We operate the innovative Swiss tourism platform "discover.swiss" (hereinafter referred to as the "Platform"). During its development, we have paid the greatest possible attention to data protection and have based it on the "myData" concept. You can learn more about our Platform on our website at www.discover.swiss.
This data protection declaration is intended to show you how we, as the controller within the meaning of data protection legislation, process your data.
A) Data Processing (Data and Purpose)
When you register as a Guest via the application of our partners (companies and institutions using our service), we collect your e-mail, first and last name and username. These data are necessary to use our user portal.
Depending on the booking you make in our marketplace, we may need additional data, such as your home address, date of birth, mobile phone number, nationality, passport number, language of correspondence and information about your travel group. If these data, which may be necessary for the booking, are not transmitted, no booking can be made via the Platform.
The data entered on the partner's application is transmitted to us via an interface. The partner is only responsible for this data up to the interface. From this interface onwards, we assume full responsibility.
If you are a Partner of the Platform discover.swiss, we collect the following information: your company’s name, the title, first and last name of the contact persons in your company, e-mail, mobile phone number, address, bank details and language of correspondence. We need this data to be able to identify you correctly and to be able to contact you immediately in the event of malfunctions or data breakdowns.
If you are a Service Provider on the Platform discover.swiss, we collect the following information: your company’s name, address, e-mail, the title, first and last name of the contact persons in your company and your bank details.
If you are another Business Partner, we collect the following information: your company’s name, address, e-mail, the title, first and last name of the contact persons in your company and your bank details.
We store the data and our files in principle for a period of 10 years from the termination of our business relationship with you. After that, the data will be deleted.
C) Legal Basis
If you are a Guest, we process your data based on your consent (in particular if you voluntarily deposit data in the user account) or in fulfilment of a legal obligation (reporting obligations, proper business and tax documentation) or for the performance of the contract between us and you concerning the user portal or for the performance of a contract between you and one of our Partners or between you and a service provider whose services you book or purchase via our Platform.
If you are a Partner, Service Provider or other Business Partner, we process the data in fulfilment of a legal obligation (proper business and tax documentation) or for the performance of the contract between us and you or for the performance of a contract between you and a Guest.
D) Data Transmission
We transmit and store the data related to the discover.swiss Platform in data centres belonging to Microsoft, in the Western Europe Region. These are stored there in encrypted form and protected against unauthorised access. We transmit Guest data to the Partners and Service Providers of the Platform - only to the extent necessary and indicated at the time of booking. Payments on the Platform are processed by the provider Stripe, so that payments flow directly from the Guest to the Service Provider.
We choose our Business Partners carefully. Data protection and data security are an important selection criterion. If we transfer data to countries that do not have adequate data protection, this is done in performance of a contract concluded in your interest or in performance of a contract with you or using standard data protection clauses or after obtaining your express consent.
E) Your Rights
You have the right to request information about the personal data we process about you. If we process your personal data on the basis of your consent, you have the right to revoke this consent at any time with effect for the future. Furthermore, you can - as far as legally permissible - demand the correction, deletion or limitation of the processing of your personal data. Finally, you have the right to complain to the competent data protection authority.
For the EU, we have appointed Sachverständigenbüro Mülot GmbH, Grüner Weg 80, 48268 Greven, Germany, as representative in accordance with the GDPR.
As a Guest, you can edit your personal data and purchased tourism offers via the user portal on the Platform.
valid as of May 2022