Suisse Selection AG is the data controller responsible for the collection and processing of your personal data in connection with its activities. Our mission is to provide our customers with a comprehensive range of travel services.

In this privacy statement, we explain how we process your personal data and how you can control and manage it. Our data processing may, if necessary, be covered by other data protection notices, such as those contained in particular in the General (Travel) Terms and Conditions, or may be apparent from the circumstances or regulated by law.

This Privacy Notice complies with the requirements of Swiss data protection law and - if and to the extent applicable - the General Data Protection Regulation (GDPR) of the European Union.

1. ARE YOU AFFECTED BY THIS NOTICE?

This Privacy Policy applies to you if you:

• are one of our customers or have a contractual relationship with us;
• are a fellow traveler of one of our customers.
• are interested in our products or services and therefore provide us with your personal data (e.g. in an agency, on our websites and apps or at events) so that we can contact you.

If you provide us with personal data of others, please make sure that you inform them about the disclosure of their personal data and ask them to read this Privacy Policy. We will ensure that we also do this whenever possible (e.g. when we have the contact details of the person concerned).

2. HOW CAN YOU CONTROL OUR PROCESSING OF YOUR PERSONAL DATA?

You have rights that allow you to effectively control your personal data and how we process it. Below we explain your rights in relation to your personal data.

If you wish to exercise any of the rights set out below, please submit a request by email to welcome@suisse-selection.com or by post to the following address: Suisse Selection AG, Mantelgasse 10, 8008 Zurich.

If you have any questions about the use of your personal data under this Privacy Policy, please send them to the following address: welcome@suisse-selection.com.

1. You can request information about your personal data

   If you wish to request information about your personal data, we will provide you with a copy of the personal data you have requested and information about its processing.

   Your right to information may be limited in the cases provided by law.

2. You can request the correction of your personal data

   If you believe that your personal data is inaccurate or incomplete, you may request that such personal data be amended or completed accordingly. In some cases, the submission of supporting documents may be required.

3. You can request the deletion of your personal data

   If you so wish, you may request the deletion of your personal data to the extent permitted by law.

4. You may object to the processing of your personal data on the basis of legitimate interests

   If you do not agree with processing based on legitimate interest, you may object for reasons arising from your individual situation. In that case, inform us in detail about the relevant processing and the reasons for your objection. We will stop processing your personal data unless there are compelling reasons worthy of protection or the processing serves the assertion, exercise or defense of legal claims.

5. You may object to the processing of your personal data for the purpose of direct marketing

   You have the right to object at any time to the processing of your personal data for the purpose of direct marketing. This also applies to profiling, insofar as it is associated with such direct advertising.

6. You may request the restriction of the processing of your personal data

   If you dispute the accuracy of the personal data we use or object to the processing of your personal data, we will review or revise your request. You may request that we restrict the processing of your personal data while we review your request.

7. You have rights against automated individual decisions

   In principle, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. However, we may automate such a decision if it is necessary for the conclusion or performance of a contract with us, is permitted by law or if you have given your consent.

   In any case, you have the right to challenge the decision, state your position and request the intervention of a competent person to review the decision.

8. You can revoke your consent

   In those cases where processing is based on your declared consent, you may withdraw this consent at any time.

9. You can request the portability of part of your personal data

   You may request a copy of and personal data provided by you in a structured, commonly used and machine-readable format. If technically feasible, you may request that we transfer this copy to a third party.

10. Complaint to the Federal Data Protection and Information Commissioner

    In addition to the above rights, you may file a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

3. FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE USE YOUR PERSONAL DATA?

1. Contract execution and legitimate interest

   In this section, we explain the purpose for which we process your personal data and the legal basis for doing so. First and foremost, we use your personal data to process a contract to which you are a party or to carry out pre-contractual measures at your request. However, we may also process your personal data to fulfill our legitimate interest or that of third parties.

   In particular, your personal data will be processed if this is necessary for the conclusion or performance of a contract in order to:

   • enter into a (travel) contract with you. We may process personal data in order to register you as a new customer, enter into a contract and fulfill it with you;
   • provide you with products and services that you have purchased under the relevant contract;
   • to perform billing, invoicing and collection;
   • to provide you with services related to the preparation and execution of a trip;
   • for insurance purposes;
   • to provide consulting services;
   • to be able to provide assistance in case of difficulties during the trip, if necessary;
   • to provide you with access to our digital platforms. We may process personal data when you use our digital platforms for various purposes (e.g., to manage your personal information or to access travel information);
   • to provide access to our premises and facilities. We may process personal information when you visit us at our premises to conduct appropriate access and security checks;
   • to communicate with you. We may process personal data when you want to contact us, when you ask us for information about our business or services, or when the contract needs to be updated;
   • to respond to your requests and support you;
   • to manage the termination of the contract.

   Where we base a processing activity on a legitimate interest, we will balance that interest against your interests or fundamental rights and freedoms to ensure that they are fairly balanced. In the course of our business as a travel provider, we also use your personal data to:

   • Further develop our products and services;
   • improve cybersecurity, manage our platforms and websites, and ensure business continuity;
   • implement the introduction of IT solutions;
   • perform maintenance of IT systems in ongoing operations;
   • improve the automation and efficiency of our operations and customer services (e.g., auto-fill complaints, track your requests, and improve your satisfaction based on personal data collected during our interactions with you, such as phone records, emails, or chats);
   • enable the assertion of legal claims and defense in connection with legal disputes and regulatory proceedings;
   • organize contests, promotions and conduct opinion polls and customer satisfaction surveys.
2. Advertising and Marketing

   If you are a customer and unless you object, we may send you offers for our products and services. We will ensure that these commercial offers relate to products or services that are relevant to your needs and complement the offers you already use. You can object to this at any time.

