Privacy statement

Note on language. This English text is provided for convenience. The binding version is the German one (Datenschutzerklärung); in case of any discrepancy, the German wording prevails. The contract language is German.

1. Controller

K. Timova, owner of the sole proprietorship Easy PDR, Postfach, 8808 Pfäffikon SZ, Schweiz. Contact: info@easypdr.ch

This statement follows the Swiss Federal Act on Data Protection (FADP).

2. Two roles – who is responsible for what

For the data of the provider's own customers – the businesses that subscribe to Easy PDR – the provider is the controller. This covers company details, user accounts and billing data.

For the data a business enters into the application – details of its own customers, vehicles, damage and photographs – that business is the controller and the provider acts as its processor. Requests from data subjects concerning such data are forwarded to the business concerned.

3. What data is processed

Account data: company name, address, contact details, user names and e-mail addresses, password hashes, language and display settings.

Content data: orders, vehicle details, damage records, calculations, reports, invoices and uploaded photographs. This data is entered by the business.

Billing data: the chosen plan, the term and the payment status. Card numbers and TWINT details never reach the provider's servers – they are entered and stored exclusively with the payment provider.

Personnel files of employees: A company may keep a file on its own staff – first and last name, home address, private phone number, date of birth, nationality, type and expiry of the residence permit, bank details for payroll, start and leaving dates, and uploaded copies of identity documents and permits. The company records and is responsible for this information; for them it is data about their employees, for us it is data we hold on their behalf.

Because this is the most sensitive data in the application, separate rules apply: access is limited to the administrators of that company and to the person concerned. Other employees of the same company cannot reach it.

Provider access: We can reach this data through the super-admin account in order to support the company when something goes wrong. We do so for that purpose only. Every such access is logged separately and appears in the company's own audit log, marked as provider access – the company can check at any time when someone on our side looked into a file. Anyone who does not want that should not keep personnel files in Easy PDR; the rest of the application does not depend on them.

Every access is logged, not only every change. The bank account number is stored encrypted in the database, the uploaded documents are encrypted on disk and are only served through the application after the permission has been checked. Once the company enters a leaving date, the stored identity documents are deleted automatically six months later; the remaining details stay for as long as the company needs them for payroll accounting.

Technical data: the web server keeps the usual access records.

4. Cookies and browser storage

The application sets a single cookie, which keeps the user signed in. It is marked «HttpOnly» and «SameSite: Strict», is not read out and expires when the browser is closed.

In addition, the browser remembers locally which language was chosen and whether the interface is shown light or dark. That information never leaves the device.

The website loads Google Tag Manager der Google Ireland Limited, Dublin (Irland), which in turn loads Google Analytics 4 to measure the reach of the website. Collected are the pages visited, the approximate origin (country and region, derived from a shortened IP address), device and browser, the referring source, and four events we trigger ourselves: trial started, contact form submitted, demo requested, and a click on «Try it free». The contents of form fields – name, company, e-mail address – are not transmitted; only the fact that a form was submitted successfully is reported. Google Analytics sets two cookies (_ga and _ga_…) containing a random identifier; they expire after two years and can be deleted in the browser at any time.

The website also runs Microsoft Clarity der Microsoft Ireland Operations Limited, Dublin (Irland). This tool does not merely count, it records the visit: mouse movement, clicks, scrolling and the page content displayed, so that the visit can later be replayed. Its purpose is to find places where the website is hard to understand. Clarity sets cookies of its own containing a random identifier. Entries in form fields are masked before transmission, so what someone types is not recorded. Clarity runs exclusively on the public website. It is not embedded in the application, the customer portal or the approval page, and is blocked there technically – those areas hold orders, licence plates, photographs and the data of a business's own customers.

The website also runs the Meta pixel of Meta Platforms Ireland Limited, Dublin (Ireland). It reports to Meta that this page was opened. That is what sets it apart from the other two tools: Analytics and Clarity evaluate for us, whereas the pixel passes data to a company that also uses it for its own purposes. If the visitor has an account with Facebook or Instagram, Meta can attribute the page view to that account, even when the visitor is not signed in at that moment. Our purpose is to measure how our own posts perform and to place advertising later.

What the pixel does not transmit: advanced matching is switched off. No e-mail addresses, names or telephone numbers from the forms are sent to Meta. The page view is reported, nothing else. Like Clarity, the pixel runs exclusively on the public website and is blocked in the application, the customer portal and the approval page.

