Privacy Policy

EV-Adventure GmbH, Weiermattstrasse 12, 8926 Uerzlikon, Switzerland
UID CHE-289.138.658 · info@ev-adventure.com · +41 77 265 32 07

Version: 29 October 2026

1. Scope

This privacy policy explains which personal data we process when you visit our website ev-adventure.com, book or rent a vehicle, or contact us. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Controller

The controller is EV-Adventure GmbH, Weiermattstrasse 12, 8926 Uerzlikon, Switzerland. For data protection questions and to exercise your rights, contact us at info@ev-adventure.com or by post at this address.

3. Data we process

  • Contact and identification data: name, address, e-mail, phone number, date of birth, company.
  • Driving licence and ID data: number, issue date and copies of your driving licence and passport or ID card, where required for the rental.
  • Booking and rental data: vehicle, rental period, handover or delivery location, extras, vouchers, prices, handover and return reports (mileage, battery level, damage), correspondence.
  • Payment data: payment method and payment status. Card details are processed directly by the payment provider Stripe; we do not receive them in full.
  • Vehicle data: our vehicles are permanently connected to the internet. Location, charging and vehicle status data are recorded via the Tesla app.
  • Data on damage, fines and traffic offences relating to the rental.
  • Website usage data: IP address, browser, device, pages visited, time of access, and cookie and tracking data (section 6).

4. Purposes

We process this data in order to:

  • handle bookings and requests, and conclude and perform rental contracts (handover, return, billing, deposit);
  • check the rental requirements (age, driving licence);
  • process payments and issue invoices;
  • handle damage, fines and traffic offences, including with insurers and authorities;
  • locate and secure our vehicles and prevent misuse and theft;
  • communicate with you;
  • comply with legal obligations (e.g. retention duties);
  • operate, improve and secure our website;
  • measure and improve our advertising (section 6);
  • inform you about our own similar offers. You can object to this at any time free of charge.

Where the GDPR applies, our legal bases are:

  • performance of a contract (Art. 6(1)(b));
  • legal obligations (Art. 6(1)(c));
  • our legitimate interests, e.g. in security, fraud prevention and marketing (Art. 6(1)(f));
  • your consent, where we ask for it (Art. 6(1)(a)).

5. Recipients and processors

We only disclose personal data where necessary for the purposes above:

  • Squarespace (Squarespace Inc., USA / Squarespace Ireland Ltd.): website hosting, contact forms.
  • Netlify (Netlify Inc., USA): hosting of the booking system.
  • Supabase (Supabase Inc., USA): database of the booking system. The data is stored in a data centre in Zurich, Switzerland.
  • Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe Inc., USA): payment processing (card, TWINT). For the deposit, we store the card provided by the tenant with Stripe (tokenisation by Stripe) and trigger a reservation or, in case of claims, a charge. The card is deleted 6 months after the end of the rental, provided no claims remain outstanding; on request earlier, as soon as no claims remain outstanding.
  • Google Workspace (Google Ireland Ltd. / Google LLC, USA): e-mail and document storage.
  • E-mail delivery provider for automatic booking e-mails (e.g. Resend, USA, or Google Workspace).
  • Google Analytics and Google Ads (Google Ireland Ltd. / Google LLC, USA): website analytics and ad measurement (section 6).
  • Rentware (Rentware GmbH, Germany): previous booking software, to the extent bookings are still processed through it.
  • Tesla: vehicle app and vehicle data of the rented vehicles.
  • Insurers (in particular Zurich Insurance Company Ltd), garages and experts in the event of damage.
  • Authorities (e.g. police, road traffic offices) in the event of traffic offences or justified requests.
  • Fiduciary and debt collection services, where necessary.

Some of these recipients process data abroad, in particular in the EU and the USA. For the USA, we rely on the Swiss-U.S. Data Privacy Framework where the recipient is certified. Otherwise we rely on the European Commission's standard contractual clauses as recognised by the FDPIC.

6. Cookies, analytics and advertising

Our website uses cookies and similar technologies. Technically necessary cookies are needed to operate the website. We also use:

  • Google Analytics 4: analysis of website usage with pseudonymised usage data.
  • Google Ads conversion tracking (including enhanced conversions): measures whether an ad led to an enquiry or booking. With enhanced conversions, data such as your e-mail address is transmitted to Google in hashed (encrypted) form.
  • Google reCAPTCHA: protects forms against spam.
  • Fonts from Google Fonts and Adobe Fonts.

A cookie banner informs you on your first visit. You can delete or block cookies in your browser at any time. You can also prevent collection by Google Analytics with Google's browser add-on (tools.google.com/dlpage/gaoptout).

7. Retention

We keep personal data for as long as necessary for the purposes above or as required by law. We keep accounting records such as contracts and invoices for 10 years (Art. 958f Swiss Code of Obligations). We delete copies of ID documents once they are no longer needed for the rental and any claims.

8. Data security

We protect personal data with appropriate technical and organisational measures, e.g. encrypted transmission (HTTPS), access restrictions and carefully selected service providers.

9. Your rights

Within the framework of applicable law, you have the right to:

  • access your personal data;
  • have incorrect data corrected;
  • have data deleted or its processing restricted;
  • receive or transfer your data;
  • object to processing, in particular for advertising;
  • withdraw consent with effect for the future.

To exercise these rights, write to info@ev-adventure.com. We may ask for proof of identity. You can also contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, in the EEA, the supervisory authority of your country.

10. Automated decisions

We do not make automated individual decisions within the meaning of Art. 21 FADP. The booking system checks the minimum age and calculates the deposit from the date of birth using fixed rules described in our terms and conditions.

11. Changes

We may amend this privacy policy. The version published on ev-adventure.com applies.