Privacy policy
OCEA SA operates the citymarket.ch platform (the "platform"), on which suppliers make a shop available to their customers. This policy describes which personal data we process when you use the platform, for what purpose, to whom it is disclosed and what your rights are. It is based on the Swiss Federal Act on Data Protection (FADP) and on Art. 45c of the Telecommunications Act (TCA).
1. Controller and contact
OCEA SA
info@ocea.ch
For any question about data protection or to exercise your rights, write to us at the address above.
2. Data we process and purposes
2.1 User account
When you create an account, we store your e-mail address, your password (only in hashed form; we cannot read it) and the language you chose. You may complete your profile with title, last name, first name, company, phone numbers, date of birth and VAT number. Purposes: creating and managing your account, secure login, communicating with you.
2.2 Access to shops and orders
When you request access to a supplier's shop and then place orders, we process your contact details, your acceptance of the supplier's general terms and conditions, your delivery and invoicing addresses, the content of your orders, their history and their amounts. Purposes: performing the contract with the supplier, preparation and delivery, invoicing, customer service. Accounting records are kept for ten years (Art. 958f Code of Obligations).
2.3 Technical data
On every request, the server writes the IP address, the page requested, the date and time, the browser identifier (see section 3) and, if you are logged in, your account id to its logs. The browser and operating system used (user agent) and the IP address of the first visit are associated with the browser identifier. Purposes: operation and security of the platform, abuse detection, error diagnosis.
2.4 Support
When you contact support by e-mail or through the support portal, we process your message and your contact details in order to handle your request.
2.5 Voluntary feedback
The platform shows a feedback button which, when you click it, opens a widget (Quackback, hosted by us on roadmap.citymarket.ch) through which you can send us suggestions or report problems. Until you open it, nothing is loaded from that service. We process what you type there, the page concerned and the platform version; if you are logged in, your e-mail address is passed to the widget when you open it, so that we can reply to you. Your account id is not transmitted. Purpose: improving the platform.
2.6 Marketing
We may use your contact details and your order history to inform you of our offers, news and promotions and of those of the supplier whose shop you use. You can object at any time through the unsubscribe link in our messages.
3. Cookies and local storage
The platform sets the following cookies in your browser:
| Cookie | Purpose | Duration |
|---|---|---|
| _citymarket_key | Session: login, cart, language, protection against forged requests | Until the browser is closed |
| user_remember_me | Stay logged in (only if you tick the option) | 60 days |
| _citymarket_pkey | Browser identifier for security and error diagnosis | 12 months |
| _citymarket_notice_dismissed | Remembers that you closed a maintenance notice | 90 days |
Once you have opened it, the feedback widget (section 2.5) also uses your browser's local storage for its own session, without additional cookies. The usage statistics (section 4) store neither cookies nor data in your browser. You can refuse or delete cookies in your browser settings; without the session cookie, login and the cart do not work.
4. Usage statistics
We measure the use of the platform with the OpenPanel software on an instance we host ourselves (analytics.city7.ch, server in Germany); no data is sent to the software's publisher or to advertising networks. This data is pseudonymised: we send it neither your e-mail address, nor your name, nor your account id, whether you are logged in or not. We record: the pages viewed (without search terms, tokens, order or contact numbers), device and browser type, the approximate country derived from the IP address and a technical identifier that the software derives itself from the IP address and the browser, without cookies. When an order is placed, our server reports its amount and whether it was placed on the website or in the iOS application, without the order number; we use this order data only as aggregated results (number of orders and revenue per period), without following individual journeys. We do not record your sessions (no "session replay"). Purpose: understanding how the platform is used and improving the shops.
You can refuse the measurement of the pages you view by blocking the analytics.city7.ch domain in your browser or with a content blocker; the shop works normally without it. The count of orders is reported by our server and is not affected.
5. Recipients and hosting
Your data is disclosed to the following categories of recipients:
- the supplier whose shop you use, to handle your access requests and orders, and its carriers for delivery;
- our hosting and infrastructure providers, which process the data on our behalf and are bound by contract: Alwyzon (Austria) for the application and the database; Contabo GmbH (Germany) for the usage statistics, the feedback widget and the support portal; Infomaniak Network SA (Switzerland) for sending e-mails;
- authorities, where the law requires it.
We do not sell your data.
6. Disclosure abroad
The data is hosted in Switzerland and in the European Union (Austria, Germany), whose legislation the Federal Council recognises as providing an adequate level of protection. We do not disclose personal data to providers established outside Switzerland and the European Union; the platform's fonts, styles and scripts are served by our own servers, without a content delivery network.
7. Retention
- Account and profile data: as long as the account exists; on its deletion it is deleted or anonymised.
- Orders, invoices and other accounting records: ten years (Art. 958f Code of Obligations).
- Login tokens: 60 days; e-mail confirmation links: 7 days; password reset links: 24 hours.
- Technical logs: as long as needed for security and error diagnosis, then deleted.
- Feedback and support requests: until they are handled, then archived.
8. Security
The connection to the platform is encrypted (TLS). Passwords are stored hashed. Access to the data is limited to the people who need it for their work. Protection against robots at registration relies on a mechanism we host ourselves, without any third-party service.
9. Your rights
You have the right to access the data we process about you (Art. 25 FADP), to have it corrected or deleted, to object to a processing, to withdraw a consent you gave and to receive the data you provided to us in a common electronic format (Art. 28 FADP). Write to us at info@ocea.ch; we generally reply within 30 days and may ask you to prove your identity. Data we are legally required to keep (section 7) cannot be deleted before the end of the retention period.
You may also contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.
10. Changes
We update this policy when the platform or the law changes. The version published on this page prevails.
Last updated: 18.09.2026