Privacy Policy

Last updated: 3 May 2026

This privacy policy describes how echomusic.ch collects, uses, and protects your personal data, in accordance with the Swiss Federal Act on Data Protection (nFADP) in force since 1 September 2023.

Data Controller

David Divorne

Lausanne, Switzerland

info@echomusic.ch

1. Data Collected

During Registration

Email address
Password (stored in encrypted form, never in plain text)
Artist name / stage name (Onstage account)

During Use

Profile information (description, canton, links, photos)
Published content (classifieds, events, news, discography)
Messages sent through the platform
Browsing data (pages visited, timestamps — without third-party cookies)

Data We Do NOT Collect

No third-party cookies or advertising trackers
No precise geolocation data
No payment data (any payments are processed by secure third-party providers)

2. Purposes of Processing

Your data is used exclusively for:

Creating and managing your account
Displaying your public profile (if Onstage account)
Sending email notifications (messages received, account status)
Improving the service (anonymised traffic statistics)
Platform moderation

Your data is never sold or shared with third parties for commercial purposes.

3. Legal Basis

The processing of your data is based on:

Consent: acceptance of Terms of Use during registration
Contract performance: provision of the echomusic.ch service
Legitimate interest: security and proper operation of the platform

4. Retention Period

Account data: retained as long as the account is active
Published content: retained as long as the account is active or the content is not deleted by the member
Browsing data: anonymised, retained for a maximum of 12 months
Deleted accounts: all personal data is erased within 30 days

5. Your Rights

Under the nFADP, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate data (via your profile or by email)
Right to erasure: delete your account and all your data (feature available in settings)
Right to data portability: receive your data in a common format
Right to object: object to certain processing

To exercise these rights, contact us at info@echomusic.ch. We will respond within 30 days.

6. Data Security

We implement appropriate technical and organisational measures to protect your data:

Password encryption (bcrypt)
Mandatory HTTPS connection
Protection against CSRF, XSS, and SQL injection attacks
Restricted data access (administrator only)
Hosting in Switzerland (Infomaniak, Geneva)

7. Data Transfer

Your data is hosted in Switzerland at Infomaniak Network SA in Geneva. No data transfers to third countries are made.

8. Cookies

echomusic.ch uses only essential technical cookies for the operation of the website (login session). No tracking, advertising, or analytics cookies are used.

9. Minors

echomusic.ch does not knowingly collect data from persons under 16 years of age. If you are a minor, please obtain the consent of your legal representative before registering.

10. Changes

This policy may be updated. The date of the last modification is indicated at the top of this page. In case of significant changes, users will be informed.

11. Contact and Complaints

For any questions regarding the protection of your data: info@echomusic.ch

In case of an unresolved dispute, you may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland.