Legal · Switzerland

Privacy Policy — Switzerland

Under the Swiss Federal Act on Data Protection (FADP / nFADP) · Last updated: 29 September 2026

1. Controller

The controller within the meaning of Art. 5 lit. j FADP is:

Taxi Privé Lugano
Via Otri 8, 6900 Lugano, Ticino, Switzerland
Email: booking@taxiprivelugano.ch
Phone: +41 76 510 31 78

This policy fulfils our duty to inform under Art. 19 FADP. It applies to this website and to our private chauffeur service.

2. Personal data we process

Category	Examples	Source
Onboarding data	Name, phone number, email address	You, when you contact us to onboard as a customer (form, WhatsApp, email, phone)
Booking data	Pick-up and destination, date and time, passengers, luggage, flight or train number, notes and special requests	You
Technical data	IP address, browser, device, time of access (server logs)	Automatically, when you visit the website
Communication data	Messages and call records exchanged with us	You / us

We do not intentionally request sensitive personal data (Art. 5 lit. c FADP). If you tell us about health-related needs, for example reduced mobility, we use that information only to provide the ride, and only with your consent.

3. Purposes and justification

Handling enquiries and bookings, and performing the transport contract. Justification: the contract with you, or pre-contractual steps at your request.
Record-keeping duties. Justification: legal obligations (Swiss Code of Obligations, tax law).
Operating and securing the website (server logs, abuse prevention). Justification: our overriding private interest in a secure, working website (Art. 31 FADP).
Passenger safety, dispute handling and claims. Justification: our overriding private interest, or legal obligations.
Marketing messages. We do not currently send marketing. If we start, we will ask for your consent, which you can withdraw at any time.

We process data in line with the principles of Art. 6 FADP (lawfulness, good faith, proportionality, purpose limitation, accuracy and security). We do not carry out automated individual decision-making (Art. 21 FADP) or profiling.

4. How the website and booking work

The booking form on this website does not send your details to our servers. When you submit it, it prepares a pre-filled WhatsApp message, which you then send yourself. Your details reach us only when you send that message, or when you contact us by email or phone.

The only personal data we collect is what you give us when you onboard as a customer for our taxi service. Our website loads fonts from Google Fonts and map tiles from OpenStreetMap. When you open the site or its map section, your browser sends your IP address and technical data to Google and to the OpenStreetMap Foundation servers (operated in the United Kingdom), which are located outside Switzerland (see section 6). We do not use analytics, advertising or tracking tools.

5. Disclosure to recipients

We do not sell your data. We share it only where needed, with:

Google (Google Fonts) and the OpenStreetMap Foundation (map tiles), which receive technical data such as your IP address when the fonts and map load;
WhatsApp (Meta), only if you choose to contact us there;
authorities and courts, where the law requires it or to establish, exercise or defend legal claims.

6. Transfers abroad

We mostly process data in Switzerland. Google and, if you use it, WhatsApp/Meta may process data in the EU/EEA or other countries, including the United States. The OpenStreetMap Foundation operates in the United Kingdom, which the Federal Council recognises as providing adequate protection. Where the Federal Council has recognised the country as having adequate protection (Art. 16(1) FADP, Annex 1 of the Data Protection Ordinance), we rely on that. Where it has not, we rely on appropriate safeguards such as the standard contractual clauses recognised by the FDPIC (Art. 16(2) FADP), certification under the Swiss-US Data Privacy Framework, or your explicit consent or contract performance (Art. 17 FADP).

7. Retention

Customer and booking records: 10 years from the end of the business year (Art. 958f Code of Obligations).
Enquiries that do not lead to onboarding or a booking: deleted within 12 months of last contact.
Server logs: kept for a short period, normally no longer than 90 days, unless needed to investigate a security incident.

After that, data is deleted or anonymised unless the law requires longer retention.

8. Data security

We take appropriate technical and organisational measures against unauthorised access, loss and misuse (Art. 8 FADP), including encrypted transmission (HTTPS), access restrictions and confidentiality obligations. We will notify the FDPIC, and where required you, of a data breach that is likely to result in a high risk to your personality or fundamental rights (Art. 24 FADP).

9. Your rights

Access to your personal data (Art. 25 FADP);
Rectification of inaccurate data (Art. 32 FADP);
Deletion of your data, and objection to processing or to disclosure to third parties (Art. 32 FADP);
Data portability in a common electronic format (Art. 28 FADP);
Withdrawal of consent at any time, with effect for the future.

To exercise your rights, write to booking@taxiprivelugano.ch. We may need to verify your identity, and will normally answer within 30 days (Art. 25(7) FADP). Rights may be limited where the law allows.

You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

10. Cookies

We do not use tracking, analytics or advertising cookies. Only technically necessary storage, such as your language preference, may be used to run the site.

