Privacy Policy

1. Controller

The controller for the processing of your personal data within the meaning of the revised Swiss Federal Act on Data Protection (revFADP) and – where applicable – the EU General Data Protection Regulation (GDPR) is:

We are not required to appoint a data protection officer. Data-protection enquiries should be addressed to the contact details above.

2. Terms and principles

"Personal data" means any information relating to an identified or identifiable person (Art. 5(a) revFADP; Art. 4(1) GDPR). "Processing" covers any operation on personal data, in particular collection, storage, use, modification, disclosure, archiving, deletion or destruction.

We process personal data only to the extent necessary and adhere to the principles of lawfulness, good faith, proportionality, transparency, purpose limitation, accuracy, data security and data minimisation.

3. Data we process

3.1 Master and contact data

• First and last name
• Phone number
• E-mail address
• Postal / billing address (where required)
• Language

3.2 Booking and journey data

• Pick-up and drop-off location
• Date and time of the journey
• Flight or train details (for transfers)
• Number of passengers, luggage
• Vehicle preference, special requirements (e.g. child seat, wheelchair)
• Upon request: hotel, event or function information

3.3 Contract and payment data

• Confirmation / booking number
• Payment method (cash, debit/credit card, bank transfer) and payment status
• For payments via payment service providers: the transaction data processed by them
• Invoice and accounting data

3.4 Communication data

• Content of your e-mails, WhatsApp messages or SMS
• Phone log data (date, time, number; no systematic recording of calls)

3.5 Automatically collected website usage data

When you visit our website, our hosting provider and scripts process technical data for the provision and security of the site:

• IP address (truncated where possible)
• Date and time of access
• URL / page requested
• Referrer URL
• Browser, browser version, operating system, language
• Volume of data transferred and HTTP status

4. Purposes and legal bases

Purpose	Legal basis
Initiation, conclusion and performance of your transport / limousine booking; communication	Performance of a contract (Art. 31(1) revFADP / Art. 6(1)(b) GDPR)
Compliance with statutory obligations (accounting, tax, retention)	Legal obligation (Art. 6(1)(c) GDPR; Swiss CO Art. 957a, 958f)
IT and website security, abuse prevention	Overriding legitimate interest (Art. 31(2)(c) revFADP / Art. 6(1)(f) GDPR)
Reach measurement, website improvement (subject to your consent)	Consent (Art. 31(1) revFADP / Art. 6(1)(a) GDPR)
Establishment, exercise or defence of legal claims	Legitimate interest (Art. 6(1)(f) GDPR) / contract performance

5. Recipients and processors

We disclose your data only to recipients required for the provision of our services:

• Our own drivers and dispatch: to perform your journey
• Hosting provider / web server: for the provision of the website
• REVERT MKT S.R.L. (RO CUI 50930476, Strada Zorelelor 4, Gherăești, Neamț, Romania): administrative website maintenance (CMS updates, security, log monitoring). Art. 28 GDPR DPA in place. Transfer: intra-EU.
• E-mail and communication providers (e.g. Google for e-mail handling via Gmail / Google Workspace)
• WhatsApp Ireland Ltd. (Meta): if you contact us via WhatsApp
• Google Ireland Ltd.: Google Fonts, Google Maps Places API for address look-up in the booking form; if applicable, Google Analytics (only with consent)
• Payment service providers / banks: to process payments
• Trustees, accountants and tax advisors as well as insurers
• Authorities, courts, lawyers – where legally required or to safeguard our rights

We do not sell personal data and do not disclose it to third parties for advertising purposes.

6. International transfers

Some of our service providers are based or process data outside Switzerland / the EEA, in particular in the USA (e.g. Google LLC, WhatsApp / Meta). In such cases we rely on:

• a Swiss Federal Council decision on adequate protection (Art. 16 revFADP) or an adequacy decision by the European Commission, including the Swiss–US Data Privacy Framework / EU–US Data Privacy Framework;
• Standard Contractual Clauses (SCC) of the European Commission or clauses recognised by the Swiss FDPIC;
• your explicit consent in individual cases.

A copy of the safeguards is available from us upon request, to the extent legally permissible.

