 31 para. 2 lit. a revDSG), compliance with legal obligations, or our legitimate interests in protecting the platform against toll fraud, abuse, and security threats.

4. Third-Party Service Providers and Data Storage

To operate Handli.ch, we collaborate with selected technical providers bound by strict data protection agreements:

  • Backend Infrastructure & Storage: Supabase Inc. (Database hosting, Auth, storage bucket listing-images).
  • Payment Processing: Payrexx AG (Burgdorf, Switzerland) for processing TWINT, Visa, Mastercard, and subscription payments.
  • Frontend CDN & Domain Hosting: Lovable CDN and Infomaniak Network SA (Geneva, Switzerland).
  • Communication & OTP Services: eCall / Meta WhatsApp API / Resend for transaction alerts and authentication verification.
  • Analytics: Privacy-preserving analytics (PostHog / Plausible) executed strictly gated by consent.

5. Cookies and Consent Management

5.1. Essential Cookies: Necessary for account authentication, security (Turnstile), and basic platform navigation. Essential cookies do not require explicit opt-in.

5.2. Analytics Cookies: Optional scripts used to measure aggregated platform performance. Analytics tools are initialized only after explicit consent is granted via the cookie consent banner. Consent preferences are stored locally on your device (localStorage).

6. Data Security and Retention

We maintain modern technical and organizational measures (TLS encryption, WebP client compression, rate limiting, role-based access control) to protect personal data against loss, misuse, or unauthorized access. Personal data is retained only for as long as necessary to fulfill marketplace operations or statutory Swiss retention requirements.

7. User Rights

Under the revDSG, you have the following rights regarding your personal data:

  • Right to information and access.
  • Right to rectification or erasure of inaccurate data.
  • Right to restrict or object to data processing.
  • Right to withdraw consent at any time for consent-based processing.

To exercise these rights, contact us at info@handli.ch.