At SKY – Privat Shuttle Pacheco Pereira (“Sky Privat Zurich”, “we”, “us”), the protection of your personal privacy and confidential travel data is of paramount importance. This policy explains how we collect, process, and protect your information when using our website and private transfer services.
Data controller (Verantwortliche Stelle)
SKY – Privat Shuttle Pacheco Pereira
Sole Proprietorship (Einzelunternehmen), owner: Nelson Ricardo Pacheco Pereira
Forchstrasse 157, 8132 Egg b. Zürich, Switzerland
UID: CHE-486.628.045
Email: info@skyprivatzurich.com
Website: https://skyprivatzurich.com
Personal data we collect
When booking a transfer or submitting an inquiry, we collect only data strictly necessary to execute the transportation contract:
- Contact details: First and last name, email address, mobile phone number.
- Trip parameters: Pickup and destination addresses, date, scheduled time, passenger count, luggage volume.
- Flight data: Airline, flight number, airport terminal (for real-time arrival tracking and meet & greet).
- Corporate billing: Company name, Swiss/EU VAT registration number, billing address (where requested).
- Payment information: Processed exclusively through encrypted PCI-DSS payment gateways. We never store credit card numbers on our servers.
- Customer notes: To look after returning guests, we see how many rides you have taken with us and their total, and may keep short notes about your preferences (for example a usual pickup address or a child seat), linked to your phone number or email address.
Purpose & legal basis of processing
- Fulfillment of transportation contract (Art. 6 para. 1 lit. b GDPR / Art. 31 revDSG): Executing rides, dispatching your chauffeur, tracking flight touchdowns at Zurich Airport, and sending booking and ride emails.
- Statutory legal obligations (Art. 6 para. 1 lit. c GDPR / Art. 31 revDSG): Compliance with Swiss commercial accounting, tax, and commercial transport documentation requirements.
- Legitimate interests: Ensuring vehicle and passenger safety, fraud prevention, route optimization, and looking after returning guests.
Reviews of your ride
The day after your ride we may email you once to ask how it went. Your rating and comment are stored with your booking and read only by us, to improve the service (legitimate interest). The “Don’t ask me again” link in that email stops further requests; to honour it, we keep your email address on a suppression list.
Your words appear on this website only if you tick the box that allows it, and only with the name you choose (for example “Anna K.”). You can withdraw this consent or ask us to delete your review at any time by writing to info@skyprivatzurich.com.
If you choose to also review us on Google, that review is published by Google under its own terms and privacy policy.
Third-party service processors
We use the following service providers, who process data on our behalf under data processing agreements:
- Vercel Inc. (USA): Hosting of this website and its server functions, including the server logs and anonymous visitor statistics described below.
- Stripe Inc.: Payment processing and card pre-authorizations under PCI-DSS Level 1 compliance.
- TomTom Maps: Geocoding, route distance calculation, and traffic estimation. No passenger names transmitted.
- Google Maps Platform (Google LLC, USA): Address suggestions while you type and the coordinates of the place you pick. The typed text and language are sent from our server; no names or contact details. The map picture of your route in the booking form, however, is loaded by your browser directly from Google, so Google receives your IP address, browser details and the coordinates of the pickup and drop-off. Google’s Privacy Policy and the Google Maps Terms of Service also apply.
- OpenStreetMap services (Photon by komoot, Nominatim, OSRM): Address suggestions while you type when Google is unavailable, and route distance when TomTom is unavailable. Only the address text is sent, from our server; no names, contact details or IP addresses.
- Resend Inc. (USA): Delivery of booking emails and the links to your eTicket and invoice.
- Supabase Inc. (USA): Our booking database and the archive of issued invoices, stored in a data centre in Zurich, Switzerland.
- Our chauffeur’s calendar: To plan the day, our chauffeur’s calendar app reads the upcoming rides from a secret link (name, phone number, pickup place, flight). The provider of that app (for example Apple iCloud or Google Calendar, USA) stores these entries.
- WhatsApp (Meta Platforms): Only if you choose to write to us on WhatsApp; your messages are then subject to WhatsApp’s own privacy policy.
Transfers outside Switzerland
Vercel, Stripe, Resend, Google, Supabase and our chauffeur’s calendar provider are based in the USA, so data handled by them may be processed in or accessed from there; our database itself is stored in Zurich. We only use such providers on the basis of the Swiss-U.S. Data Privacy Framework where the provider is certified, or otherwise under the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner. TomTom (Netherlands) and the OpenStreetMap services are based in Europe, in countries the Federal Council recognises as providing adequate data protection.
Website visits, cookies & server logs
- No tracking cookies: This website sets no advertising or tracking cookies. The only cookie is a login cookie for our own staff area.
- Booking form draft: While you fill in the booking form, your browser keeps what you have entered in its session storage, so it isn’t lost if you come back from the payment page, for example. This draft stays on your device, is not sent to us, and is deleted when you close the tab.
- Visitor statistics: We use Vercel Web Analytics and Speed Insights to count page views and measure loading speed. They work without cookies, do not identify you, and only receive the page address without booking references or other details from the link.
- Server logs: Like any website, our hosting records technical data for each request (IP address, time, page, browser type). These logs are used to keep the site secure and running, and are deleted after a short period.
- Abuse protection: To stop password guessing and booking lookups by trial and error, we count failed attempts per IP address. These counters are deleted after 15 minutes.
Data storage & retention periods
- Requests without a ride: Online requests, and bookings that were declined or cancelled free of charge, are anonymized 6 months after the requested date. Enquiries by email or WhatsApp that do not lead to a booking are deleted after 6 months.
- Operational trip data: 12 months after the ride we delete your phone number, email address, flight details, nameboard and special requests, together with the copies of our emails and the ride’s history. Customer notes that are no longer linked to any contact details are deleted too.
- Statutory accounting records: What the accounts need (name, company, billing address, route, date, price and payments), and the issued invoices exactly as sent (including an email address printed on them), are kept for 10 years from the end of the business year under the Swiss Code of Obligations (Art. 958f OR), then anonymized.
Your rights under Swiss law (revDSG & GDPR)
As a data subject, you have the following rights regarding your personal information at any time:
- Right of access (Auskunftsrecht)
- Right to rectification (Berichtigung)
- Right to erasure (Löschung)
- Right to data portability
- Right to object (Widerspruch)
- Right to withdraw consent
To exercise your rights, please submit a written request with proof of identity to info@skyprivatzurich.com. We answer within 30 days, as the law requires, and usually much sooner.