Xlara

Privacy Policy

XLARA
Adresse: Schmittengasse 1, 8335 Hittnau ZH
Tel: 079 777 54 94
E-Mail: xlara@xlara.ch

Your profit belongs to you. As Xlara, we never charge a commission from our restaurant partners. Let's grow together on a fair platform.

How we use data

XLARA uses personal data to enable reliable and convenient transport and delivery services as well as other products and services. We also use data for the following purposes:

  • Promoting the safety of our users and services, and preventing and detecting fraud
  • Marketing and advertising — Email — SMS — WhatsApp
  • Enabling communication between users
  • Customer support
  • Research and development
  • Sending non-marketing communications
  • In connection with legal proceedings

When you use XLARA, you entrust us with your personal data. We are committed to honoring that trust. We therefore want to help you understand our privacy practices.

We may use your personal data to provide delivery services for orders placed on the website, in the app, or on a partner’s ordering platform. In these circumstances, we process personal data that we have received from such partner(s) in accordance with this Notice.

In this Privacy Policy, we describe what personal data (“data”) we collect, how it is used and disclosed, and what choices you have regarding this data. We recommend reading this text together with our privacy overview, which outlines the key points of our privacy practices.

This Notice also applies to the processing of personal data of all assigned employees and users of all customers who use one of our products and one of our XLARA for Business platforms.

At XLARA, we are committed to protecting the privacy of all members of our community. If you have questions about how we retain your personal data, you can contact us via our privacy form.

This Privacy Policy describes how we collect and use your data when you request or receive products or services through XLARA apps or websites.

What personal data we use and for what reason

“Personal data,” also referred to in this Notice as “your data,” means any information or set of information by which we can identify you directly or indirectly, in particular by reference to an identifier such as first and last name, email address, etc. The term does not include data from which any reference to your identity has been removed (anonymous data).

Whenever you interact with XLARA through our services, we collect and process your personal data. XLARA may process your personal data for the following purposes:

Account information

We collect data when you create or update your XLARA account.

  • Address
  • Email address
  • First and last name
  • Login name and password
  • Phone number
  • Payment methods (including related payment verification information)
  • Profile picture
  • Settings (including accessibility settings) and preferences
  • Information about the XLARA partner loyalty program

Identity-verification information

This refers to the data we collect to verify your account or your identity.

For safety, protection, and fraud prevention and detection

XLARA uses data to ensure the safety of our services and users.

For legal proceedings and requirements

Data uses: We use personal data to investigate or handle claims or legal disputes related to the use of XLARA’s services; to meet the requirements of applicable laws, regulations, operating licenses or agreements, or insurance policies; or in accordance with legal proceedings and regulatory requests, including requests from law-enforcement authorities.

Cookies and related technologies

XLARA and its partners use cookies and other identification technologies in our apps, websites, emails, and online advertisements for the purposes described in this Privacy Policy and in XLARA’s Cookie Policy.

1. Ordering process

We process the personal data you provide when you place your order. This personal data is necessary to fulfill your order, confirm your order, and assess your order, payment, and any potential refund. Your information (e.g., the items you add to your cart) enables us to process your order and send you an accurate invoice. It also enables us and any partners with whom you place an order to contact you if necessary. Some partners on our platform use our external delivery companies, which may use your information to send you status updates about the delivery of your order. Depending on the circumstances, we may rely on your consent or on the fact that processing is necessary to perform a contract with you or to comply with laws. In the course of the ordering process, we may process the following personal data:

  • Name
  • Address details
  • Contact details
  • Order and transaction data
  • Payment data
  • Identity and/or age-verification data

As part of our services, we may sell products via our partners that could reveal sensitive personal data, such as health information (allergies or dietary requirements), information about your religion (e.g., to comply with religious dietary restrictions), information about your health status (e.g., medicines, pharmaceuticals, medical devices, medical creams, dietary supplements, or herbal/homeopathic products), or your sexual orientation. We collect and process this data as part of your order with your consent.

We may also offer products or services with age restrictions. To fulfill our legal obligations under applicable laws, we may need to implement verification procedures for the sale and delivery of such products, including verifying your age and identity through automated and biometric means. For this purpose, we may ask you to present a valid government-issued ID document. Please note that if you refuse to provide an ID document, XLARA is not obliged to provide you with the products or services. The legal basis for this processing of personal data is your consent, unless your consent is not required under applicable law.

2. Reviews of partners and couriers

Where permitted and/or required by applicable law, or where we have your consent, we may ask you after your order to submit a review of partners and/or couriers.

XLARA processes the personal data you provide when submitting a review. You can withdraw your consent by contacting us.

Possible data:

  • Name
  • Contact details
  • Review

If your review is published, the review and your first name may be made available to couriers, partners, and/or the public.

With XLARA service providers and business partners

This includes the third parties or categories of third parties listed below. Where a third party is identified, the linked privacy notices provide information about that party’s collection and use of personal data.

  • Accountants, consultants, lawyers, and other professional service providers
  • Advertising and marketing partners and vendors, including advertising and marketing publishers (e.g., social-media platforms), ad networks and advertisers, third-party data providers, ad-tech providers, measurement and analytics providers, and other service providers. XLARA uses these providers to reach or better understand current and potential users of XLARA’s services or our advertising partners and to measure and improve the effectiveness of advertising.
  • Cloud-storage providers
  • Customer-support platforms and providers
  • Google, in connection with the use of Google Maps in XLARA apps
  • Identity-verification and risk-solution providers
  • Research partners, including those conducting surveys or research projects together with or on behalf of XLARA
  • Social-media companies, including Meta and TikTok, in connection with their tools used in XLARA’s apps and websites
  • Providers that help XLARA improve the security of XLARA’s apps and services
  • Providers that supply us with tools and services for artificial intelligence and machine learning
  • Third-party vehicle providers, including fleet and rental-car partners

3. Customer service and support

When you contact our customer service, we use the personal data you provide to answer your question or handle your complaint. We may collect personal data as part of call recordings to provide customer service, including investigating and resolving user concerns and monitoring and improving our customer-service responses and processes.

We may also collect your personal data when you submit a notice to us identifying the presence of content in our services that you consider “illegal content” within the meaning of EU Regulation 2022/2065 of the European Parliament and of the Council (“Digital Services Act”) or as defined by other applicable law; and to provide you access to an internal complaint-handling system and/or to take necessary suspension and protective measures against the misuse of our services.

Depending on the circumstances, we may rely on your consent or on the fact that processing is necessary to perform a contract with you or to comply with laws. For customer-service purposes, we may process the following personal data:

  • Name
  • Address details (where applicable)
  • Contact details
  • Order and transaction data
  • Payment data (where applicable)
  • Comments (where applicable)
  • Content of correspondence between you and customer service
  • Any other content that may be required to comply with applicable laws

4. Customer accounts

When you interact with our services, you may create an account with us either via our platforms or via third-party social-login services (e.g., Apple, Google, Facebook Login, or other platforms), in which case the respective third party’s privacy policy applies to you in addition to this Notice. If you do not wish to set up an account with us, we offer the option to proceed with a guest account in order to complete your purchase. Depending on the circumstances, we may rely on your consent or on the fact that processing is necessary to perform a contract with you or to comply with laws. You can withdraw your consent and/or have your account deleted by contacting us. Withdrawing consent or deleting your account may negatively affect your user experience. For customer-account purposes, we may process the following personal data:

  • Name
  • Address details
  • Contact details
  • IP address
  • Information about social-media accounts
  • Login information

5. Loyalty programs (in the relevant markets)

XLARA operates several loyalty programs that provide you with offers and discounts. If you use one of our loyalty programs, we process your personal data to provide the discounts or offers set forth in the relevant program. Depending on the circumstances, we may rely on your consent or on the fact that processing is necessary to perform a contract with you or to comply with laws. One of our loyalty programs is the loyalty shop, where you can redeem offers from external partners. Some loyalty-shop partners require your personal data for shipping purposes. We may process the following personal data used for the loyalty shop and for shipping your order:

  • Name
  • Address details
  • Contact details

6. Customer research

To ensure that our services match your preferences, your personal data may be used for purposes such as product and user research or satisfaction surveys. We will send you this type of communication only on the basis of a specific and applicable legal basis, i.e., either your consent or our legitimate interests. Where the legal basis is consent, we will always obtain your prior consent. You can withdraw your consent to product, user-research, or satisfaction surveys at any time with effect for the future by contacting us at the contact details listed below or by unsubscribing directly in the messages. Participation in satisfaction surveys is entirely voluntary.

