Privacy policy
What data we collect when you book a journey, who it is shared with, how long we keep it and how to have it erased.
Last updated: 8 September 2026
1. Data controller
Valais Prestige Transport Sàrl
Rue du Coppet 12, 1870 Monthey, Switzerland
UID: CHE-145.861.565
Phone: +41 78 345 00 51
E-mail: info@valaisprestigetransport.ch
This policy describes how Valais Prestige Transport ("VPT", "we") processes personal data in connection with its website www.valaisprestigetransport.ch and its transport services.
It is drawn up in accordance with the Swiss Federal Act on Data Protection (FADP) and its ordinance (DPO). Where the European General Data Protection Regulation (GDPR) applies — in particular for clients residing in the European Union — the corresponding provisions are also complied with.
2. Data we process
2.1 Booking and service data
- identity: surname, first name;
- contact details: phone number, e-mail address, language of correspondence;
- journey data: pick-up and destination addresses, date and time, number of passengers, number of pieces of luggage, flight or train number;
- special needs announced: child seat, ski equipment, animal, intermediate stop, accessibility needs;
- free-text remarks you send us;
- history of journeys and exchanges (e-mail, WhatsApp, phone).
2.2 Billing data
Billing address and company name for corporate clients, amounts, invoices and payment status.
No payment takes place on this site. It has no basket and no card form. Payments are made outside the site: in cash or by card on board, by TWINT, by bank transfer, or on invoice.
When you pay by card or by TWINT, the transaction data is processed by the provider concerned, not by us. We never have access to your card number: we only see the payment receipt.
2.3 Browsing data
The site is made of static pages: it has no database and no user accounts, and no audience measurement tool is installed on it. No script follows your browsing from one page to the next, and nothing allows you to be recognised from one visit to the next.
Our hosting provider nevertheless processes, for the security and availability of the service, the IP address, browser and device type, date and time of access, and the technical logs needed to protect against abuse. It gives us access to aggregated traffic statistics — number of requests, data volume, most requested addresses — which allow neither you to be identified nor your visit to be reconstructed.
2.4 Automatic distance calculation
When you enter a pick-up point and a destination in the form, these two addresses are sent to a service on our site, which in turn queries the open mapping services Nominatim and OSRM to obtain the distance and duration of the journey. Your IP address is not passed on to them: the request leaves from our server, not from your browser. Only the place names travel, and the result is kept for one month in technical memory so that the same journey is not calculated twice.
2.5 Marketing communications
We currently send no newsletter or promotional message, and this site offers no subscription form. Should this change, messages would only be sent with your prior consent, which you could withdraw at any time.
2.6 Sensitive data
We do not collect sensitive data within the meaning of art. 5 let. c FADP. If you spontaneously give us information about your health or mobility so that we can adapt the service, that data is used only to perform the journey and is not kept beyond it.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Handling requests, preparing quotes, performing journeys | Performance of the contract and pre-contractual steps |
| Communicating with you before, during and after the service | Performance of the contract |
| Passing details to the chauffeur assigned to the journey | Performance of the contract |
| Calculating the distance and the price | Pre-contractual steps |
| Invoicing, collection, debt recovery | Performance of the contract and legal obligation |
| Retention of accounting records | Legal obligation (art. 958f CO) |
| Security and availability of the site, prevention of abuse | Legitimate interest |
| Defence of our rights in the event of a dispute | Legitimate interest |
No automated individual decision within the meaning of art. 21 FADP is taken about you, and we do not carry out any profiling.
4. Recipients
We neither sell nor rent personal data. It is shared only with the following recipients, and only to the extent necessary:
| Recipient | Data shared | Location |
|---|---|---|
| Chauffeurs and partner companies performing the journey | First name, surname, phone, addresses, time, special needs | Switzerland |
| Cloudflare, Inc. — website hosting | IP address and technical logs; pick-up and destination addresses entered, during distance calculation only | US company, pages served from the data centre closest to the visitor |
| Google Ireland Limited — business e-mail | Requests sent by e-mail and correspondence | European Union and United States |
| Meta Platforms Ireland Ltd — WhatsApp | Requests sent by WhatsApp and the conversation that follows | Ireland and United States |
| OpenStreetMap Foundation and Project OSRM — distance calculation | Only the pick-up and destination addresses entered | United Kingdom and European Union |
| TWINT SA — mobile payment | Transaction data when you pay by TWINT | Switzerland |
| myPOS — in-vehicle payment terminal | Transaction data when you pay by card on board | United Kingdom and European Union |
| Accountancy firm | Billing data | Switzerland |
| Authorities, insurers, legal advisers | As required | Switzerland |
About WhatsApp. The booking button opens your own WhatsApp app with a pre-filled message: you remain free to send it or not. Once you send it, the conversation is routed and stored by Meta under its own terms, over which we have no control. If you would rather avoid this channel, the form offers sending by e-mail, and the phone remains open.
