Privacy policy

Provider and controller

TWHEELS GmbH
Untere Schwärzistrasse 54
8872 Weesen, Switzerland

Provider's email address: info@twheels.ch

Types of data collected

The personal data processed by this website independently or through third parties includes: trackers; usage data.

Complete details of each type of personal data processed are provided in the relevant sections of this privacy policy or occasionally through explanatory texts displayed before data collection.
Personal data may be provided voluntarily by the user or, in the case of usage data, collected automatically when this website is used.
Unless otherwise stated, providing all data requested by this website is mandatory. If the user refuses to provide the data, this may result in this website being unable to provide its services to the user. In cases where this website explicitly states that providing personal data is voluntary, users may choose not to provide this data without any consequences for the availability or functionality of the service.
Users who are unclear about which personal data is mandatory can contact the provider.
Any use of cookies – or other tracking tools – by this website or third-party service providers used by this website serves the purpose of providing the service requested by the user and all other purposes described in this document and in the cookie policy.

Users are responsible for all personal data of third parties that are provided through this website.

Type and location of data processing

Processing methods

The provider processes user data properly and takes appropriate security measures to prevent unauthorized access and unauthorized forwarding, alteration, or destruction of data.
Data processing is carried out using computers or IT-based systems according to organizational procedures and methods specifically aimed at the stated purposes. In addition to the controller, other persons internally (personnel management, sales, marketing, legal department, system administrators) or externally – and in such cases, if necessary, appointed by the controller as processors (such as providers of technical services, delivery companies, hosting providers, IT companies, or communication agencies) – may operate this website and thus have access to the data. An up-to-date list of these parties can be requested from the provider at any time.

Location

The data is processed at the provider's premises and at all other locations where the entities involved in data processing are located.

Depending on the user's location, data transfers may involve transferring the user's data to a country other than their own. To learn more about the location of the processing of the transmitted data, users can consult the section with detailed information about the processing of personal data.

Storage duration

Unless otherwise specified in this document, personal data will be processed and stored as long as necessary for the purpose for which it was collected and may be retained longer if required by a legal obligation or based on the user's consent.

Purposes of processing

Personal data about the user is collected so that the provider can deliver the service and also fulfill its legal obligations, respond to enforcement requests, protect its rights and interests (or those of users or third parties), and detect malicious or fraudulent activities. Additionally, data is collected for the following purposes: advertising, analytics, remarketing, and behavioral targeting.

Users can find more detailed information about these processing purposes and the personal data used for each purpose in the section “Detailed information about the processing of personal data” of this document.

Detailed information about the processing of personal data

Personal data is collected for the following purposes using the following services:

Analytics:

With the services listed in this section, the provider can monitor and analyze traffic as well as track user behavior.

Google Ads Conversion Tracking (Google Ireland Limited)

Processed personal data: usage data; trackers.

Processing location: Ireland – Privacy Policy.

Google Analytics (Universal Analytics) (Google Ireland Limited)

Processed personal data: usage data; trackers.

Processing location: Ireland – Privacy Policy – Opt Out.

Conversion tracking for Meta ads (Meta Pixel) (Meta Platforms Ireland Limited)

Processed personal data: usage data; trackers.

Processing location: Ireland – Privacy Policy – Opt out.

Meta Events Manager (Meta Platforms Ireland Limited)

Processed personal data: usage data; trackers.

Processing location: Ireland – Privacy Policy – Opt out.

Advertising:

This type of service enables the use of user data for advertising purposes. Advertisements are displayed on this website in the form of banners and other ads and may be behaviourally targeted. This does not mean that all personal data is used for this purpose. Further information and terms of use are provided below.
Some of the services listed below may use trackers to identify users or employ so-called behavioural retargeting. This method can also identify interests and browsing behaviours of users outside this website to tailor advertisements accordingly. For more information, please refer to the privacy policies of the respective services.
Services of this kind usually offer the option to opt out of such tracking. In addition to any opt-out features provided by the services listed below, users can learn more about how to generally opt out of interest-based advertising in the section “How to opt out of interest-based advertising” in this document.

Google Ad Manager (Google Ireland Limited)

Processed personal data: usage data; trackers.

Processing location: Ireland – Privacy Policy.

Meta Lookalike Audience (Meta Platforms Ireland Limited)

Processed personal data: usage data; trackers.

Processing location: Ireland – Privacy Policy – Opt out.

