MyCamper's privacy policy

October 2026

Data controller

MyCamper AG, including its subsidiary MyCamper Nordic AB (together "MyCamper", "we" or "us"), is the data controller for the processing of your personal data. MyCamper AG is domiciled in Switzerland, and MyCamper Nordic AB is domiciled in Sweden.

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR). For users in Switzerland, processing is also governed by the Swiss Federal Act on Data Protection (nDSG/DSG), and your rights under the nDSG are in addition to those described in this policy. Where this policy refers to provisions of the GDPR, the corresponding provisions of the nDSG apply to users in Switzerland.

Why do we collect information about you?

For our service to work, we need to collect some of your personal information. Perhaps the most important component of MyCamper's platform is that users trust each other and feel safe. We believe that the best way to achieve this is transparency, that vehicle owners can see who they rent to and that the renters know who they rent from.

Processing of personal data

Here is a list of personal data we process.

Create an account

To be able to rent and rent out via us, you need to create an account. When you create an account, we store all the information we need from you so that you can then rent or rent out a vehicle. We save all the information you enter or upload when you create and fill in the account. Some of this information is also sent to third parties for, for example, verification of your identity and payment.

Legal basis: The processing takes place so that we can fulfill our obligations to you under our terms of use.

Identity verification

When you register as a renter or owner, we may verify your identity using a third-party identity verification provider. This involves processing your identity document (passport, driving licence or national ID card) and a facial photograph for comparison against the document. The verification is performed to ensure the safety of all users on the platform and to comply with regulatory requirements.

In the Nordic markets, we verify your identity using your national eID (such as BankID or MitID) through an eID service provider. This gives us your name and national identification number and, depending on the country, your postal address.

Legal basis: The processing takes place so that we can fulfill our obligations to you under our terms of use and for our legitimate interest in preventing fraud and ensuring user safety.

Personal ID numbers and credit checks

Before confirming a booking, we may perform a credit check. In the Nordic markets, the credit check uses your national identification number (e.g. personnummer in Sweden). In other markets, it uses your name, date of birth and address. Credit checks are carried out by third-party credit reporting providers. If a credit check results in a declined booking, you may contact us at [email protected] to request information about the outcome and to contest the decision.

Legal basis: The processing takes place so that we can fulfill our obligations to you under our terms of use and for our legitimate interest in reducing the risk of non-payment and fraud.

Contact with you

When you contact us by e-mail or telephone, we receive and save information in order to keep in touch with you and manage our relationship with you.

When you contact us through the support widget on our website or by phone, you may first interact with an AI-powered support assistant before being connected to a human agent. The assistant identifies itself as an AI agent at the start of the conversation or call. Phone calls are recorded and transcribed, and the recording and transcript are kept as part of your support conversation. We do not use your voice to identify you, to create a voice profile of you, or to imitate your voice. Conversations with the assistant may be used to improve our support quality.

Legal basis: The processing takes place for our legitimate interest in maintaining and managing our contact with you.

Payment

Upon payment, third parties will process your payment details. We do not store credit card information with us, these are only processed by the payment provider. But we store receipts etc. to fulfill our obligations under accounting laws.

Legal basis: The processing takes place so that we can fulfill our obligations to you under our terms of use. Storage in accordance with applicable accounting legislation takes place to fulfill our legal obligations. For more information on what Stripe, our payment processor, stores, refer to Stripe's privacy policy at stripe.com/privacy.

Booking request and contact with owner / renter

If you are an owner, your profile picture, name (first name and the first letter of the surname) and age are shown publicly on your vehicle ads (see "Advertising and grading"). If you are a renter, this information is shared with an owner when you contact them or send them a booking request. After the booking has been confirmed and a rental agreement has been drawn up between you, additional contact details will be shared including: e-mail address, telephone number and postal address. The vehicle owner and renter are each independently responsible for the personal data they receive about each other through the booking.

Legal basis: The processing takes place so that we can fulfill our obligations to you under our terms of use.

Additional drivers

If you are added as an additional driver on a booking, we process your name, date of birth and driving licence information as provided by the primary renter. The person who added you is responsible for informing you about this processing.

Legal basis: The processing takes place so that we can fulfill our obligations to you under our terms of use.

Advertising and grading

If you publish a vehicle ad or rate a user, some of your personal information will be displayed publicly. This includes the profile picture, name (first name and the first letter of the surname) and age as well as any pictures you choose to publish on the platform.

Legal basis: The processing takes place for our legitimate interest in enabling advertising and grading on our platform.

