Privacy policy

governing the use of the Swisstainable Experience Shop - Swiss Tourism online booking platform of Swiss Booking AG

Version: 15 October 2020

1 Data controller

Swiss Booking AG (SWB) is committed to protecting your data. When processing your personal data, we adhere to all applicable data protection provisions. The data controller responsible for the storage and processing of personal data is Swiss Booking AG, Churerstrasse 54, CH-8808 Pfäffikon.

2 Name and contact details of the data protection officer

Mag. Eva Plaschke acts as the external data protection officer for Swiss Booking AG. Contact: Mag. Eva Plaschke, EQT-Unternehmensberatung e.U./Erfolg durch Qualität und Transparenz, Althofen 49, A-9131 Grafenstein, tel. +43(0) 664 829 79 49, e-mail: privacy-protection@swissbooking.com.

3 Information about the processing of your personal data

As part of your registration or the creation of your personal account, SWB requires the following personal data (hereinafter “master data”) in order to process any potential future contract that may be concluded with you.

  • First name

  • Surname

  • Date of birth

  • Telephone number

  • E-mail address

  • Street, building number

  • Post code, town/city

  • Country

The details of storage and processing of personal data are set out below.

3.1 Visiting the website

  • Purpose: If our website is used purely for information purposes (no registration or submission of other information), personal data that your browser transmits to our server is collected. This is necessary for technical reasons: it allows you to view our website and ensures the stability and security of the website.

  • Legal basis: Legitimate interest

  • The following data is processed: IP address, date and time of request, time zone difference to GMT, content of request (specific page), access status/HTTP status code, data volume transferred, requesting website, browser, operating system and interface, language and version of browser software

  • Storage period: For as long as you use our website

  • Recipients/recipient categories: Order processors

3.2 Electronic contact requests via the website

  • Purpose: Processing of contact requests received via e-mail or the contact form on the website.

  • Legal basis: Performance of a contract, required to carry out precontractual measures, legitimate interest

  • The following personal data is processed: Master data

  • Storage period: Until the request has been responded to; if statutory data retention obligations apply, processing will be restricted until that time

  • Recipients/recipient categories: Order processors

3.3 Customer management, accounting, legal disputes

Purpose: Processing of personal data in connection with any business relationships with customers and suppliers as part of normal business operations, including systematic recording of all transactions relating to income and outgoings

  • Legal basis: Consent, performance of a contract, required to carry out precontractual measures, fulfilment of a legal obligation, legitimate interest, particularly defending, exercising or establishing legal claims, explicit consent

  • The following personal data is processed: Master data

  • Storage period: Until the termination of the business relationship or until the expiry of applicable statutory retention or limitation periods. Data will also be stored until the resolution of any legal disputes for which it is required as evidence.

  • Recipients/recipient categories: Event organisers, service providers, legal representatives, accountants and tax advisors, tax offices, courts and authorities

3.4 Customer relationship management and marketing

  • Purpose: Processing of data on existing and prospective customers for initial business contact purposes in respect of the range of products and services, provision of additional travel or leisure information as a supplementary service as part of the contractual relationship, advertising activities and newsletter mailing, customer relationship management

  • Legal basis: Consent, performance of a contract, required to carry out precontractual measures, fulfilment of a legal obligation, legitimate interest, particularly defending, exercising or establishing legal claims

  • The following personal data is processed in connection with the provision of additional travel or leisure information as a supplementary service as part of the contractual relationship and for mailing of newsletters via our website: Master data

  • Storage period: The data will be stored until the end of the contractual relationship unless longer contractual or statutory retention periods apply

  • Recipients/recipient categories: Service providers

4 Rights of affected persons

4.1 You have the following rights in relation to your personal data:

  • the right to be informed,

  • the right to rectification or erasure,

  • the right to restrict processing,

  • the right to data portability,

  • the right to object to processing.

4.2 Right to withdraw consent

If you have previously given us your consent to process your personal data, you may also withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing carried out prior to its withdrawal.

