1.1 We are committed to safeguarding the privacy of ch-aviation visitors and service users.

1.2 This policy applies where we are acting as a data controller with respect to the personal data of ch-aviation visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.

1.3 We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first use functionality requiring a cookie.

1.4 Our website incorporates privacy controls which affect how we will process your personal data. By using the privacy controls, you can specify whether you would like to receive direct marketing communications. You can access the privacy controls via ch-aviation.com/account-management/profile.

1.5 In this policy, “we”, “us” and “our” refer to ch-aviation GmbH. For more information about us, see Section 13.

2.1 In this Section 2 we have set out the general categories of personal data that we may process, the purposes for which we may process personal data, and the legal bases of the processing.

2.2 We may process data about your use of our website and services (“usage data”). Usage data may include your anonymised IP address, geographical location, industry type, job function, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, and information about the timing, frequency and pattern of your service use. The source of this data includes analytics, website functionality, security and advertising technologies provided by trusted third-party service providers. We configure these services to minimise the processing of personal data wherever reasonably possible. Usage data may be processed for analysing and improving our website and services and, where applicable, displaying personalised advertising. The legal basis is our legitimate interests in monitoring and improving our website and services.

2.3 We may process your ch-aviation account data (“account data”), including your name and email address. The source is you or your employer. We process account data for operating our website, providing services, ensuring security, maintaining backups and communicating with you. The legal basis is consent, our legitimate interests in the proper administration of our website and business, or performance of a contract and/or steps taken at your request before entering into a contract.

2.4 We may process information included in your personal profile (“profile data”), including your name, address, telephone number, email address, company name, company VAT number, job title, industry type and job function. We process profile data for enabling and monitoring your use of our website and services. The legal basis is consent, our legitimate interests, or performance of a contract and/or steps taken before entering into a contract.

2.5 We may process personal data provided during use of our services (“service data”), including user preferences such as saved searches and views, search preferences, news alerts and favourite lists. The source is you or your employer. We process service data for operating and providing our services, security, maintaining backups and communicating with you. The legal basis is consent, our legitimate interests, or performance of a contract and/or steps taken before entering into a contract.

2.6 We may process information contained in any enquiry you submit regarding goods and/or services (“enquiry data”) for offering, marketing and selling relevant services. The legal basis is consent or, where applicable, our legitimate interests in promoting our products and services.

2.7 We may process customer relationship information (“customer relationship data”), including your name, employer, job title or role, contact details and information contained in communications between us and you or your employer. The source may be you, your employer or other legitimate business sources. We process this data for managing customer relationships, communicating with customers, keeping records of communications and promoting our products and services. The legal basis is consent or our legitimate interests in the proper management of customer relationships.

2.8 We may process information relating to transactions, including purchases of services (“transaction data”). We use third-party providers to support subscription management, payment processing and accounting. Transaction data may include contact details and transaction details, including invoices and accounting records. We process this data for supplying purchased services and keeping proper records in accordance with the Swiss Code of Obligations. The legal basis is performance of a contract and/or our legitimate interests in the proper administration of our website and business.

2.9 We may process information provided for subscribing to email notifications and/or newsletters (“notification data”) for sending relevant notifications and newsletters. The legal basis is consent or, where applicable, our legitimate interests in communicating about our products and services.

2.10 We may process information contained in or relating to communications you send to us (“correspondence data”), including communication content and associated metadata, for communicating with you and record-keeping. The legal basis is our legitimate interests in the proper administration of our website and business and communications with users.

2.11 We may provide features that use artificial intelligence (“AI”) technologies to assist you in using our services. Where you choose to use these features, information you submit may be processed by trusted third-party AI service providers solely for providing the requested functionality. We do not permit these providers to use your data for any purpose beyond providing the contracted services except where expressly disclosed or required by law.

2.12 We may process personal data where necessary for the establishment, exercise or defence of legal claims. The legal basis is our legitimate interests in protecting and asserting our legal rights and the legal rights of others.

2.13 We may also process personal data where necessary for compliance with a legal obligation or to protect vital interests.

2.14 Please do not supply another person’s personal data to us unless we prompt you to do so.

3.1 We may disclose your personal data to members of our group of companies insofar as reasonably necessary for the purposes and on the legal bases set out in this policy.

3.2 We may disclose personal data to professional advisers where reasonably necessary for obtaining professional advice or the establishment, exercise or defence of legal claims.

3.3 We engage trusted third-party service providers to assist us in operating our website and delivering our services. These providers may process personal data for purposes including cloud hosting and infrastructure, email and communications, customer support, customer relationship management, payment processing, subscription management, accounting, website analytics, fraud prevention, security, monitoring and diagnostics, artificial intelligence features, marketing and lead generation, webinars and online meetings, and operation of third-party marketplaces through which our products and services are offered. A current list is maintained at ch-aviation.com/subprocessors. We disclose personal data only to the extent necessary for providers to perform contracted services or, where applicable, where they act as independent controllers in connection with marketplace or payment services.