Newsletters and other emails

If you have chosen to join the newsletter, we will also send out newsletters to you from time to time. Then your name and email address will be visible in the email and shared with third parties. If you do not want to receive these newsletters, you can unsubscribe by clicking on the "unsubscribe" link in one of the emails.

Even if you have not subscribed to the newsletter, you will receive emails related to the service itself, for example when you receive a booking request, messages or manage your account.

Legal basis: The processing takes place for our legitimate interest in marketing our business.

Use the website

If you use the website to, for example, search for vehicles, we collect data about you and your computer / device in order to improve our service. This is done through so-called cookies, and you can read more about this in our cookie policy. We can also save your location to make it easier for you to find vehicles near you when the permission is granted.

Legal basis: The processing takes place with the support of your consent.

Security and logging

When you use our service, we record your IP address together with technical information about your device in our server logs, and when changes are made to your account or bookings. We use this to keep the service secure, detect and investigate fraud and abuse, and fix technical problems.

Legal basis: The processing takes place for our legitimate interest in keeping our service secure and preventing fraud.

Handling of claims

We retain information from your user account and rental information in order to handle claims from you, us or a third party. We retain information for this purpose as long as it is deemed relevant in individual cases, especially with regard to how long claims can be made in accordance with applicable law. In some cases, damage claims after bookings may include health-related information. We process such information only to the extent necessary to handle the claim.

Legal basis: The processing takes place for our legitimate interest in being able to establish, assert or defend legal claims. Processing of health-related data, where applicable, is based on Article 9(2)(f) GDPR (establishment, exercise or defence of legal claims).

Automated processing and AI-assisted services

We use automated systems and artificial intelligence to improve our service, protect our users and maintain the integrity of the platform. These services are provided by third-party AI and cloud service providers acting as data processors under data processing agreements. These providers are contractually prohibited from using your data to train or improve their AI model.

The following automated processing takes place:

Fraud and circumvention detection: Messages sent through our messaging feature are automatically analysed using artificial intelligence to identify potential scam attempts or attempts to arrange bookings outside the platform. Messages flagged by the system are reviewed by our staff before any action is taken. No automated decisions with legal or similarly significant effects are made without human involvement.

Content sanitisation: Personal data in messages (such as phone numbers and email addresses) is automatically detected and redacted before being stored in a translated form for internal review purposes.

Translation: User-supplied content, including vehicle descriptions and redacted message content, may be automatically translated to enable our multilingual service and internal review.

AI-assisted customer support: Our support widget and support phone line use an AI-powered assistant to help answer questions before connecting you with a human agent. The assistant identifies itself as an AI agent at the start of the conversation or call.

Internal operations: Our staff use AI tools to help with tasks such as answering support requests, investigating fraud and analysing how our service is used. This may involve processing personal data from your account, bookings and messages.

Fraud and circumvention detection, content sanitisation and translation take place within the European Union. Some of the AI tools used for customer support and internal operations are provided by companies in the United States (see "Transfers to countries outside the EU, EEA and Switzerland").

Legal basis: The processing takes place for our legitimate interest (Article 6(1)(f) GDPR) in preventing fraud, protecting users, providing a multilingual service and running our operations efficiently. You have the right to object to this processing under Article 21 GDPR by contacting us at [email protected].

Tax reporting

Under the EU DAC7 directive and the Swedish law that implements it, we, as a platform operator, are required to report information about vehicle owners and the rental income they earn through the platform to Skatteverket, the Swedish Tax Agency. This includes identifying details such as name, address and tax identification number. Skatteverket may share this information with the tax authority in the country where the owner is resident, for example in other EU countries or in Norway, which applies equivalent rules.

Legal basis: The processing takes place to fulfill our legal obligations.

Who we share your information with

We need to share certain information with third parties in order to run our service. We share your data with the following categories of recipients:

• Payment processing (e.g. Stripe)

• Customer support and communication (e.g. Intercom)

• Identity verification (e.g. Entrust/Onfido)

• Credit checks and eID providers (e.g. Creditsafe, CRIF, Criipto)

• Analytics and product improvement (e.g. PostHog)

• AI and machine learning services — used for fraud detection, message moderation, translation, support automation and internal operations (see "Automated processing and AI-assisted services" above)

• Cloud infrastructure (e.g. Google Cloud)

• Insurance partners (e.g. Omocom) — if insurance is selected as part of a booking

• SMS and telephony providers

• Email and marketing service providers

Your personal data will otherwise not be passed on to third parties, unless it is necessary to process the contractual relationship, or you have given your express consent. We reserve the right to disclose the data due to applicable laws, official orders etc. or for other important reasons (e.g. investigation of possible violations of the terms of use, security deficiencies, serious technical problems, violation of third party rights, protection of property etc.). The right is expressly reserved to any processing of data by third-party services, e.g. cookies or social plug-ins (see Cookie Policy).

