Privacy Policy

Last updated: May 2026 · Compliant with GDPR and Swiss revFADP

Alpina Travels is operated by Pau Gallardo Campos. This policy explains how we collect, use and protect your personal data.

1. Data Controller

The data controller is the Swiss sole proprietorship "ALPINA TRAVELS, PAU GALLARDO CAMPOS" (Einzelunternehmen), registered with the Handelsregisteramt des Kantons Zürich under UID CHE-165.649.761.

Registered seat: c/o Pau Gallardo Campos, Hagenholzstrasse 62, 8050 Zürich, Switzerland. Email: hello@alpinatravels.com. Full legal details: alpinatravels.com/legal.

2. Data We Collect

When you make a booking or enquiry we collect:

Name, email address and phone number
Travel preferences, dates and group size
Payment confirmation (we never store full card numbers — payments are handled by Stripe)
Special requests (dietary, accessibility needs)
Website usage data (anonymised, via analytics)

3. How We Use Your Data

To fulfil your booking (legal basis: contract performance)
To communicate about your trip (legal basis: contract performance)
Legal compliance (legal basis: legal obligation)
Service improvement (legal basis: legitimate interests)
Marketing emails — only with your explicit consent, easily unsubscribed at any time

How long we keep data:

Financial and booking records: 10 years (Swiss tax law)
Enquiry data (no booking made): 24 months from last contact
Marketing subscribers: until you unsubscribe — no time limit while consent is valid
Analytics data (PostHog, Vercel): 12 months

4. Third-Party Services

We share data with the following trusted providers solely to operate our service:

Stripe — payment processing (PCI-DSS Level 1, EU data residency). Legal basis: contract performance.
Supabase — booking and enquiry database (EU servers). Legal basis: contract performance.
Resend — transactional email delivery. Legal basis: contract performance.
PostHog — product and conversion analytics, including aggregate session analytics with form inputs masked. Hosted in the United States; transferred under appropriate safeguards (Standard Contractual Clauses). Legal basis: legitimate interests in measuring and improving the service.
Vercel — website hosting, performance and audience analytics (anonymised). Legal basis: legitimate interests.
Local suppliers — hotels and transport providers, as necessary to fulfil your booking. Legal basis: contract performance.

We never sell your data to third parties.

5. Your Rights

Under GDPR and Swiss revFADP you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legal retention requirements)
Object to processing or request restriction
Data portability
Withdraw consent for marketing at any time

To exercise any of these rights, email hello@alpinatravels.com. We will respond within 30 days.

6. Data Security

All data is transmitted over HTTPS/TLS. Payment data is handled exclusively by Stripe (PCI-DSS Level 1). Access to booking data is restricted and protected.

7. Cookies

The website uses cookies and local storage strictly necessary to operate the booking flow (Stripe checkout, session continuity) and aggregate analytics (PostHog, Vercel) under legitimate-interests basis. We do not use advertising or cross-site tracking cookies. You may block non-essential cookies via your browser settings without affecting your ability to book.

8. Contact / Complaints

For privacy concerns: hello@alpinatravels.com. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.