Privacy Policy

Privacy Policy

Privacy Notice

The protection of your privacy throughout the course of processing personal data is an important concern to us. This Privacy Notice sets out our intention and commitment to comply with data protection standards set out in applicable laws with respect to personal data.

It also informs you how we take account of the privacy of users of our Website. It applies to personal data we process on sites and mobile applications owned or controlled by Carr8, such as www.carr8.com, (collectively, the "Website"), regardless of how you access or use them.

References in this Privacy Notice to "we", "us" and "our" are references to "Carr 8".

TABLE OF CONTENTS

1.      General Information

2.      Data Processing on the Website

2.1    General Information on Data Processing

2.2    Accessing the Website

2.3    Services Subject to Registration

2.4    Subscription to and Use of our Newsletter

2.5    Prize Competitions and Special Offerings

2.6    Customer Feedback

2.7    Contact Form

2.8    Cookies and Google Analytics

2.9    Use of Social Media Platforms

2.10  Use of Social Plugins

2.11  Carr8's Widget

3.      Data Subject Rights

4.      Final Provisions

1. General Information

1.1 Controller

The controller who determines the purposes and means of the processing of your personal data in connection with the use of this Website and related services, is

Carr8

Nyon, Switzerland

admin@carr8.com
+41786389627

1.2   Definitions

Relevant terms such as "processing", "personal data", "consent", "disclosure" have the meaning ascribed to them in the Swiss Federal Data Act on Data Protection ("FADP"); as amended, including the Ordinance to the FADP; and any other applicable law with respect to any personal data, especially (to the extent applicable) the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "GDPR").

2 . Data Processing on this Website

In this section we inform you about how we process your personal data within the scope of our services.

2.1 General Information on Data Processing

The following applies to all processing operations described below, unless stated otherwise:

2.1.1  Scope of the Processing of Personal Data

We only collect and process personal data of users to the extent necessary to provide a fully functioning Website, including its contents, and our services.

2.1.2  Consent

As a user you are not required to register or to provide any personal data to gain access to most areas of the Website.

You may need to provide us with limited personal data in order to receive certain services from us. In cases where your prior consent is required, we will inform you separately about all modalities and the scope of the processing (see below, Services Subject to Registration). If you do not consent to the processing of your personal data in the specific circumstances, we will be unable to provide you the service.

2.1.3  Categories of Personal Data Concerned

We process the following categories of personal data:

• Access data, such as the date and time of your visit to the Website, the page from which you accessed the Website, pages accessed during your visit to the Website; session ID data; also the following data about the accessing computer system: Internet Protocol (IP) address used, browser type and version, device type, operating system, and similar technical information
• Account data, such as login/user identification and password
• Address data, such as street, house number, postcode, city, country
• Contact data, such as telephone number(s), fax number(s), email address(es)
• Credentials, such as data on the service through which you registered on the Website, date and technical information regarding the registration, confirmation and cancellation of certain services; data you provided when you registered
• Evaluation data, any type of data entered into free-text fields for rating or review purposes
• Newsletter usage data, such as date and time of the opening of the newsletter, content and links activated, as well as information on the accessing computer system (e.g. Internet Protocol (IP) address used, browser type and version, device type, operating system and similar technical information)
• Ordering and payment data, such as services ordered, prices, payment information, bank details.
• Personal data of Website users, including personal data provided in a take-down notice, such as title, first name, last name, date of birth
• Profile data of car dealers and car garages, such as title, first name, last name, date of birth, address, car dealer's or car garage's company name, date of establishment or incorporation. On our Website, we only publish business-related data of car dealers and car garages. This data originates from public sources and is provided to us by third parties. We make such profile data available to users via the Website. It is stored until (temporary) closure of the car dealer's or car garage's business, or the termination of the professional activity.

2.1.4  Lawfulness of Processing

We process personal data for the below mentioned purposes on the following legal basis:

• it is necessary for us to perform a contract, i.e. we will process and use your personal data to fulfill our contractual obligations so we can provide you with your requested services;
• for compliance with laws, i.e. we will process and use your personal data to comply with legal obligations under applicable laws;
• for legitimate interests including the interests set out below, e.g. we will process and use your personal details to carry out and improve our services, sending you marketing communications, and feedback questionnaires; and/or
• based on your consent, e.g. when you sign up for a newsletter (see below, Subscription to and Use of our Newsletter) or services subject to registration (see below, Services Subject to Registration), you consent to us using the personal data you provide to pursue the purposes we disclosed to you.

