Privacy Policy

01.09.2023

1. General provisions

Carvolution AG (hereinafter referred to as Carvolution, “we”, “us”) always uses your data confidentially, as the protection of your data is of central importance for us. This privacy policy concerns the use of the website www.carvolution.com (hereinafter referred to as “website”) and the use of our service offer. Our services are intended for persons domiciled and habitually resident in Switzerland.

If you provide us with personal data of other persons (e.g. family members, data of work colleagues), please ensure that those persons are familiar with this privacy policy and only share their personal data with us if you are permitted to do so and if that personal data is correct.

You can find more information about our data processing in the general terms and conditions. The submission of a contact request presupposes that you agree to the applicable T&Cs and are familiar with the privacy policy.

2. Collection of personal data

First and foremost we process the personal data that we receive in connection with our business relationship with our customers and their other business partners and other participating persons or that we collect from users in the course of operating our websites, apps and other applications. Your personal data may be collected if you are one of our customers or business partners, but also if you work for one of our customers or business partners.

We may also obtain personal data from public sources (e.g. the commercial register, debt collection register) or specific data for creditworthiness assessments or from address dealers. Furthermore, persons closely associated with you (family, employer, legal representative, etc.) may provide us with personal data that we need in order to conclude or continue the business relationship.

Specifically the following data is collected and used by Carvolution:

1. Personal data (name, address, date of birth, gender, etc.)

2. Application data (email address, telephone number, driver's licence details, payment data)

3. Contract data (term of the contract, vehicle, outstanding amounts, reminders, credits)

4. Driving behaviour (routes, location, driven kilometres)

5. Incidents (accidents, events, damage, traffic offences)

6. Use data and metadata (visited websites, access times, device information, IP addresses)

As a Carvolution driver you are aware that Carvolution may use the following data in anonymised form for the purpose of improving our service.

During the term of the contract, Carvolution receives telemetry data on the use of the vehicle and thus knowledge of driving data such as the number of kilometres, driven routes and location. Carvolution has the right to use that data to improve its service, but undertakes to anonymise it and treat it confidentially with respect to third parties.

3. The purposes of the data processing

We use the personal data collected by us in the first place to conclude and implement contracts with our customers and business partners, for the services provided by us (particularly vehicle purchasing, rental, repairs, financing) and in order to fulfil our statutory obligations both in Switzerland and abroad.

Furthermore, we process personal data belonging to you or other persons, to the extent permitted and required, for the following purposes among others:

• Our service and the development of our offers, services and websites, apps and other platforms on which we are present;

• To deliver newsletters or other information letters, provided you have agreed (granted consent may be revoked at any time);

• Other advertising and marketing

• Communication with third parties and processing of enquiries (e.g. applications, media enquiries); customer acquisition;

• Market research and opinion polling, media monitoring, market monitoring, competition;

• Asserting legal claims and mounting a defence in connection with legal disputes and official proceedings;

• Prevention and clarification of criminal offences or other misconduct (e.g. carrying out internal investigations, data analyses to combat fraud);

• To guarantee our company’s operations, particularly our IT, websites, apps and other platforms;

• Measures in connection with ensuring compliance with our security and company rules;

• Buying and selling assets.

4. Website

For technical reasons, every time you use our website, certain data is collected and temporarily stored in log files (log data), especially the IP address of the end device, information about the Internet service provider and about the operating system of your end device, information about the referrer URL, information about the browser used, the date and time of access and the content accessed when visiting the website. We use this data so that our website can be used, to ensure system security and stability, to optimise our website and for statistical purposes.

Carvolution also uses cookies and similar technologies on its website. Cookies help to make our service better, faster and securer for you, so as to ensure the best possible service for you. Some cookies only relate to the duration of your visit to our website. Others continue to exist until you delete them yourself. Through existing cookies we can recognise you when you visit our website again. You can prevent the storage of the cookies by setting your browser software accordingly. If cookies are deactivated, this may restrict the use of the website. We recommend that you confirm your cookie settings in your browser according to your needs.

Log data and cookies do not usually relate to persons. However, when you log in to our website, we can assign the corresponding data to you and then also use it in a personalised manner.

Cookies and similar technologies may also stem from third-party companies that provide us with certain functions. For example, we use analytics services so that we are able to optimise and personalise our website. Moreover, cookies and similar technologies from third parties enable them to target you with individualised advertising on our websites or on other websites and social networks that also work together with this third party, and to measure how effective advertisements are (e.g. whether you accessed our website via an advertisement, and what actions you then take on our website). For this purpose, the relevant third-party providers may record the use of the website and combine their recordings with further information from other websites. In this way, they can record user behaviour across several websites and end devices in order to provide us with statistical analyses on this basis. Providers may also use this information for their own purposes, e.g. for personalised advertising on their own website or other websites. If a user is registered with the provider, the provider can assign the usage data to that person.

