Privacy Policy
The protection of your personal data is important to us. SWIVON processes personal data in accordance with the applicable legal provisions in Switzerland (revDSG) and—where applicable—the EU General Data Protection Regulation (GDPR).
1. Controller
SWIVON
Lärchenstrasse 2,
8180 Bülach – Switzerland
Email: info@swivon.ch
Phone: +41 78 320 66 40
2. Collection and Processing of Personal Data
We collect and process only the data necessary to provide our services. This includes in particular:
-
Master data (name, address, phone number, email address)
-
Booking data (pickup and destination, date, time, flight number)
-
Payment information (depending on the selected payment method)
-
Communication data (e.g., inquiries via email or contact form)
3. Purpose of Processing
Personal data is processed exclusively for the following purposes:
-
Execution and handling of bookings and transfers
-
Invoicing and payment processing
-
Communication with customers (e.g., confirmations, follow-up questions)
-
Improving our services and security
-
Compliance with legal obligations
-
Marketing purposes (only with consent, e.g., newsletter)
4. Disclosure of Data
Your data is disclosed only where required to fulfill the contract or where we are legally obliged to do so.
We do not share data with third parties except:
-
Payment service providers (e.g., credit card companies, banks)
-
IT and hosting providers operating our systems
-
Providers of analytics and marketing tools (see below)
-
Authorities where there is a legal obligation
5. Cookies, Tracking Tools and Further Processing in the Operation of the Website
We set cookies and identifiers on your device — except for technically necessary functions — only once you have given your consent. Individual services that store nothing on your device are, however, already loaded before consent is given and in doing so transmit technical connection data including your IP address. This concerns the Google tag (cookieless measurement requests to google-analytics.com and pagead2.googlesyndication.com). You will find details on this in sections b) and c).
a) Consent and Cookie Banner
On your first visit, a cookie banner appears in which you can give or refuse your consent by category (functional, preferences, statistics, marketing). Your selection is stored in cookies with the designation “cmplz_” on your device (lifetime 365 days), so that the banner does not appear again on further visits. You can change or withdraw your selection at any time via the “Manage consent” button.
For as long as no consent has been given, no cookies and no identifiers are stored on your device for statistics and marketing purposes. In this state, Google Analytics and Google Ads run in what is known as Consent Mode, that is, without storage access and without advertising identifiers; they do, however, continue to send cookieless requests to Google servers. Google Maps is not loaded at all without your consent.
Before you make a selection in the banner, only these two technically necessary cookies are set:
- pll_language (lifetime 365 days) — stores the language of the website you have selected.
- __cf_bm (lifetime 30 minutes) — is set by Cloudflare to ward off automated access and serves the security of the website.
b) Google Analytics
We use Google Analytics 4 (measurement ID G-RP8MZJPTXH), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in order to understand how our website is used.
Only once you consent to the “Statistics” category are cookies set and identifiers stored; these are _ga and _ga_RP8MZJPTXH (lifetime 400 days each). Without your consent no storage access takes place; the Google tag does, however, continue to transmit cookieless measurement requests to google-analytics.com, in the course of which technical connection data including your IP address reaches Google. This transmission is therefore not anonymous.
Which data Google processes in detail following the transmission, for which purposes and for how long, is beyond our influence; in this respect, Google’s privacy notices are authoritative.
c) Google Ads and Remarketing
We advertise our services via Google Ads (conversion ID AW-18133250794) of Google Ireland Limited. This allows us to measure whether a visit came about through one of our ads, and to show ads again at a later point to visitors to our website (remarketing).
Identifiers are stored for this purpose only with your consent to the “Marketing” category; these are _gcl_au (lifetime 90 days), an entry in your browser’s local storage, and test_cookie of the doubleclick.net domain (lifetime 15 minutes). Without your consent, no advertising identifiers are stored on your device; in this state the consent signals for ad storage, ad user data and ad personalization are set to “denied”. Even in this case, however, the Google tag sends cookieless requests to pagead2.googlesyndication.com, in the course of which technical connection data including your IP address is transmitted.
d) Google Maps
In our booking form we use Google Maps of Google Ireland Limited in order to complete addresses as you type. In doing so, your entries as well as technical connection data including your IP address are transmitted to Google.
