This privacy policy explains which personal data we process when you visit this website and when we plan your trip. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). In case of discrepancies the German version prevails.
Controller
Tamino Primo Haas (Haas Bookings), Seestrasse 70, 8266 Steckborn, Switzerland Email: info@haasbookings.com Phone: +41 76 603 77 71
Visiting the website
Our hosting provider Hostinger stores technical details in server log files on every request: IP address, date and time, requested page, browser and operating system. We need them to run the website securely and reliably. The legal basis under the GDPR is our legitimate interest (Art. 6(1)(f)). Log files are deleted automatically after a short time.
Fonts and images are served from our own server. No third-party content is loaded unless you agree to it.
Contact form and email
When you write to us via the form, email, WhatsApp or phone, we process your details (for example name, email address, travel wishes, message) to answer your request. The legal basis under the GDPR is pre-contractual measures (Art. 6(1)(b)) or our legitimate interest in answering (Art. 6(1)(f)).
The form does not store your details on the web server. They are delivered directly as an email to our mailbox through the Hostinger SMTP server. To protect against abuse (spam) we keep a pseudonymised (salted) hash of your IP address together with timestamps of recent requests. The time window is one hour; afterwards the entries are deleted regularly. We do not store the IP address itself for this. We keep enquiries for as long as needed to handle them and to meet any legal retention duties.
If you write to us via WhatsApp, Instagram or Telegram, your messages and metadata are processed by the respective provider (Meta or Telegram) under its terms, possibly outside Switzerland and the EU. If you prefer not to, write to us by email or through the form.
Booking a call
For the free first call you can pick a slot via Cal.com. The calendar only loads once you click “Load calendar” and thereby consent. Data (for example your IP address and what you enter in the calendar) is then transferred to Cal.com. Details are listed below under “Services used”.
Weather and exchange rate data
We load weather and exchange rates for the country pages via our own server from MET Norway (licence CC BY 4.0) and Frankfurter (frankfurter.dev) and cache them briefly. Your browser does not contact these providers, and we pass on no data about you. They are named here only as data sources.
Cookies and consent
We use essential storage without consent so the website works. We only load statistics, embedded content such as the booking calendar, and partner scripts once you agree. Which services these are is listed below under “Services used” and on the Cookies page. You can change or withdraw your consent at any time via “Cookie settings” in the footer; withdrawal applies for the future.
Trip planning and bookings
When you plan a trip with us we process what you tell us: name, contact details, travel dates and wishes and, for flights and accommodation, passport details, date of birth and details of fellow travellers. We need these to obtain offers and carry out bookings. The legal basis under the GDPR is performance of a contract or pre-contractual measures (Art. 6(1)(b)).
Where necessary to fulfil the booking, we pass this data to our partners: consolidators for flight tickets, hotels and accommodation, airlines, and GetYourGuide and Klook for activities. These partners process the data under their own responsibility and privacy policies; they may be located abroad. We advise on travel insurance orally or in writing; we do not broker insurance.
We keep booking records for as long as needed for handling, warranty and legal retention duties.
Affiliate links
Some links on this website lead to partners (for example for flights or hotels) and are marked as partner links. If you book through them we receive a commission; the price does not change for you. The partner programme runs through Travelpayouts. Its script only loads after you have agreed to marketing cookies.
Services used
We use these services where they are active on this website. They only load with your consent.
Cal.com External media
Online booking of the free first call.
- Provider
- Cal.com, Inc., San Francisco (USA)
- Legal basis
- Consent (Art. 6(1)(a) GDPR); the calendar only loads after you agree.
- Transfer
- Transfer to the USA based on standard contractual clauses or the Data Privacy Framework.
- Provider privacy policy
- cal.com/privacy
Travelpayouts Drive Marketing
Affiliate programme for travel offers: recognises links to partners (e.g. flights, hotels) and attributes bookings to our account.
- Provider
- Travelpayouts (Anbieter siehe travelpayouts.com/privacy-policy)
- Legal basis
- Consent (Art. 6(1)(a) GDPR, Art. 31(1) FADP); the script only loads after you agree.
- Transfer
- Transfer abroad possible; based on standard contractual clauses.
- Provider privacy policy
- www.travelpayouts.com/privacy-policy/
Travelpayouts Flugsuche (White Label) Marketing
Flight search from our partner on the “Flights” page: loads the search form and results from Travelpayouts or Aviasales and attributes bookings to our account.
- Provider
- Travelpayouts / Aviasales (Anbieter siehe travelpayouts.com/privacy-policy)
- Legal basis
- Consent (Art. 6(1)(a) GDPR, Art. 31(1) FADP); the flight search only loads after you agree or click “Start flight search”.
- Transfer
- Transfer abroad possible; based on standard contractual clauses.
- Provider privacy policy
- www.travelpayouts.com/privacy-policy/
Recipients
We only pass personal data to service providers we need to run this website and to plan your trip: Hostinger (hosting and email), the travel partners named above as part of a booking and, only with your consent, the services under “Services used”. Some recipients are located abroad, including outside Europe. We do not sell data.
Your rights
You can request information about your data at any time and have it corrected, deleted or its processing restricted. You can object to processing, withdraw consent and receive your data in a common format. Write to us at info@haasbookings.com.
You can lodge a complaint with the competent supervisory authority; in Switzerland that is the Federal Data Protection and Information Commissioner (EDÖB).
Changes
We update this policy when our website, our offer or the legal situation changes. The version published here applies.