Privacy Policy

1 Data Controller

2 Personal Data Collected

General data (standard user):

• First and last name
• Email address
• Postal address (billing)
• IP address
• Device type, browser and operating system
• Session identifier
• Access and usage logs
• Search and purchase history
• Pages visited and actions (clicks, searches)

Data specific to Enterprise (B2B) accounts:

• Email addresses of added collaborator accounts, roles and permissions;
• Personal API keys (the secret is stored as a hash; only usage logs are kept in clear);
• Public widget keys (prefix pk_) with authorised domain(s), origin (Referer/Origin), caller IP and User-Agent on each call;
• Zefix snapshot captured upon Enterprise account approval (company name, UID, sector);
• Proof of Terms acceptance: version, timestamp, IP address and User-Agent of the signatory;
• Cancellation tokens (cooling-off) generated and sent by email;
• Payment reminder log (send dates, level, cumulative fees, automatic blocking status).

The Enterprise offer is activated from the "Enterprise" section of the user profile; the data above is collected only for accounts that have activated this offer. Anonymous tracking is also performed for unregistered visitors to improve the service.

3 Purpose of Processing

Data is collected solely for:

• User account management
• Access to paid services
• Payment processing
• Website security and abuse prevention
• Service improvement (anonymised internal statistics)
• Personalisation of the user experience
• Compliance with legal obligations

No personal data is used for advertising purposes.

4 Cookies

The website uses only technical cookies strictly necessary for its proper functioning (authentication, security, session).

• No advertising cookies
• No third-party analytics tools (Google Analytics or equivalent)

5 Data Sharing

Personal data is not sold, rented or transferred to third parties, except to the following providers and strictly within the scope of their mission:

• Mollie B.V. (Netherlands, EU) — payment provider: credit cards, TWINT, Apple Pay, Google Pay. Payment data is transmitted to Mollie solely for processing transactions.

The Netherlands have a level of data protection recognised as adequate by Switzerland.

6 Data Retention

Data is kept for periods proportionate to the purposes of processing, in accordance with the Swiss Federal Act on Data Protection (FADP).

• Account data: as long as the user account is active. Upon account deletion, personal data is deleted or anonymised, subject to statutory retention obligations.
• Financial data (invoices, payments, supporting documents): 10 years in accordance with art. 958f of the Swiss Code of Obligations.
• Security data, access logs, usage logs: retained for the time necessary for billing, platform security and abuse prevention, then deleted or anonymised.
• Contractual evidence (Terms acceptance, Zefix snapshots, payment reminder log): kept for the duration of the contractual relationship and as long as claims or statutory obligations remain.

You may request deletion of your data at any time (see section 7), subject to statutory retention obligations.

7 User Rights

In accordance with the FADP, every user has the following rights:

• Right of access to their data
• Right to rectification
• Right to deletion, within legal limits (financial data is retained for 10 years)
• Right to data portability

Any request can be sent to: info@swisscarinfo.ch. We respond within 30 days.

Version: 2026-05 — Last updated: 25 May 2026