Please note that in some cases we process your personal data for these purposes on the basis of our legitimate interests. This is based on our legitimate business interest in collecting information about customer experiences with our products and services in order to determine certain areas of interest and wishes, with the overarching goal of developing and offering our products and services in a way that meets customers’ needs. You have the right to object to processing based on our legitimate interests by contacting us at the contact details provided below. You can object to this processing by contacting us via this form.

For these purposes, we may process the following personal data:

  • Name
  • Contact details
  • Order and transaction data
  • Research input

7. Marketing

We process your personal data to send you (personalized) marketing communications and notifications to manage, support, improve, and develop our services. XLARA may process your personal data to run promotions for XLARA products and services, personalize your shopping experience, and show you tailored advertising. We rely on your consent unless your consent is not required under applicable law. This is particularly the case if you are one of our customers and are contacted about similar products and services.

Whenever you wish to change your preferences regarding the receipt of such communications, you can unsubscribe via the link or method provided in the messages, in your account settings, or by contacting us (see “Your privacy rights”). We may rely on our legitimate interests (or an equivalent interest under applicable law) to categorize your interests (i.e., to define customer segments based on first-party data for audience creation) to provide you with the relevant marketing content. You can object to this processing by contacting us via this form.

For marketing purposes, we may process the following personal data:

  • Name
  • Address details
  • Contact details
  • Order and transaction data
  • Payment data
  • Loyalty programs
  • Review(s)
  • Campaign data
  • Device ID
  • Cookie and technology data

To personalize your user experience with XLARA and to optimize the services we offer you, we may use automated decision-making and profiling for marketing purposes. For more information, see the section “Use of automated decision-making and algorithmic tools” below.

8. Cookies and similar technologies

XLARA uses cookies or similar technologies for functional, analytical, and personalized purposes as well as tailored advertising. The data processed for these purposes depends on the preferences you set.

Depending on your cookie-consent settings, we may share your personal data with our external marketing partners for analytics purposes, to offer you promotions, or to recommend similar products or other offers that may be of interest to you.

For more information on how we use cookies and/or similar technologies, see our Cookie Statement. You can change your cookie settings via your consent settings in the Cookie Statement, in the cookie banner, and/or in your settings within the tool you use to browse. Please note that disabling cookies may limit your ability to use some services and/or features on the website, or may impair your user experience.

9. Fraud prevention and misconduct

We also process personal data to prevent misconduct on and through our services. Depending on the circumstances, we may rely on your consent or on the fact that processing is necessary to perform a contract with you, to comply with laws, or for our legitimate interests (or an equivalent under applicable data-protection laws). For the purpose of combating fraud and misconduct, we may process the following personal data:

  • Name
  • Address details
  • Contact details
  • Identity and/or age-verification data
  • Account usage and login data
  • Order and transaction data
  • Payment data
  • Device information
  • IP address
  • Browser information

10. Analytics and product improvement

XLARA uses your personal data to understand how you interact with our platforms, products, and services in order to improve their performance and to fulfill our reporting obligations to third parties, which may include advertisers. Depending on the circumstances, we may rely on your consent or on the fact that processing is necessary to perform a contract with you, to comply with laws, or for our legitimate interests (or an equivalent under applicable data-protection laws). We strive to ensure that reports do not contain information that can be traced back to you.

11. Campaigns and competitions

XLARA may launch certain campaigns or competitions in connection with its services. Participation in XLARA campaigns or competitions is always voluntary. We may rely on your consent unless your consent is not required under applicable law. You can withdraw your consent at any time using the method indicated in the campaign or by contacting us.

For campaign purposes, we may process the following personal data:

  • Name
  • Contact details
  • Order and transaction data (optional)
  • Campaign data (optional)

12. XLARA for Business

We process personal data when (a) you use your XLARA for Business balance to pay for an order you have placed through our services, (b) you use or interact with XLARA for Business products and services, (c) we issue and send the XLARA for Business card, and/or (d) we provide your digital balance. Depending on the circumstances, we may rely on your consent or on the fact that processing is necessary to perform a contract with you or to comply with laws. In connection with XLARA for Business, the following personal data may be processed:

  • Name
  • Address details
  • Employment data (job function, department, contracted hours)
  • Contact details
  • Balance data
  • Order and transaction data
  • XLARA for Business card information
  • Payment data

The XLARA for Business Card is provided in partnership with the card issuer and card-transaction service provider Adyen, which also qualifies as an independent controller. The processing of some of the above personal data by Adyen is subject to Adyen’s Privacy Policy, which can be viewed here (Adyen Privacy Policy), and we recommend that you read this privacy notice, as it applies in addition to this Notice.

