Privacy

Note: This English version is a convenience translation. The German version (on the German site) is the legally binding one.

1. Controller

The controller for the data processing is Miki Zlatanov (RankMaxxing.ch), Würenlos, Switzerland. Contact: info@rankmaxxing.ch. For users from the European Economic Area (EEA), the General Data Protection Regulation (GDPR) additionally applies.

2. What data we process

Public entry details (domain, name, description, logo, category); bids and payment transactions (amount, time, Stripe payment reference, and the bidder's email address from the payment transaction, for the receipt, follow-up questions and notifications about your entry); access and click data (page views and outbound clicks, each with a hashed value of the IP address that is not stored in plain text, to detect repeat access); technical data (e.g. user agent, referrer); when you contact us, the details you provide; for admin access, the email address used to log in.

3. Purposes and legal bases

We process data to operate and display the ranking, to handle bids and payments, for analytics, for security and abuse prevention, and to comply with legal obligations. Where the GDPR applies, we rely on the following legal bases: performance of a contract (Art. 6(1)(b) GDPR) for bids, payments and displaying entries; legitimate interests (Art. 6(1)(f) GDPR) for security, abuse prevention and cookieless, aggregate analytics; your consent (Art. 6(1)(a) GDPR) for cookie-based analytics and referral measurement with DataFast; and legal obligation (Art. 6(1)(c) GDPR) for retention and accounting duties.

4. Public entries

Entry details (name, domain, description, logo, category), the bid amount or rank, and aggregate click counts are displayed publicly.

5. Cookies and local storage

For the analytics and referral measurement described in section 6, the service DataFast sets a first-party cookie with a pseudonymous visitor and session value — but only if you have consented via the cookie notice. If you decline, this cookie is not set. You can change or withdraw your choice at any time via the “Cookies” link in the footer. Strictly necessary and therefore not requiring consent are: a cookie for the admin login, a cookie for your language choice, and local storage of your display setting (light/dark) and your cookie choice. We do not use advertising cookies.

6. Analytics

For analytics and referral measurement we use Vercel Web Analytics (cookieless, without advertising trackers and without building personal profiles) and — only with your consent — DataFast. If you have consented, DataFast recognises through the cookie mentioned in section 5 which channels visitors come from; for a paid entry, a pseudonymous visitor and session value is linked to the payment transaction in order to attribute the referral source to the revenue (attribution). In addition, we count page views server-side using the IP hash mentioned above (cookieless).

7. Payment processing

Payments are processed through Stripe. Card data is processed directly by Stripe; we do not store full payment-method data. Stripe's privacy terms additionally apply.

8. Hosting and processors

Website hosting: Vercel. Database: Supabase (data centre Frankfurt, Germany). Payments: Stripe. Analytics and referral measurement: Vercel Web Analytics and DataFast. These services process data on our behalf.

9. Disclosure abroad

Individual service providers (in particular Stripe and DataFast) may process data outside Switzerland/the EEA, including in the USA. In such cases we rely on appropriate safeguards (e.g. the EU Commission's Standard Contractual Clauses or safeguards recognised under Swiss law).

10. Retention

We process data for as long as is necessary for the stated purposes. We keep payment and accounting records within the scope of the statutory retention obligations.

11. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access (including encrypted transmission and access restrictions).

12. No automated individual decisions

There is no automated decision in an individual case producing legal effects or a similarly significant impact. The ranking order results solely from the amount of the bid.

13. Children

The Platform is intended for adults. We do not knowingly collect personal data from children.

14. Your rights

Within the scope of applicable law, you have the right to access, rectification, erasure, restriction, objection and to receive/transfer your data; you may withdraw a given consent at any time with effect for the future — for analytics cookies, you can change or withdraw your choice conveniently via the “Cookies” link in the footer. Send requests to info@rankmaxxing.ch. You also have the right to lodge a complaint with a data protection supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EEA with the supervisory authority of your country.

15. Changes

We may amend this Privacy Policy. The version published at the time applies.