Privacy Policy — Fahrzüg AI

Professional working draft – final review by qualified Swiss legal counsel recommended before public launch.

As of: 23.08.2026

1. Controller

The controller responsible for data processing is Mobil Digital GmbH, Heuerweg 7, 5605 Dottikon, Switzerland, info@fahrzueg.ch. This notice describes only processing activities that are actually implemented on the Platform — not planned or hypothetical features.

2. Categories of Data Processed

Account and profile data: name, email address, phone number, preferred contact channel, canton, postal code, city, company name/role (if provided), preferred language.

Social login data: when signing in via Google, we receive name, email address, a profile picture link, and a provider identifier; a password is never stored.

Vehicle data: make, model, year, mileage, fuel type, transmission, drivetrain, MFK (roadworthiness inspection) status, category-specific technical attributes.

Listing data: title, description, price, location, photos, status (active/paused/sold), moderation status.

Images and documents: uploaded vehicle photos (publicly visible unless marked as a private document) and documents/photos uploaded for vehicle recognition (private, never publicly accessible).

Voice recordings: when using voice input, the audio file is processed solely for transcription and immediately deleted afterward — it is never stored permanently.

URLs and PDF uploads: source URLs users provide themselves (e.g. for imports) are stored as plain text and never fetched automatically.

Conversation history: messages sent to the Fahrzüg AI assistant, the detected intent, and structured criteria, for traceability and to improve the feature.

Search Agents: saved search criteria, status, time of last check, notification preferences.

Match data: results of the automated matching between a Search Agent and a listing, including explainability data (met/unknown criteria).

Generated reports: PDF reports on Search Agent matches, stored in a private, user-scoped storage area.

Contact requests: draft and, after confirmation, a frozen snapshot of the message and the contact details of the requesting and contacted persons.

Dealer verification: company name, UID (if provided), website, contact details, submitted evidence, review status.

Import sources: import source configuration and imported vehicle records reviewed before publication.

Subscription and usage data: assigned plan, current usage relative to plan limits.

Reports (moderation): reports submitted by users regarding listings or accounts and their handling status.

Security/risk events: automatically detected suspicious patterns (e.g. reporting volume), used solely for platform security.

Notifications: send history and read status of email notifications.

Audit logs: logging of security-relevant actions (including moderation, account suspension, publication of legal documents) with a hashed IP address, never in plain text.

Technical logs: server-side technical logs for troubleshooting and abuse prevention.

Cookies: see the separate cookie inventory in the Cookie Policy.

Marketing consent: opt-in status for promotional communication, disabled by default.

3. Purposes of Processing

We process personal data to perform the usage agreement (intermediary platform, Search Agents, contact brokerage), to comply with legal obligations (including legal-notice and retention requirements), to safeguard legitimate operational interests (including fraud prevention, platform security, product improvement), and on the basis of your consent (including marketing, optional cookies, voluntary voice input).

4. Processors and Recipients

We maintain a current register of the processors we use (purpose, data categories, processing country, contractual status) in our Processor Registry. No provider is listed unless it is actually in operation or in the documented production plan. As long as no real external AI connection, no real payment system, and no real email-sending system is active, no data is transmitted to such third parties in that respect.

5. Processing Abroad

Processing abroad only takes place where disclosed in the Processor Registry, and only where an adequate level of protection is ensured in accordance with Swiss data protection law.

6. Retention Period

The retention period depends on the respective purpose (active use, contractual necessity, statutory retention obligation, security/fraud prevention, consent, operational backup). Details can be found in our Retention Policy.

7. Data Security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse, including server-side access controls, logging of security-relevant actions, and minimization of data transmitted to external AI services.

8. Privacy by Design and by Default

New features are developed on the principle of data minimization: only the data required for the respective purpose is collected, and defaults are generally privacy-friendly (e.g. marketing consent disabled by default, optional cookies disabled by default).

9. Your Rights

You have the right to access the data processed about you, to have inaccurate data corrected, to have it deleted within the limits of the law, and, where applicable, to restrict processing, object, and receive your data in a common format. You can exercise these rights through the Privacy Center in your account. You may withdraw any consent given (e.g. marketing) at any time with effect for the future.

10. Automated Decisions

The automated matching between Search Agents and listings (Match Score) is a deterministic support feature, not an automated decision with legal effect within the meaning of data protection law; no automated rejection or suspension occurs based solely on an AI result.

11. Use of AI

Certain features (text understanding, speech recognition, document recognition, image analysis) are built to support external AI providers. Before any transmission to an external provider, data is minimized by a dedicated filtering component (allowlist principle): only the information actually required for the specific request is transmitted, never the full profile or unrelated conversation history.

12. Contact and Right to Complain

For privacy questions, you can reach us at info@fahrzueg.ch. Regardless, you have the right to contact the Federal Data Protection and Information Commissioner (FDPIC/EDÖB).

13. Changes to This Notice

We may amend this notice. Material changes are published as a new, versioned edition.