2.1.5  Security Measures

We safeguard the confidentiality and security of your personal data. Access to personal data is restricted, and we have implemented appropriate technical and organizational security measures to protect your personal data against loss, misuse, unauthorized access or modification, and unauthorized disclosure.

2.1.6  Disclosure to Third Parties

Your personal data will not be provided to third parties unless stated otherwise in this Privacy Notice. We may disclose your personal data to the following recipients and for the following purposes:

• to our external service providers (see below, External Service Providers);
• in order to process a request involving services that are not or not exclusively provided by us (with your prior consent);
• if you expressly request this; or
• if this is necessary to comply with a court order or a legal or regulatory requirement.

2.1.7  External Service Providers

We work together with external service providers ("processors"), who process personal data on our behalf and offer hosting services (e.g., they provide us with storage space and processing capacities in their data centres), who support us in IT security matters: https://ch.godaddy.com/, https://www.microsoft.com/fr-ch These service providers process data exclusively in Switzerland, or in countries ensuring an adequate level of data protection or have set up other appropriate safeguards (e.g. registration under the US-Swiss and the EU-US Privacy Shield).

2.1.8  Transfer of Personal Data to Third Countries

We will only transfer personal data to third countries, i.e. countries outside of Switzerland, in accordance with the conditions laid down in applicable laws.

2.1.9  Transmission to Public Authorities

We transmit personal data to public authorities, including law enforcement agencies, if such is necessary to comply with a legal obligation, to which we are subject, or to establish, exercise, or defend legal claims, or where we have a legitimate interest in such transmission.

2.1.10  Retention Periods

We store your data for as long as it is necessary to render our services, or for as long as we have a legitimate interest in storing the data. In all other cases, we delete your personal data with the exception of data we are obliged to store for the fulfillment of legal obligations.

2.2  Accessing the Website

When accessing the Website, access data (see above, Categories of Personal Data Concerned) will be stored in log files. This data category forms the basis for statistical, anonymous analysis, in order to identify trends to further improve the Website and our offers accordingly.

2.3  Services Subject to Registration

We may ask you to register and provide us with limited personal data in order to receive certain services from us. By registering, you may use the review area, in particular the comment function, in which you may rate or post reviews of car models and your experiences with car dealers and car garages in connection with a purchase, lease, rent, repair of a car etc. This is the core function and purpose of the Website.

The use of services subject to registration involves the processing of your personal data, such as access data, contact data, credentials, account data, which is essential for the proper functioning of the services offered, for ensuring the security of your personal data, for the prevention of misuse of the Website as well as for the prevention of damages caused by unauthorized access and use of information systems.

In instances where we request prior registration, we also process your personal data in order to communicate with you and to administer your user account, to provide and improve our services to you and our clients, and to comply with legal obligations, including establishing, exercising or defending legal claims. To the extent necessary for the aforementioned purposes, we will also disclose your personal data to third parties processing personal data on our behalf (see for an example above, External Service Providers).

2.4  Subscription to and Use of our Newsletter

Subscribers to our newsletter receive information about news services and special offerings. In order to register for this service, you will be asked to provide limited personal data, such as your name and contact data.

For verification purposes, we will send you a confirmation email shortly after you have completed the registration process. During this process, we may also store your IP address, the date and time of registration, and similar data, collectively called credentials (see above, Categories of Personal Data Concerned). We may use the personal data that you provided as part of your registration to provide you with newsletters, marketing or promotional materials and other information that may be of interest to you.

Our newsletters contain tracking pixels which enable log file recording for statistical analysis of our newsletter campaigns. Thereby, we may see whether and when an email was opened and which links in the email were activated (see above, Categories of Personal Data Concerned), for the purpose of improving our services and design our newsletters according to the interests of our subscribers.

