Privacy policy

Data controller

Valentin Fischer Services, Pfäffikonerstrasse 38, 8834 Schindellegi, valentin.fischer@vf-services.ch

What data we process

• Order details: Name, address, email address, telephone number, selected payment method and order contents. These are processed to fulfil the contract.
• Newsletter: Your email address, if you subscribe. You can unsubscribe at any time using the link in each issue.
• Server logs: When you access the website, the hosting provider processes technically necessary data such as IP address, time and page accessed.

Forms

The order and newsletter forms are processed through Netlify Forms (Netlify, Inc., USA). The information you enter is stored there and sent to the seller by email.

Hosting

This website is hosted by Netlify. Data may be transferred to the USA. Netlify is contractually committed to an appropriate level of data protection.

Fonts

This website loads fonts from Google Fonts, transmitting your IP address to Google. You can block the fonts in your browser if you wish to avoid this; the website will remain readable.

Storage in the browser

The basket is stored only locally in your browser's storage (localStorage). These data remain on your device and are transmitted only when you submit the order form. No tracking cookies are set.

Your marketplace favourites are also stored locally: only the identifiers of saved listings are kept in your browser's storage. They are not transmitted to Garnelenfischer, are not visible on other devices, require no account and disappear when you clear your browser data.

Optional campaign attribution

Tagged links may contain general identifiers for the source, channel, campaign and post (UTM). When you move between our pages, only these limited identifiers are passed on in the link. We set no cookies for this and use neither localStorage nor sessionStorage.

We store these identifiers with your Netlify account only if you tick the separate, initially empty checkbox during registration. After registration is confirmed, and when your first profile with a public contact is saved, separate private measurement records are created. They contain the event, time, campaign identifiers and a pseudonymous checksum of your account identifier, but no email address, name, password or IP address. The purpose is to identify effective information channels, not to create advertising profiles. No data are shared with an additional analytics provider. Our registration notification to the operator then also identifies the campaign you consented to.

Ticking this box is optional and is not required for an account. You can still register without ticking it and use the website. You can withdraw consent to campaign attribution and request deletion of the related metadata and measurement records by contacting the address above. Until then, they remain stored with your account. An account is not yet a completed seller profile, and a profile with public contact details is not yet a published listing.

External content, videos

Sellers may add a YouTube or Vimeo video link to their profile. The video is not uploaded to our website. Opening a public seller profile loads nothing from YouTube or Vimeo; it shows only a placeholder. Only when you explicitly click “Load video” is the provider's player embedded. Your IP address is then transmitted to YouTube (Google Ireland Limited or Google LLC) or Vimeo, Inc., and the provider may collect further information about your browser. We use the versions designed to collect less data (youtube-nocookie.com or player.vimeo.com with the Do-Not-Track parameter set). These do not prevent data being transmitted to the provider, but transmission begins only after your click. Videos do not play automatically.

Marketplace: account, profile and listings

Registering as a seller creates a Netlify Identity account with an email address and a password of your choice. Netlify Identity (Netlify, Inc., USA) manages login details and sessions; the operator cannot see the password itself. In your account, you can then create, edit and deactivate a seller profile with your display name, region and information on breeding lines, care and water parameters, as well as your own listings with details of the offer, price, quantity and shipping. These data are stored and processed through Netlify Functions and Netlify Blobs.

You may optionally add a short story, breeding specialities, handover method, your website address, up to four additional profile links and a video link, as well as an avatar or logo, a cover image, up to six profile images and up to five images per listing, including alternative text. Uploaded images are stored in Netlify Blobs and delivered through a dedicated function on this website; the storage cannot be accessed directly from outside. Only JPEG, PNG and WebP are accepted, checked against the actual file contents, with a maximum of 4 MB per image.

You may also upload one short video clip directly per listing (up to 30 seconds, up to 4 MB, MP4 or WebM only, checked against the actual file contents). Like images, clips are stored in Netlify Blobs and delivered only through a dedicated function on this website. The storage cannot be accessed directly from outside, and no external video service is embedded. A clip is available only while its listing is active and the seller's profile has public contact details. It cannot be accessed for a draft, a deactivated listing or a listing marked as sold. Clips never play automatically. Replacing or removing a clip, or saving the listing without it, deletes the file from storage. Each account may have up to eight clips and 48 images; uploads beyond these limits are rejected.

Public information includes the display name, region, profile text, short story, breeding specialities, handover method, details of lines, care, water parameters and shipping, uploaded images and their alternative text, external links, any video link, the month and year the profile was created (“Member since”), and listing details. A telephone number or public contact email is published only if the seller explicitly authorises this in their profile; otherwise it remains private. The Netlify Identity login email address is not published.

Information is not manually checked before publication: a listing is public immediately after saving. Moderation takes place afterwards; see the Marketplace guidelines.

