Privacy Policy

1. Data Controller

The party responsible for the processing of personal data in connection with this website is the provider and operator of the websites carsyncpro.ch and carsyncpro.com (hereinafter the Provider):

  • AD Promotion GmbH
  • Registered seat and business address: Binzwiesstrasse 12, 8514 Amlikon-Bissegg, Switzerland
  • Studio and office: Säntisstrasse 15, 9230 Flawil, Switzerland
  • Phone: +41 71 560 56 80
  • Email: info@ad-promotion.ch
  • Management: Fabian Weder and Cordin M. Camenzind
  • Registered with the commercial register of the Canton of Thurgau, company number CH-440.4.041.172-7
  • VAT number: CHE-402.114.970 MWST

For all data protection matters and to exercise your rights as a data subject, you can reach the Provider at info@ad-promotion.ch or by mail at the business address stated above.

The Provider is not legally required to appoint a data protection advisor. All data protection requests are handled through the contact address stated above.

2. Scope and Principles

This privacy policy explains which personal data the Provider processes when you visit and use the websites carsyncpro.ch and carsyncpro.com, the purposes for which this is done, and the rights available to data subjects. The website is the Provider's marketing and product website and serves to provide information about the CarSyncPro product and to enable contact.

The actual use of the CarSyncPro Platform and the customer portal by contractual customers (dealers, garages, agencies) is governed by the applicable contractual agreements, the general terms and conditions and, where the Provider processes personal data on behalf of the Customer, by a separate data processing agreement. This privacy policy concerns the processing of personal data for which the Provider itself acts as the controller.

The Provider's offering is aimed at businesses, in particular car dealers, garages and agencies, and not at children. No personal data of children is knowingly collected through this website.

The website may contain references to external websites and third-party services over whose data processing the Provider has no influence. The respective privacy policies of the providers concerned apply to those services.

The Provider processes personal data in accordance with the principles of Swiss data protection law. In particular, personal data is:

  • processed lawfully, in good faith and in a proportionate manner;
  • collected only for specific purposes that are recognizable to the data subject and not further processed in a manner incompatible with those purposes;
  • limited to what is necessary for the respective purpose (data minimization);
  • kept accurate and complete for as long as the processing purpose requires;
  • protected by appropriate technical and organizational measures;
  • deleted or anonymized as soon as it is no longer needed for the processing purpose.

3. Legal Bases

The Provider is based in Switzerland. The primary governing law is the revised Swiss Federal Act on Data Protection (revDSG), which has been in force since September 1, 2023, together with the associated Data Protection Ordinance.

Where the Provider processes personal data of individuals located in the European Economic Area (EEA) and the EU General Data Protection Regulation (GDPR) applies, the Provider additionally observes its requirements.

Depending on the situation, the Provider bases the processing of personal data on one or more of the following grounds:

  • the consent of the data subject, for example for non-essential cookies, audience measurement or marketing;
  • the initiation or performance of a contract and pre-contractual measures, for example handling a demo or quote request;
  • an overriding legitimate interest of the Provider, for example the secure and stable operation of the website, protection against misuse and the ongoing development of the offering;
  • compliance with a legal obligation, for example statutory retention obligations.

Under Swiss law, the processing of personal data by private persons is in principle permitted even without a specific justification, provided that the processing principles are observed and there is no breach of personality rights. The list above serves transparency and alignment with the requirements of the GDPR.

4. Data Processed

Depending on how the website is used, the Provider processes different categories of personal data.

Server log files. Each time the website is accessed, the web server automatically records data and stores it in what are known as log files, which your browser transmits for technical reasons. This is necessary for the operation and security of the website. The following in particular is recorded:

  • the IP address of the accessing device;
  • the browser and operating system used (user agent);
  • the date and time of access;
  • the resource or page requested (URL);
  • the previously visited page (referrer), if transmitted;
  • the HTTP status code and the amount of data transferred.

