1. Data collected
Ganoto may collect the following categories of data, depending on the route used:
- Account: first name, last name, e-mail, telephone, connection method, address, country, consent and version of the accepted policy.
- Vehicle application: vehicle type, brand, model, year, characteristics, equipment, indicative availability, area, vehicle address if necessary, and preferences linked to the rental framework.
- Renter request: city or area, period, type of vehicle sought, expressed need and preferences useful for establishing contact.
- Source and measure: origin page, referrer and campaign parameters when this information exists.
- Browser storage: local or session copy that lets you resume an account, request or application from the same device.
2. Responsible and contact
The person responsible of collection is Ganoto. For any request relating to your data, contact support@ganoto.com.
3. Purposes
This data is used to:
- create or resume an account;
- clarify a request or prepare a vehicle application;
- understand useful cities and categories;
- improve future search filters;
- approximately check the availability zones;
- secure exchanges;
- contact people again concerned.
The exact address of a vehicle is never publicly displayed.
4. Why we process this data
First, because you choose to take action by creating an account, submitting a request or completing an application. Some data may also be required to:
- respond to a request;
- ensure the security of the service;
- keep proof of consent;
- manage our relationship with you;
- comply with our legal obligations.
5. Source and measurement
Ganoto may record the originating page, the referrer and campaign settings to understand which channels are bringing in useful accounts, requests or cases.
6. Local storage, transmission and email backup
The site sends Ganoto the data required for your account, request or vehicle application. To avoid losing your entries, a copy may also be kept in your browser's local storage until you delete it, clear your browser data or remove it from this page.
If submission through the site fails, a fallback email option may be offered. This email is deliberately limited and must not contain sensitive documents: do not attach any identity document, driving licence, vehicle registration certificate, insurance document or banking information.
7. Recipients and tools
Your data is accessible to authorized persons at Ganoto, and to the necessary technical service providers: hosting, connection, request management, e-mail, campaign measurement, payment, protection or support. Some may process data outside Switzerland; Ganoto then puts in place the necessary contractual guarantees. Ganoto never sells your data.
8. Sensitive documents
Do not send any identity document, driving licence, vehicle registration certificate, insurance policy or banking information through the public form or by email. When these documents are required, Ganoto will direct you to the appropriate secure channel or module.
These documents are not intended to be displayed publicly or shared freely between users. Other users receive only the statuses or information needed for the application, unless a controlled process is required by the applicable legal, insurance or operational framework.
To speed up the review of an identity document or driving licence, Ganoto uses an open-source software stack operated in its controlled infrastructure. It extracts only useful fields, checks readability and flags inconsistencies. Vehicle documents, including the registration certificate, remain private: they are not analysed by this open-source stack or sent to OpenAI. Predetermined automated checks can only produce a positive decision. A coherent file can proceed automatically; any uncertainty leads to a correction or secure exception review, with human review when necessary.
Minimised documents and results remain private and are never shown to other members. Related diagnostics and technical logs are limited to what is necessary and retained only to ensure security, handle an incident or dispute, and comply with applicable obligations. No final refusal based solely on automated analysis is applied without the option to request a human review at support@ganoto.com.
8.1. Service providers, payments and automation
Ganoto uses Supabase for authentication, its database, server-side functions and private storage, and Infomaniak for the public website and back office. Stripe and Stripe Connect are planned and configured for payment and payout flows, but no payment module is active in the current version. They process data only when a payment module is actually enabled and used. The self-hosted open-source service checks identity and driving licences only. Vehicle documents remain in private storage and may undergo a secure exception review before a transaction. These services receive only the data required for their task.
Ganoto does not store the full card number or security code. When a payment module is enabled and used, Stripe may return a technical identifier, the card brand, the last four digits and the expiry date so the saved payment method can be displayed.
To provide a price estimate, the engine may process the type, make, model, year, city, country, currency and comparable prices. It does not need the user's personal address. The estimate remains indicative and never automatically changes the price chosen by the owner.
Publishing a vehicle may involve predefined automated checks. A sufficiently consistent listing may be published without systematic human validation. An inconsistency, unreadable information, a risk or a missing dependency results in a correction request or human review. No final refusal based solely on automated analysis is applied without the option to request a human review at support@ganoto.com.
8.2. Beta feedback and technical context
The “Feedback” module may record the free-text description, category, relevant screen, platform, application version, language, limited technical diagnostics and, when voluntarily attached by the user, a screenshot. Secrets, tokens, passwords, payment fields and private documents are excluded or masked before submission to the extent provided for by the technical system.
Similar feedback may be grouped automatically and turned into a verification task for the back office. An authorised person must confirm the correction before closure. Reports are retained by default for up to 180 days and screenshots for up to 90 days, unless deleted earlier or retained due to a legal obligation, incident, dispute or justified preservation measure.
9. Conservation
Your data is retained for as long as needed to manage your account, request, vehicle application, communications, service security and our legal obligations. You may request its deletion; however, certain information may be retained where required by law, evidence of consent, an incident, a dispute or security needs.
10. Your requests
You can request access, correction, withdrawal of your consent or deletion of your data by writing to support@ganoto.com. Ganoto may ask you for additional information to identify the account, request or application concerned.
To delete your GANOTO account and the associated data, write to support@ganoto.com from the email address used for the account, with the subject “Delete my GANOTO account”. After your identity has been verified, the account and any data that need not be retained are deleted. Certain information may remain archived for as long as required by law, fraud prevention, security, a payment, a dispute or the defence of legal rights.
The button below only clears Ganoto data saved on this browser. Data already transmitted to Ganoto must be the subject of a separate request.