Privacy notice
This notice explains which personal data evshake processes, why, who else receives it and how long we keep it. It follows the Swiss Federal Act on Data Protection (FADP).
Who is responsible
evshake is responsible for processing your data on this website. For anything about your data, write to us through the contact form.
What we process and why
We only process the data the marketplace needs:
- Your account. Your email address, your password (stored only as a secure hash that cannot be turned back into it) and your language. We use them to sign you in and to send you the emails your account needs.
- Your listings. Everything you enter about your car, its photos and the place its postcode belongs to. A published listing is public. On the map it appears at the centre of that place, never at your address. Your email address is not shown. Once a listing is published, we also keep anonymous figures about it for statistics: the model, price, mileage, canton and dates. They cannot be linked to you, and they stay after the listing is deleted.
- Messages to sellers. When you write to a seller, we email your message to them with your email address as the reply address, so they can answer you directly. We keep a copy, with your name and address, to limit abuse.
- The contact form. Your message and email address are emailed to our team so that we can reply. The website does not store them.
- Saved cars and searches. The cars and searches you save, so that we can show them to you and, if you ask for it, email you about price drops, sold cars and new matches. You can switch off the emails for a search at any time, and the others by removing the car from your list.
- Emails about your listings. We tell you when a listing is approved, rejected or about to expire.
Cookies
evshake sets one cookie, and only when you sign in. It keeps you signed in for up to 30 days and is deleted when you sign out. It is strictly necessary, so we do not ask for consent. There are no tracking or advertising cookies.
When you visit the site
To deliver pages and protect the site from abuse, our servers process your IP address and the details your browser sends. They are held in memory for up to a day to limit requests, and in the server logs until those are overwritten. We do not use them to identify you or to build a profile. To count how often a listing is viewed without counting the same visitor twice in a day, we keep a code derived from these details in memory for that day only; it cannot be turned back into them.
Who else receives data
We do not sell your data or pass it on for advertising. These service providers process it on our behalf, only to provide their service:
- Infomaniak (Switzerland). Runs the servers that host evshake and its database, and sends our emails.
- rokka.io by Liip (Switzerland). Stores listing photos and delivers them to your browser.
- swisstopo, the Federal Office of Topography. Provides the base map. When you open the map view, your browser loads its tiles directly from swisstopo, which therefore receives your IP address.
- Backup storage. Encrypted copies of our database are kept with a separate storage provider, so that a failure of our servers does not lose your data. The provider cannot read them.
evshake uses no analytics, advertising or social media trackers. Fonts and icons are served from our own server.
How long we keep data
We delete data once it has served its purpose. Deleted data disappears from the backups when the oldest backup that still contains it expires.
| Data | Kept for |
|---|---|
| Sign-in session | 30 days |
| Link to confirm your email address | 24 hours |
| Link to reset your password | 1 hour |
| A sign-up that was never confirmed | 7 days |
| Your account, listings, saved cars and searches | Until you delete them or your account |
| A listing on the marketplace | 60 days at a time, renewable |
| An expired listing that was not renewed, with its photos | 6 months |
| Anonymous figures about published listings (model, price, mileage, canton, dates) | No time limit, as they cannot be linked to you |
| Our copy of your messages to sellers | 12 months |
| Record of moderation actions | 12 months |
| Server logs | Overwritten continuously, at most 30 MB per service |
| Database backups | 14 days on our server; encrypted copies elsewhere for up to 12 months |
Your rights
You can ask which data we hold about you, and have it corrected or deleted, unless the law requires us to keep it. You can also ask for the data you gave us in a common electronic format.
You can delete your account yourself on your account page; that also removes your listings, photos, saved cars and messages. Only the anonymous figures about your listings stay. For anything else, write to us through the contact form.
If you think we handle your data wrongly, you can complain to the Federal Data Protection and Information Commissioner (FDPIC).
This privacy notice was last updated on .