GoCabGoCabThis is a generic starting structure, not a compliant, finished policy. GoCab handles location data, payment data, and driver background-check data — all sensitive under the Swiss nFADP and EU GDPR. Have a Swiss data-protection lawyer review this before publishing, confirm whether GoCab needs a Data Protection Officer or an EU representative, and complete a real Records of Processing Activities (RoPA) and Data Processing Agreements with every vendor listed below.
This policy covers personal data GoCab collects from riders, drivers, and website visitors. GoCab, [Legal company name], is the data controller for this processing. Contact our data protection point of contact at privacy@gocab.ch.
| Category | Examples | Why |
|---|---|---|
| Account data | Name, phone, email, language preference | Create and manage your account |
| Location data | Pickup/drop-off GPS coordinates, live trip route | Match drivers, calculate fares, enable live tracking |
| Payment data | Card token, Twint reference (via [payment provider]) | Process ride payments — GoCab does not store full card numbers |
| Driver verification data | Professional license number, background check result, vehicle registration | Legal requirement to operate a transport platform in Switzerland |
| Usage data | App interactions, device/browser type, IP address | Security, analytics, service improvement |
[Under GDPR, specify the legal basis per category: contract performance for bookings, legal obligation for driver background checks, legitimate interest for fraud prevention/analytics, and consent for marketing communications. The Swiss nFADP does not require a "legal basis" in the same way as GDPR but does require proportionality and purpose limitation — confirm the right framing with your lawyer for each audience.]
[If any vendor (payment, mapping, hosting, analytics) stores or processes data outside Switzerland/EU, this section must name the countries, the transfer mechanism (e.g. EU Standard Contractual Clauses, Swiss-recognized adequacy), and safeguards used. This is one of the most commonly missed compliance gaps — verify with your lawyer for every vendor above.]
[Specify retention periods — e.g. trip records for X years for tax/accounting purposes under Swiss commercial law (typically 10 years for accounting records), account data until deletion request, driver verification data per cantonal licensing requirements.]
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. To exercise these rights, contact privacy@gocab.ch. EU residents also have the right to lodge a complaint with their local data protection authority; Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC).
[Describe cookie categories used on gocab.ch (essential, analytics, advertising) and link to a cookie consent banner/settings tool. Required for both Swiss and EU visitors, with slightly different consent standards — confirm the right banner behavior with your lawyer.]
The Service is not directed at individuals under 18. GoCab does not knowingly collect data from minors beyond what is necessary to fulfil a booked ride made by an adult account holder.
We will post any changes here and, where required, notify you directly.
privacy@gocab.ch (placeholder — set up a real inbox before publishing).