Other third parties

In individual cases, it may be necessary to share your information with a third party when it is necessary to provide services to you, fulfill a legal obligation or if our business should be transferred in whole or in part.

Transfers to countries outside the EU, EEA and Switzerland

We strive to handle all your information within the EU, EEA and Switzerland, and most of our processors operate within this area. However, some of our service providers operate in the United States, and some contractors who develop our platform are located in Bosnia and Herzegovina.

When personal data is transferred to the United States, these transfers are protected by the EU-US Data Privacy Framework (where the recipient is certified) and/or the European Commission's Standard Contractual Clauses (SCCs). For transfers to other third countries, we use SCCs to ensure an adequate level of protection.

Switzerland is recognised as providing an adequate level of data protection by the European Commission.

Data security

MyCamper takes appropriate technical and organizational security measures to protect personal data, especially against accidental or intentional manipulation, loss, destruction or attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.

How long we keep your data

We keep your personal data only as long as necessary for the purposes described in this policy, or as required by law.

• Account data: Retained while your account is active. If you delete your account, your personal data is anonymised or deleted, except where retention is required for legal obligations (such as bookkeeping). For accounts with previous bookings, certain identification data (name, address) may be retained to comply with accounting legislation; for accounts without bookings, data is fully anonymised.

• Booking and transaction data: Retained for as long as required under applicable accounting and tax legislation (typically 7–10 years depending on jurisdiction).

• Messages: Retained while your account is active to provide you with access to your conversation history. Anonymised when your account is deleted.

• Support conversations: Chat messages, call recordings and transcripts are retained for 12 months.

• Identity verification data: Verification images and documents are deleted when your account is deleted. Verification status records may be retained longer to comply with regulatory requirements.

• Marketing data: Retained until you unsubscribe. You can unsubscribe at any time using the link in our emails.

• Website analytics data: See our cookie policy for details on retention of analytics data.

• Claims-related data: Retained as long as it is relevant for the handling of claims, especially with regard to applicable limitation periods.

Your rights

Right of access

You have the right to receive information about what personal information we have about you and how we process this information. You also have the right to receive a copy of this information. While any initial request for information will be processed without charge, consistent with our commitment to transparency and compliance with applicable data protection laws, any subsequent or repetitive requests for the same information may be subject to a reasonable administrative fee to cover the costs of providing the information.

Right to correction and deletion

You have the right to have incorrect information corrected and supplemented. You also have the right in some cases to have your personal data deleted, for example if it is no longer necessary for the purpose for which it was collected. If we are legally required to keep your data (for example for bookkeeping), we will restrict it so that it is only used for that purpose. Moreover, you have the right to be informed by us of any rectification, completion, restriction or deletion of your data.

Right to object and right to limit processing

You have the right to object to the processing of your data that takes place on the legal basis that we have a legitimate interest. You also have the right to limit the treatment, e.g. if you believe the information is incorrect.

Right to withdraw consent

Where our processing of your personal data is based on your consent (such as website tracking), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to data portability

You have the right to obtain the personal information you have provided to us, where we process it based on your consent or to fulfill our obligations to you under our terms of use. The information is disclosed in a structured and machine-readable format, and you also have the right to have the information transferred to another personal data controller when it is technically possible.

Right to contact the supervisory authority

You also have the right to submit a complaint about our handling of your information. If you are within the EU, you can reach out to the Swedish Authority for Privacy Protection, box 8114, SE-104 20 Stockholm or via their website www.imy.se. If you are within Switzerland, you can reach out to the Federal Data Protection and Information Commissioner (FDPIC) under www.edoeb.admin.ch/edoeb/en/home.html.

Adaptation and governing language of the privacy policy

MyCamper reserves the right to adapt this privacy policy at any time in line with legal requirements. The amendments shall be binding.

Our privacy policy is available in different languages. In the event that there are differences between them, the English version shall prevail.

Do you have any questions?

See our helpcenter for more information or contact us if you have any questions. The officer responsible for this can be reached via [email protected] or via MyCamper AG, Hochstrasse 31, 4053 Basel, Switzerland. The exercise of your above-mentioned rights is free of charge for you, except as described under "Right of access".