Mailchimp 675 Ponce de Leon Ave NE Suite 5000 30308 Atlanta Georgia USA (https://mailchimp.com/) provides us with email marketing services. Your email address will be stored on Mailchimp 675 Ponce de Leon Ave NE Suite 5000 30308 Atlanta Georgia USA (https://mailchimp.com/)'s server for the sole use of email marketing services.

You may opt out from receiving any, or all, of these communications from us by contacting us (see below, Contact) or by following the unsubscribe link or instructions in any email we send to you.

2.5  Prize Competitions and Special Offerings

We may offer prize competitions or special offerings, such as events or votes, on the Website. If you take part, you will be asked to provide limited personal data, such as your name, contact data and address data and we may collect other data that you voluntarily share with us. We may use this data to notify you of relevant developments related to the competition and to share further details on promotions with you. If such is necessary for carrying out the prize competition and special offerings, we may disclose your personal data to relevant third parties (e.g. shipping companies).

2.6  Customer Feedback

Your satisfaction is very important to us. You may use a feedback form provided on the Website and send us your comments and opinions either offline or via the Website. On the feedback form, you will be asked to provide limited personal data such as your name and contact data. We may forward your feedback to the person you refer to, contact you following your feedback and mention your feedback on the Website in anonymized form.

2.7  Contact Form

You may reach out to us using a contact form provided on the Website. On the contact form, you will be asked to provide limited personal data such as your name and contact data as well as the message you want to convey to us. We may use such information to get in touch with you or to reply to your message.

2.8  Cookies and Google Analytics

We use cookies to improve your user experience, to provide you with a variety of functionalities, to analyse site traffic and user behaviour as well as for advertising purposes.

Cookies are small text files that are automatically placed on your computer or mobile device when you visit a website. They are stored by your browser. Cookies contain a specific string of characters allowing for a clear identification of your browser when you re-visit our Website. You may refuse the use of cookies by changing the settings of your browser accordingly. You can also delete cookies at any time. If the use of cookies is deactivated or restricted, you may not be able to use all functions offered by the Website.

The Website uses Google Analytics, a web analytics service provided by Google Inc., USA ("Google"). Google Analytics uses cookies to enable analysis of the usage by you of the Website. Information generated by the cookie about your use of the Website is usually transmitted to a Google server in the United States and stored there. In case of activated IP anonymization on the Website, your IP address is previously truncated by Google within the Member States of the European Union or in other states which are party to the agreement on the European Economic Area. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. On our behalf, Google will use this information to evaluate your use of the Website, compile reports about website activities, and provide us with further services related to website and Internet usage. The IP address sent from your browser as part of Google Analytics is not merged with other data by Google. You can prevent storage of cookies by appropriately changing your browser software settings; in this case, however, please note that you might not be able to fully use all functions offered by the Website. In addition, you can prevent data generated by the cookie and relating to your use of the Website (including your IP address) from being collected and processed by Google, by downloading and installing a browser plugin from the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

The Website also uses Google AdWords and Google Conversion Tracking, an advertising program from Google.

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.

Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out from this by changing your browser settings to disable the Google Conversion Tracking cookie. In doing so, you will not be included in the conversion tracking statistics.

For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://www.google.de/policies/privacy/.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of the Website.

2.9  Use of Social Media Platforms

We use our "Carr8" accounts on social media platforms, such as on Facebook, Instagram, Twitter, LinkedIn. Data you provide on these platforms may be used by us to understand you better, create services that you will like and focus our marketing efforts on interesting messages (based on your online behaviour). This includes any social media information that is publicly available such as postings, your “Likes” and other reactions, or your photos. This information is provided to us by the social media platform (directly or indirectly through agencies we have agreements with)

2.10  Use For Social Plugins

This Website uses social plugins (“Plugins”) provided by

• addthis.com, operated by AddThis LLC, 1595 Spring Hill Rd, Suite 300, Vienna, VA 22182, USA (“AddThis”)
• Facebook Share Button, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
• Tweet Button, operated by Twitter Inc., 1355 Market Street, 900 San Francisco, CA 94103, USA
• LinkedIn Share Button, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA

 

All Plugins are marked with the brand logo of the respective operators [Facebook (white letter “f” on blue background), Twitter (white letter “t” on blue background), and LinkedIn (white letters “in” on blue background)] (“Operators”).