Tag Manager, Analytics, Clarity and the Meta pixel are loaded only after consent to measurement has been given. Without consent none of them is requested, no cookie is set, and no connection is made to Google, Microsoft or Meta. If consent is withdrawn, the page reloads and none of them returns.

On the first visit the website asks whether measurement is permitted and names what will be loaded for it. Without explicit consent nothing of the kind is loaded, and the website remains fully usable – «Necessary only» stands next to «Accept all» as an equal choice. The decision is stored locally in the browser (not in a cookie) and can be changed or withdrawn at any time via «Cookie settings» in the footer. Withdrawal takes effect from the moment it is declared; it does not render lawful prior processing unlawful.

If what is being consented to changes, earlier consent ceases to be valid and the question is asked again. Consent only covers what was disclosed beforehand.

5. Service providers and disclosure abroad

Operation and storage: data is stored in Switzerland with cyon GmbH, Basel (Schweiz). E-mail – calculation reports and invoices to a business's own customers, for instance – is sent through the same provider. A data processing agreement with cyon is in place.

Payments: subscriptions are handled by Stripe Payments Europe, Ltd., Dublin (Irland). Company name, e-mail address and the chosen plan are transmitted to Stripe; Stripe collects the payment data itself. Stripe processes part of this data as an independent controller and passes it within its group to Stripe, Inc. in the United States. This constitutes a disclosure abroad, based on the Standard Contractual Clauses of the European Commission in the version recognised by the Swiss Federal Council. No calculations, photographs or data of a business's own customers are transmitted to Stripe. Stripe describes its own processing at stripe.com/privacy.

Measurement on the website: if consent is given, the Google Tag Manager der Google Ireland Limited, Dublin (Irland) and Google Analytics 4 are loaded. Google receives the device's IP address and the usual details of a page view and passes them within its group to Google LLC in the United States. This constitutes a disclosure abroad, on the same legal basis as above. Without consent nothing is requested and no data reaches Google. No calculations, photographs or data of a business's own customers are transmitted – the application does not embed it. Google describes its own processing at policies.google.com/privacy.

Session recording on the website: if consent is given, Microsoft Clarity der Microsoft Ireland Operations Limited, Dublin (Irland) is additionally loaded. Microsoft receives the device's IP address and the course of the visit and passes this within its group to Microsoft Corporation in the United States. This constitutes a disclosure abroad, on the same legal basis. Without consent Clarity is not requested. No data from the application, the customer portal or the approval page is transmitted to Microsoft – the tool is not embedded there. Microsoft describes its own processing at privacy.microsoft.com.

Meta pixel on the website: if consent is given, the Meta pixel of Meta Platforms Ireland Limited, Dublin (Ireland) is additionally loaded. Meta receives the device's IP address, the page opened and the contents of its own cookies, and passes this within its group to Meta Platforms, Inc. in the United States. This constitutes a disclosure abroad, on the same legal basis. Meta also processes this data for its own purposes; to that extent we and Meta are joint controllers. Without consent the pixel is not requested. No data from the application, the customer portal or the approval page is transmitted to Meta – it is not embedded there. Meta describes its own processing at facebook.com/privacy/policy.

No disclosure to any other third party takes place, unless the customer requests it or the law requires it.

6. Retention and deletion

Photographs are deleted after 12 months – after 36 months on the Pro plan – counted from upload, automatically. This concerns precisely the data that says most about third parties: vehicles, licence plates, images of damage. The business is notified beforehand in the application and by e-mail and can preserve the images through the PDF report until then. Because the report embeds the same photographs, it is removed as well – otherwise the deletion would have no effect. The order, the calculation and the invoice are retained, as is the record of which report was produced and approved.

Accounting records are kept for ten years, as required by Swiss law. After a contract ends, the remaining data stays accessible for 90 days and is then deleted, including photographs and PDF documents. If a business deletes an order, the associated files are deleted with it.

7. Data security

Transmission is encrypted throughout (TLS). Passwords are stored with Argon2id and cannot be reversed. Two-factor authentication is mandatory for accounts with elevated rights. Each business sees only its own data; this separation is enforced technically within the application.

No one can guarantee absolute security for transmission over the internet.

8. Rights of data subjects

Data subjects have the right to information about the data concerning them, to rectification of inaccurate data, to deletion, and to the release or transfer of their data. Requests should be sent to info@easypdr.ch.

Where a request concerns data a business has entered into the application, we forward it to that business – it is the controller. There is also the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

9. Changes

This statement is amended when the processing changes. The current version is always the one published here.

Last updated: September 27, 2026