Privacy policy

Last revision of the privacy policy: 2026-09-03

The responsible entity within the meaning of applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and/or the Swiss Federal Act on Data Protection (FADP), is:

SUNCAR AG
Hinterwiden, 9245 Oberbüren

Phone: +41 44 542 05 00
Email: info@suncar-ag.com
Website: https://www.suncar-ag.com

General Notice

SUNCAR AG takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as the details provided in this privacy policy.

We point out that data transmission over the Internet (e.g., when communicating via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

This website can generally be visited without registration. In doing so, data such as pages accessed or the name of the file retrieved, date and time are stored on the server for statistical purposes without this data being directly related to your person. If you contact us via other means (e.g., email, contact form, postal mail) and/or become our customer, the personal data you provide will be shared with us and collected by us. In such cases, such data will only be processed by us lawfully, in good faith, proportionately, and for the purposes disclosed at the time of collection or for the performance of the contractual relationship with you.

Processing of Personal Data

Personal data is any information relating to an identified or identifiable natural person. A data subject is a person about whom personal data is processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, deletion, retention, modification, destruction, and use of personal data.

What Personal Data Do We Collect from You?

Personal data that we collect from you may include the following categories:

• Your name and contact details (e.g., name, address, telephone number, language, and email address), information about the company you work for, your position and title, and relationship to other persons.
• Financial information (e.g., payment details).
• Business information that you transmit to us as a customer and/or that we create for you as part of our service provision to you.
• Other information about you that you transmit to us from time to time.

For What Purposes Do We Process This Data?

We require your personal data

• To communicate with you.
• To provide our services to you.
• Where applicable, as part of our onboarding process and/or for financial and administrative purposes.
• For marketing purposes, namely sending announcements, events, advertising about products or services of SUNCAR AG.

Specifically: Administration, Financial Accounting, Office Organization, Contact Management, Marketing

We process data in accordance with the data protection provisions of the federal government (Data Protection Act, FADP) and the EU GDPR in the context of administrative tasks as well as the organization of our operations, financial accounting, and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services. The legal basis for processing is Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR, or Art. 6 FADP and/or Art. 31 FADP. Customers, prospects, business partners, and website visitors are affected by the processing. The purpose and our interest in processing lie in administration, financial accounting, office organization, archiving of data, i.e., tasks that serve to maintain our business activities, perform our duties, and provide our services.

From time to time, we must transmit your data to a certain extent to the tax authorities, advisors such as tax consultants or auditors, as well as other fee offices and payment service providers.

Furthermore, we store information about suppliers, organizers, and other business partners on the basis of our business interests, e.g., for the purpose of later contact.

Relevant Legal Bases

We process personal data in accordance with Swiss data protection law and, to the extent and insofar as the EU GDPR is applicable, personal data according to the following legal bases:

• Where legally required, your consent (Art. 31 FADP and/or Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Contract performance and pre-contractual inquiries (Art. 6 FADP and/or Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation (Art. 31 FADP and/or Art. 6(1)(c) GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Protection of vital interests (Art. 31 FADP and/or Art. 6(1)(d) GDPR) – Processing is necessary to protect the vital interests of the data subject or of another natural person.
• Legitimate interests (Art. 31 FADP and/or Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
• Application procedures as pre-contractual or contractual relationships (Art. 6 FADP and/or Art. 9(2)(b) ff. GDPR) – Where special categories of personal data (e.g., health data such as severe disability status or ethnic origin) are requested from applicants as part of the application process so that the controller or the data subject can exercise the rights and comply with the obligations arising from employment law and the law of social security and social protection, their processing is carried out in particular in the EU according to Art. 9(2)(b) GDPR, in the case of protecting vital interests of applicants or other persons according to Art. 9(2)(c) GDPR, or for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, for medical diagnostics, the provision of care or treatment in the health or social sector, or for the administration of systems and services in the health or social sector according to Art. 9(2)(h) GDPR. In the case of a voluntary disclosure of special categories of data, their processing is based on Art. 9(2)(a) GDPR.

We process personal data for the purpose disclosed at the time of collection and for the associated retention period. Statutory retention periods remain reserved. In the case of longer statutory retention obligations, processing remains restricted to archiving purposes.

Security Measures

We take appropriate technical and organizational measures in accordance with statutory requirements to prevent unauthorized access to your personal data.

The measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access, input, transmission, ensuring availability, and their separation. Furthermore, we have established procedures that ensure the exercise of data protection rights already during the development or selection of hardware, software, and procedures in accordance with the principle of data protection by design and by data protection-friendly default settings.

Transmission of Personal Data to Third Parties

In the context of our processing of personal data, it may occur that the data is transmitted to third parties. Recipients of this data include, in particular, service providers commissioned with IT tasks or providers of services and content that provide services for us, as well as auditors or authorities. In such cases, we comply with statutory requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

Data Processing in Third Countries

If we transfer personal data to a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)), process it, or if processing takes place in the context of using third-party services or disclosing or transmitting data to other persons, entities, or companies, this is done only in accordance with statutory requirements.

In the case of a transfer of personal data to third countries with no recognized level of data protection, we will conclude data transfer agreements with the recipient under the so-called standard data protection clauses of the EU Commission or rely on certifications or binding internal data protection regulations (Art. 44 to 49 GDPR and/or Art. 16 ff. FADP).

Use of Cookies

Our website https://www.suncar-ag.com/de/ uses cookies. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. A cookie primarily serves to store information about a user during or after their visit within an online offering. The stored information may include, for example, the language settings on the website, the login status, a shopping cart, or the point at which a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also referred to as “user IDs”).

The following cookie types and functions are distinguished:

• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their browser.
• Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user revisits a website. Likewise, the interests of users used for reach measurement or marketing purposes can be stored in such a cookie.
• First-party cookies: First-party cookies are set by us.
• Third-party cookies (also: third-party provider cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
• Necessary (also: essential or strictly necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g., to store logins or other user inputs or for security reasons).
• Statistics, marketing, and personalization cookies: Furthermore, cookies are generally also used in the context of reach measurement and when the interests of a user or their behavior (e.g., viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles serve to show users, for example, content that corresponds to their potential interests. This procedure is also referred to as “tracking,” i.e., tracking the potential interests of users. To the extent that we use cookies or “tracking” technologies, we inform you separately in our privacy policy or, if legally required, in the context of obtaining consent.

If you visit our website, you will be asked by us to consent to the placement of cookies (cookie banner). As soon as you consent to the use of cookies, the legal basis for processing your personal data is this declared consent. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g., in the business operation of our online offering and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.

Storage duration: Unless we provide you with explicit information on the storage duration of permanent cookies (e.g., as part of a so-called cookie opt-in), please assume that the storage duration lasts as long as the purpose of the cookie(s) persists.

Depending on whether the processing is based on consent or statutory permission, you have the option at any time to revoke consent granted or to object to the processing of your data by cookie technologies (collectively referred to as “opt-out”). You can initially declare your objection by means of your browser settings, e.g., by deactivating the use of cookies (whereby this may also restrict the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be declared by means of a variety of services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you can receive further objection notices in the context of the information on the service providers and cookies used. Previous data processing remains unaffected by your submitted revocation and does not have to be reversed/deleted as long as statutory retention obligations are in effect.

Processing of cookie data on the basis of consent: We use a cookie consent management procedure in the context of which the consent of users to the use of cookies or the processing and providers mentioned in the context of the cookie consent management procedure is obtained and can be managed and revoked by users. The consent declaration is stored so that its query does not have to be repeated and consent can be proven in accordance with the statutory obligation. Storage can take place on the server side and/or in a cookie (so-called opt-in cookie or using comparable technologies) in order to be able to assign consent to a user or their device. Subject to individual information on the providers of cookie management services, the following notices apply: Processed data types: Usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses).

• Data subjects: Users (e.g., website visitors, users of online services).
• Legal bases: Consent (Art. 6(1)(a) GDPR), Legitimate interests (Art. 6(1)(f) GDPR).

Use of CookieYes

You can restrict or disable the storage of cookies in your web browser at any time. You can delete cookies that have already been stored. If you deactivate cookies, the functionality of this website may be limited.

We use the cookie consent management platform CookieYes for our website. The service provider is the British company CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom.

CookieYes is used to obtain, document, and manage your consent to the storage of certain cookies in your browser. In particular, your consent decision, the time of consent, information about the version of the consent dialog used, and technical information about your browser and device may be processed.