3. Consent

   For certain processing of personal data, we will inform you specifically and ask for your consent. Of course, you can revoke your consent at any time.

   In particular, we ask for your consent for:

   • the transfer of particularly sensitive personal data to third parties;
   • tailoring our offers and products or services based on a complex profile to predict your needs and behavior;
   • any electronic offers for products and services that are not similar to those you have purchased or for products and services from our trusted partners.

   If necessary, we may ask you for further consent to process your personal data, but this will not affect any data processing that has already taken place.

4. WHAT TYPES OF PERSONAL DATA DO WE COLLECT?

We collect and use your personal data, which is any information that identifies you or makes it possible to identify you.

Depending on the type of product or service we offer you and the interactions we have with you, we collect different types of personal information about you:

• contact information, mailing address (home or work), email address, phone number;
• personal information, e.g. gender, birthday and age, marital status, nationality, passport details, etc.
• lifestyle, e.g. hobbies and interests, travel;
• travel details, e.g. dates of travel, itinerary/destination, airline, hotel, price, customer preferences, information about your fellow travelers, frequent flyer programs, etc...;
• health information, e.g., information about health-related special needs or illnesses and accidents during a trip;
• financial data, e.g. payment information, credit card number, account details;
• data about your habits and preferences, in relation to the use of our products and services (e.g., meal preferences);
• data from our interactions with you, e.g., your comments, suggestions, needs, collected during our interactions with you in person at our locations and during telephone communications (call notes or call recordings), communications via email, chat, chatbot, exchanges on our social media, and your complaints, if any. Your connection and tracking data (e.g. collected via cookies for non-promotional or analytical purposes on our websites), online services, other applications;
• data about your devices (cell phone, computer, tablet, etc.), such as IP address, technical data and unique identifier data;
• personalized credentials or security features used to connect you to the website and apps from us.

5. FROM WHOM DO WE COLLECT PERSONAL DATA?

We usually collect personal data directly from you. However, we may also collect it from other sources.

Sometimes we collect data from public sources:

• publications/databases provided by official authorities or third parties (e.g. the Swiss Official Gazette of Commerce or the Commercial Register);
• websites/social media presences of legal entities or corporate clients that contain information you have disclosed (e.g., your own website or social media presence);
• public information, such as information from the media.

We also collect personal information from third parties:

• from our customers (e.g., as fellow travelers);
• from our business partners (e.g., tour operators, service providers abroad);
• from third parties such as credit bureaus and fraud prevention agencies;
• from address research service providers who are themselves responsible for ensuring that they collect the relevant information in a lawful manner.

6. WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH AND WHY?

In order to fulfill some of the purposes described in this Privacy Policy, in particular the provision of a trip, we may share your personal data with others. These may include the following:

• ur service providers in the destination country (e.g., agencies, tour guides, hotel reservations, transfer and excursion services), transportation service providers (airline, train, car rental, etc.), and accommodation operators (hotel, hostels, etc.);
• processors who provide services on our behalf (e.g., IT services, logistics, printing services, telecommunications, debt collection, consulting and sales, and marketing);
• certain regulated professionals such as lawyers, notaries or auditors, if required in certain circumstances (litigation, auditing, etc.) and to our insurers;
• partners to conduct advertising, market and opinion research;
• partners to assist in the investigation of criminal offences (e.g. fraud), assertion, exercise or defense of legal claims;
• authorities and official bodies (e.g. tax authorities, embassies of the target country) in the event of a legal or official obligation (e.g. retention obligations, obtaining visas, obtaining entry requirements).

7. INTERNATIONAL TRANSFER OF PERSONAL DATA

International transfers from Switzerland and the European Economic Area (EEA) to a non-EEA country (third country) may involve the cross-border transfer of your personal data. In particular, you must expect the transfer of your data to their travel countries. But also to countries in Europe, the USA and worldwide, where the service providers and service providers we use are located. If the FDPIC or the European Commission has recognized that a third country offers an adequate level of data protection, your personal data may be transferred on this basis.

For transfers to a third country whose level of protection has not been recognized as adequate by the FDPIC and the European Commission, we will either rely on an exemption applicable to the particular situation (for example, if the transfer is necessary for the performance of our contract with you) or apply one of the following appropriate safeguards to ensure the protection of your personal data:

• standard contractual clauses approved by the FDPIC and the European Commission;
• binding internal data protection rules.

To obtain a copy of these safeguards or information on where to obtain them, you may submit a written request as described in Section 2.

8. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will retain your personal data for as long as necessary to fulfill our contractual obligations and to comply with applicable laws and regulations, or for any other period of time with respect to our legitimate business interest, such as proper recordkeeping and responding to legal claims or regulatory inquiries.

9. DATA SECURITY

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties (e.g. encryption of data transmission, access controls, etc.). Our security measures are continuously improved in line with technological developments.

We take reasonable precautions to protect your information. The transmission of information via the Internet and other electronic means always involves certain security risks and we cannot guarantee the security of information transmitted in this manner.

10. HOW YOU CAN FOLLOW THE EVOLUTION OF THIS PRIVACY STATEMENT

In a world where technologies are constantly evolving, we regularly review this Privacy Policy and update it as necessary.

The most current version published on our website will apply. We encourage you to review the latest version of this document online. We will notify you of changes via our website or through our usual communication channels.