Requests sent by e-mail arrive directly in our business mailbox info@valaisprestigetransport.ch. They pass through no third-party form service and are stored in no online database. Only the people in charge of bookings have access to them.
5. Transfers abroad
A transfer to a country whose legislation does not ensure adequate protection takes place only with appropriate safeguards within the meaning of art. 16 FADP: the provider's membership of the Swiss–U.S. Data Privacy Framework, which Switzerland has recognised as adequate for certified companies; or standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC), supplemented where necessary by technical measures; or your express consent in the cases provided for by law.
A provider's certification under the Data Privacy Framework is checked individually: it does not follow from the mere fact that the provider is established in the United States.
6. Retention periods
| Category | Period |
|---|---|
| Requests that led nowhere | 12 months |
| Booking data and journey history | 10 years after the last service, the limitation period for contractual claims (art. 127 CO) |
| Accounting records, invoices, contracts | 10 years (art. 958f CO) |
| Hosting provider's technical logs | According to Cloudflare's policy, from a few days to a few months |
| Lost property and related records | 30 days, as provided for in our terms and conditions |
At the end of these periods, the data is deleted or anonymised, unless a legal retention obligation applies or the data is needed to establish, exercise or defend a legal claim.
7. Cookies and similar technologies
This site sets no cookies. No audience measurement cookie, no advertising cookie, no social network pixel, no retargeting tool. No third-party script is loaded: the fonts are served from our own domain rather than by an external provider, precisely so that your browser does not have to announce itself elsewhere.
During your visit, the form temporarily keeps the distances already calculated in your browser's memory, so as not to run the same calculation again each time you make a change. This memory is cleared when the tab is closed and never leaves your device.
One exception is worth pointing out: the contact page displays a map provided by OpenStreetMap. To display it, your browser contacts openstreetmap.org directly, which then knows your IP address. It is the only element of the site that calls a third-party server, and it concerns that page only.
No consent banner is therefore needed, including for visitors located in the European Union. Should a tracking tool ever be added, a prior consent mechanism would be put in place and this policy updated.
8. Security
We take appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration and disclosure: end-to-end encrypted communications over HTTPS, enforced on browsers for every subsequent visit; no exposed database; a cap on the number of calls to the calculation service to prevent abuse; access control on the business mailbox; data passed to chauffeurs limited to the strict minimum; confidentiality undertakings from staff and partners.
No transmission over the internet can, however, be guaranteed to be entirely secure.
In the event of a data security breach entailing a high risk for the persons concerned, the FDPIC and, where applicable, those persons are informed in accordance with art. 24 FADP.
9. Your rights
- access: obtain confirmation that processing concerning you is taking place and receive the related information (art. 25 FADP);
- rectification of inaccurate data (art. 32 FADP);
- erasure or destruction, within the limits of legal retention obligations;
- objection to processing based on a legitimate interest;
- withdrawal of consent at any time, without affecting the lawfulness of earlier processing;
- delivery or transfer of your data in a commonly used electronic format (art. 28 FADP);
- restriction of processing and portability, where the GDPR applies.
These rights are exercised at info@valaisprestigetransport.ch. We may ask for proof of identity to avoid disclosing data to an unauthorised third party. A reply is given within 30 days; if more time is needed, you are informed.
Right to lodge a complaint: you may contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern — www.edoeb.admin.ch. Where the GDPR applies, you may contact the supervisory authority of your country of residence.
10. Third-party data you give us
When you book a journey for someone else — a colleague, a guest, a family member, a guest of a partner hotel — it is up to you to have the right to pass on their data to us and to inform them of this policy.
11. External links and social networks
The site links to third-party sites: WhatsApp, our Google listing, Instagram, TikTok and OpenStreetMap. We have no control over their practices and accept no liability in that regard. Visiting them is subject to their own privacy policies.
12. Changes
We may amend this policy at any time, in particular in the event of legal or technical changes. The applicable version is the one published on the site on the day you consult it. In the event of a substantial change, our clients are informed.
A question about your data?
Write to us: we reply within the thirty days the law allows — in practice much sooner.