Processing is carried out to fulfill data protection documentation obligations and, where necessary, on the basis of your consent in accordance with Art. 6(1)(a) GDPR or Art. 31 FADP. To the extent that CookieYes processes data in the United Kingdom or transfers it there, the transfer is permissible provided that the statutory requirements for an adequate level of data protection are met. The European Commission has issued an adequacy decision for the United Kingdom under Art. 45 GDPR. Further information can be found in the European Commission’s adequacy decision on data protection in the United Kingdom.

Learn more about the data processed through the use of CookieYes in the CookieYes privacy policy.

Use of SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “https://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties without special effort or additional external measures.

Use of Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request

This data cannot be attributed to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

Google Maps

On our website, we use Google Maps to display maps and directions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page with an embedded Google Maps map is accessed, the map is not initially loaded. The embedding only takes place after you have given your consent via the cookie consent management or activated the map through a corresponding action.

After activation, in particular your IP address, technical device and browser data, information about the page accessed, and usage and location data may be transmitted to Google and processed by Google. Data may be forwarded to Google LLC in the USA. Processing is carried out to display the map and to improve our online offering on the basis of your consent in accordance with Art. 6(1)(a) GDPR or Art. 31 FADP. You can revoke your consent at any time with effect for the future via the settings of our cookie consent management.

For transfers to the USA, Google relies, where applicable, on appropriate safeguards in accordance with Art. 46 GDPR or the applicable provisions of the FADP, in particular on standard data protection clauses or a recognized adequacy mechanism. Further information can be found in the Google privacy policy.

Microsoft Clarity

We work with Microsoft Clarity to capture how you use and interact with our website. Behavioral metrics, heatmaps, and session recordings are used for this purpose. The data helps us improve and market our products and services.

Data about the use of our website is collected using first-party and third-party cookies as well as other tracking technologies to determine the popularity of products and services and online activity. In addition, we use this information to optimize the website, for fraud and security purposes, and for advertising measures.

Microsoft Clarity is only activated after you have given your consent via our cookie consent management. Processing is carried out on the basis of your consent in accordance with Art. 6(1)(a) GDPR or Art. 31 FADP. You can revoke your consent at any time with effect for the future via the settings of our cookie consent management.

Further information about how Microsoft collects and uses your data can be found in the Microsoft privacy statement.

Contact Form

If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. This data will not be passed on to third parties or used for other, further purposes.

HubSpot CRM

We use (in the interest of analyzing, optimizing, and economically operating our online offering within the meaning of Art. 6(1)(f) GDPR) HubSpot, a platform for inbound marketing and sales. HubSpot uses cookies. The information generated by the cookie about the use of the online offering by users is generally transmitted to a HubSpot server in the USA and stored there.

HubSpot will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering, and to provide us with other services associated with the use of this online offering and Internet usage. Pseudonymous user profiles of users can be created from the processed data. We only use HubSpot with IP anonymization activated. This means that the IP address of users is shortened by HubSpot within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a HubSpot server in the USA and shortened there. The IP address transmitted by the user’s browser will not be merged with other data from HubSpot. Users can prevent the storage of cookies by setting their browser software accordingly. Further information on data use by HubSpot, settings, and objection options can be found on HubSpot’s websites: https://legal.hubspot.com/privacy-policy

Google Ads

This website uses Google conversion tracking. If you have reached our website via an ad placed by Google, Google Ads sets a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. Please note that your personal data may be transmitted to servers in the USA.

If you do not wish to participate in tracking, you can decline the setting of a cookie required for this purpose – for example, via a browser setting that generally deactivates the automatic setting of cookies or set your browser so that cookies from the domain “googleleadservices.com” are blocked.

Please note that you must not delete the opt-out cookies as long as you do not wish any recording of measurement data. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Use of Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”. reCAPTCHA is intended to check whether data entry on our websites (e.g., in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, length of time the website visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. Please note that your personal data may be transmitted to servers in the USA.

Data processing is based on Art. 6(1)(f) GDPR or Art. 6 and/or 31 FADP. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. Further information on Google reCAPTCHA and Google’s privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://policies.google.com/terms?hl=de.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller for data processing on this website is located outside the European Economic Area or Switzerland, then Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.

Using the statistics obtained, we can improve our offering and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under “My Data,” “Personal Data.”