Google Maps is loaded only after you have consented to the “Marketing” category. Without this consent the booking form continues to work — only the automatic address completion is omitted; you can enter the address by hand.
e) Fonts
The fonts used on this website (EB Garamond and Inter) are delivered by our own web server. When the fonts are loaded, no data is therefore transmitted to Google Fonts or to any other external font service. Connections to Google servers do, however, continue to arise through the services described in sections b) to d).
f) Booking Inquiries, Hosting and Email Dispatch
The details you provide in the booking and contact form (e.g., name, email address, phone number, pickup and destination, date and time) are stored in our own booking system and transmitted to our business email address. No external booking provider is involved.
We use Kinsta as our hosting provider; the underlying infrastructure is provided by the Google Cloud Platform. The data stored in our booking system is located in the Zurich data center and thus in Switzerland. In addition, your details are sent by email to our business address; for this dispatch we use Google Workspace of Google Ireland Limited. The delivery of the website is furthermore preceded by the content delivery and security network of Cloudflare, via which the page content is delivered from server locations distributed worldwide and which protects the website against automated access.
We pass this data on only insofar as this is necessary in order to carry out the ride (e.g., to the chauffeur or partner company performing it).
g) Legal Bases
The setting of cookies and identifiers for statistics, preference and marketing purposes is based on your consent, which you give in the cookie banner and can withdraw at any time.
The processing of your booking and contact data is based on the performance of the contract or on pre-contractual measures taken at your request.
The cookieless measurement requests of the Google tag are based on our overriding legitimate interest in a reliable measurement of effectiveness as well as in the secure operation of the website. The same applies to the technically necessary cookies.
h) Disclosure Abroad
In connection with the services described above, personal data may be transmitted abroad:
- Google (Analytics, Ads, Maps, Workspace) — the contractual partner is Google Ireland Limited; a transmission to Google LLC in the USA takes place. Google LLC is certified under the Swiss-U.S. Data Privacy Framework; for organizations certified in this way, the USA has been deemed a state with adequate data protection since September 15, 2024 (Annex 1 to the Data Protection Ordinance).
- Cloudflare — delivery and protection of our website via server locations distributed worldwide. Cloudflare is likewise certified under the Swiss-U.S. Data Privacy Framework and bases transmissions to further countries on the standard contractual clauses of the European Commission.
- Google Cloud Platform — provides the infrastructure of our hosting provider Kinsta; the booking database is operated in the Zurich region.
Insofar as services are loaded only after your consent — Google Maps as well as the cookies and identifiers of Google Analytics and Google Ads — the disclosure abroad is based on your consent. For the remaining disclosures we rely on the certifications and contractual terms of the respective providers.
i) Retention Period
The lifetimes of the individual cookies are stated above with the respective services.
We retain booking and contact data for as long as is necessary for the provision of the service and for handling any follow-up questions. Documents that are subject to the statutory retention obligation we retain for ten years (Art. 958f CO). Inquiries that do not lead to a booking we delete as soon as they are no longer needed.
The data collected by Google Analytics is deleted once the periods set in our Google Analytics account have expired: event data after 2 months, user-related data after 14 months. If the same person visits our website again, the period for the user-related data starts to run anew.
j) Objection / Opt-Out
You can adjust or fully withdraw your consent at any time via the “Manage consent” button. A withdrawal takes effect for the future; transmissions that have already taken place remain unaffected by it and cannot be reversed.
In addition, you can prevent the storage of cookies in your browser settings.
Beyond this, you can disable the collection by Google Analytics with Google’s browser add-on: https://tools.google.com/dlpage/gaoptout
You can manage your settings for personalized Google advertising here: https://myadcenter.google.com/
The cookieless measurement requests to google-analytics.com and pagead2.googlesyndication.com cannot be switched off via the consent management; they can be prevented by a script or content blocker in your browser.
6. Storage and Security
Your data is stored only as long as necessary for the stated purposes or where we are legally obliged to do so.
We implement technical and organizational security measures to protect your data against loss, misuse, and unauthorized access.
7. Rights of Data Subjects
Under revDSG and GDPR, you have the following rights:
-
Access to stored personal data
-
Rectification of inaccurate data
-
Erasure of your data, provided no statutory retention obligations exist
-
Restriction of processing
-
Objection to processing (in particular against direct marketing)
-
Data portability (where technically feasible)
To exercise your rights, please contact: info@swivon.ch.
8. Changes to this Privacy Policy
SWIVON reserves the right to amend this privacy policy at any time. The current version published on our website is authoritative.
9. Contact
For questions about data protection, please contact:
SWIVON
Lärchenstrasse 2,
8180 Bülach – Switzerland
Email: info@swivon.ch
Phone: +41783206640