Seller reviews

Only marketplace sellers can be reviewed, not individual animals or products. Garnelenfischer's own food and other products have no review system, and no review data are processed for them. A review can be submitted only through a single-use link that the seller passes to the buyer after confirming a sale.

The data processed are the star rating, review text, time, reviewed seller's identifier and identifier of the confirmed sale. No email address or name is collected from the person submitting a review; no account is required. To prevent a link being used twice, an irreversible checksum of the link is stored, never the link itself. Reports store the reason and an irreversible checksum of the reporting user's account identifier, never their email address.

The star rating, text, date, label “Marketplace sale confirmed by the seller” and any seller reply are public. Sale and link identifiers, report reasons and reporter identifiers are private. Reviews are stored as long as the reviewed seller account exists and are removed when it is deleted. Individual review deletion can be requested through the contact address.

Notifications: following sellers and the weekly digest

Both notifications are optional, separate and off by default. An account, order or submitted review does not subscribe anyone. The checkbox is always empty and must be actively ticked.

Signing up initially creates only a confirmation request. The subscription takes effect only when the confirmation link is opened (double opt-in). Without confirmation, the request expires after fourteen days and nothing is sent.

The data processed are the email address, notification type, seller identifier when following a seller, time and source of the sign-up, confirmation time and version of the consent text accepted. The IP address is explicitly not stored as evidence of consent. Storage keys contain only an irreversible checksum of the address, rather than the address itself.

Each message identifies the data controller and includes an unsubscribe link that takes effect immediately, without signing in or answering further questions. After unsubscribing, the address is placed on a suppression list to prevent accidental further messages. You can subscribe again at any time; the suppression is lifted only after the new confirmation. Data are retained until you unsubscribe; the unsubscribe record remains as evidence.

Sending emails. Confirmation messages, seller notifications and digests are sent through the hallo@garnelenfischer.ch mailbox at Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland. The recipient address, subject and message content are transmitted to Hostpoint and, for delivery, to the recipient's email provider. A subscription becomes active only after the confirmation link is clicked.

Help chat

The help chat at the bottom right runs entirely in your browser. It searches an index of this website's public pages delivered with the page and responds only with an extract and a link to the source. Your question is not transmitted to Garnelenfischer or any other service, stored or analysed, even in your browser's storage. Reloading the page clears the conversation. No artificial intelligence is involved and no connection to an AI provider is made.

Photo enhancement and external AI processing

When you use optional photo enhancement, we process the uploaded original, the target coordinates set by the seller, account identifier, image path, editing status, technical job identifiers, selected service and payment records. Camera, device and location metadata are removed before transmission. The data are used to assess the image, fulfil the contract, prevent misuse, handle billing and corrections, and deliver the result.

After explicit confirmation, the normalised image is first transmitted via the OpenAI API to OpenAI, L.L.C. in the USA. The image review agent checks the marked shrimp, decides whether it is suitable and creates an individual image brief. Under its published business terms, OpenAI does not use API inputs and outputs for model training by default. API data may generally be retained for up to 30 days to provide the service and monitor misuse, unless a shorter retention period applies to the account used. If suitable, the image, marking and brief are then transmitted to Higgsfield, Inc. in the USA. Higgsfield may use additional AI and computing providers for individual models. Under its published privacy policy, uploaded media and inputs may also be used to improve and train its own or affiliated AI models. Once content has been incorporated into a model, deleting it cannot technically remove it fully from the trained model. If you do not agree, you must not start photo enhancement; you can use the original for your listing free of charge.

The operator remains responsible for selecting and supervising its data processors. Data are transferred to the USA only where the requirements of the Swiss Data Protection Act are met. Provider status, the applicable data protection framework and the necessary contractual safeguards are documented before activation. Images containing identifiable people, contact details, number plates, health data or other sensitive information are not permitted for this service.

The working copy created solely for external processing is deleted if the provider fails to start the job, or after the completed or failed result has been retrieved. The original, selected result and technical job data remain in the seller account as long as needed for the listing, correction round, billing, misuse prevention or statutory records. Deletion can be requested through the contact address, unless a statutory retention duty prevents it. Copies held by external providers are also subject to their published deletion and retention rules.

Photo payments

Payments for photo units and the photo subscription are processed by Stripe. The operator does not store full card details. Only the payment, customer, subscription and event identifiers needed for allocation, crediting units, cancellation and statutory records are stored.

Retention

Order data are kept for the statutory retention period of ten years. Newsletter data are kept until you unsubscribe. Seller account, profile and listing data are kept for the lifetime of the account and removed when it is deleted, unless statutory retention duties apply. Seller reviews are removed with the reviewed seller account. Notification subscriptions are retained until you unsubscribe; the unsubscribe record then remains as evidence.

Your rights

Under the revised Swiss Data Protection Act, you have the right to access, rectification, deletion and data disclosure. An email to valentin.fischer@vf-services.ch is sufficient.

Last updated: 01.10.2026