Privacy Policy

1. What is this Privacy Policy about?
2. Who is responsible for processing your data?
3. What data do we process?
4. For what purposes do we process your data?
5. On what basis do we process your data?
6. What applies to profiling and automated individual decisions?
7. To whom do we disclose your data?
8. Do your personal data also go abroad?
9. How long do we process your data?
10. How do we protect your data?
11. What rights do you have?
12. Do we use online tracking and online advertising technologies?
13. Can this Privacy Policy be changed?

1. What is this Privacy Policy about?
Car-Go GmbH (hereinafter also “we”, “us”) collects and processes personal data concerning you or other individuals (so-called “third parties”). We use the term “data” interchangeably with “personal data” or “personally identifiable information”.

This Privacy Policy describes what we do with your data when you use car-go.ch, other websites we operate, or our apps (hereinafter collectively referred to as “Website”), when you use our services or products, engage with us under a contract, communicate with us, or otherwise interact with us.

Where necessary, we will notify you in writing about additional data processing activities not mentioned in this Privacy Policy. We may also inform you separately about the processing of your data, for example, in consent declarations, contractual conditions, additional privacy notices, forms, and notices.

This Privacy Policy is designed to comply with the requirements of the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DPA). However, whether and to what extent these laws apply depends on the specific case.

2. Who is responsible for processing your data?
For the data processing described in this Privacy Policy, the responsible entity is:

Car-Go GmbH
Blend Binakaj
St. Gallerstrasse 188
8404 Winterthur, Switzerland
Email: office@car-go.ch

You can contact us for data protection inquiries and to exercise your rights as per Section 11.

3. What data do we process?
We process various categories of data about you, primarily the following:

– Technical data: When you use our website or other digital services, we collect your device’s IP address and other technical data to ensure the security and functionality of our services. These data include logs recording your usage. We usually retain technical data for six months.

– Registration data: Some services require an account or registration, either directly with us or through external login providers. We process data related to your registration and service usage, generally retaining them for 12 months after your last use.

– Communication data: When you contact us via contact forms, email, phone, or other means, we collect exchanged data, including contact details. We store these communications for 12 months, and in some cases, for 10 years if required by law.

– Master data: This includes basic information necessary for contractual and business relationships, such as name, contact details, roles, and functions. These data may come from you, business partners, publicly available sources, or other third parties. We generally keep these data for 10 years from the last interaction, or at least until the contract ends.

– Contract data: Data related to contract negotiations, agreements, and transactions. These data are retained for 10 years after the last contract activity.

Most of the above data are provided by you. However, we may also collect data from publicly available sources or third parties.

4. For what purposes do we process your data?
We process your data for the following purposes, which represent legitimate interests for us and possibly for third parties:

– Communication with you and responding to inquiries.
– Managing and processing contractual relationships.
– Marketing, market research, and improving our services.
– Compliance with laws, regulations, and internal policies.
– Internal administration and operational processes.

5. On what basis do we process your data?
We process your data based on the following legal grounds:

– Your consent (which you can withdraw at any time).
– Contractual necessity for fulfilling agreements with you.
– Legitimate interests such as marketing, security, and service improvement.

6. What applies to profiling and automated individual decisions?
We may analyze certain personal characteristics for purposes such as:

– Detecting security risks and fraud.
– Market research and statistical analysis.
– Operational planning.

Where significant decisions are made solely through automated processes, we ensure fairness and the possibility of human review.

7. To whom do we disclose your data?
We may share your data with:

– Service providers working on our behalf.
– Authorities when legally required.
– Contract partners, such as customers and business partners.

These recipients may use third parties, potentially leading to further data disclosures.

8. Do your personal data also go abroad?
Yes, we may transfer your data internationally, including outside Switzerland and the European Economic Area (EEA). If a recipient is in a country without adequate data protection laws, we implement safeguards such as Standard Contractual Clauses (SCCs) issued by the European Commission.

9. How long do we process your data?
We retain your data as long as necessary for legal compliance, business operations, and record-keeping. Data are deleted or anonymized when no longer required.

10. How do we protect your data?
We implement appropriate security measures to prevent unauthorized access, loss, and misuse of your personal data.

11. What rights do you have?
You have the right to:

– Access your data.
– Request corrections to inaccurate data.
– Request deletion of your data.
– Receive your data in a common format or have it transferred to another service provider.
– Withdraw consent where applicable.
– Object to automated decision-making.

To exercise your rights, contact us via the details in Section 2.

12. Do we use online tracking and online advertising technologies?
Yes, we use various technologies to recognize and track users, including:

– Necessary cookies for website functionality.
– Performance cookies to analyze user behavior.
– Marketing cookies to show targeted ads.

We use services like Google Analytics, Facebook, Instagram, and YouTube, which may involve data transfers outside the EEA. You can manage cookie preferences in your browser settings.

13. Can this Privacy Policy be changed?
This Privacy Policy may be updated at any time. The current version is always available on our website.

Last updated: January 1, 2023