4.3 Right to object

If the processing of your personal data is based on a balance of interests (legitimate interest), you have the right to object to such processing at any time for reasons relating to your particular situation. If you exercise your right to object, we would ask you to inform us of the reasons why we should not process your personal data in the way that we do. We will review the situation and either suspend data processing, adapt it or demonstrate to you our compelling legitimate grounds to continue processing your data. We will also continue processing your data if this is necessary for the establishment, exercise or defence of legal claims. You may object to the processing of your data for direct marketing and data analysis purposes at any time. In this case we will cease data processing.

4.4 Exercising your rights

You must notify us in person, by telephone or in writing if you wish to exercise your rights. You should send your request to Swiss Booking AG, Churerstrasse 54, CH-8808 Pfäffikon, tel. +41 (0) 55 588 0238 or via e-mail to privacy-protection@swissbooking.com. We can only provide you with information if you are able to identify yourself.

4.5 Complaining to the supervisory authority

If you believe that the storage and processing of your personal data constitutes a violation of applicable data protection law or breaches your data protection rights, you also have the right to lodge a complaint with the supervisory authority.

5 Cookies and involvement of external providers

5.1 Cookies

We use cookies to recognise multiple visits to our website by the same user. Cookies are small text files that your web browser downloads and stores on your computer. They help us optimise our website and our services. They are generally what are referred to as “session cookies” that are deleted again at the end of your visit. Sometimes, however, the cookies provide information to help automatically recognise users the next time they visit the site based on the IP address stored in the cookies. The information contained in cookies helps us optimise our services and makes it easier for you to access our website. Users can prevent their computer from storing cookies by changing a setting in their web browser. Please note, however, that disabling cookies may mean that users are unable to use all the features of our website in full.

5.2 Google Analytics and Google Firebase

SWB uses Google Analytics, a web analytics service offered by Google Inc. (hereinafter “Google”). Google Analytics uses cookies, text files that are stored on the user’s computer and permit analysis of how a website is used. The information generated by these cookies, such as the time, location and frequency of website visits, including the IP address, is transmitted to Google and stored on its servers. Our website uses Google Analytics with the IP anonymisation feature. This means that Google truncates and thus anonymises the user’s IP address before it leaves a European Union Member State or a Contracting State to the Agreement on the European Economic Area. Google will use this information to analyse how our website is used, compile reports for us about website activity, and provide further services linked to the use of the website and of the Internet in general. Google will also transfer this information to third parties in certain cases where this is required by law or if such third parties process this data on Google’s behalf. In the apps, Google Firebase is used rather than Google Analytics to carry out anonymous analyses of crashes and usage data and thus improve app quality. Usernames, which would make users identifiable, are not transmitted. However, usage data, device types, operating system versions and anonymised IP addresses are recorded in a similar way as with Google Analytics. Google undertakes not to associate the user’s IP address with other Google data under any circumstances. Users can prevent their computer from storing cookies by changing a setting in their web browser. Please note, however, that disabling cookies may mean that users are unable to use all the features of the SWB website in full. Google also offers a deactivation option for the most popular browsers, giving users more control over which data may be collected and processed by Google. If users activate this option, no information about their website visits will be transmitted to Google Analytics. However, its activation will not prevent information being transmitted to us or to any other web analytics services we may use.

5.3 Hotjar

When a user visits our website, the Hotjar service records the name of their Internet service provider, the date and duration of their visit, and information about their device such as the device type, operating system, screen resolution, language, country in which the user is located and browser type. The user’s IP address is processed during the session, but it is truncated and thus anonymised. This usage data is processed in order to improve access to our website and make it faster and more user-friendly. Users can prevent Hotjar from collecting their data at any time by submitting a Do Not Track/Block request at https://www.hotjar.com/legal/compliance/opt-out.

EXTERNAL_SPLITTING_BEGIN EXTERNAL_SPLITTING_END