deensk

Privacy policy

Last updated: 16 September 2026

This privacy policy explains, in accordance with Art. 19 et seq. of the Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023), which personal data VB flexi GmbH processes via the website lieferwagenzummieten.ch and in connection with renting out vehicles, for what purpose, who receives it and what rights you have. It describes what the website actually does — no more and no less.

1. Controller

VB flexi GmbH, Cholacherstrasse 20, 5452 Oberrohrdorf, Switzerland, UID CHE-484.525.380

Phone: +41 76 234 56 27 (Vladimir Brziak) · E-mail: info@lieferwagenzummieten.ch

Please send any data protection requests to these contact details. No data protection advisor within the meaning of Art. 10 FADP has been appointed; VB flexi GmbH is not required to appoint one.

2. What this website does not do

So that it is clear what you do not need to worry about:

  • We do not set cookies — neither our own nor third-party cookies.
  • We use no web analytics and no tracking: no Google Analytics, no Tag Manager, no advertising or social media plugins, no embedded Google map.
  • Spam protection works without third parties (no reCAPTCHA).
  • We do not send newsletters and do not pass on data for advertising purposes.
  • We make no automated individual decisions within the meaning of Art. 21 FADP: a human decides on every booking.

3. Visiting the website

When you visit the website, your browser necessarily transmits your IP address, date and time, the address requested and browser details to our server. This data is needed to deliver the page and keep the service secure. In addition, our application logs the IP address when a form is submitted or rejected by the spam protection — together with the result, never with the content of the form. The logs are kept in the system log of our server (section 9). That log is limited by disk space, not by time: once the space set aside for it is used up, the oldest entries are continuously overwritten. No fixed retention period in days is configured.

4. Fonts

The fonts “Oswald” and “Nunito” are stored on our own server and loaded from there. No connection to Google or any other font provider is made when a page loads.

5. Contact form

Via the contact form you send us your name, e-mail address, phone number where given, your message and the language chosen. We receive the details as an e-mail to our business address info@lieferwagenzummieten.ch; this mailbox is operated by Vas-Hosting s.r.o., Czech Republic (section 9). The e-mail also contains the time and your IP address (to prevent abuse, section 8). The details are not stored in a database. We use them solely to answer your enquiry and delete them once the enquiry is settled and no retention obligation applies. The e-mail is sent via the service named in section 6.6.

6. Online booking

Vehicles are booked via the booking form on this website. Because a rental contract results from it, we collect considerably more data here than elsewhere. All details serve to check your request, to conclude and perform the rental contract and to fulfil legal obligations (driving entitlement, insurance, keeper’s duties in the case of fines, invoicing). Without these details we cannot rent out a vehicle.

6.1 Which data we collect

  • vehicle, start and end of the rental (date and time)
  • driver: first name, surname, date of birth, street, postcode and town, phone number, e-mail address
  • optional: company and a different company address for the invoice
  • driving licence: licence number, expiry date, categories (self-declared) and photos of the front and back
  • identity document (identity card or passport): number and one photo
  • optional second driver: surname, first name, date of birth, driving licence number, optionally photos of driving licence and identity document
  • payment method (cash or invoice), whether a trip abroad is planned and, if so, the destination, an optional remark
  • technical: language of the website, time, IP address and the reference number of the request (format VB-YYYYMMDD-XXXX)

We need the driver’s address because, as the vehicle keeper, we must name the driver in the case of fines and traffic offences; the company address is used for the invoice only.

Address suggestions: when you type at least four characters into the “Street and house number” field, your browser sends exactly that text to the search service of the Federal Office of Topography swisstopo (api3.geo.admin.ch, official building address register) and shows matching addresses to choose from. No other information from the form is sent. swisstopo delivers the service via the Amazon CloudFront content delivery network (access point Zurich); your IP address is technically visible in the process. If you do not want suggestions, simply type the full address yourself.

6.2 Automatic reading of the document photos

To read the documents we use a service in the USA. As soon as you have uploaded the photos of the driving licence and the identity document, our server sends these images to the programming interface of Anthropic PBC, San Francisco, USA (api.anthropic.com). For this step the photos leave Switzerland and are processed in the USA. An AI model (Claude) reads from them the surname, first name, date of birth, licence number, date of issue and expiry, issuing authority, categories and restriction codes of the driving licence, as well as the number, name and date of birth from the identity document. The result pre-fills the form; you check and confirm every entry yourself and can change it. You can also enter all details by hand yourself — the reading is only an aid and is not required for the booking. The purpose is to avoid typing errors and to detect whether both documents belong to the same person. For comparison we store what the model read and what you confirmed. The reading decides nothing: whether a booking is accepted is checked by a member of staff on the basis of the photos. Images in HEIC format are not sent to Anthropic. Anthropic states in its terms for the interface that submitted content is not used to train models. This is a transfer to the USA — see section 10.

