1 . Introduction

GVA Airport Transfer ("we", "our", "us") respects your privacy and is committed to protecting your personal information in accordance with applicable Swiss and European data-protection laws, including the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains what information we collect, how we process it, the legal bases on which we rely, and the choices you have. If you do not agree with this policy, please do not access or use our services.

2 . What information we collect

We collect information when you: submit a quote request, place an order, create a customer account, browse our websites, or otherwise interact with us. This may include:

• Identity data – title, first and last name, company name (if applicable).
• Contact data – address, email address, telephone number.
• Booking data – lead passenger details, pick-up and drop-off locations, flight/ship information, service history.
• Financial data – payment-card details (processed only by our payment gateway), billing address, transaction records.
• Technical & usage data – IP address, device ID, browser type, cookies, referrer URL, pages visited, and interaction logs.
• Marketing & communications data – preferences for receiving marketing from us and your communication history.

We do not knowingly collect personal data from children under 16 without verifiable parental consent (see section 9).

3 . When and how we collect data

We collect data:

• Directly from you (forms, emails, live chat, telephone).
• Automatically when you use our websites and apps (through cookies and similar technologies).
• From third-party sources that have a lawful basis to share your data (e.g., analytics providers, public databases, marketing partners).

4 . Why we process your data (Legal bases)

5 . Data retention

• Accounting & transaction records required by Swiss law are kept for 10 years (Art. 958f CO).
• Other personal data are retained only as long as necessary to fulfil the purposes described above, resolve disputes, enforce agreements, or as required by law. Typical retention periods range from 6 months (web logs) to 5 years (customer-service correspondence).
• Customer-account data are stored while the account remains active. You can delete your account at any time (see section 10).

6 . Data sharing

We never sell your personal information. We disclose data only:

1. Within our group – to subsidiaries that follow this policy or one offering equal protection.
2. Service providers – e.g., hosting, IT support, analytics, and payment processing via *[Payment-Gateway-Name]*, which is PCI-DSS Level 1 certified.
3. Transportation partners – limited data (name, pick-up/drop-off details) so they can perform the ride you booked.
4. Legal or regulatory authorities – where required to comply with law or to protect rights, property, or safety.
5. Business transfers – in the event of a merger or acquisition, provided the recipient upholds this policy.
6. With your consent – e.g., publishing testimonials.

All third parties are bound by contract to keep your data confidential and apply appropriate security measures.

7 . International transfers & hosting location

Your data are stored on servers located within the European Economic Area and operated by Infomaniak Network SA, an ISO 27001-certified provider. Where we must transfer data outside the EEA/Switzerland, we rely on EU adequacy decisions, Standard Contractual Clauses, or other legally recognized safeguards.

8 . Security measures

• All interactions with our websites and APIs are encrypted via TLS 1.2+ (A-grade rating on the latest SSL Labs test).
• We implement industry-standard technical and organisational measures, including firewalls, intrusion detection, least-privilege access controls, and staff training.
• Payment-card data are transmitted directly to our payment gateway and are never stored on our servers.
• We conduct annual penetration tests and maintain ISO 27001 alignment for critical infrastructure.

9 . Children’s privacy

Our services are not directed to individuals under 16 years of age (or the lower age set by local law, e.g., 13 in some EU Member States). We do not knowingly collect such data without parental consent. If you become aware that a child has provided us data, please contact us so we can delete it.

10 . Your rights

Subject to conditions and exceptions in the GDPR/FADP, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (for future processing).
• Lodge a complaint with the Swiss FDPIC or your local EU supervisory authority.

To exercise your rights, email privacy@gvaairporttransfer.com. We will respond within 30 days.

11 . Data-breach notification

In the unlikely event of a personal-data breach, we will notify the Swiss Federal Data Protection and Information Commissioner (FDPIC) and, where applicable, affected individuals within 72 hours of becoming aware, in accordance with Art. 24 FADP and Art. 33 GDPR.

12 . Cookies and tracking technologies

Our websites use the following categories of cookies:

1. Necessary – essential for site navigation and security.
2. Preference – remember your settings (e.g., language).
3. Statistics – collect anonymised usage data (e.g., Google Analytics with IP anonymisation).
4. Marketing – show relevant ads (only with your consent).

You can manage or disable cookies via our Cookie Settings tool or in your browser.

13 . Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

14 . How to contact us

GVA Airport Transfer

Rue Henri-Mussard 20, 1208 Geneva, Switzerland

Email: privacy@gvaairporttransfer.com

Telephone: +41 77 215 15 35

15 . Changes to this Policy

We may amend this Privacy Policy from time to time. The latest version is always published on our website with the "Last updated" date. Material changes will be announced via email or notification within your account.

*© 2026 GVA Airport Transfer – All rights reserved.*