Remarketing and behavioral targeting

With this type of service, this website and its partners can analyze how this website was used in previous user sessions to distribute, optimize, and deploy targeted advertising.
This activity is facilitated by tracking usage data and using trackers that collect information, which is then transmitted to partners managing the remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
Services of this kind usually offer the option to opt out of such tracking. In addition to any opt-out features provided by the services listed below, users can learn more about how to generally opt out of interest-based advertising in the section “How to opt out of interest-based advertising” in this document.

Google Ad Manager Audience Extension (Google Ireland Limited)

Processed personal data: usage data; trackers.

Processing location: Ireland – Privacy Policy – Opt Out.

More information for users

Legal bases for processing

The provider may only process personal data of users if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: In some jurisdictions, the provider may be allowed to process personal data until the user objects to such processing ("opt-out") without relying on consent or another of the following legal bases. However, this does not apply if the processing of personal data is subject to European data protection law;
• the data collection is necessary for the performance of a contract with the user and/or for pre-contractual measures arising from it;
• the processing is necessary to comply with a legal obligation to which the provider is subject;
• the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider;
• the processing is necessary to protect the legitimate interests of the provider or a third party.

In any case, the provider is happy to provide information about the specific legal basis on which the processing is based, especially whether the provision of personal data is a legal or contractual obligation or a prerequisite for concluding a contract.

More information on retention periods

Unless otherwise specified in this document, personal data will be processed and stored as long as necessary for the purpose for which it was collected and may be retained longer if required by a legal obligation or based on the user's consent.

Therefore, the following applies:

• Personal data collected for the purpose of fulfilling a contract between the provider and the user will be stored until the contract is fully fulfilled.
• Personal data collected to protect the legitimate interests of the provider will be retained as long as necessary to fulfill these purposes. Users can obtain more information about the provider’s legitimate interests in the relevant sections of this document or by contacting the provider.

Furthermore, the provider is permitted to store personal data for a longer period if the user has consented to such processing, as long as the consent is not withdrawn. Additionally, the provider may be required to retain personal data for a longer period if necessary to fulfill a legal obligation or by order of an authority.

After the retention period expires, personal data will be deleted. Therefore, the right to information, the right to deletion, the right to correction, and the right to data portability cannot be asserted after the retention period has expired.

Users' rights

Users can exercise certain rights regarding their data processed by the provider.

Users have the right, to the extent permitted by law, in particular to:

• Withdraw consent at any time. If users have previously consented to the processing of personal data, they can withdraw their consent at any time.
• Object to the processing of your data. Users have the right to object to the processing of their data if the processing is based on a legal ground other than consent.
• Obtain information about your data. Users have the right to know whether their data is being processed by the provider, to receive information about specific aspects of the processing, and to obtain a copy of the data.
• Have your data reviewed and corrected. Users have the right to verify the accuracy of their data and request its update or correction.
• Request restriction of the processing of your data. Users have the right to restrict the processing of their data. In this case, the provider will process the data only for storage purposes.
• Request deletion or removal of personal data. Users have the right to request the deletion of their data from the provider.
• Receive your data and have it transferred to another controller. The user has the right to receive their data in a structured, common, and machine-readable format and, if technically feasible, to have it transferred to another controller without hindrance.
• File a complaint. Users have the right to file a complaint with the competent supervisory authority.

Users also have the right to be informed about the legal basis for data transfer abroad or to an international organization subject to international law or established by two or more countries, such as the UN, as well as about the security measures taken by the provider to protect their data.

Details on the right to object regarding processing

If personal data is processed in the public interest, in the exercise of a sovereign authority transferred to the provider, or to protect the legitimate interests of the provider, the user can object to this processing by providing a justification related to their particular situation.

Users are informed that they can object to the processing of personal data for direct advertising at any time free of charge and without giving reasons. If the user objects to the processing for direct advertising purposes, the personal data will no longer be processed for these purposes. Whether the provider processes personal data for direct advertising purposes can be found in the relevant sections of this document.

How to exercise the rights

All requests to exercise user rights can be directed to the provider using the contact details provided in this document. Requests can be made free of charge and will be answered by the provider as soon as possible, at the latest within one month, and the legally required information will be provided to the users. The provider will inform all recipients to whom personal data has been disclosed of any correction or deletion of personal data or restriction of processing, if any. Unless this proves impossible or involves disproportionate effort. The provider will inform the user about these recipients if the user requests it.