3.4 Financial transactions are handled by our payment service providers and relevant subscription and billing providers. We share transaction data only to the extent necessary for payment processing, refunds, fraud and risk screening, and handling related complaints and queries. ch-aviation does not have access to full payment card details.

3.5 We may also disclose personal data where necessary for compliance with a legal obligation or the establishment, exercise or defence of legal claims.

4.1 We and our other group companies have offices and facilities in Switzerland, Croatia, Malaysia, Serbia and Thailand.

4.2 Our systems and those of trusted third-party service providers may process personal data in Switzerland, the European Economic Area (“EEA”), the United Kingdom, the United States and other jurisdictions where our service providers operate. Where personal data is transferred outside Switzerland or the EEA, we implement appropriate safeguards where required under applicable data protection law.

5.1 This Section sets out our data retention policies and procedures designed to help ensure compliance with legal obligations relating to retention and deletion of personal data.

5.2 Personal data shall not be kept for longer than necessary for the relevant purpose.

5.3 We will retain personal data as long as you use the service. When data is no longer required for contractual or legal obligations, it is deleted or anonymised unless further processing is necessary to fulfil retention obligations under Swiss commercial and tax law. In particular, accounting records may be retained for ten years in accordance with the Swiss Code of Obligations.

5.4 We may retain personal data where necessary for compliance with a legal obligation or the establishment, exercise or defence of legal claims.

6.1 We may update this policy from time to time by publishing a new version on our website.

6.2 We will notify you of significant changes by email or through the notification system on our website.

7.1 This Section summarises rights available under applicable data protection law.

7.2 Your principal rights may include access, rectification, erasure, restriction of processing, objection to processing, data portability, complaint to a supervisory authority and withdrawal of consent.

7.3 You may request confirmation of whether we process your personal data and, where we do, access to it and additional information about the processing. Certain personal data can be accessed through ch-aviation.com/account-management/profile when logged in.

7.4 You may request rectification of inaccurate personal data and completion of incomplete data.

7.5 In some circumstances you may request erasure of your personal data, subject to applicable legal exceptions.

7.6 In some circumstances you may request restriction of processing.

7.7 You may object to processing in certain circumstances, including where processing is based on legitimate interests.

7.8 You may object at any time to processing for direct marketing purposes, including profiling for direct marketing purposes.

7.9 Where applicable, you may receive personal data you have provided to us in a structured, commonly used and machine-readable format.

7.10 You may have the right to lodge a complaint with a competent supervisory authority.

7.11 Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

7.12 You may exercise your rights by written notice to us or, where available, through account-management functionality.

8.1 A cookie is a file containing an identifier sent by a web server to a web browser and stored by the browser.

8.2 Cookies may be persistent or session cookies. Persistent cookies remain valid until expiry unless deleted earlier; session cookies expire when the browser is closed.

8.3 Cookies do not typically directly identify a user, but personal information we store about you may be linked to information stored in and obtained from cookies.

8.4 You can adjust your cookie preferences at any time through our cookie preference centre.

9.1 We use cookies for purposes including determining whether you are logged into our website and storing information about your preferences as a logged-in user.

10.1 Our service providers may use cookies or similar technologies that may be stored on your device when you visit our website.

10.2 We use third-party analytics, security, advertising and website functionality providers that may place cookies or similar technologies on your device. Information about these providers is available on our Subprocessors & Third-Party Service Providers page and through our cookie consent platform.

10.3 We use Google products and services, including Google Analytics, to analyse website use.

10.4 We use advertising technologies, including AdButler, to display and measure advertisements in accordance with your cookie preferences.

10.5 Social networks may record interactions with content you share through their services and may set cookies or use similar technologies.

11.1 Most browsers allow you to refuse cookies and delete cookies. Methods vary by browser and version.

11.2 Blocking all cookies may negatively affect usability and prevent you from using all website features.

12.1 We maintain a current list of third-party service providers and subprocessors supporting our website and services. The list identifies providers and the services they provide and is available at ch-aviation.com/subprocessors.

13.1 This website is owned and operated by ch-aviation GmbH.

13.2 We are registered in Switzerland under registration number CHE-450.600.552, and our registered office is at Schützenmatte B15, 6362 Stansstad, Switzerland.

13.3 Our principal place of business is at Schützenmatte B15, 6362 Stansstad, Switzerland.

13.4 You can contact us by post at the address above, by telephone using the contact number published on our website, or by email using the email address published on our website.

14.1 Our data protection officer’s contact details are Thomas Jaeger, President, thomas.jaeger@ch-aviation.com.