Privacy & Cookie Policy – expressbooking.ch

Last updated: August 23, 2025

1. Introduction

This Privacy & Cookie Policy applies to the website expressbooking.ch (the “Portal”), which is operated by Zwiss GmbH (“Zwiss,” “we,” “our,” or “us”).
Zwiss GmbH, as the legally responsible parent company, manages and controls the Portal and is accountable for the collection, processing, and protection of your personal data.
We process your personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation (GDPR).

2. What personal data we collect

We may collect the following categories of personal data:

• Identification data such as your name, postal address, email address, and telephone number.
• Booking and transaction data such as the services you choose, your preferred dates and times, the number of participants, and any personal preferences you provide.
• Payment data processed securely through Datatrans Ltd (gateway) and its acquiring/processing partner Worldline Switzerland AG, both PCI-DSS-certified payment providers. Zwiss GmbH does not store your full payment card details.
• Technical data such as your IP address, browser type, device type, operating system, and log data.
• Usage and analytics data such as your navigation behaviour, the pages you visit, and the links you click.
• Marketing preferences such as your newsletter subscriptions and marketing consents.
• Customer service data such as the information you provide when you submit enquiries, request support, or correspond with us.

3. How we collect your data

We obtain your personal data in several ways:

• Directly from you when you register on the Portal, make a booking, or contact our customer support team.
• Automatically through cookies, analytics tools, and similar technologies when you browse the Portal.
• From Providers to confirm the status of your bookings and services.
• From Datatrans Ltd and Worldline Switzerland AG to verify payment transactions and prevent fraud.

4. How and why we use your data

We process your personal data only for specific and lawful purposes, including the following:

• To provide brokerage services, including transmitting bookings to Providers, confirming your reservations, and providing customer support.
• To process payments securely through Datatrans LTd and Worldline Switzerland AG, and to prevent fraudulent transactions.
• To communicate with you, including booking confirmations, updates regarding your services, and responses to your enquiries.
• To improve our services by analysing how you use the Portal, helping us optimise performance and user experience.
• To send marketing communications if you have given consent (e.g., newsletters, offers). You may withdraw consent at any time.
• To comply with legal obligations, including accounting, taxation, and regulatory reporting.

5. Sharing of data

We may share your personal data with third parties only where necessary:

• With Providers, in order to deliver the services you book.
• With Datatrans Ltd and Worldline Switzerland AG, to process your payment transactions securely.
• With IT, hosting, analytics, and security providers (such as Cloudflare) to operate and protect the Portal.
• With regulators and authorities, if required by law.

Zwiss GmbH does not sell your personal data.

6. International transfers

If your personal data is transferred outside Switzerland or the European Economic Area (EEA), Zwiss GmbH ensures that adequate safeguards are in place. These may include Standard Contractual Clauses (SCCs) or equivalent legal protections.

7. Data retention

We keep your personal data only as long as necessary to achieve the purposes described in this Policy or as required by law. For example:

• Booking and financial data: up to 10 years (statutory obligations).
• Account and support data: 3–5 years after your last interaction.
• Marketing data: until you withdraw consent.
• Cookies: durations as listed in the Cookie Table below.

8. Your rights

Under the FADP and the GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Request deletion of your personal data when no longer required.
• Restrict or object to certain types of processing.
• Receive your data in a portable format.
• Withdraw consent (e.g., for marketing communications).

You may exercise your rights at any time by contacting us (see Section 12).

9. Cookie Policy

9.1 What are cookies?
 Cookies are small text files placed on your device when you visit a website. They allow us to provide secure sessions, remember preferences, analyse usage, and—where consent is given—personalise advertising.

9.2 Categories of cookies we use

• Essential cookies: Required for security, session management, booking processes, and payment processing.
• Functional cookies: Remember preferences, such as language and region.
• Analytics cookies: Provide anonymised insights into visitor behaviour and site performance.
• Marketing cookies: Support advertising campaigns, remarketing, and effectiveness measurement.

9.3 Third-party cookies
 Some cookies are set by trusted third parties, including Google, Meta (Facebook), LinkedIn, YouTube, Datatrans Ltd, Worldline Switzerland AG, and Cloudflare. These providers have their own privacy/cookie policies and may update cookies without notice.

9.4 Cookie Table – expressbooking.ch

⚠️ Disclaimer: Third-party providers may update their cookies at any time. For a fully accurate set, a live cookie scan of expressbooking.ch should be performed.

9.5 Managing cookies
 On your first visit, you can accept all cookies, accept only essential cookies, or set individual preferences. Preferences can be changed at any time in the Cookie Settings section of the Portal.
You can also block or delete cookies via browser settings, though this may affect site functionality.

10. Data security

We apply strict organisational and technical safeguards to protect your personal data from unauthorised access, misuse, or loss.
This includes encryption, access controls, and monitoring. Payment processing is handled only via PCI DSS Level 1-certified providers Datatrans AG and Worldline Switzerland AG.

11. Updates to this Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in law, technology, or our business. The revised Policy will be published on this page with an updated “last updated” date.

12. Contact us

Zwiss GmbH (operator of expressbooking.ch)
Undere Waldmattenstrasse 11
3778 Schönried, Switzerland
Email: [email protected]
Phone: +41 79 815 10 00