Privacy Policy
Website: autopro-location.ch | Last updated: June 2026
1. Data Controller
The data controller for personal data collected through the website autopro-location.ch is a natural person resident in Poland, reachable at the email address indicated on the website's contact section.
Data processing is carried out in compliance with Regulation (EU) 2016/679 (GDPR), the Swiss Federal Act on Data Protection (nDSG/FADP, revised version effective September 1, 2023), and the applicable provisions of Directive 2002/58/EC (ePrivacy Directive).
The Controller has not designated a Data Protection Officer (DPO) pursuant to Art. 37 GDPR, as the conditions set out in paragraph 1, letters (b) and (c) of that article are not met.
2. Types of Data Collected
The website may collect the following categories of personal data:
- Browsing data: IP address, browser type, operating system, pages visited, access times, referring URL.
- Data voluntarily provided: name, email address, and any other information entered in contact forms.
- Cookie and similar technology data: identifiers stored on the user's device for technical purposes and, with consent, for analytical purposes.
The website does not collect special categories of data within the meaning of Art. 9 GDPR (health data, ethnic origin, sexual orientation, etc.).
3. Purposes of Processing and Legal Bases
- Provision of the information service (Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures): providing site functionality and responding to user inquiries.
- Technical and session cookies (Art. 6(1)(f) GDPR — legitimate interest): ensuring proper site functionality and browsing security.
- Aggregate statistical analysis (Art. 6(1)(f) GDPR — legitimate interest): understanding site usage patterns and improving performance.
- Non-technical cookies and analytics (Art. 6(1)(a) GDPR — consent): activated only after the user provides explicit consent via the cookie banner.
- Compliance with legal obligations (Art. 6(1)(c) GDPR): data retention where required by applicable law.
4. Legitimate Interest Assessment
Where processing is based on legitimate interest (Art. 6(1)(f) GDPR), the Controller has carried out the balancing test required by Art. 6(4) GDPR. The interests pursued — proper site functioning and aggregate traffic analysis — do not override the fundamental rights and freedoms of data subjects, considering the limited nature of the data processed, the absence of special categories, and the reasonable expectations of users browsing an informational comparison website.
5. Cookies and Tracking Technologies
Technical cookies: necessary for site operation (e.g., session management, language preferences, cookie consent state). These do not require user consent.
Non-technical cookies (third-party analytics): are not activated until the user has given consent via the cookie banner, in compliance with the ePrivacy Directive and applicable data protection guidelines. See our Cookie Policy for full details.
The user may manage or withdraw cookie consent at any time through the banner settings or browser options. Disabling technical cookies may impair certain site functionalities.
6. Data Retention Period
- Browsing data: retained for a maximum of 12 months, unless required by law.
- Contact requests: until withdrawal of consent or for the time necessary to handle the request, and in any case no longer than 36 months from the last interaction.
- Cookie data: according to the duration of the specific cookie, as indicated in the Cookie Policy.
7. Disclosure to Third Parties and Transfers
The Controller uses third-party service providers acting as data processors (Art. 28 GDPR) or as independent controllers. These include:
- Google LLC — Google Analytics for aggregate website traffic analysis. Data may be transferred to the United States under EU-US Data Privacy Framework. Privacy Policy.
- DiscoverCars (Discover Car Hire Ltd.) — vehicle rental comparison and booking affiliate partner. User data is processed by DiscoverCars when users interact with the booking widget. Privacy Policy.
- Hosting and CDN providers that process data exclusively according to the Controller's instructions.
Data is not sold to third parties. Any transfers to countries outside the EEA/Switzerland are carried out on the basis of adequate safeguards (standard contractual clauses pursuant to Art. 46 GDPR or European Commission adequacy decisions).
8. Data Subject Rights
Pursuant to Arts. 15–22 GDPR and the Swiss nDSG, the user has the right to:
- Access (Art. 15): obtain confirmation of processing and a copy of personal data.
- Rectification (Art. 16): correct inaccurate or incomplete data.
- Erasure (Art. 17): obtain deletion of data ("right to be forgotten").
- Restriction (Art. 18): restrict processing in certain circumstances.
- Data portability (Art. 20): receive data in a structured, machine-readable format.
- Objection (Art. 21): object to processing based on legitimate interest.
- Withdrawal of consent (Art. 7(3)): withdraw consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
Requests may be sent to the Controller's email address indicated on the website. The Controller will respond within 30 days; in complex or numerous cases, the deadline may be extended by an additional 60 days (Art. 12(3) GDPR), with a reasoned communication within the first month.
9. Security Measures
The Controller adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, or accidental disclosure, in compliance with Art. 32 GDPR. These include: encrypted connection (HTTPS/TLS), limited access to backend systems, and periodic security updates.
10. Minors
The website is not intended for minors under 16 years of age. The Controller does not knowingly collect personal data from minors under this age. If data from minors collected without parental or guardian consent is identified, the Controller will immediately delete it.
11. Nature of the Website
Notice: AutoPro-Location.ch is an independent vehicle comparison and booking service. This website is not affiliated with, endorsed by, sponsored by, or connected to AutoPro Location SA, its subsidiaries, affiliates, successors, or related entities. The name "AutoPro Location" is used solely for descriptive and informational purposes. All bookings are processed through independent third-party providers and affiliate partner networks. Information on prices, availability, and vehicle specifications is provided for indicative purposes and may not always be up to date. Users are advised to verify all details directly with the rental provider before booking.
12. Changes to This Privacy Policy
The Controller reserves the right to modify this privacy policy at any time, including in response to regulatory changes. Modifications will be published on this page with an updated date. In case of substantial changes, the Controller may provide notice through a prominent announcement on the website. Users are encouraged to review this page periodically.
13. Supervisory Authority
The user has the right to lodge a complaint with a competent supervisory authority pursuant to Art. 77 GDPR:
- UODO — Urząd Ochrony Danych Osobowych (Poland — Controller's country of residence)
Stawki 2, 00-193 Warsaw | uodo.gov.pl - FDPIC — Federal Data Protection and Information Commissioner (Switzerland)
Feldeggweg 1, 3003 Bern | edoeb.admin.ch
The user may choose to contact the authority of their country of habitual residence or the place where the alleged infringement occurred.
14. International Data Transfers
Some third-party service providers may transfer data outside the European Economic Area (EEA) or Switzerland. In such cases, the Controller verifies that adequate safeguards are in place, such as standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR) or adequacy decisions. Further information is available upon request at the Controller's email address.
15. Automated Decision-Making
The website does not carry out processing based on automated decision-making or individual profiling that produces legal effects or similarly significant effects on the data subject within the meaning of Art. 22 GDPR.
16. Minimum Age for Digital Consent in EU Member States
Pursuant to Art. 8 GDPR, the minimum age for validly giving consent to the processing of personal data in information society services varies from Member State to Member State. Below is an indicative table:
| Member State | Minimum Age |
|---|---|
| Germany | 16 years |
| Netherlands | 16 years |
| Austria | 14 years |
| Bulgaria | 14 years |
| Denmark | 13 years |
| Estonia | 13 years |
| Finland | 13 years |
| France | 15 years |
| Ireland | 16 years |
| Italy | 14 years |
| Latvia | 13 years |
| Lithuania | 14 years |
| Poland | 16 years |
| Portugal | 13 years |
| Romania | 16 years |
| Slovakia | 16 years |
| Slovenia | 15 years |
| Spain | 14 years |
| Sweden | 13 years |
| Switzerland | No specific age (nDSG) |
| Hungary | 16 years |
The website is intended for an adult audience. If a minor below the applicable age wishes to use the site's services, consent from a parent or legal guardian is required.