1. Introduction
HeliFlights Switzerland respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we collect, use, and protect your personal data when you visit our website or use our services. It applies to all information collected through our website www.heliflights.ch.
2. Data Controller
The data controller responsible for your data is:
- HeliFlights Switzerland
- Email: contact@heliflights.ch
- Phone: +41 79 877 12 93
- Website: www.heliflights.ch
3. What Data We Collect
We may collect the following types of personal data:
3.1 Information You Provide Directly
- Contact Information: Name, email address, phone number
- Booking Information: Flight details, date, number of passengers, special requests
- Payment Information: Billing address (payment details are processed through secure third-party providers like Stripe)
- Voucher Information: Purchaser name, recipient name, email addresses, personal messages
- Communications: Messages you send us through contact forms or email
3.2 Automatically Collected Information
- Technical Data: IP address, browser type, operating system, access times
- Usage Data: Pages you visit, time spent, click behavior
- Cookies: See Section 7 for details on cookie usage
4. How We Use Your Data
We use your personal data for the following purposes:
- Booking Processing: To process and confirm your helicopter flight bookings
- Voucher Management: To create, send, and manage flight vouchers
- Communication: To respond to your inquiries and send you important information about your booking
- Payment Processing: To process payments through secure third-party providers
- Service Improvement: To analyze website usage and improve our services
- Legal Obligations: To comply with legal requirements and regulations
- Security: To protect against fraud and ensure the security of our website
5. Legal Basis for Processing
We process your personal data based on the following legal grounds under Swiss data protection law and the EU GDPR (where applicable):
- Contract Performance: To fulfill a contract with you (e.g., flight booking)
- Consent: When you have given us your express consent
- Legitimate Interests: To pursue our legitimate business interests
- Legal Obligation: To comply with legal requirements
6. Data Sharing and Third Parties
We only share your personal data with third parties in the following cases:
- Payment Service Providers: Stripe for secure payment processing
- Email Services: Zepto Mail for sending confirmation emails and vouchers
- Cloud Hosting: Vercel for website hosting and Supabase for database services
- Legal Requirements: When required by law or necessary to protect our rights
All third-party providers are contractually obligated to handle your data securely and use it only for the agreed purposes.
7. Cookies and Tracking Technologies
Our website uses cookies to improve your experience. Cookies are small text files stored on your device.
7.1 Types of Cookies We Use:
- Necessary Cookies: Required for the website to function (e.g., session management, language settings)
- Functional Cookies: Enable enhanced functionality and personalization
- Analytics Cookies: Help us understand how visitors use our website
You can manage or reject cookies in your browser settings. Please note that some features of the website may not function if you disable cookies.
8. Data Storage and Security
8.1 Storage Duration
We store your personal data only as long as necessary for the purposes for which it was collected:
- Booking Data: Until contract fulfillment plus legal retention periods (typically 10 years)
- Voucher Data: Until redemption plus legal retention periods
- Communication Data: As long as required or until you request deletion
8.2 Security Measures
We implement appropriate technical and organizational security measures to protect your data:
- SSL/TLS encryption for all data transmissions
- Secure cloud infrastructure with regular security updates
- Access restrictions and authentication
- Regular security audits
- Data backups to prevent data loss
9. Your Rights
Under Swiss data protection law and the EU GDPR (where applicable), you have the following rights:
- Right of Access: You have the right to know what data we store about you
- Right to Rectification: You can request correction of inaccurate data
- Right to Erasure: You can request deletion of your data (subject to legal retention obligations)
- Right to Restriction: You can request restriction of processing
- Right to Data Portability: You can receive a copy of your data in a structured format
- Right to Object: You can object to the processing of your data
- Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time
To exercise any of these rights, please contact us at contact@heliflights.ch
10. International Data Transfers
Your data is primarily processed in Switzerland and within the European Economic Area (EEA). If we transfer data to third countries, we ensure that appropriate safeguards are in place according to applicable data protection laws.
11. Children
Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us so we can delete it promptly.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The updated policy will be posted on this page with a new "Last updated" date. We encourage you to review this page regularly.
13. Contact and Complaints
If you have questions or concerns about this privacy policy or our privacy practices:
- Email: contact@heliflights.ch
- Phone: +41 79 877 12 93
- Website: www.heliflights.ch
You also have the right to lodge a complaint with the competent data protection authority if you believe your privacy rights have been violated. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).