Privacy policy
SwissoTravel cares about your data. This policy explains what we collect when you buy plane and bus tickets, why we need it and how you can control it.
1. Who we are and what this document covers
The data controller is SwissoTravel (“SwissoTravel”). This policy describes how we process personal data of users of the website and the personal account when they buy plane and bus tickets.
2. Categories of data
Identification: first and last name, date of birth. Documents: passport or ID number, if the carrier requires it. Contact details: e-mail, phone. Orders: routes, seats, baggage, payments. Technical: IP address, device type, language, cookies. Special categories (for example a request for assistance for a disability) only with your explicit consent.
3. Purposes and legal bases
Performance of the contract: booking, changing and refunding tickets, sending confirmations. Legitimate interest: security, fraud prevention, analytics and service improvement. Consent: newsletters, personal offers, optional cookies. Legal obligation: accounting, requirements of border and transport authorities.
4. Sharing with carriers and partners
We share passenger data with airlines and bus companies, payment providers, customer support and IT infrastructure providers — only as far as needed to fulfil the order. All recipients must protect the data. We do not sell personal data.
5. International transfers
A carrier may be located outside the EU/EEA — in the United Kingdom, Switzerland, Norway, Ukraine and other countries. For such transfers we rely on adequacy decisions, standard contractual clauses or other safeguards provided by the GDPR.
6. Retention
Order data — 6 years after the trip (accounting and disputes). Account data — while the account is active and 12 months after deletion. Consent to newsletters — until withdrawn. Security logs — up to 12 months. After that, data is deleted or anonymised.
7. Cookies
Necessary cookies keep you signed in, run the booking and keep the site secure; they are always on. Analytics and marketing cookies are only used with your consent.
8. Data security
Encryption in transit and at rest, access control, regular security checks. Bank card data is processed by a certified payment provider (PCI DSS) — it is not stored on SwissoTravel's servers.
9. Your rights under the GDPR
The right of access, rectification and erasure; restriction of and objection to processing; data portability; withdrawal of consent at any time; a complaint to a supervisory authority. Most requests can be made in your account, the others are answered within 30 days.
10. Data protection contact
Contact us through the details on the Help page.
We announce changes to this policy on the website and by e-mail.