Contact and demo requests. When you complete a contact or demo form, send the Provider an email or get in touch by phone, the Provider processes the information you submit. This typically includes:

  • name or contact person;
  • company or business;
  • email address;
  • phone number;
  • the content of your message or request and any other information you provide voluntarily.

Cookies and audience measurement. When you visit the website, cookies and similar technologies may be used, generating further data, for example to recognize settings and for anonymized or pseudonymized audience measurement. Details, in particular which cookies are used and how you can give or withdraw your consent, can be found in the cookie policy (see Section 6).

Sensitive personal data is not specifically collected through this website. Please do not submit such data unsolicited through the contact forms. If you transmit personal data of third parties to the Provider, for example information about employees, you are responsible for ensuring that you are permitted to share this data and that the persons concerned have been informed about the processing.

5. Purposes of Processing

The Provider processes the personal data mentioned above for the following purposes:

  • provision, operation and technical delivery of the website;
  • ensuring the security, stability and availability of the website and detecting and preventing misuse and attacks;
  • analyzing and resolving technical faults;
  • handling and responding to contact, quote and demo requests and communicating with prospective customers;
  • initiating, concluding and performing contracts relating to the CarSyncPro product;
  • measuring and improving the reach, usability and content of the website, where consent has been given;
  • providing information about the Provider's offering and marketing, where permitted or where consent has been given;
  • complying with legal obligations and safeguarding the legitimate interests of the Provider, including the assertion or defense of legal claims.

Any processing beyond these purposes takes place only where this is permitted by law or where you have consented.

6. Cookies and Analytics

The website uses cookies and comparable technologies. Cookies are small text files that can be stored on your device and read again when you return. Details about the cookies used, their purpose and storage period, and about integrated services, are described in the separate cookie policy, which forms part of this privacy policy.

The Provider distinguishes between technically necessary and non-essential cookies:

  • Technically necessary cookies are required for the operation and basic functions of the website and are used without separate consent.
  • Non-essential cookies, in particular for audience measurement, statistics and marketing, are set only after you have given your consent.

Analysis of usage behavior (web analytics or audience measurement) takes place solely on the basis of your consent. You can withdraw consent you have given at any time with effect for the future, in particular via the cookie settings on the website. The withdrawal does not affect the lawfulness of the processing carried out up to that point.

7. Disclosure to Third Parties and Processors

The Provider discloses personal data to third parties only where this is necessary to provide its services, where there is a legal basis or obligation, or where you have consented. The Provider does not sell personal data.

For the operation of the website and the offering, the Provider uses carefully selected service providers as processors. They process personal data solely on behalf of and in accordance with the instructions of the Provider and are contractually obligated to maintain an appropriate level of data protection and data security. In particular, services from the following categories are used:

  • Hosting and infrastructure: operation of the servers and provision of the website (hosting on servers in Switzerland or the EU, managed via Plesk).
  • Content delivery network and DNS: Cloudflare for faster and secure delivery of the website and for defending against attacks.
  • Advertising and reach: services from Google, for example Google Ads and, where applicable, Google Analytics, where you have consented.
  • Payment processing: Stripe for processing payments in connection with the paid customer portal and the subscription.

The services used are reviewed on an ongoing basis and may change. The Provider maintains a current overview of the service providers used and makes it available on request.

In addition, the Provider may disclose personal data where it is legally obligated to do so or where this is necessary to protect its rights, for example to authorities, courts and legal or tax advisors.

8. Disclosure Abroad

The processing of personal data may also take place abroad, in particular in countries of the EU or the EEA and in the United States, where the service providers used process data or operate servers there.

Disclosure abroad takes place only where the country concerned has legislation that ensures adequate protection or where adequate protection is ensured by other means. The Federal Council or the competent authority in Switzerland maintains a list of countries with an adequate level of data protection for this purpose.

