Privacy

Version date: 19.04.2026

The controller responsible for data processing on this platform is:

Wacro Kesedzic

Zilstrasse 22

8153 Rümlang

Switzerland

Email: [kontakt@example.ch]

Phone: [+41 XX XXX XX XX]

Data protection officer (if appointed): [Name, contact]

EU representative under Art. 27 GDPR (if required): [Name, address, email]

We process personal data of our users only to the extent necessary to provide a functional platform and our services. Processing generally takes place only with consent or where a legal basis permits the processing.

The applicable laws are the Swiss Data Protection Act (DSG) and - where applicable - the EU General Data Protection Regulation (GDPR).

We process personal data for the following purposes:

Provision and operation of the platform (Art. 6(1)(b) GDPR / Art. 31 DSG - contract performance)

Matching between customers and car wash providers (contract performance)

Payment processing (contract performance)

Communication and customer support (contract performance / legitimate interest)

Platform analysis and improvement (legitimate interest, Art. 6(1)(f) GDPR)

Marketing and newsletters (only with consent, Art. 6(1)(a) GDPR)

Compliance with legal obligations (Art. 6(1)(c) GDPR)

Your data is shared only in the following cases:

With the booked car wash provider for order fulfillment (name, address, contact details, vehicle information)

With payment providers (e.g., Stripe, PayPal, TWINT) for payment processing

With hosting and IT service providers based on data processing agreements

With authorities where legally required

We use carefully selected service providers that process data on our behalf. Data processing agreements are in place with them. These include in particular:

Hosting providers: [e.g., AWS, Hetzner, Swisscom]

Payment providers: [Stripe, PayPal, Datatrans, TWINT]

Email delivery: [e.g., SendGrid, Mailchimp]

Analytics tools: [e.g., Matomo, Google Analytics]

For data transfers to third countries outside the EU/EEA or Switzerland, we ensure an adequate level of data protection, in particular through EU standard contractual clauses or adequacy decisions.

We store personal data only as long as necessary for the stated purposes or as required by statutory retention obligations (e.g., 10 years for invoice data under Swiss CO Art. 958f).

After the purpose no longer applies and retention periods expire, data is deleted or anonymized.

As a data subject, you have the following rights:

Right of access to processed data

Right to rectification of inaccurate data

Right to erasure ("right to be forgotten")

Right to restriction of processing

Right to data portability

Right to object to certain processing activities

Withdrawal of granted consent with effect for the future

Right to lodge a complaint with the competent supervisory authority

Competent supervisory authorities:

Switzerland: Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch

EU: relevant national data protection authority of your country of residence

To exercise your rights, contact: [datenschutz@example.ch]

Details on the use of cookies and similar technologies can be found in our separate cookie policy.

We implement appropriate technical and organizational measures (TOM) to protect your data against unauthorized access, loss, or misuse. These include, among others, SSL/TLS encryption, access controls, regular backups, and security checks.

We may update this privacy policy when necessary. The latest version is available on our platform. In case of material changes, we will actively inform you.

If you have questions about data protection, you can reach us at:

[kontakt@example.ch] | [+41 XX XXX XX XX]

This privacy policy is a draft and must be adapted to the specific data processing activities and legally reviewed.