1. Controller and contact
The controller is Management Consulting Mayr, Waldaustrasse 2, 9500 Wil SG, Switzerland. Privacy requests may be sent to info@x25pronto.ch or +41 71 554 72 93.
2. Data processed
Depending on use, we process identity and contact data, account and security data, billing address, business and application data, partner and vehicle data, routes, schedules, shipment details, prices, booking, payment and accounting data, proof photos, complaints, correspondence and technical access, device, analytics and security data.
3. Purposes
Processing supports website and app operation, sign-in and security, address and route checks, pricing, bookings, payment processing, transport performance, partner assignment, the driver portal, settlement, complaint handling, communications, accounting, abuse prevention, error analysis, audience measurement and legal obligations.
4. Germany as service and billing country
The service is designed for Germany. For signed-in accounts and bookings, the billing country is stored server-side as ISO country code DE. It is displayed as “Deutschland” on German pages and “Germany” on English pages. A manipulated browser value is not accepted for these fields.
5. Payment data
Card payments are processed through Stripe. x25pronto receives transaction information needed for authorisation, payment status, accounting, refunds and documents, but not full card details. Depending on the payment method, Apple Pay or Google Pay may be used as a wallet within the Stripe payment flow.
6. AI Bot
The AI Bot uses approved x25pronto content only as its knowledge base. Questions and the chat history needed for context are sent to the configured AI service for generation and may be logged server-side for operation, quality, abuse prevention and administration. In the browser, AI chat history is kept only in sessionStorage so that it survives page changes and reloads within the same browser session; it is not intended as permanent local history. For signed-in accounts the privacy switch is automatically enabled; for signed-out sessions it starts disabled.
7. WhatsApp
When WhatsApp is opened, the message is handed to the WhatsApp service selected by you. Until then, the draft remains local in the browser; logged communication events may be processed for operational and abuse analysis. Further processing by WhatsApp/Meta is governed by their own terms and privacy information.
8. First-party statistics, Google Tag Manager and local storage
Data-minimised baseline statistics are operated through x25pronto’s own infrastructure without a persistent browser identifier. Optional extended first-party analytics with visitor and session identifiers is enabled only according to the choice made in Cookie settings. With that consent, the Google Tag Manager web container (container ID GTM-5XQMWR58) is additionally enabled. The permission is verified server-side using a signed, technically necessary consent record. The GTM bootstrap is delivered to the browser only after this backend check through the x25pronto.de endpoint /api/privacy/gtm.js; without valid server-side consent, that endpoint remains blocked. Google Tag Manager is used as a technical container and tag delivery platform; Google Analytics is not configured on x25pronto.de. Any additional connections or data processing depend on the tags explicitly approved in the container. Advertising and personalisation storage remain denied by x25pronto by default. Session functions may use cookies, sessionStorage or other technically necessary browser storage.
9. Recipients and service providers
Data may be disclosed as necessary to hosting, email, payment, mapping/routing, communication, AI and IT service providers and to courier partners used for a transport. Processing abroad can occur where a provider operates there; safeguards required under Swiss data protection law are taken into account.
10. Retention and security
Data is kept only as long as needed for the purpose, evidence, complaint handling or statutory retention obligations. Accounting, contract and security data may therefore be kept longer. Appropriate technical and organisational security measures are used.
11. Rights
Under applicable Swiss data protection law and, where applicable, the GDPR, data subjects may in particular request access, correction and, where no retention duty or other legal basis prevents it, deletion or restriction. Requests should be sent to info@x25pronto.ch.