Where adequate statutory protection is lacking, the Provider ensures it through appropriate safeguards, in particular by concluding the standard contractual clauses (standard data protection clauses) recognized by the competent authorities, or it bases the disclosure on a statutory exception, for example your explicit consent or the necessity for the performance of the contract. On request, the Provider makes available information about the safeguards put in place.

9. Retention and Deletion

The Provider retains personal data only for as long as is necessary for the respective processing purposes or as required by statutory retention obligations. After that, the data is deleted or anonymized.

  • Server log files are stored only for a short period that is necessary for operation, security and error analysis, and are then deleted or anonymized.
  • Contact and demo requests are retained for as long as is necessary to handle your request and any follow-up communication; if the request leads to a contract, the contractual and statutory retention periods apply.
  • Data from cookies and audience measurement is retained in accordance with the storage periods specified in the cookie policy.
  • Business-relevant records are subject to the statutory retention periods, which under Swiss law are generally ten years.

The retention period is also governed by any limitation periods and by the need to assert or defend legal claims.

10. Data Security

The Provider takes appropriate technical and organizational measures to protect the personal data processed against unauthorized access, loss, misuse or alteration and to ensure a level of protection appropriate to the risk.

Data is transmitted via this website in encrypted form using the TLS protocol, recognizable by the "https" prefix and the lock symbol in the browser's address bar. Further measures include, among others, access restrictions, rights management, logging of access and regular updates of the systems used.

Despite careful measures, the security of data transmission over the internet cannot be fully guaranteed. Absolute protection is not possible, and a residual risk remains.

11. Rights of Data Subjects

Within the framework of applicable data protection law, you have various rights as a data subject:

  • Access: you can request information about whether and which personal data the Provider processes about you.
  • Rectification: you can request the correction of inaccurate personal data.
  • Deletion: you can request the deletion of your personal data, provided that no statutory retention obligation or other justification stands in the way.
  • Restriction: under certain conditions, you can request the restriction of processing.
  • Objection: you can object to the processing of your personal data, in particular where the processing is carried out for advertising purposes.
  • Data release and data portability: you can request that certain data you have provided be released to you in a common electronic format or transferred to another controller.
  • Withdrawal of consent: if you have consented to processing, you can withdraw that consent at any time with effect for the future; the lawfulness of the processing carried out up to the withdrawal remains unaffected.

To exercise your rights, please contact the address stated in Section 1. To verify your identity, the Provider may request suitable proof. Individual rights may be subject to statutory restrictions.

If you do not agree with the processing of your personal data, you have the right to lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC/EDÖB). If you are located in the EEA, you can also contact the data protection supervisory authority responsible for you.

12. No Automated Individual Decisions and No Profiling with Legal Effect

In connection with this website, the Provider does not make any decisions based solely on the automated processing of personal data that produce legal effects concerning you or similarly significantly affect you.

Nor does the Provider, in connection with this website, carry out any profiling that produces such legal effects for you or any high-risk profiling. Should an automated individual decision exceptionally be made in a particular case, the Provider will inform you separately and ensure the protective measures provided for by law.

13. Changes to This Privacy Policy

The Provider may adapt this privacy policy at any time, in particular if the data processing, the services used or the legal framework change. The version published on the website at any given time is the authoritative one.

In the event of material changes, the Provider will provide appropriate notice. We recommend that you review this privacy policy from time to time so that you are informed about the current state of data processing.

14. Contact

For questions about data protection, the processing of your personal data or the exercise of your rights, you can contact the Provider at any time:

  • AD Promotion GmbH
  • Binzwiesstrasse 12, 8514 Amlikon-Bissegg, Switzerland
  • Phone: +41 71 560 56 80
  • Email: info@ad-promotion.ch

For data protection matters, a message to info@ad-promotion.ch is sufficient. Requests are handled as quickly as possible and within the statutory time limits.

Last updated November 2026. This version may be amended at any time. The version published on this page is authoritative.