1. Who are we?

Co-oto is a private car-sharing application developed in French-speaking Switzerland. The data controller is Deniz Ates, based in Nyon.

2. Personal data collected

In the mobile application:

First name (no surname)
Email address
User role (owner or borrower)
Preferred language
Unique Firebase identifier
Trip and reservation history
Location data (manual activation only)
Push notifications

On the website:

Contact form data: name, email address, subject and message
Technical data via Google Analytics (with IP anonymization enabled)

Contact form data is transmitted via the FormSubmit.co service and retained for a maximum of 12 months after your request is processed, unless a legal obligation requires otherwise.

3. Purposes of processing

Data is used to: create and manage accounts, manage trips and reservations, display vehicle position, send notifications, provide support, analyze overall usage.

The platform never sells, rents or shares data for commercial purposes.

4. Legal basis

In accordance with GDPR, legal bases include contract execution, explicit consent (geolocation, notifications), and legitimate interest (anonymous statistics, contact requests).

5. Data retention period

Data is retained as long as the account remains active. Users can delete their account at any time with permanent data deletion. Accounts inactive for 12 months may be deleted after notice.

6. Subcontractors and hosting

Google Firebase handles authentication, databases and notifications. Google Analytics processes website statistics. Service providers comply with GDPR with strict contractual clauses.

7. Data security

Measures in place:

Restricted access
Encryption in transit and at rest
Secure Firebase authentication
Strict access rules
No marketing profiling

8. Your rights

GDPR rights: access, rectification, erasure, portability, restriction, objection, withdrawal of consent.

Contact: info@co-oto.app

9. Cookies and statistics

This website uses a cookie consent banner. You can change your preferences at any time.

Necessary cookies

Essential for the website to function, they do not collect any personal data.

Analytics cookies (Google Analytics)

Only activated with your consent. Google Analytics (ID: G-ZZ5L05SY2W) collects anonymized data to understand site usage:

Pages visited and session duration
Geographic origin (country/city, never precise address)
Device type and browser

IP address anonymization is enabled. Data is retained for a maximum of 14 months. No advertising cookies or profiling trackers are used without explicit consent.

Marketing cookies

Only activated with your explicit consent. They help measure the effectiveness of our advertising campaigns via Google Ads.

10. Changes

This policy may be updated. Users will be informed of significant changes.

11. Contact

For any questions regarding this policy, contact us via our contact form or by email at info@co-oto.app.

Privacy Policy