The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. We point out that on this website Google Analytics has been extended by the code “_anonymizeIp();” to ensure anonymized collection of IP addresses. As a result, IP addresses are processed in shortened form, so that a personal reference can be ruled out. To the extent that the data collected about you has a personal reference, it is therefore immediately excluded and the personal data is thus immediately deleted.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and Internet usage to the website operator.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Disable Google Analytics.

Use of Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus, for example, integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data of users. With regard to the processing of users’ personal data, reference is made to the following information on Google services. Usage guidelines: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/. Please note that your data may be transmitted to servers in the USA.

Use of LinkedIn

We use the marketing services of the social network LinkedIn provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”) within our online offering.

These use cookies, i.e., text files that are stored on your computer. This enables us to analyze your use of the website. For example, we can measure the success of our ads and show users products in which they have previously shown interest.

This captures, for example, information about the operating system, the browser, the website you previously accessed (referrer URL), which websites the user visited, which offers the user clicked on, and the date and time of your visit to our website.

The information generated by the cookie about your use of this website is transmitted in pseudonymized form to a LinkedIn server in the USA and stored there. LinkedIn does not store the name or email address of the respective user. The above-mentioned data is only assigned to the person for whom the cookie was generated. This does not apply if the user has allowed LinkedIn to process without pseudonymization or has a LinkedIn account.

You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also object to the use of your data directly with LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We use LinkedIn Analytics to analyze the use of our website and improve it regularly. Using the statistics obtained, we can improve our offering and make it more interesting for you as a user. All LinkedIn companies have adopted the standard contractual clauses to ensure that the data traffic necessary for the development, implementation, and maintenance of the services to the USA and Singapore takes place lawfully. If we ask users for consent, the legal basis for processing is Art. 6(1)(a) GDPR. Otherwise, the legal basis for the use of LinkedIn Analytics is Art. 6(1)(f) GDPR.

Third-party provider information: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2 Ireland; User Agreement and Privacy Policy. You can also adjust the privacy settings of your LinkedIn profile at the following link: https://www.linkedin.com/mypreferences/d/categories/privacy

Privacy Policy for YouTube

This website has integrated functions of the “YouTube” service. “YouTube” is owned by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, which operates the services in the European Economic Area and Switzerland.

Your legal agreement with “YouTube” consists of the terms and conditions available at the following link: https://www.youtube.com/static?gl=de&template=terms&hl=de. These terms constitute a legally binding agreement between you and “YouTube” regarding the use of the services. Google’s privacy policy explains how “YouTube” handles your personal data and protects your data when you use the service.

Agency Services

We process the data of our customers in accordance with the data protection provisions of the federal government (Data Protection Act, FADP) and/or the EU GDPR, depending on the respective applicability, as part of our contractual services.

In doing so, we process inventory data (e.g., customer master data such as names or addresses), contact data (e.g., email, telephone numbers), content data (e.g., text entries, etc.), contract data (e.g., subject matter of the contract, term), payment data (e.g., bank details, payment history), usage and metadata (e.g., in the context of evaluating and measuring the success of marketing measures). Those affected include our customers, prospects, and their customers, users, website visitors, or employees, as well as third parties. The purpose of processing is to provide contractual services, billing, and our customer service. The legal bases for processing are Art. 6(1)(b) GDPR and/or Art. 6 FADP – general principles – (for contractual services), Art. 6(1)(f) GDPR (analysis, statistics, optimization, security measures) and/or Art. 31 FADP. We process data that is necessary for the establishment and fulfillment of contractual services and point out the necessity of their provision. Disclosure to external parties only takes place if it is required as part of an order. When processing the data provided to us as part of an order, we act in accordance with the instructions of the client and the statutory requirements for order processing in accordance with Art. 28 GDPR and/or Art. 9 FADP and do not process the data for any purposes other than those specified in the order.

We delete the data after the expiry of statutory warranty and comparable obligations. The necessity of retaining the data is reviewed at irregular intervals. In the case of statutory archiving obligations, deletion takes place after their expiry. In the case of data disclosed to us by the client as part of an order, we delete the data in accordance with the specifications of the order, generally after the end of the order.

Rights of Data Subjects

Right to Information

Every data subject has the right to request information from the operator of the website as to whether personal data concerning data subjects is being processed and to what extent. If you wish to exercise this right to information, you can contact info@suncar-ag.com at any time.

