The company responsible for processing your personal data is:
365 Services GmbH
Würenlingerstrasse 15
5304 Endingen
Switzerland
Email: info@365services.ch
Please contact us at this address with any privacy questions or to exercise your rights.
This privacy policy covers our website and any requests you send us through the form, by email or by phone. We process personal data in line with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example for customers living in the EU, we also comply with its requirements.
Visiting the website: When you visit our website, our hosting provider’s server automatically records technical information such as your IP address, date and time, the page visited, your browser and the referring page. We need this to run the website securely.
Quote requests: When you use our form or write to us, we process your name, email address or phone number, the service you’re interested in, your message and your chosen language.
Online bookings: When you book a ride, we process the start and destination addresses, date and time, the chosen car, the number of passengers, your notes, and your name, email address and phone number. The booking is stored on our server, and you receive a confirmation by email. For online payments, we also store the payment status, amount and the payment reference from Stripe or PayPal, but never your card or account details.
Jobs: To carry out a job, we process the details needed for it, such as addresses, dates, information about rooms or items, and billing details.
Sensitive data: For transport for people with limited mobility or to medical appointments, you may share health-related information with us, for example that a wheelchair needs to be carried. We use this information only to carry out the journey, and only with your consent.
We process your data to answer your request, prepare a quote, carry out and invoice jobs, run the website securely and meet our legal obligations.
Where the GDPR applies, we rely on the following legal bases: steps prior to and performance of a contract (Art. 6(1)(b) GDPR), our legitimate interest in running the website securely (Art. 6(1)(f) GDPR), legal obligations (Art. 6(1)(c) GDPR), and your explicit consent for health information (Art. 9(2)(a) GDPR).
Our website itself uses no cookies, no analytics or tracking services and no advertising. Fonts are stored on our own server, so no data is sent to third parties to load them.
Interactive Google map (only after a click): On the booking page we show the chosen route as a map picture provided by our own server (see section 6). You can also open an interactive map. It is loaded only when you click “Open interactive map”. Only then does your browser connect to Google; this sends Google your IP address and the start and destination of the route, among other things, and Google may set cookies. The provider is Google Ireland Limited (Dublin, Ireland); data may also be transferred to Google LLC in the USA. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR). More information: Google’s privacy policy.
We do not sell your data. We share it only where needed for the purposes above, with:
Hosting: Namecheap, Inc. (USA), which runs the website and the form.
Address suggestions, route calculation and map picture: Google Ireland Limited (Dublin, Ireland) via the Google Maps Platform. For address suggestions (with postcode), to calculate distance and driving time, and for the map picture of the route, our server sends the addresses you enter to Google; your IP address is not passed on. Google may also process data in the USA (see section 7).
Payment processing: Stripe Payments Europe, Ltd. (Dublin, Ireland). The payment form on our “Payment” page is loaded directly from Stripe (Stripe receives your IP address and device details, also to prevent fraud); you enter card and TWINT details only there, and we never receive them. We send Stripe the amount, booking number, a description of the ride and your email address, and receive the payment status in return. Stripe is partly responsible for payment processing itself and may also process data in the USA.
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg). The PayPal button on our “Payment” page is loaded directly from PayPal (PayPal receives your IP address and device details). If you choose PayPal, PayPal processes the payment as a separate controller; we send PayPal the amount and booking number, and receive the payment status in return. PayPal may also process data in the USA.
Email: Google Ireland Limited (Google Workspace), which receives and sends our email, including the booking confirmations from this website. The provider may also process data in the USA (see section 7).
Authorities: only where we are legally required to.
Our service providers process data only on our behalf and according to our instructions.
Some of our service providers are based, or store data, outside Switzerland and the EU, in particular in the USA. In these cases we ensure adequate protection, for example through the Swiss-U.S. or EU-U.S. Data Privacy Framework where the provider is certified, or through the European Commission’s standard contractual clauses, which are recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Server log files are deleted automatically after a short period. Requests and bookings that don’t lead to a ride or job (for example declined, cancelled or not paid) are deleted after 12 months at the latest; for bookings this happens automatically, and only the booking number, date, car, distance in km and price remain, with no link to you. We keep job and invoice data for as long as the law requires; in Switzerland this is ten years for accounting records.
You have the right to request access to your data, have incorrect data corrected and data deleted, restrict or object to processing, receive your data in a common format, and withdraw your consent at any time with effect for the future. To do so, email us at info@365services.ch.
You can also lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. In the EU, it is the data protection authority of your country of residence.
We use appropriate technical and organisational measures to protect your data. Data sent between your browser and our website is encrypted (HTTPS).
We do not make decisions based solely on automated processing.
We may update this privacy policy if our processes or the law change. The version published on this page applies.