Privacy Policy

Protecting Your Personal Data

Responsible entity

A. General Information on Data Processing

We collect and process personal data exclusively to provide our vehicle booking and chauffeur services. Our company is based in Switzerland and we also offer services to customers in the European Union.

Legal frameworks

We process personal data in accordance with:

• The Swiss Federal Act on Data Protection (revDSG)
• The EU General Data Protection Regulation (GDPR) for customers located in the EU

Depending on the purpose, our legal bases include:

• Consent (Art. 6(1)(a) GDPR)
• Contract performance or pre-contractual steps (Art. 6(1)(b) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR), such as website improvement or fraud prevention
• Compliance with legal obligations (Art. 6(1)(c) GDPR)

B. Data We Collect

We collect the following personal data when you book a vehicle or contact us through our website:

• Full name
• Email address
• Phone number
• Pickup and drop-off address
• Pickup date and time, transfer type, number of passengers and any extra time requested
• Calculated journey distance and estimated journey time, selected vehicle and the calculated price
• Preferred payment method and any message you send us

This data is necessary to confirm and fulfil your booking. When a form is submitted, the submission time and the IP address of the sending device are recorded in the notification email for security and abuse-prevention purposes.

C. Payment Processing

We do not store, see or process payment card information ourselves. Depending on the payment method you select, payment is made as follows:

• Cash payment in the vehicle
• Credit or debit card on pickup
• Bank transfer or invoice (details are sent by email)
• Online card payment (prepayment) via Stripe — when you choose to pay by card on the website

Stripe as payment processor

If you choose to pay by card online, you are redirected to a secure payment page hosted by Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland), which acts as our payment service provider. Your card number, expiry date and security code are entered on Stripe’s own page and are never transmitted to or stored on our website or our servers.

For the purpose of processing the payment we transmit to Stripe only the data required for the transaction: your name, your email address, the amount and currency, a booking reference, and a short description of the booked journey (vehicle, route or booked hours, and pickup date and time). Stripe additionally processes your card data, IP address and device information as an independent controller under its own privacy policy, available at stripe.com/privacy.

The legal basis for this processing is the performance of the contract with you (Art. 31 para. 2 lit. a FADP / Art. 6 para. 1 lit. b GDPR). Card payments may involve a transfer of data outside Switzerland and the EEA; Stripe relies on the EU Standard Contractual Clauses for such transfers. Stripe also uses this data for legally required fraud prevention and anti-money-laundering checks.

From Stripe we receive back only the payment status, the paid amount, the booking reference, the email address used at checkout and the transaction identifier — never your full card number. Refunds, where due under our Terms and Conditions, are issued through Stripe back to the card originally used.

D. Booking Data and Email Communication

Booking data is delivered to and stored in our secure business email system and used only to:

• Process your request
• Send booking confirmations and updates

Our email servers are configured with encrypted connections (TLS), and access is restricted to authorised staff only.

E. Use of Website Tools and Third-Party Services

We use the following third-party services to ensure functionality:

• OpenStreetMap / CARTO map tiles — to display the map
• Nominatim — address search for pickup and drop-off locations
• OSRM — to calculate and display the distance and estimated journey time of your route
• Google Fonts and unpkg — delivery of fonts and the map library
• Stripe — secure processing of online card payments (see section C)
• Our Swiss web hosting and email provider — processes form submissions and stores the resulting emails on our behalf

These services may process data such as your IP address and browser information. We do not use advertising or tracking pixels.

F. Cookie Usage and Consent

This website does not use advertising or tracking cookies, and no web analytics service is installed. Your selected language preference is stored in your browser's local storage so the site remembers your language on your next visit. It stays on your device and can be deleted at any time through your browser settings.

G. Data Retention

• Booking data: retained as required by tax and commercial law (typically up to 10 years under Swiss law)
• Email inquiries: retained as long as necessary to handle your request, generally up to 12 months
• Server log data: retained only for a short period for security purposes

H. Your Rights

You have the following rights under the Swiss Federal Act on Data Protection and the GDPR:

• Right to access your data
• Right to correction of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing (including for direct marketing)
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at kontakt@luxrides.ch. We may need to verify your identity before acting on a request.

I. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption on our website
• Secure email servers with access controls
• Server-side validation and sanitisation of all submitted form data
• Regular security reviews and limiting access to booking information to staff who need it

J. Children

This website is not directed at children. We do not knowingly collect personal data from children without the consent of a parent or guardian. Bookings involving minors must be made by an adult.

K. Changes to This Policy

We may update this Privacy Policy to reflect changes in legal requirements or our business practices. The latest version is always available on this page.

L. Contact