2-click-solution

In order to increase the level of data privacy and in accordance with applicable laws and regulations, we have implemented the Plugins by way of a so-called “2-click-solution”. This implementation ensures that when visiting our Website no direct connection of your browser with the servers from the Operators will be established. Only if you activate the Plugins by clicking on them and, therefore, giving your consent to the data transfer, your browser will establish a direct connection to the server of the respective operator. The content of the Plugin is then transmitted directly to your browser by the Operators and included by them in the webpage.

By integrating the Plugin, the respective Operator receives the information that your browser has accessed the webpage of our Website. If you have logged into your respective account while visiting our Website, the respective Operator can directly connect the visit to your account. If you interact with the Plugin, for example by clicking the “Facebook Share Button”, the “Tweet Button” or the “LinkedIn Share Button” the corresponding information is transmitted from your browser directly to the Operator and stored by it. Further, the information will be made public in the respective social network (or in your Twitter account) and shown to your contacts. If you do not wish to have such data transferred to the Operators, you need to log out of your respective account before clicking on and activating the Plugins.

Please see the Operators’ data privacy notices in order to get further information about the purpose and scope of their data collection and the processing and use of your personal data

• Facebook: https://de-de.facebook.com/about/privacy/ 
• Twitter: https://twitter.com/privacy 
• LinkedIn: https://www.linkedin.com/legal/privacy-policy 

2.11  Carr8's Widget

In this section we describe how we process your personal data when you visit a car dealer's or a car garage's website into which our widget has been integrated.

A widget is a small stand-alone application with limited functionality that can be installed and executed by any user on a website where they have rights of authorship.

Widgets can be displayed in different forms, such as icons, windows, scroll bars, etc. Even though the content in question is displayed on the car dealer's or car garage's website, it is, in fact, retrieved from our servers in this very moment. This is the only way to always show the current content, especially the current rating and other evaluation data.

For this purpose, a data connection must be established from the accessed page (car dealer's or car garage's website) to us. In doing so, we and the external hosting service providers (see above, External Service Providers) receive certain technical data, i.e. access data necessary for the content to be delivered. However, this data will only be used to provide the content and will not be stored or processed otherwise.

When integrating our widget in its website(s), the car dealer or the car garage pursues the purpose and the legitimate interest to present current and correct content on its website. No access data is stored on the car dealer's or car garage's website in connection with the integration of our widgets. Please see the car dealer's or car garages' respective privacy notices to learn more about how they may process your personal data in connection with other purposes.

3.  Data Subject Rights

Right to Object

If we process your personal data for direct marketing purposes, you have the right to object to such processing at any time and free of charge, if provided under applicable law. This right also applies to profiling to the extent it is related to such direct marketing. The right to object only applies to future processing.

Right of Access to Information

You have the right to obtain from us a confirmation as to whether or not we process personal data concerning you. Where this is the case, you can request access to the personal data and additional information as stipulated in applicable data protection laws.

Right to Rectification

You have the right to require from us the rectification of inaccurate personal data. Where it is impossible to demonstrate that your personal data is accurate or inaccurate, you may request that a note to this effect be added to the data.

Right to Erasure

You have the right to require from us the erasure of personal data concerning you unless there are grounds available by law allowing us or imposing on us the obligation to continue the processing.

Right to Restriction of Processing

You have the right to require from us the restriction of processing of personal data concerning you, provided that one of the requirements set out by applicable data protection laws is met.

Right to Data Portability

Where the GDPR applies and to the extent technically feasible, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format as well as the right to transmit those data to another data controller.

Right to Withdraw your Consent

You have the right to withdraw your consent to the processing of your personal data at any time. This withdrawal shall not affect the lawfulness of the processing based on the consent you gave before withdrawal.

Right to Lodge a Complaint with a Supervisory Authority

Furthermore, if you believe that your rights granted by applicable data protection laws have been infringed, you may lodge, if applicable, a complaint with the competent data protection authority.

4.  Final Provisions

Modifications

We may change this Privacy Notice at any time and publish an updated version on the Website. We will inform you about substantial changes to this Privacy Notice, e.g. by placing a notice on the Website.

Contact

If you have any questions or queries, please contact us at: admin@carr8.com 

Last update: [7 October 2018]