Privacy Policy Europcar on Demand Switzerland

In this privacy policy, we, AMAG Service AG (hereinafter “AMAG”), explain how we and our partners collect and process your personal data in connection with Europcar on Demand Carsharing. 

AMAG places great importance on the security of your data. This is why we process your personal data exclusively in compliance with the data protection laws that apply to us. 

 

1. Who processes your data

Europcar on Demand and AMAG Services AG with registered office at Steinackerstrasse 20, 8302 Kloten, Switzerland are jointly responsible for the processing of your personal data on this website and in connection with the Europcar on Demand mobility services in Switzerland.

The terms “we,” “us” or “our” used in this policy refer to these joint controllers. 

2. What personal data do we process?

Your personal data is all information that enables us to identify you directly or indirectly, and which we collect on our websites, in our mobile applications or in the context of our mobility solutions services. 

2.1 Data related to the use of Europcar on Demand services 

Usage data is data generated when you interact with us, when you use our services, and includes the following categories of data: 

a) Data about the devices you use to access our services (computer or phone): When using the strong authentication mechanism, an identifier is generated and collected to recognize your device;

b) Financial data such as invoices or data on vehicle insurance,

c) Browsing data such as IP addresses, domain names of the devices used, URI addresses (Uniform Resource Identifier), date, method used to send the request to the server, size of the file received in response, numerical code indicating the status of the server response (successful, error, etc.), and the server name that sent the request, the country in which the browser is used, the functionality of your browser and operating system, information about your browsing behavior on our websites and applications, in particular the order of the pages visited, the duration of the visit, and features about the device operating system and the user’s IT environment (e.g. model, brand).

2.2 Data provided by the user 

You are free to browse our websites or applications without having to create an account. To use our products and services, you must register and provide the requested information. 

The following data is collected for registration and reservation: identification data (first name, surname, gender, date of birth, driving license, [identity card, depending on the country], mobile phone number, postal address), audiovisual and electronic data (e-mail, messages, telephone conversations with our customer service, photo, video). 

To subscribe to the newsletter, you must provide your email address. 

To pay for our products and services, you must provide your payment details (account number, card number). 

If you participate in our satisfaction surveys or interact on our dedicated social media pages, we process data for your satisfaction. 

2.3 Data collected by our connected vehicles 

We collect a variety of information through our connected vehicles, including: vehicle condition, information about damage or accidents, vehicle performance data, operational and diagnostic data, mileage information, fuel and charging levels, vehicle location (GPS coordinates) and other vehicle information. 

2.4 Data we receive from authorities 

In connection with the violation of traffic rules, we may receive information from the authorities responsible for the administration of fines for traffic violations. 

 

3. Why do we collect their personal data?

Through our websites and applications, we offer you self-service car rental services (“car sharing”). For this purpose, we collect and process your personal data as follows for different purposes and on different legal bases:

a) Creation and management of your account: This is necessary to identify you and to prepare and enable your future vehicle reservations in self-service. The processing of your personal data is based on the implementation of the general terms and conditions of use of our websites and applications.

b) Protection and support when using their account

Your personal data is processed on the basis of Europcar on Demand’s legitimate interest in supporting you in the use of your account.

c) Processing your reservation and providing our service:

d) Confirmation of your vehicle reservation in self-service;

• Changing or canceling your vehicle reservation in self-service;
• Communicating with you by phone or email in connection with your reservation (for example, to send you a confirmation of your reservation, to send you a reminder before and at the end of the reserved term, to answer your questions or suggestions, etc.);
• Manage your vehicle reservation in self-service (provision and return)
• of the vehicle);
• Managing your invoices;
• Management of potential late payments;
• Management of complaints;
• Management of compensation for damage to our vehicles;
• Managing your insurance.

The processing of your personal data is based on the implementation of our general terms and conditions of use and car sharing rental, to which you have agreed ( th e 

“Carsharing contract”). 

e) Verification of your driver’s license, either manually or with a facial recognition solution. You must submit your driver’s license through our application so that we can validate it. This validation can be done

• manually by our customer service department or

This processing is necessary for the implementation of the car-sharing contract between you and us.

• using facial recognition. Images of the driving license (front and back), your selfie or video selfie (if applicable) are collected and processed exclusively for the purpose of validating the driving license. Wherever possible, the driving license data is read out electronically from the user’s driving license images.

