Privacy

Controller

The controller responsible for data processing is Performance-Cars AG, Unterlettenstrasse 14, CH‑9443 Widnau, info@performance-cars.ch.

Principle

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and – where applicable – the EU General Data Protection Regulation (GDPR). We only collect and process the data required for the stated purposes.

Contacting us

If you contact us by phone, e-mail, WhatsApp or via one of our forms, we process the information you provide (e.g. name, contact details, vehicle details) in order to answer your enquiry. We do not pass this data on to third parties without your consent, unless this is necessary for the performance of a contract.

Data you send us via the forms

This website contains four forms: contact, car purchase, car part-exchange and car search. Depending on the form, we process the following information:

Contact form: name, e-mail address, phone number, the selected car if applicable, and your message.

Car purchase and part-exchange: additionally the make and model, first registration, mileage, accident history and asking price of your car, and for a part-exchange the preferred car if applicable.

Car search: additionally the make and model, colour, first registration, maximum mileage and budget of your dream car.

With every submission: your consent to this privacy policy, the time of submission and the page from which you sent the form, as well as – for spam protection – the time elapsed since the page was loaded.

Purpose: processing your enquiry, valuing your car, preparing an offer and handling a purchase, sale or part-exchange.

Legal basis: steps prior to and performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).

Retention: we delete enquiries that do not lead to a contract no later than twelve months after the last contact. If a contract is concluded, the statutory retention periods apply (usually ten years for business records).

Transmission of the form data

The forms are received by a Cloudflare Worker – a small program running at our hosting provider. It checks the information, delivers it as an e-mail to our business address and sends you an automatic confirmation of receipt to the e-mail address provided. Apart from your name, the confirmation contains no information from the form. The Worker itself does not store the information, neither in a database nor in any other storage; afterwards it exists only in our mailbox.

To protect against misuse, the Worker checks every submission using Cloudflare Turnstile, a form field invisible to humans and the time elapsed since the page was loaded. In addition, it accepts no more than five submissions per minute from each IP address; for this purpose, Cloudflare counts the submissions per IP address for one minute at a time.

The processors involved are:

Cloudflare, Inc. – hosting of the website and operation of the form endpoint. Technical connection data (IP address, time, user agent) is processed in the course of this.

Cloudflare Turnstile – spam protection for the forms. Turnstile checks whether a submission comes from a human. IP address and technical browser characteristics are processed in the course of this. Turnstile sets no advertising cookies and builds no cross-site profiles.

Resend (e-mail delivery service, USA) – delivery of the form message to our mailbox and of the automatic confirmation of receipt to your e-mail address.

Data processing agreements are in place with all service providers. Processing outside Switzerland and the EEA is possible; it is based on standard contractual clauses or equivalent safeguards.

Server log files

When you visit this website, our hosting provider Cloudflare automatically stores technical access data (e.g. IP address, date and time, page accessed, referrer, browser type) in log files. The form endpoint also records technical events there, such as rejected spam attempts or delivery errors – but not the content of the forms.

This data serves technical security, stable operation and the prevention of attacks; it is not combined with other data sources and is automatically deleted after a short time. The legal basis is our legitimate interest in the secure operation of the website.

Vehicle data & images

The vehicle data and images shown on this website come from the AutoScout24 stock of Performance-Cars AG and are self-hosted as a snapshot – no AutoScout24 widget or iframe is loaded when you view them. You only leave this website when you click a link to AutoScout24.

Cookies and tracking

This website sets no analytics, marketing or tracking cookies, does not measure reach and does not embed any social media widgets. Fonts and images are delivered from our own server; Google Fonts are not embedded. Technically necessary functions work without cookies requiring consent.

The only exception is pages with a form: there, the website loads the Cloudflare Turnstile verification script, which may set a technically necessary token to prevent misuse. It is not used for recognition across different websites.

For the transition between two pages (for example when a car glides onto its detail page), your browser briefly remembers the target page in session storage. This information does not leave your device and is deleted immediately after the page change.

Map on the home and contact pages

The map image is a graphic based on map data from OpenStreetMap and CARTO, stored on our own server. No map from Google, Apple or any other provider is embedded, and no data is transmitted to third parties when you view the page.

Clicking the map image, «Open route» or «Directions» opens your device's maps app or map page – Apple Maps on iPhone and iPad, otherwise Google Maps. Only this click establishes a connection to the respective provider, which is solely responsible for its own data processing.

External links and WhatsApp

We link to WhatsApp, Google Maps, Apple Maps, OpenStreetMap, CARTO, AutoScout24, Quality1, our profile on Instagram and, in the footer, to zimba studio, the designers of this website. These links only become active when you click them; only then do the respective providers receive data from you. These providers are solely responsible for their own data processing.

Performance-Rent (performance-rent.ch) is the rental service of Performance-Cars AG; the website performance-rent.ch is governed by its own privacy policy.

If you write to us via WhatsApp, the conversation runs via the WhatsApp service of the Meta group; its privacy terms also apply. If you prefer not to use it, you can equally reach us by phone, e-mail or via our forms.

Your rights

Within the scope of the statutory provisions, you have the right to access, rectification, erasure and restriction of the processing of your personal data, as well as the right to data portability and to object to processing. You may withdraw any consent given at any time with effect for the future. To do so, please contact info@performance-cars.ch.

You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or with the supervisory authority responsible for you.

Data security

The website is delivered exclusively encrypted over HTTPS. We take appropriate technical and organisational measures to protect your data against loss and unauthorised access.

Contact

If you have any questions about data protection, you can reach us at info@performance-cars.ch or +41 78 965 3292.

Changes

We update this privacy policy when our services or the providers we use change. The version published on this page at the time applies.