Privacy Policy

1. Overview and scope

We take the protection of your personal data seriously. This privacy policy explains what data we collect, why we process it and what rights you have. It applies to our website motos-and-wonders.ch, to our guided motorcycle and Vespa tours and to our communication with you.

It is governed by the Swiss Federal Act on Data Protection (FADP, SR 235.1). As we also welcome guests from the European Economic Area, the EU General Data Protection Regulation (GDPR) applies to them in addition. You will find the supplementary information in Section 23.

This policy uses the terminology of Swiss law. «Personal data» and «processing» have the same meaning as under the GDPR.

2. Data controller

Motos & Wonders KLG
c/o Dominik Recktenwald / Paulina Milke
Thörigenstrasse 13
3368 Bleienbach
Switzerland

UID: CHE-312.790.698
Email: team@motos-and-wonders.ch
Phone: +41 (0)77 445 59 09

Contact for data protection matters: Paulina Milke, reachable via the contact details above.

3. Principles

We process personal data in good faith, proportionately and only for purposes that are recognisable when the data is collected (Art. 6 FADP). We do not collect more data than we need for the purpose in question, and we do not keep it longer than necessary.

4. What data we process

Depending on how you get in touch with us, we process:

• Master data: name, address, email address, phone number
• Booking data: tour and date booked, room preference, details of your pillion passenger, billing and payment details
  • date of birth for tours with a minimum age and, for minors, the name and consent of the legal guardian
  • details of other persons you book for and of your emergency contact. Please inform these persons about this privacy policy.
• Vehicle and rider details: type of motorcycle, riding experience, driving licence category and, on request, proof of your driving licence and insurance
• Emergency and health details: emergency contact and details of allergies, diet, medication or health restrictions (see Section 15)
• Communication data: content and history of your enquiries by email, phone, contact form, WhatsApp or via our pages on social networks
• Website usage data: server log files, cookies and similar technologies (see Sections 6 and 7)
• Image and sound recordings: photos and videos from our tours (see Section 16)

5. Purposes and legal bases

In Switzerland, private individuals and companies may process personal data as long as they comply with the principles set out in Section 3. A justification within the meaning of Art. 31 FADP is only required if the processing would violate the privacy of the person concerned. The column «Basis in Switzerland» therefore names the context from which the processing arises, not a legal permission on the GDPR model.

6. Hosting and server log files

Our website is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Geneva, Switzerland. The data remains in Switzerland.

Each time the website is accessed, the server automatically records technical details: IP address, date and time, page accessed, amount of data transferred, browser type and operating system, and the previously visited page. These logs are kept only for as long as is necessary for the operation and security of the website. We do not combine them with other data.

We have a data processing agreement with Infomaniak in accordance with Art. 9 FADP.

7. Cookies and consent

Cookies are small files stored on your device. We distinguish four categories:

• Functional: necessary for operation, for example for the language setting, storing your cookie choice and the form functions. These cookies are always active.
• Preferences: store settings that make the website easier to use.
• Statistics: used for audience measurement (Section 11).
• Marketing: used to measure the success of our advertising (Section 12).

The last three categories are only set once you have consented in the cookie banner. Until then, no cookies in these categories are set and the Meta Pixel is not loaded. Without your consent, Google Analytics only sends cookieless signals (Google Consent Mode), for example that a page has been viewed, together with technical details about your browser. No cookies are set that would recognise you on later visits.

You can change or fully withdraw your consent at any time via the «Manage consent» link on every page. The withdrawal takes effect from the time of the change. An overview of all cookies used, with their purpose and duration, can be found in our Cookie Policy.

8. Contact and booking forms

Our website offers forms for contact enquiries, bookings, vouchers and individual tour requests. The data you enter there is stored in our website’s database and also sent by email to team@motos-and-wonders.ch. For bookings, we create a PDF summary, which you also receive by email.

Mandatory fields are marked as such. All other information is voluntary.

If you book for other persons, for example for your pillion passenger or a second rider, you enter their data on their behalf. Please inform these persons about this privacy policy (clause 7 of our Terms and Conditions). For participants under 18, the booking is made by a legal guardian or with their written consent; the consents under this policy are given by the legal guardian (clause 8 of our Terms and Conditions).

9. Spam protection

Our forms contain a field that is invisible to visitors and is only filled in by automated programs (honeypot). Submissions in which this field is filled in are discarded. No additional data is collected for this.