The use of the facial recognition solution is only done with your consent.

f) Processing your payments:

• the payment of your reservation, of follow-up costs (including) and possibly your subscription

This processing activity is necessary for the implementation of the car-sharing contract concluded with us. If you are not a subscriber to our services, the retention of your credit card data for all future payments is based on your consent. 

• the prevention of credit card fraud.

This processing activity is based on our legitimate interest in protecting ourselves from credit card fraud. 

g) Locating the vehicle by using connected devices. Our fleet of vehicles is equipped with internet-enabled devices that allow us to:

• Management of the use of the rental vehicle, in particular to verify the presence of the rented vehicle at the correct departure parking space at the start of the rental or at the correct arrival parking space at the end of the rental, verification that the vehicle is returned with the sufficient fuel level, verification of the kilometers driven and whether the purchased kilometer package has been respected;

This processing activity is necessary for the fulfillment of your car sharing contract.

• Checking the condition, performance and functionality of our vehicles to ensure that each vehicle is in good condition and available for the reservation of the respective User, in particular with regard to the level of the tank or the battery level of a vehicle;

This processing is based on our legitimate interest to manage the fleet and to be able to provide the services. 

• Locating the vehicle in the event of theft or suspected theft;

This processing is based on our legitimate interest in protecting the integrity of our fleet

• Locating the vehicle in the event of a suspected accident, in order to provide the necessary material or medical assistance.

This processing is based on our legitimate interest in providing people with assistance.

h) Improving your online browsing experience Your usage data is processed for technical and operational purposes to enable browsing on our websites and applications and to improve your customer experience. We use this usage data to adapt our websites and applications to make navigation easier and faster, especially to offer you the version most suited to your language and country of origin.

Please see our Cookie Policy

i) Conducting customer surveys to improve the customer experience with our products/services

This processing activity, which aims to gain a better understanding of your needs and offer you personalized features to improve your user experience, is based on our legitimate interest.

j) Advertising for our commercial and promotional activities:

• Promotional communications in the form of emails and SMS, as well as advertising and personalized offers, specifically tailored to your interests in relation to our products and services;
• Sending newsletters;
• Organizing prize draws; The transactional emails sent to you to inform you about the status of your booking do not fall under this processing purpose.

These processing activities are based on your consent.

k) Conducting statistical analysis: We aggregate and anonymize your data for statistical analysis.

This processing is based on our legitimate interest in carrying out statistical analyses.

l) Administration of bus fines for traffic offenses: This procedure serves the following purposes:

• Assignment of the bus fines to the driver who rented the vehicle;
• Transmission of the identity of the driver who committed a traffic offense to the competent authority (for processing fines).

m) Managing and updating a list of customers with specific contractual risks for the following reasons:

• Payment incidents that led to a legal dispute;
• Traffic accidents or repeated damage;
• accidents or damage caused intentionally;
• Using our vehicles in violation of the car-sharing contract.

This approach, which aims to reduce the financial, material and reputational risks of the service, is based on our legitimate interest. 

n) Verification of whether you are on an international sanctions list

This processing is based on our legal obligations in relation to economic, financial or trade embargoes which are sometimes

(a) of the United Nations Security Council,

(b) by the European Union or one of its Member States,

(c) imposed, administered or enforced by the US Government, including the Office of Foreign Assets Control (OFAC) of the US Department of the Treasury and the US Department of State; or

(d) imposed, administered or enforced by the United Kingdom.

 

4. To whom will your personal data be disclosed?

 

4.1 Categories of recipients 

If necessary, your personal data may be transferred:

a) to our employees and authorized representatives, to other companies (including the Europcar Mobility Group and AMAG Group AG), to our representatives and authorized intermediaries;

b) to our subcontractors, and their partners, where applicable and to the extent strictly necessary, which enable us to provide you with our products and services;

c) to the competent authority in the country where you committed a traffic offence, to pay the corresponding fines

d) to the competent authorities, if necessary and in accordance with applicable law.

 

Use of Meta 

All Meta features and services available on our website or in our applications are subject to the Meta Privacy Policy, which you can read if you want to learn more about your rights and settings options. 

By using one of our websites/applications you can: 

• Use Meta’s social plug-ins, for example, you can share our content on Meta platforms with

Like or share this;

• Accept cookies from our website or applications (also known as “Facebook pixels”), which help us understand your activities, including information about your device, how you use our services, the purchases you make and the ads you view, whether or not you have a Facebook account or are logged in to Facebook.
• When you use these meta-features, we collect data for the following purposes
• Displaying ads that may be of interest to you on Facebook or Instagram, Messenger or another Facebook service;
• Measuring and analyzing the effectiveness of our website, applications, and advertising.