You can request information on the following:

• The purposes of processing
• The categories of personal data being processed about you
• The recipients to whom the personal data has been or will be disclosed
• If possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration
• If the personal data is not collected from the data subject: All available information about the origin of the data
• Furthermore, you have the right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transmission.

Right to Rectification

Every person affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data – also by means of a supplementary statement – taking into account the purposes of the processing.

If you wish to exercise this right to rectification, you can contact info@suncar-ag.com at any time.

Right to Erasure (Right to Be Forgotten)

Every person affected by the processing of personal data has the right to request that the controller of this website delete the personal data concerning them without undue delay, provided that one of the following reasons applies and to the extent that the processing is no longer necessary or objectively justified:

• The personal data was collected or otherwise processed for purposes for which it is no longer necessary
• The data subject withdraws their consent on which the processing was based, and there is no other legal basis for the processing
• The data subject objects to the processing for reasons arising from their particular situation and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in the case of direct marketing and associated profiling
• The personal data was processed unlawfully
• The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject
• The personal data was collected in relation to the offer of information society services directly made to a child

If one of the above reasons applies and you wish to arrange for the deletion of personal data stored by the operator of this website, you can contact info@suncar-ag.com at any time. The data protection officer of this website will arrange for the deletion request to be complied with immediately.

Right to Restriction of Processing

Every person affected by the processing of personal data has the right to request that the controller of this website restrict processing if one of the following conditions is met:

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
• The processing is unlawful, the data subject objects to the erasure of the personal data and instead requests the restriction of the use of the personal data.
• The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise or defence of legal claims.
• The data subject has objected to the processing on grounds relating to their particular situation, and it has not yet been determined whether the controller’s legitimate grounds override those of the data subject.

If one of the above conditions is met and you wish to request the restriction of personal data stored by the operator of this website, you may contact info@suncar-ag.com at any time. The data protection officer of this website will arrange for the processing to be restricted.

Right to data portability

Any person affected by the processing of personal data has the right to receive the personal data concerning them in a structured, commonly used and machine-readable format. They also have the right, provided the legal requirements are met, to have these data transmitted to another controller.

Furthermore, the data subject has the right to obtain that the personal data are transmitted directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

To exercise the right to data portability, you may contact info@suncar-ag.com at any time.

Right to object

Any person affected by the processing of personal data has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them.

If an objection is raised, the operator of this website will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or if the processing serves the establishment, exercise or defence of legal claims.

To exercise the right to object, you may contact info@suncar-ag.com directly.

Right to withdraw a data protection consent

Any person affected by the processing of personal data has the right to withdraw consent given for the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you may contact info@suncar-ag.com at any time.

Copyright

The copyright and all other rights to content, images, photos or other files on the website belong exclusively to the operator of this website or the specifically named rights holders. For the reproduction of any files, the written consent of the copyright holder must be obtained in advance.

Anyone who commits a copyright infringement without the consent of the respective rights holder may be liable to prosecution and, where applicable, to pay damages.

General disclaimer

All information on our online offering has been carefully checked. We endeavour to provide our information offering in an up-to-date, accurate and complete manner. Nevertheless, the occurrence of errors cannot be completely ruled out, and we therefore cannot guarantee the completeness, accuracy or timeliness of information, including information of a journalistic-editorial nature. Liability claims for damages of a material or immaterial nature caused by the use of the information provided are excluded, unless there is demonstrably intentional or grossly negligent fault.

We may, at our sole discretion and without notice, change or delete texts and are not obliged to update the content of this website. Use of, or access to, this website is at the visitor’s own risk. The publisher, its clients or partners are not responsible for damages such as direct, indirect, incidental, specifically determinable in advance, or consequential damages allegedly arising from visiting this website and therefore accept no liability.

We also accept no responsibility or liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher expressly distances itself from all third-party content that may be relevant under criminal or liability law or that violates common standards of decency.

Changes

We may amend this privacy policy at any time without prior notice. The version currently published on our website shall apply. If the privacy policy forms part of an agreement with you, we will inform you of the change in the event of an update by email or in another appropriate manner.

Latest version of the privacy policy: 2026-09-03

Questions about data protection

If you have any questions about data protection, please email us or contact info@suncar-ag.com directly.