Legal information

Privacy policy

Last updated: January 2026

1. Data controller

The data controller is Rosy Viaggi, Via Laveggio 4/A, 6855 Stabio (Switzerland). Tel. +41 91 630 29 50 — email rosyviaggi@bluewin.ch.

2. Legal bases

We process personal data in accordance with the Swiss Federal Act on Data Protection (revFADP, in force since 1 September 2023) and, where applicable, Regulation (EU) 2016/679 (GDPR) for customers resident in the European Union.

3. Data collected

  • Identity data (surname, first name, date of birth)
  • Contact details (address, email, telephone)
  • Identity document (for travel bookings)
  • Payment data (handled by banking institutions and not stored by us)
  • Travel preferences and any dietary or medical requirements

4. Purposes

Data is processed exclusively for:

  • managing the booking and the travel contract;
  • tax, accounting and insurance obligations;
  • sending operational communications about the trip booked;
  • sending commercial offers only with explicit consent.

5. Disclosure to third parties

Data may be disclosed to the suppliers strictly necessary to carry out the trip (hotels, insurance companies, carriers). We do not sell or transfer data to third parties for marketing purposes.

6. Transfers abroad

Some data may be transferred to countries within or outside the EU in order to organise the trip. Transfers only take place to countries offering an adequate level of protection or on the basis of standard contractual clauses.

7. Retention period

Data is retained for as long as necessary to perform the contract and to comply with legal obligations (10 years for accounting records under the Swiss Code of Obligations).

8. Rights of the data subject

The data subject has the right to access their data, to request its correction or deletion, to object to the processing, to request data portability and to withdraw consent at any time. To exercise these rights, please write to rosyviaggi@bluewin.ch.

9. Security

We take appropriate technical and organisational measures to protect data against loss, misuse and unauthorised access.

10. Cookies and Google Analytics 4

This website uses technical cookies that are necessary for it to work and, only with your consent, Google Analytics 4 statistical cookies. The service provider is Google (Google Ireland Limited and Google LLC).

The purpose of the processing is exclusively statistical: to understand in aggregate form how the website is used, in order to improve our content and our services.

Google Analytics is only activated according to the choice expressed by the visitor in the cookie banner. Before consent is given, no Analytics cookie is set (Google Consent Mode v2, set to “denied” by default). Advertising and personalisation purposes are not activated.

Technical and usage information is processed, such as the pages visited, the page title, the page language, the items selected and general device and browser data.

Form content (name, email, telephone, message, consent) is not sent to Google Analytics: it is used exclusively to forward the enquiry by email to Rosy Viaggi.

Consent can be withdrawn or changed at any time: the cookie preferences can be reopened via the “Cookie preferences” link in the website footer.

Google's official data protection information is available at policies.google.com/privacy and policies.google.com/technologies/partner-sites.

11. Supervisory authority

The data subject may contact the Federal Data Protection and Information Commissioner (FDPIC) in Bern or, if resident in the EU, the competent national supervisory authority.