 

4.2 International data transfers 

Where necessary or useful for the provision of our products and services, we will (for the purposes set out here) transfer your personal data to destinations within or outside the EU. 

In all cases, we have taken appropriate security measures to protect your personal data in accordance with Regulation (EU) 2016/679 (the “General Data Protection Regulation”). 

For more information about the countries to which your personal data may be transferred, and the level of data protection and the possible safeguards in place in those countries, please click here. 

 

5. How long do we store your personal data?

customer account 

Your customer account will be closed at your request. 

Reservations: 

5 years from the end of the reservation 

Verification of their driver’s license: 

For the entire duration of the business relationship and 5 years after the end of the business relationship. 

Processing your payments: 

For a period of 13 months from the effective payment date. We keep your credit card number to pay for your subscription for the duration of the subscription. 

Locating our vehicle by using connected devices: Until the last known position 

of the vehicle is replaced 

Promotion of our promotional and commercial activities: 

Until the deletion of their profile as requested and taking into account your consent. 

Conducting statistical analyses: 

Up to 9 months after the end of your business relationship with us. 

Management of bus fines for traffic violations: 

For the time needed to identify the driver (or potential driver) responsible for the offense to which the fine is attributed. This time cannot exceed 45 days after the fine notice has been served. However, certain data may be kept for a longer period (up to 12 months after the fine notice has been served) if they are subject to intermediate archiving 

requests from the relevant authority to process fines in the country where the reservation was made will be deleted as soon as they have been processed by us. 

Managing and maintaining a watch list of customers with certain contractual risks for the following reasons: 

a) Payment incidents that led to a legal dispute;

b) Traffic accidents or repeated damage;

c) accidents or damage caused intentionally; iv. Use of our vehicles in violation of the car-sharing contract.

3 years from the occurrence of the relevant event. 

Verification of whether you are on an international sanctions list: 

5 years from the collection of your data 

 

6. What rights can they assert?

As a data subject, you have the following rights:

6.1 Right to information 

You have the right to obtain information from us about the processing of your personal data. 

In principle, a request for information is free of charge. A fee may be charged in the event of particularly high workload, excessive or habitual requests for information, provided that there is no legitimate interest. If costs are incurred for you, we will inform you in advance. 

The exercise of these rights presupposes that you clearly prove your identity (e.g. by means of a copy of your ID card, where your identity is not otherwise clear or can be verified). To assert your rights, you can contact us at the address given in Section 2. 

6.2 Right to rectification 

You have the right to request from us the rectification of inaccurate or incomplete personal data concerning you. 

6.3 Right to erasure 

You have the right to request the deletion of your data under certain conditions. After that, you can, for example, request the deletion of your data if they are no longer necessary for the purposes for which they were collected. You can also request deletion if we process your data on the basis of your consent and you withdraw this consent. 

Please direct inquiries to: 

AMAG Services AG 

Europcar on Demand 

Steinackerstrasse 20 

CH 8302 Kloten 

Switzerland 

or by e-mail to ondemand@europcar.ch 

Europcar on Demand International 

13 TER Boulevard Berthier 

75017 Paris France 

or by e-mail to: dpo@europcar.com 

 

6.4 Right of withdrawal 

You have the right to revoke your consent at any time with effect for the future. Please address your revocation to: privacy@amag.ch 

6.5 complaint 

Furthermore, every data subject has the right to enforce their claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch). 

 

7. How do we protect your personal data

We are committed to protecting the data collected through this application. In particular, we implement appropriate physical, technical and organizational security measures to protect your personal data against unauthorized or unlawful processing and against accidental loss or destruction or damage.

Our systems have data encryption or encryption technologies and firewalls that meet industry standards. When you submit personal information over the Internet to a website, your information is protected by TLS encryption/decryption (Transport Layer Security) to ensure secure transmission.

All credit card transactions you make through our websites are handled through our PCI DSS-compliant payment service providers, which ensure the security and protection of your payment methods and transactions.

8. Changes

We may amend this Privacy Policy at any time without prior notice. The current version published on our website is the version applicable. If the Privacy Policy is part of an agreement with you, we will notify you of the change when it is implemented, if this is reasonably possible.