Privacy policy

The controller responsible for the personal data collected on this website is:

Company name and registered office

Caradise Group SA Place Centrale 2A 1920 Martigny

Acting through its branch

Caradise Motors Route de Rougemont 20A 1286 Soral Switzerland

Email

contact@caradisegroup.com

Phone

+41 76 561 00 02

For any question about data protection or to exercise your rights, contact us by email at contact@caradisegroup.com or by post to the address above.

This policy explains which personal data we process when you visit this website or contact us through it, for what purpose, and what your rights are. We process your data in accordance with the Swiss Federal Act on Data Protection (FADP) and its Ordinance (DPO). Where the European Union’s General Data Protection Regulation (GDPR) applies, for example to visitors residing in the EU, we comply with it as well.

Where the GDPR applies, our processing is based on: pre-contractual measures or performance of a contract at your request (Art. 6(1)(b) GDPR), our legitimate interest in running a secure website and answering enquiries (Art. 6(1)(f) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR) and, for displaying Google Maps, your consent (Art. 6(1)(a) GDPR).

We do not make automated individual decisions and do not carry out profiling.

This website is hosted by Infomaniak Network SA, Genève (Suisse). Each time a page is requested, the server automatically records technical data in log files: IP address, date and time of access, page requested, referring page (referrer), browser and operating system type and version, and the server response code.

This data is used solely to operate and secure the website (for example to detect misuse or attacks) and to analyse technical errors. It is not combined with other data sources and is deleted automatically after a short period, according to our hosting provider’s rules.

Our fonts are hosted on our own server: no connection is made to services such as Google Fonts. Vehicle photos are delivered from Supabase’s file storage (see section 7); to display them, your browser sends your IP address to Supabase.

To know which vehicles interest our visitors, we count the views of each vehicle page. So that each visitor is counted only once a day, we store a non-reversible check value computed from the fingerprint of your IP address and the vehicle viewed; it is deleted automatically after about a day. No cookie is used for this count, no profile is built, and only the total number of views per vehicle is kept.

You can write to us through the contact form, the quick contact form on the home page, and the information request and viewing request forms on the vehicle pages. We then process the following data:

• name and email address (required);
• phone number (optional);
• subject and message;
• preferred date for a viewing (viewing request);
• the vehicle concerned, when you write to us from a vehicle page;
• technical data: website language, date and time of submission, and a non-reversible cryptographic fingerprint (hash) of your IP address, which we use to protect the forms against abuse. Your IP address itself is not stored with the enquiry.

We use this data solely to handle and answer your enquiry, for example to send you an offer or arrange an appointment. We do not use it for advertising.

Your enquiries are stored in our database, operated on our behalf by Supabase, Inc. (processor). Server location: Switzerland (Zurich). They are also forwarded to us by email: these notification emails are delivered to and kept in our business mailbox on Google Workspace, a Google service (processor). We do not send automatic emails to the address you provide: we reply to you personally.

We only use cookies that are strictly necessary for the website to work:

• caradise_lang — remembers the language you chose (French, German or English). It is set when you change the language and expires after 1 year.
• caradise_adm — session cookie used only by our staff when they log in to the administration area. It is never set when visiting the public website and is deleted when the browser is closed.

Apart from the simple count of vehicle page views described in section 3, which works without cookies, we use no analytics tools, no advertising, no tracking pixels and no third-party cookies. That is why this website shows no cookie banner. You can delete cookies at any time in your browser settings.

Our "Contact" and "About us" pages include a Google map. To protect your privacy it is not loaded automatically: no data is sent to Google until you click "Show map". By clicking, you consent to the map being loaded from Google’s servers. Google then receives, in particular, your IP address and information about your browser, may set cookies and may process this data, including in the United States.

The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. For more information, see the Google Privacy Policy (new tab). The "Open in Google Maps" link opens Google’s website in a new tab, where Google’s terms apply.

We only share your data with service providers who help us operate this website and who process it solely on our instructions:

• our hosting provider, Infomaniak Network SA, Genève (Suisse): website hosting and log files;
• Google (Google Workspace), our business email service: delivery and storage of the notification emails about your enquiries;
• Supabase, Inc.: database and storage of vehicle photos, server location: Switzerland (Zurich);
• Google (Google Maps): only if you choose to display the map (see section 6).

We do not sell your data and do not pass it on to any other third party, unless required by law or by an order of an authority.

Supabase, Inc. is a company based in the United States. Your data is stored on the servers indicated above; access from abroad, for example for technical support, cannot be completely ruled out, however. In that case your data is protected by appropriate contractual safeguards, in particular the European Commission’s standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Google Workspace is a Google service; its parent company, Google LLC, is based in the United States. The emails may be processed in Google data centres outside Switzerland, including in the United States. Google processes this data solely to provide the service to us, under its data processing terms, which provide appropriate safeguards for transfers abroad, in particular the European Commission’s standard contractual clauses recognised by the FDPIC.

We keep the data from your enquiries for as long as necessary to handle them and follow up on our exchange, and then delete it. Data we are legally required to keep (for example business correspondence and accounting records, generally for 10 years under the Swiss Code of Obligations) is kept for the prescribed period.

The anti-abuse counters and the check values of the view count, linked to the fingerprint of your IP address, are deleted automatically after a short time (about a day).

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access and tampering: encrypted transmission (HTTPS), password-protected administration access limited to authorised people, and a database that is not publicly accessible. However, no data transmission over the internet is completely secure.

Within the limits of the applicable law, you have the following rights:

• Access — to know whether we process data about you and which data;
• Rectification — to have inaccurate or incomplete data corrected;
• Erasure — to have your data deleted when we no longer have a reason to keep it;
• Objection — to object to certain processing and to withdraw any consent at any time, with effect for the future;
• Data portability — to receive the data you provided to us in a common electronic format, or to have it transferred to another controller;
• Restriction — to request restriction of processing, where the GDPR applies.

To exercise your rights, contact us by email at contact@caradisegroup.com or by post to the address above. To prevent your data from being disclosed to someone else, we may ask for proof of identity. We normally reply within 30 days.

If you believe that your data is not being processed lawfully, please talk to us first. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch (new tab). If you live in the European Union or the European Economic Area, you can also lodge a complaint with the data protection authority of your country of residence.

We may update this policy at any time, in particular if our website or the law changes. The version published on this page applies. See also our Legal notice.