7. Retention periods

• Booking and contract data: for the duration of the business relationship and thereafter in accordance with Swiss commercial-law retention obligations (Art. 958f Swiss Code of Obligations), typically 10 years.
• Communication data: generally up to 24 months after closure, unless a longer period applies.
• Server log files: as a rule, no longer than 90 days unless a security-relevant incident justifies longer retention.
• Cookie settings: up to 12 months until you revoke or reset them.

Once the purposes have ceased and retention periods have expired, the data is deleted or anonymised.

8. Cookies & tracking

We use cookies and similar technologies (e.g. localStorage) to provide the website, store your language preference, analyse use (with consent only) and ensure security. Details and controls are set out in our Cookie Policy.

You can change or revoke your cookie consent at any time via the cookie icon at the bottom-left of the website.

9. Embedded third-party services

9.1 Fonts (Manrope) — self-hosted

The "Manrope" font is served locally from the publisher's web server (Hostinger, Germany). Loading the site triggers no connection to Google Fonts; your IP address is not transmitted to a third country for font delivery.

9.2 Google Maps / Places API (address search in the booking form)

In the booking form we offer address auto-completion via the Google Maps Places API (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; and Google LLC, USA). Google Maps is loaded automatically when the website is opened, so address search in the booking form works immediately.

Once loaded, address queries and your IP address are transmitted to Google. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR; Art. 31(2)(a) revFADP) and your consent (Art. 6(1)(a) GDPR). Transfer to third countries: USA — covered by Standard Contractual Clauses and the EU–US Data Privacy Framework under which Google is an Active Participant. Privacy notice: policies.google.com/privacy.

9.3 WhatsApp (click-out)

The site contains buttons linking to WhatsApp (wa.me/41767235883). Only when you click such a button are you redirected to WhatsApp and transmit your mobile number and message to WhatsApp Ireland Ltd. (Meta). The WhatsApp privacy notice applies additionally: whatsapp.com/legal/privacy-policy-eea. We recommend not sending sensitive data via WhatsApp.

9.4 Booking form delivery (Web3Forms)

When you submit the booking form or the partner application form, the data is delivered via the Web3Forms service (operator: SUVOROV INC, USA) by webhook to our business address aurellimousine@gmail.com. Web3Forms does not persistently store the requests; they are used solely for mail delivery. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR). Provider's privacy notice: web3forms.com/privacy.

9.5 Google Analytics / Tracking (currently not in use)

We currently use no Google Analytics, no advertising or tracking cookies. Should such services be activated in the future, they would only load after your explicit consent via the cookie banner.

10. Booking form & communication

When you complete our booking form or contact us by phone, e-mail or WhatsApp, we process the data you provide solely to handle your request or perform the contract. Mandatory fields are marked as such; without these we cannot process your booking.

11. Data security

We take appropriate technical and organisational measures to protect your data from loss, manipulation and unauthorised access: TLS encryption during transmission, access controls, logging, backups, regular updates and the careful selection of processors. However, absolute security of transmission over the Internet cannot be guaranteed.

12. Your rights

Subject to the statutory conditions, you have the following rights:

• Access to the personal data processed about you (Art. 25 revFADP / Art. 15 GDPR)
• Rectification of inaccurate data (Art. 32 revFADP / Art. 16 GDPR)
• Erasure of your data (Art. 32 revFADP / Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data export / portability (Art. 28 revFADP / Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)
• Withdrawal of consent with effect for the future

To exercise your rights please write to aurellimousine@gmail.com. For security reasons we may request proof of identity.

13. Right to lodge a complaint

If you believe that the processing of your personal data infringes applicable law, you may lodge a complaint with:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern – edoeb.admin.ch
• EU/EEA: the supervisory authority of the country where you reside or are habitually located.

14. Changes to this Privacy Policy

We may amend this Privacy Policy at any time to reflect changes in legislation or in our services. The version published on this page is binding at any time.

15. Contact

For questions or concerns about data protection please contact:

• Aurel Luxury Car Transport GmbH
• Hünenbergstrasse 69, 6333 Hünenberg See, Switzerland
• E-mail: aurellimousine@gmail.com
• Phone: +41 76 723 58 83