6.3 Returning customers

If the name and date of birth from the document photos match an earlier booking approved by us, the website offers to send a six-digit one-time code to the e-mail address stored at that time; the address is shown only in shortened form (e.g. v•••@gmail.com). After entering the code, the address, phone number, e-mail address, driving licence number and expiry, identity document number, categories and previously used companies are pre-filled from the last approved booking. The code is valid for 10 minutes, allows 5 attempts and is sent at most three times per hour per person; the lookup is limited to 20 requests per hour per IP address. Without the code no earlier data is shown. With the new booking we additionally see how often and when you last rented from us and which details have changed since.

6.4 Temporary storage in your browser

So that a booking you have started is not lost, the website stores the draft in your browser’s local storage (localStorage, key “vbflexi.poptavka.v1”): the details entered so far, the current step, the time you started and the file names of the uploaded photos — never the photos themselves. This data leaves your device only when you submit the booking, is not a cookie and is deleted after successful submission or when the form is restarted. You can remove it at any time via your browser’s site data settings.

6.5 Review and decision

Your request is stored in our database (section 9). Our staff view it in a password-protected area, check the details and the photos (the photos are displayed via time-limited links valid for five minutes) and decide: approve, ask for additions or reject. Every decision is logged with time and user name. We receive an e-mail notification of every new request; it contains the reference number, name, phone number, vehicle and rental period, but neither the date of birth nor document numbers.

6.6 Messages to you

You receive at most three automatic e-mails from us: the approval with the rental contract as a PDF, a possible request for additions and, after the return, the invoice as a PDF — plus, where applicable, the one-time code from section 6.3. The e-mails are sent via the service Resend; according to its data processing agreement the contracting party is Plus Five Five, Inc., San Francisco, USA. For this, Resend processes your e-mail address and the content of the message including attachments. According to Resend, the content of messages, the attachments and the delivery logs are stored in the USA — regardless of the sending region selected. This also applies to the rental contract as a PDF containing your personal data (name, address, date of birth, driving licence number) and to the invoice. On transfers to the USA see section 10.

6.7 Calendar and Google Calendar

Approved bookings are entered in our internal occupancy calendar: vehicle, period, name, phone number and a note with the reference number and your remark. This calendar is mirrored one-way into a Google Calendar of VB flexi GmbH so that our team can see occupancy on the go. The Google event contains vehicle and name (title), name, phone number, note, type, source and identifier (description) and the period. The provider is Google Ireland Limited or Google LLC, USA (section 10). If a booking is deleted with us, the mirrored event is deleted too.

6.8 Rental contract, return and invoice

On approval, our server creates the rental contract as a PDF from your details (with name, address, date of birth, driving licence number, vehicle, period and price), stores it and sends it to you and to us. After the return we record the mileage, fuel, any damage and fees and the settlement of the deposit, and issue the invoice with a Swiss QR-bill (name, address, amounts). Invoice data is exported for bookkeeping. We keep rental contracts, invoices and accounting records for ten years in accordance with Art. 958f of the Swiss Code of Obligations.

7. Retention and deletion

  • Photos of driving licence and identity document: are deleted from storage three years after the end of the rental; afterwards the booking record only notes that the photos were deleted. Three years because traffic offences can be prosecuted for that long and the authorities may ask us as the vehicle keeper to name the driver during that time — with the photos we can show that we checked the documents.
  • Booking requests that do not lead to a rental contract (rejected or not pursued): twelve months after receipt, including the photos.
  • Rental contracts and invoices and the details taken from them (name, address, date of birth, number, categories and validity of the driving licence, number of the identity document, vehicle, period, amounts): ten years from the end of the financial year (Art. 958f CO), because contracts and invoices are accounting records. The associated booking record is kept during that time as the basis of the contract and the invoice.
  • IP address in the booking record: remains part of the record and is deleted with it. IP address in the logs: see section 3.
  • Calendar entries (internal and Google Calendar): remain as long as the associated booking is stored with us; when the booking is deleted, the mirrored Google event is deleted too (section 6.7).
  • Contact enquiries: until the enquiry is settled.
  • One-time codes: 10 minutes, in the server’s memory only.
  • Spam protection counters (IP address): 60 minutes, in the server’s memory only.
  • Backups: our server makes a backup of the data every day; the last 14 backups are kept. Deleted data may therefore remain in backups for up to 14 days. In addition, the database provider (section 9) makes backups under its own terms.

