Privacy

Controller

KikoSpace AG, Hauptstrasse 35, 8750 Glarus, Switzerland — [email protected].

What we process

Account data (company, e-mail, password as a hash), the pre-notification details (licence plates, border office, journey number, MRN, carrier), billing details and the slips and status messages returned by customs.

When you visit the site: IP address, browser, pages visited (server logs, 14 days).

Purpose and recipients

The pre-notification details are transmitted to the Federal Ministry of Finance (Zollamt Österreich, Smart Border Austria); without this transfer the service cannot be provided. Billing details are used for the monthly collective invoice. The driver link shows status and slips of one case without an account; you decide who receives it.

Google Ads (conversion measurement)

We advertise on Google Ads and measure whether an ad led to a pre-notification (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4). We use Consent Mode v2: without your consent no advertising cookies are set and Google only receives cookieless, aggregated signals. With consent, Google sets cookies to link click and pre-notification (stored up to 90 days).

Enhanced conversions: when your account is created, your e-mail address is sent to Google hashed (SHA-256) to improve measurement — only with your consent.

PostHog (product analytics)

To improve the site we use PostHog (PostHog Inc., hosted in the EU, eu.posthog.com): page views, pre-notification steps, load times, errors and session replays. Session replays start only after your consent; all text and input fields are masked in them — plates, MRN, BTN, e-mail and passwords are not visible. Without your consent PostHog runs without cookies and without a persistent identifier; only with consent is an identifier stored in your browser.

Cookies

Strictly necessary: session (sign-in to the account), language, your cookie decision. First-party attribution (without consent, legitimate interest in measuring our own advertising; nothing is shared before a pre-notification): if you arrive via an ad, we store the click id (gclid) and campaign parameters (utm_*) for 90 days in the “sb_attr” cookie to attribute a later pre-notification to the ad. Advertising and analytics cookies only after consent (see above). Change your decision any time via “Cookie settings” in the footer.

Retention

Pre-notifications and slips for the duration of customs and commercial retention obligations; account data until the account is deleted; analytics data in PostHog for 12 months.

Your rights

Access, rectification, erasure, restriction, data portability and withdrawal of consent — by e-mail to [email protected]. You may lodge a complaint with a data protection supervisory authority.