11. Changes to this policy

We may update this policy at any time. The version published on this page, with its date, applies. For EU/EEA visitors, see also our GDPR privacy notice.

Legal · European Union

Privacy Notice — EU / EEA

Under Regulation (EU) 2016/679 (GDPR) · Last updated: 29 September 2026

1. Controller (Art. 13(1)(a) GDPR)

Taxi Privé Lugano
Via Otri 8, 6900 Lugano, Ticino, Switzerland
Email: booking@taxiprivelugano.ch · Phone: +41 76 510 31 78

We are established in Switzerland, outside the EU/EEA. The GDPR applies to us where we offer transport services to people in the EU/EEA, for example journeys from or to Italy, France or Germany (Art. 3(2) GDPR). This notice explains how we handle the personal data of such individuals. It complements our Swiss privacy policy.

EU representative (Art. 27 GDPR): we have not appointed one. Occasional, small-scale processing that is unlikely to result in a risk to your rights may fall under the exemption in Art. 27(2)(a). Please direct all requests to the address above. We have not appointed a Data Protection Officer, because none is required under Art. 37 GDPR.

2. Data, purposes and legal bases

Purpose	Data	Legal basis
Customer onboarding, arranging and performing the ride	Name, phone, email, booking details, notes you provide	Art. 6(1)(b): contract or pre-contractual steps
Record-keeping under Swiss law	Customer and booking records	Art. 6(1)(c): legal obligation
Website operation and security (server logs)	IP address, browser, time of access	Art. 6(1)(f): legitimate interest in a secure, working site
Safety, disputes, legal claims	Booking and communication data	Art. 6(1)(f): legitimate interest; Art. 6(1)(c)
Health-related needs you share (e.g. reduced mobility)	Information you volunteer	Art. 9(2)(a): explicit consent
Marketing (not currently used)	Email or phone number	Art. 6(1)(a): consent

You are not required to give us your data. Without the data needed for a booking (contact details, pick-up, destination and time), we cannot arrange your ride. We do not use automated decision-making or profiling (Art. 22 GDPR).

3. How the website works

The only personal data we collect is what you give us when you onboard as a customer for our taxi service. The booking form does not transmit your entries to our servers. It prepares a pre-filled WhatsApp message that you send yourself. We do not use analytics, advertising pixels or tracking cookies. The site does load Google Fonts and map tiles from OpenStreetMap, so your IP address and technical data are sent to Google and to the OpenStreetMap Foundation when those load. We rely on our legitimate interest (Art. 6(1)(f)) to display the site properly.

4. Recipients (Art. 13(1)(e))

Google (Google Fonts) and the OpenStreetMap Foundation (map tiles), which receive technical data such as your IP address;
WhatsApp (Meta), only if you choose to contact us there;
authorities and courts, where the law requires it.

We never sell your data.

5. Transfers to third countries (Chapter V GDPR)

Our own processing takes place in Switzerland. The European Commission recognises Switzerland as providing an adequate level of data protection (Decision 2000/518/EC, confirmed in January 2024), so data from the EU/EEA can flow to us freely. The OpenStreetMap Foundation operates in the United Kingdom, which the European Commission recognises as adequate. Google and WhatsApp/Meta may transfer data to other countries, for example the United States, and rely on an adequacy decision (including the EU-US Data Privacy Framework), on Standard Contractual Clauses (Art. 46(2)(c)), or, in individual cases, on your explicit consent or the performance of your contract (Art. 49). You can request a copy of the safeguards using the contact details above.

6. Retention (Art. 13(2)(a))

Customer and booking records: 10 years from the end of the business year, as required by Swiss law;
Enquiries without onboarding or a booking: 12 months after last contact;
Server logs: normally up to 90 days;
Health-related notes: deleted once the ride is completed, unless you ask us to keep them for future rides.

7. Your rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18);
Data portability (Art. 20);
Objection to processing based on legitimate interests (Art. 21);
Withdrawal of consent at any time, without affecting earlier processing (Art. 7(3));
Complaint to a supervisory authority (Art. 77), in the EU/EEA country where you live, work or where the alleged infringement occurred. Examples: the Garante per la protezione dei dati personali (Italy), the CNIL (France). You may also contact the Swiss FDPIC.

To exercise your rights, email booking@taxiprivelugano.ch. We respond within one month (Art. 12(3)). We may ask you to confirm your identity.

8. Security

We apply appropriate technical and organisational measures (Art. 32 GDPR), including HTTPS, access control and confidentiality. Where required, we report personal data breaches to the competent authority within 72 hours (Art. 33) and inform you where there is a high risk (Art. 34).

9. Cookies and similar technologies

This site sets no tracking, analytics or advertising cookies. Any storage used is strictly necessary for the site to function, such as remembering your language choice.

10. Updates

We may amend this notice, for example if our services or the law change. The current version is always available on this page.