How we collect your personal data

We collect, process, and store your personal data as well as personal data about the devices you use to navigate to XLARA platforms (e.g., your computer, mobile phone, or other means), which you provide to us when placing an order, creating an account, or otherwise contacting us.

We process personal data that you voluntarily provide, that we collect automatically, and that we receive from external sources for the purposes described in this Notice.

  • Personal data you voluntarily provide: We may receive personal data from you when you place your order, create an account with us, or provide your marketing preferences or customer reviews in connection with our services.
  • Personal data we collect automatically: With your prior consent or where permitted by applicable law, we may automatically collect technical data about your devices, browser activities, and patterns while you browse our platforms. We use this personal data through cookies and other similar technologies. For more information on our Cookie Statement, see above (Cookies and similar technologies). We may allow you to use social-media websites to create your account, or link your account with the relevant social-media website. These social-media websites may allow us automatic access to certain personal data they have stored about you (e.g., content you viewed, content you liked, and information about ads shown to you or that you may have clicked). When we receive such information, we may use it to personalize your experience with us in accordance with your consent, where possible.
  • Personal data we receive from external sources: We may receive personal data from external sources, including ad networks and social-media platforms, or technical payment and delivery service providers, which may also be located outside the EU, for example to support the procurement of our services, to measure the performance of marketing campaigns for our services, and to better understand your preferences so that we can tailor our marketing campaigns and services accordingly. In cases where we may receive such personal data, we have verified in advance that these third parties either have your consent to process the information or are otherwise legally permitted or required to share your personal data with us.

Age

Our services are not intended for individuals who are considered minors under applicable local laws, nor do we intend to collect personal data from visitors who have not reached the legal minimum age. However, we are not able to verify visitors’ ages. We therefore advise parents and/or guardians to supervise their children’s online activities to prevent the collection of their personal data without the consent of a parent or guardian. If you believe that we have collected personal data of a minor without consent, please contact us using our privacy form.

We will strive to take reasonable and proportionate measures to ensure a high level of privacy, security, and protection of minors on our platforms in accordance with applicable laws.

Use of automated decision-making and algorithmic tools

XLARA may use automated decision-making and algorithmic tools to fulfill our contract with you, to meet our obligations, or to improve our platforms and services. This applies for the following purposes:

  • XLARA uses algorithmic tools when processing your address and/or location data to select available partners near you (contract performance) and to prevent fraud, money laundering, terrorism financing, and other crimes (fulfillment of our legal obligations).
  • XLARA uses algorithmic tools for personalized content (profiling), recommendations, and intelligent chat functions to improve our services and your user experience, to protect our platforms, and to support the overall optimization of our services.

You will not be subject to decisions that have significant effects on you and that are based solely on automated decision-making, unless we have obtained your prior consent (e.g., profiling, service improvement and optimization, user experience), the processing is necessary for the conclusion or performance of a contract with you (e.g., selecting partners in your region), or it is permitted by law. Where applicable, this Notice is supplemented by specific notices that contain additional information about the processing of your data through the use of automated decision-making and algorithmic tools within our platforms and services. If you wish to object to this type of processing and exercise your rights, which include at least the right to human intervention, to express your point of view, and to contest the decision, you can contact us via the contact details below or via our privacy form.

Retention periods for your data

As a company operating globally, XLARA must take into account various local data-retention requirements. We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it (for details, see the section “What personal data we process and why” above), including to meet legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider criteria such as:

  • The type of your personal data
  • Litigation and dispute resolution: personal data used to establish, exercise, or defend legal claims
  • Applicable legal basis (if based on consent, until you withdraw your consent)
  • Security considerations and requirements: data used for the security and stability of our services and for security protocols and backups
  • Internal policies and procedures applicable to XLARA
  • Your last activity (e.g., your data such as the last used address, permission to store your device location, or automatic login stored via cookies and similar technologies are stored for one year after your last activity on the platform)
  • End of your contract with XLARA
  • Fraud prevention and other compliance requirements
  • The period required for the respective business purpose (e.g., how long the data is needed to provide our services to you or to operate our business)

If data falls under multiple categories regarding retention periods, the category with the longer retention period prevails regardless of other requirements (such as access, security, etc.).