One example for such tools is Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The information generated by the cookies on your use of our website is generally transferred to and stored on a Google server in the USA. Google uses that information on our behalf to analyse the use of our website by users, to compile reports on the activities within it and to provide further services to us associated with the use of the website and the use of the Internet. Pseudonymous usage profiles of the users may be created from the processed data. We only use Google Analytics with activated IP anonymisation. That means the users’ IP addresses are abbreviated by Google in Member States of the European Union or in other contracting states of the Treaty on the European Economic Area. In exceptional cases only, the full IP address is transferred to a Google server in the USA and abbreviated there. The IP address transmitted by the user’s browser is not combined with any other Google data. You can also prevent the recording of the data generated by cookies that relates to your use of the website to Google or the processing of that data by Google by downloading and installing the browser plug-in available at Google.

Another example is Facebook. We may supply Facebook (or Meta) with user details such as email addresses for the purpose of advertising on Facebook. Facebook compares these with corresponding details of its members in order to be able to display targeted advertising to our users ("custom audiences"). You can object to such comparison any time. Our websites may also use the so-called "Facebook pixel" and similar technologies offered by Meta Platforms Ireland Ltd. Their use allows us to display our Facebook ads only to those users on Facebook and to partners cooperating with Facebook who have shown an interest in us. In this way, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad. We are jointly responsible with Facebook or Meta for displaying promotional information that corresponds to users' interests, for improving ad delivery and for personalising features and content (but not for further processing). We have therefore concluded a relevant Supplementary Agreement with Facebook. Users may therefore submit requests for information and other data-subject requests concerning shared responsibility directly to Facebook.

We supplement our newsletters and other marketing emails to some extent and insofar as this is permissible with visible and invisible image elements, so as to better understand how you use our services and how we can further improve them. This can be blocked in the email settings. This option is preset in most email programs.

5. Privacy policy for the use of social media plug-ins and social media pages

On the Carvolution website there are various plug-ins of different third-party providers of social media platforms (Facebook, Twitter, LinkedIn etc.). The plug-ins enable you to share our content directly via the relevant social media platform. If, while surfing on our website, you are logged in to one of the social media platforms and activate the plugin, for example via a “like” button, the data will be ascribed to your user account and transmitted to the third-party provider / its server. Carvolution has no influence on this data transmission and the later use of the data. We therefore refer you, for your own protection, to the security settings options of the respective third-party providers. There you can familiarise yourself with the privacy policy and if necessary adjust your settings in line with your privacy needs.

We operate sites of our own on social networks and other platforms (e.g. a Facebook fan page and a YouTube channel). When you communicate with us there or comment on or distribute content, we collect information that we use primarily for communicating with you, for marketing purposes and for statistical evaluations. The provider of the platform likewise collects data (e.g. on user behaviour) itself and may use this data together with other data in its possession (e.g. for marketing purposes or to personalise the platform content). Insofar as we are jointly responsible with the provider, we conclude a corresponding agreement, about which you can obtain information from the provider.

6. Disclosure of data

Within the Carvolution group, we pass personal data on to other companies in order to ensure a consistently high standard of service within the group and to be able to also offer you their products and services where necessary. We may also disclose data to third parties in connection with our business activities and the above-mentioned purposes, insofar as this is required. Such recipients may, in particular, include: Banks, insurance companies, credit rating companies, debt collection companies, traders, service partners, domestic and foreign authorities or courts, media, IT partners, other service providers, visitors to websites or social media, parties interested in a takeover or investors.

The above-mentioned recipients and their sub-contractors may also be based outside Switzerland, in the EU, basically all over the world. In this case we demand that those recipients take appropriate measures to protect personal data, which are set down in a binding legal agreement, unless the Federal Data Protection and Information Commissioner has established that the respective country guarantees an adequate level of protection. If and insofar as it is necessary under relevant provisions of law, we implement the necessary legal, operational or technical measures and/or conclude an agreement with you prior to such transmission. We may also transfer data to recipients abroad without an agreement if the law permits this by way of exception, namely in the case of legal proceedings abroad, but also in cases of overriding public interests or if the performance of a contract requires such disclosure, if you have given your consent or if the data in question has been made generally accessible by you and you have not objected to its processing.

7. Security and the protection of personal data

We only record data which is necessary for the implementation of our business activities or the provision of services. We secure the data through periodic backups.

We take appropriate technical and organisational security precautions for the protection of your personal data against unauthorised access or misuse. For that purpose we issue instructions, organise training courses, carry out regular backups, keep our IT and network security solutions in line with the state of the art of technology, carry out access control and restrictions and use typical encryption processes.

Because full data security in communication by email or instant messaging or via similar means of communication cannot be guaranteed, we recommend that you opt for a secure alternative means of sending particularly confidential information.

8. Duration of the storage of personal data

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and statutory obligations or the objectives pursued with the processing. This includes time for the fulfilment of the statutory retention and documentation obligations as well as for the assertion or defence of our claims.

9. Your rights

Within the scope and under the conditions of the applicable law, you have the possibility any time to request a copy of your data and information about our processing. You can also request certain data in a machine-readable format. Furthermore, you can object to our processing of data or have incorrect data rectified.

Carvolution AG, Neufeldweg 2, 4913 Bannwil is the controller for the data processing described herein. For matters related to data protection you can contact us at the address given above. If possible, please specify your specific matter and attach a copy of your ID to the enquiry if it relates to a request for information or erasure. You can also submit enquiries to us by email: info@carvolution.ch