Privacy Policy

This Privacy Policy explains how BaselCruiseTransfers (“we”, “us”) processes personal data in accordance with Swiss data protection law (Federal Act on Data Protection, FADP/DSG) and, where applicable, the EU GDPR.

Last updated: 30 January 2026

1. Data Controller

The data controller responsible for processing your personal data is BaselCruiseTransfers. You can contact us using the details in Section 13.

2. Data We Collect

We collect only the information necessary to provide and manage your transfer booking, including:

• Name and contact details (e.g., email, phone number)
• Pick-up and drop-off locations
• Travel details such as cruise arrival information, flight numbers, or hotel addresses (if provided)
• Booking details and communications with you (e.g., messages, special requests)
• Payment-related information (processed securely by our payment provider; we do not store full card details)

3. Purpose of Processing

We use your data for the following purposes:

• Providing and managing your booking and transfer service
• Sending confirmations, updates, and service messages
• Customer communication and support
• Accounting, record-keeping, and legal compliance
• Preventing fraud and ensuring the security of our services

4. Legal Basis

Under Swiss law and the GDPR (where applicable), we process personal data based on:

• Performance of a contract (to provide your transfer)
• Legitimate interests (e.g., customer support, fraud prevention, service improvement)
• Consent (where required, such as for non-essential cookies/analytics if used)
• Legal obligations (e.g., accounting and tax retention requirements)

5. Data Sharing

We do not sell personal data. We only share personal data when necessary to provide the service or comply with the law, for example:

• Assigned drivers and operational partners (only the details needed to perform the transfer)
• Payment processing via Stripe (Stripe acts as a payment processor and processes payment-related data under its own privacy policy and agreements). Stripe may process payment-related data in accordance with applicable data protection laws.
• Authorities if required by law or to enforce legal rights

Payment card data is handled by Stripe and is not stored on our servers.

6. Data Retention

We retain personal data only as long as necessary for the purposes described above and to meet legal obligations (e.g., accounting and tax requirements). When data is no longer needed, it is deleted or anonymized where feasible.

7. Cookies, Tracking Technologies and Third-Party Services

Our website currently uses only essential cookies and/or local storage to ensure basic functionality, such as remembering your cookie consent preferences. These technologies are required for the operation of the website and do not require prior consent.

We do not use analytics, tracking, or marketing cookies by default. If such technologies are introduced in the future, they will only be activated with your prior consent.

This may include, in particular:

• Analytics services (e.g. Google Analytics, Bing Analytics) to understand how visitors use our website
• Marketing and advertising services (e.g. Meta / Facebook / Instagram) to measure and improve advertising performance
• Communication services (e.g. WhatsApp) when you choose to contact us via such channels

When using third-party services, personal data (such as IP address or usage information) may be transferred to providers located outside Switzerland or the European Economic Area. In such cases, data transfers are carried out in accordance with applicable data protection laws and appropriate safeguards.

Detailed information about the use of cookies and third-party services, as well as your consent choices, is provided via our cookie banner. You may change or withdraw your consent at any time.

8. Website Hosting and Server Logs

When you visit our website, technical data (such as IP address, browser type, and access times) may be processed in server logs for security, troubleshooting, and to ensure the website operates reliably. This data is typically processed based on legitimate interests and is retained for a limited period.

9. Your Rights

Depending on applicable law (Swiss FADP/DSG and, where applicable, GDPR), you may have the right to:

• Request information/access to your personal data
• Request correction/rectification of inaccurate personal data
• Request deletion/erasure of your personal data (where applicable)
• Request restriction of processing (where applicable)
• Object to processing based on legitimate interests (where applicable)
• Request data portability (where applicable)
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority

For GDPR rights reference, see the overview of data subject rights.

10. Security

We use appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure. However, no system can be guaranteed 100% secure.

11. International Transfers

If personal data is transferred outside Switzerland or the European Economic Area, we ensure appropriate safeguards are in place (for example, contractual protections and/or other recognized transfer mechanisms) to provide an adequate level of protection.

12. Supervisory Authority

If you believe your data protection rights have been violated, you may lodge a complaint with the Swiss supervisory authority: the Federal Data Protection and Information Commissioner (FDPIC).

13. Contact

For any questions regarding this Privacy Policy or the processing of personal data, please contact:
BaselCruiseTransfers
Zihlmattweg 44, 6005 Luzern, Switzerland
Email: bookings@baselcruisetransfers.com