Sharing your personal data with partners

When you use our ordering services, XLARA may share your personal data (order, name, address or contact details) with the partner you have selected so that the partner can deliver your order and, where applicable, provide services, e.g., to handle a complaint from you. Partners may process your personal data to contact you where necessary to perform the contract with you.

You are a direct customer of the partner, and the partner therefore bears its own responsibility for processing your personal data and has its own obligations in this regard. If you have questions about how the partner handles your data, we recommend contacting the partner directly.

Sharing your personal data within XLARA for Business

If you use your XLARA for Business balance to pay for an order you placed through our services or using the XLARA for Business card, XLARA shares personal data (such as your email address and order details as well as your balance) with the person who grants you the balance (which may be your employer, business partner, etc.) to fulfill our contract with that person. Please note that the person who grants you the balance has their own responsibility and obligations regarding the processing and protection of your personal data. If you have questions about how your personal data is used by this business entity, please contact them directly. The person who grants you the balance also shares personal data with us so that we and the providers of the XLARA for Business card can provide services.

Sharing your personal data with others

XLARA may, within the scope of the processing described in this Notice and/or to meet legal obligations, cooperate with other companies within the XLARA group as well as with other third parties.

These group companies and third parties process your personal data on our behalf as processors or as independent controllers (or in a role as defined or designated under applicable data-protection law, including concepts equivalent to controller or processor) and have access to your personal data for the purposes described in this Notice. We require group companies and third parties to protect your personal data in accordance with the standards set out in this Notice, and we take appropriate measures under applicable data-protection law to ensure the same level of protection and confidentiality, in particular by entering into appropriate technical and organizational safeguards, which include suitable agreements such as data-processing agreements within the meaning of applicable law. Because not all recipients always receive all data and individual recipients may differ (e.g., our service providers involved in sending newsletters receive only data of persons who subscribed to a newsletter; and our legal representatives receive only data of persons where necessary in a specific case), we have endeavored to describe recipients as precisely as possible. By exercising your right of access under applicable law by contacting us at the contact details below, you can obtain more precise information at any time about the specific recipients of your data.

In addition, we may disclose your data to other external controllers where appropriate or required under applicable law or regulations (including a court order or request from a legal authority), or where we believe disclosure is necessary to comply with legal obligations, to exercise, establish, or defend legal rights, or to protect the vital interests of a person. Such external controllers may include law-enforcement authorities.

Your personal data listed in the section “What personal data we process and why” above may be shared with the following parties:

  • XLARA affiliates, subsidiaries, and/or group companies: to provide our services and/or operate our business
  • Software providers (including providers in the areas of software, hosting, app support, delivery, logistics, information security, etc.): to operate our services; to provide/receive offerings related to our services or our business
  • Marketing and advertising providers: to promote, market, and support our products and services or those of third parties to you, including discounts, offers, or advertising that matches your interests, and/or to measure advertising performance
  • Service providers responsible for implementation, activation, and operation: to provide and improve our services on our platforms
  • Merchants, payment providers, fraud-prevention and card-service providers such as Adyen (see their privacy policy): to process payments or prevent fraud
  • Customer-satisfaction survey firms and/or market-research companies: to improve our services for you
  • Loyalty-shop partners: to offer you loyalty benefits
  • Professional advisors: to operate our business and/or services; to comply with our legal obligations
  • Law-enforcement authorities, regulators, and/or government authorities: to comply with our legal obligations
  • Potential purchasers: to manage and operate our business in the event of a sale and/or transfer of assets
  • Any other third party where you have consented to the sharing of information: the purpose depends on the service/third party

Third-party websites

Our website may contain links to third-party websites. When accessing such third-party websites, please note that each of these websites has its own privacy policy. Although XLARA takes great care in choosing websites to link to, we cannot assume responsibility for how they handle your personal data.

Information about transferring your data

XLARA operates worldwide and processes personal data globally. This may result in the processing of your personal data in countries, including the United States, whose data-protection laws may differ from those in your country of residence. XLARA transfers data to other countries only when the legal requirements of the GDPR and the applicable data-protection law in your country are met.

