Privacy policy

1. Controller

The controller responsible for your data is:

For any question about your data, or to exercise your rights, write to us at this address.

2. Data we process

We only process the data needed for the purposes described in this policy:

• Browsing data: when you visit the website, our hosting provider automatically records technical data such as your IP address, the date and time of your visit, the page viewed, the referring page and your browser type. This data is needed for the website to work properly and securely.
• Sign-up data: first name, last name, email address, postcode and, depending on your profile, your vehicle category or main use. If you are an owner, you can also give us your phone number (optional). We also record the language of the form, the date of your sign-up and its confirmation, and where your visit came from, for example the name of a campaign or the website that referred you to us.
• Communication data: when you write to us, the content of your messages and your contact details.
• Email usage data: our mailing tool produces open and click statistics, so that we can measure interest in our messages.
• Audience measurement and advertising data: only if you accept them, see Cookies and similar technologies.

3. Purposes

We use your data to:

• keep you informed about Vehlio’s launch and its opening in your area;
• prepare the launch of the service, for example by estimating demand and the supply of vehicles by neighbourhood;
• understand through which channel or partner you heard about Vehlio, in order to assess our communication activities;
• call you for an initial conversation before launch, if you have given us your phone number;
• reply to your messages;
• ensure the website works properly and securely, and improve it;
• measure website traffic and the effectiveness of our ads, if you have agreed to this;
• comply with our legal obligations.

We may produce anonymous statistics, such as the number of sign-ups per neighbourhood, and share them with partners or investors. They cannot be used to identify you.

We do not sell your data and we do not make any automated individual decisions about you.

4. Legal bases

We process your data in accordance with the FADP. Where the GDPR applies, our processing is based on:

• your consent (Art. 6(1)(a) GDPR) for joining our lists, receiving our emails, the phone call, and audience measurement and advertising cookies;
• our legitimate interest (Art. 6(1)(f) GDPR) in running the website securely, replying to your messages, assessing our communication activities and producing anonymous statistics;
• compliance with our legal obligations (Art. 6(1)(c) GDPR).

You can withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

5. Recipients and service providers

Your data is processed by our team and by external service providers who help us run the website and our lists, only to the extent necessary and under contracts that require them to protect it:

• Hosting provider: running and securing the website.
• Email service provider: management of our lists and sending of our emails. This data is hosted in Switzerland.
• Audience measurement and advertising tools (Google Analytics, TikTok pixel): only with your consent, see section 8.

We may also disclose data to authorities where required by law, or to our advisers where necessary to establish or defend our rights.

6. Transfers abroad

Our lists are hosted in Switzerland.

The website is hosted by a provider based in the United States: browsing data may be processed in the United States and in other countries. This provider states that it safeguards these transfers with the European Commission’s standard contractual clauses.

If you accept audience measurement or advertising cookies, some data is sent to Google and TikTok and may be processed outside Switzerland and the European Economic Area, in particular in the United States:

• Google LLC is certified under the Swiss-U.S. Data Privacy Framework, which Switzerland recognises as providing an adequate level of protection.
• TikTok may process this data in other countries, some of which do not provide an adequate level of protection. TikTok states that it safeguards these transfers with the European Commission’s standard contractual clauses.

Learn more: Google’s privacy policy (opens in a new tab) and TikTok’s privacy policy (opens in a new tab).

7. Retention

We keep your data only for as long as necessary for the purposes pursued:

• Sign-up data: until you unsubscribe, and no later than two years after you signed up. If you unsubscribe, we keep your email address on a suppression list so that we no longer write to you.
• Communication data: twelve months after our last exchange.
• Browsing data: six months at most.
• Audience measurement data: fourteen months at most in Google Analytics.

These periods may be extended where required by law or where data is needed as evidence.

8. Cookies and similar technologies

Cookies are small files stored in your browser. We only use those that are strictly necessary, unless you accept audience measurement and advertising through our banner.

• Strictly necessary: remembering your cookie choice. These do not send any data to third parties and do not require your consent.
• Audience measurement (Google Analytics), with your consent: traffic statistics such as pages viewed, visit duration, device type and approximate region. Google Analytics does not store your IP address.
• Advertising (TikTok pixel), with your consent: measuring visits and sign-ups from our TikTok ads, and improving how they are delivered.

The banner lets you accept or refuse these cookies just as easily. Your choice is kept for six months, after which we ask you again. Audience measurement and advertising cookies expire after thirteen months at most.

You can change your choice at any time using the “Cookie settings” link at the bottom of every page. You can also block or delete cookies in your browser settings.

The website’s fonts and videos are hosted with the website itself: displaying them does not send any data to third parties.

9. Security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access and misuse: encrypted connection (HTTPS), lists hosted in Switzerland, and access restricted to the people who need it. However, no transmission over the internet is completely secure.

10. Your rights

Within the limits set by law, you can:

• obtain information about the data we process about you and receive a copy;
• have inaccurate or incomplete data corrected;
• request the deletion of your data;
• object to processing or request that it be restricted;
• receive the data you have given us in a common electronic format, or ask for it to be transferred to another controller;
• withdraw your consent at any time.

To exercise these rights, write to us at info@vehlio.com. We will reply within 30 days. If we have reasonable doubts about your identity, we may ask you to prove it. Every email we send also contains an unsubscribe link.

If you believe that your data is not being processed lawfully, you can contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch (opens in a new tab)). If you live in the European Union, you can also lodge a complaint with the supervisory authority in your country, in France the CNIL (www.cnil.fr (opens in a new tab)).

11. Minors

Our lists are intended for adults. If you are under 18, please do not sign up.

12. Changes

We may update this policy, in particular if the website or our services change. The version published on this page is the one in force. If we make significant changes, we will inform people on our lists by email.

This English version is provided for convenience. In case of any discrepancy, the French version prevails.