8. Spam protection and IP address

The contact and booking forms are protected against automated input without third parties: a form field invisible to humans, a minimum time between opening and submitting, at most five submissions per hour per IP address, an overall cap of 60 submissions per hour, and a content check for links, non-Latin scripts and typical spam terms. For the counters, your IP address is held in the server’s memory for one hour. With a booking we additionally store the IP address in the record so that misuse of the form can be traced; our staff do not see it during the review.

9. Where your data is kept and who processes it

We use the following service providers as processors (Art. 9 FADP). They process data only on our instructions and are contractually bound to data security.

  • Database and file storage: Supabase Pte. Ltd., Singapore. The database (bookings, occupancy calendar, decisions) and the file storage (document photos, rental contracts) are located in the data centre configured for our Supabase project; according to our project documentation that is the Zurich region, Switzerland. The storage is private; access is possible only via our server, via the preview version named below and via time-limited signed links. The provider is based in Singapore (section 10).
  • Server for the website and document generation: Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany; data centre Nuremberg, Germany. According to the Federal Council’s list, Germany provides an adequate level of data protection. The server holds the application, the logs, the generated contracts and invoices and the daily backups.
  • Preview version: Vercel Inc., San Francisco, USA. In addition to the website at lieferwagenzummieten.ch we operate an unlinked preview version, blocked for search engines, at vbflexi-neu.vercel.app on Vercel’s platform. It uses the same database, the same file storage and the same Anthropic interface as the website. If you open the preview version or enter a booking there, your connection data (IP address) and form input are processed via Vercel’s systems; the data is then stored in the same database. On transfers to the USA see section 10.
  • Reading of document photos: Anthropic PBC, San Francisco, USA, via the interface api.anthropic.com (section 6.2).
  • E-mail delivery: Resend (Plus Five Five, Inc., San Francisco, USA); the content of messages including attachments and the delivery logs are stored in the USA (section 6.6).
  • Business mailbox info@lieferwagenzummieten.ch: Vas-Hosting s.r.o., Czech Republic. This is where the e-mails sent to this address are stored, including contact enquiries and notifications about new bookings (sections 5 and 6.5). As an EU member, the Czech Republic provides an adequate level of data protection according to the Federal Council’s list.
  • Calendar: Google Ireland Limited, Dublin, Ireland, or Google LLC, Mountain View, USA (section 6.7).

We also disclose data where we are obliged to or where it is necessary for performance: to authorities in the case of fines and traffic offences (naming the driver), to our insurer in the event of damage and to lawyers, debt collection or courts if we have to enforce claims.

10. Disclosure abroad

According to the Federal Council’s decision (Annex 1 of the Data Protection Ordinance), Germany, Ireland and the Czech Republic provide an adequate level of data protection. For the USA, such a decision exists only for companies certified under the Swiss-U.S. Data Privacy Framework. For disclosure to Anthropic, Resend (Plus Five Five, Inc.), Vercel and Google in the USA and to Supabase in Singapore we rely, in accordance with Art. 16 para. 2 let. d FADP, on these providers’ data processing agreements containing standard contractual clauses including the Swiss addendum. The data transferred is: to Anthropic the document photos and the details read from them; to Resend the e-mail address and the content of messages including attachments, among them the rental contract and the invoice as PDFs; to Google the name, phone number and note of the booking (calendar); to Vercel the connection data and form input of the preview version; to Supabase the data named in section 9, insofar as the provider accesses it.

11. Data security

  • The connection to the website is encrypted (HTTPS).
  • Administration areas (approval, calendar, return, management) can only be reached with a user name and password; access lies with the staff of VB flexi GmbH.
  • The database and file storage are not publicly accessible. Photos and contracts are displayed only via signed links valid for five minutes.
  • The server can only be accessed with an SSH key.
  • Logs and notifications contain no document numbers and no photo content.
  • Uploaded files are checked by their actual content, not by the type reported by the browser; only image files up to 8 MB are accepted.

12. Your rights

Under the FADP you have the following rights:

  • access (Art. 25 FADP): whether and which personal data we process about you — generally free of charge and within 30 days;
  • rectification of inaccurate data (Art. 32 para. 1 FADP);
  • deletion or destruction, unless a retention obligation (for example under Art. 958f CO) prevents it;
  • release and transfer (Art. 28 FADP) of the data you have given us, in a common electronic format;
  • objection to processing and restriction of disclosure to third parties (Art. 30 and 32 FADP).

To exercise these rights, use the contact details in section 1. So that we do not release your data to the wrong person, we may ask for proof of your identity. If you believe that we process your data unlawfully, you can contact the supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch. Independently of this, you may take legal action under Art. 32 para. 2 FADP.

13. Changes

We update this policy when the website or our processes change. The version published here applies; the date is given at the top.