If you are located in the European Economic Area (EEA), Switzerland, Israel, Australia, and the United Kingdom, please note that we may process and/or transfer your personal data outside the countries listed. This may include the transfer of personal data to or access from other jurisdictions, including jurisdictions that may not provide the same level of protection as your local and/or data-protection laws (“non-adequate country”). The list of adequate countries, as determined by the European Commission, can be found here.

When we transfer personal data outside the countries listed here, we comply with the applicable and appropriate safeguards and transfer mechanisms set out in applicable data-protection laws to ensure a lawful and secure transfer of your personal data. We provide adequate and appropriate protection for the transfer of personal data to countries outside the above-mentioned countries through a set of agreements with our service providers based on the Standard Contractual Clauses adopted by the European Commission (and their approved equivalents for the United Kingdom and Switzerland), and the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as determined by the U.S. Department of Commerce. You may request a copy of the contractual clauses applicable to the transfer of your personal data, depending on the country to which your personal data is transferred.

In addition to appropriate contractual safeguards, we take the following organizational and technical measures to protect your personal data during transfers outside the countries listed above, including:

  • Securing personal data during transmission, including through encryption, and at rest
  • Mandatory training on data protection and data security at XLARA
  • Implementation of internal policies and procedures to restrict access to and use of customers’ personal data
  • Restricting unauthorized access to your personal data unless required by law or you have consented to access

You have the right to contact us via our privacy form or the contact details below to request further information about cross-border data transfers or copies of the applicable contractual safeguards.

Your privacy rights

Exercising privacy rights or complaints

If you have questions about your privacy rights or wish to exercise the rights described above, you can contact us via our privacy form or the contact details below.

We will do our best to handle your request in a timely manner and free of charge, unless doing so would require an excessive and disproportionate effort. In certain cases, we may ask you to verify your identity before we can respond to your request.

For requests regarding the processing or disclosure of personal data in connection with XLARA for Business, please contact the employer who grants you the XLARA for Business balance (this may be your employer, business partner, etc.). This is required because XLARA and the person who grants you the balance have separate responsibility for the processing and protection of your personal data.

We inform you that, with respect to personal data, you may exercise the rights provided under applicable data-protection laws. These rights may include:

  • Right of access You have the right to request and be informed about the personal data we process. You can request a copy of your personal data by contacting us.

  • Right to withdraw consent If processing is based on consent, you can withdraw your consent at any time free of charge. Withdrawing consent may reduce your ability to use our services. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to rectification You have the right to have inaccurate or incomplete personal data we hold about you corrected or completed by contacting us. You may correct or update some of your personal data via your customer account.

  • Right to erasure You may also ask us to delete your personal data from our systems. We will comply with such a request unless we have another legal basis under applicable law not to delete the data.

  • Right to object You have the right to object to certain general uses of your personal data when such data is processed for purposes other than those stated in this Notice, unless processing is necessary to fulfill a legal obligation. If you object to further processing of your personal data, this may reduce your ability to use our services. You can also object to the use of your personal data for direct-marketing communications based on legitimate interests via this form. If you object to processing your personal data for direct-marketing purposes, the relevant personal data will no longer be processed for these purposes. You may still see advertising on our platform or on third-party platforms, but not based on the processing of your data or because you provided consent.

  • Right to restriction of processing You may request that we restrict the processing of personal data, for example, when your requests for erasure, rectification, or objection are pending and/or when we have no other legal basis to process your data. This may, however, reduce your ability to use our services.

  • Right to data portability You have the right to receive your personal data processed under this Notice in a machine-readable format so that you can store this data in your own or in a third party’s database.

  • Right to lodge a complaint You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates your rights.

Security

XLARA takes the protection of personal data seriously and therefore implements appropriate measures to protect your personal data against misuse, loss, unauthorized access, unwanted disclosure, and unauthorized alteration.

At XLARA, we limit access to your data as much as possible and grant our employees access to your data only when they need to know it.

If you believe that your personal data is not adequately protected or there are indications of misuse, please contact us via the privacy form.

Contact

If you need to contact us to make requests, or if you have questions and concerns about this Notice and/or our privacy practices and processing activities, please contact us via our privacy form or via the contact details below.

Updates to this Privacy Policy

This Notice may change from time to time.

The most current version of this Notice governs our use of your data and can be found in the footer of the website or in your app.

Version: 10.2025

The place of jurisdiction is Hittnau ZH / Zurich / Switzerland.