Where necessary, we additionally protect forms with Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When a form protected in this way is loaded, Turnstile checks in the background, based on technical characteristics of your browser such as your IP address and browser and device information, whether the input comes from a human. Data may be transferred to the USA in the process.

For security reasons, this service is active before any consent is given. Without it, the forms concerned would not be reliably protected against misuse. Further information can be found in the Turnstile Privacy Addendum and in Cloudflare’s privacy policy.

10. Payment processing

Online payment via Stripe. You pay for day tours, vouchers and the deposit for multi-day tours online via Stripe, operated by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, with the involvement of Stripe, Inc. in the USA. You enter your payment details on a Stripe payment page or, when buying a voucher, in a Stripe payment field in our form; in both cases they go directly to Stripe. We do not receive card numbers or account details, only confirmation of the payment, the amount, the time and the email address you provided to Stripe. Further information can be found in Stripe’s privacy policy.

Payment methods. In addition to credit cards, Apple Pay, Google Pay, Klarna and Amazon Pay are available depending on the offer. If you choose one of these payment methods, its provider receives the details needed for the payment and processes them under its own responsibility in accordance with its privacy policy: Apple Distribution International Ltd. (Ireland), Google Ireland Limited, Klarna Bank AB (Sweden) or Amazon Payments Europe S.C.A. (Luxembourg). Klarna may check your identity and creditworthiness.

Payment by invoice. We send you the balance for a multi-day tour as an invoice with a QR payment slip; it is due 30 days before the start of the tour. In individual cases, we also invoice other amounts in this way. When you pay by bank transfer, we learn your name and IBAN from the credit advice. We use this information solely to allocate the payment and for accounting. Your bank and our bank are involved in the transfer and process the data as part of the payment transaction.

Payment records are subject to the statutory retention period of ten years (Art. 958f of the Swiss Code of Obligations).

11. Audience measurement

We want to know which content on our website is used. For this purpose, we use two services. Both only set cookies after you have consented to the «Statistics» category; without consent, Google Analytics only sends the cookieless signals described in Section 7.

Google Analytics from Google Ireland Limited, integrated via the WordPress plugin Google Site Kit. Your IP address is shortened before it is analysed. We have concluded Google’s data processing amendment.

Matomo in the version hosted by Incsub, LLC (WPMU DEV), USA. It records page views, time spent on the page and the previously visited page.

Both services are used solely for statistical analysis. We do not combine the data with your booking data.

In addition, the Google Tag Manager from Google Ireland Limited is integrated, a tool for managing scripts. It does not set any cookies itself and does not analyse any data; for technical reasons, Google receives your IP address when it is loaded.

12. Advertising and performance measurement

We advertise on Facebook and Instagram. To see whether our ads lead to enquiries, we use the Meta Pixel from Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland.

The pixel is only loaded if you have consented to the «Marketing» category. It then records that you have visited our website and enables Meta to show you more relevant advertising and to report the effectiveness of our ads to us in aggregated form. We can also show targeted advertising on Facebook and Instagram to people who have visited our website. Without consent, no data is transmitted to Meta.

We also transmit these events via Meta’s Conversions API. This, too, only happens if you have consented to the «Marketing» category. If you enter contact details in a form on our website, for example your email address or phone number, they are encrypted (hashed) in your browser and transmitted to Meta. This allows Meta to match your visit to a Meta account (automatic advanced matching). The details are not transmitted in plain text.

You can object at any time via «Manage consent» and also in the ad settings of your Meta account. Further information can be found in Meta’s privacy policy.

13. WhatsApp, social networks and reviews

Advice chat. Our website has a button that takes you to a WhatsApp chat with us. When you click it, you leave our website. Communication via WhatsApp is subject to WhatsApp’s terms and privacy policy (Meta Platforms Ireland Ltd.). Meta receives your phone number and information about your use of the service. If you do not want this, you can reach us just as well by email or phone.

Community. We run a WhatsApp community with an announcement group and two sub-groups. Joining is entirely voluntary via an invitation link; we do not add anyone without their involvement. Only we post in the announcement group, and your number is not visible to the other members there. You can leave the groups yourself at any time.

Please do not send us health details or other sensitive data via WhatsApp or social networks. Use email or the booking form instead.

Social networks and directories. We have our own pages on Facebook, Instagram, LinkedIn, Reddit and Tripadvisor, as well as a Google Business Profile and a listing on localsearch.ch. If you visit these pages or contact us there, the provider in question processes your data under its own responsibility in accordance with its terms. We see what you share with us publicly or by message there and use it to reply to you. For the page insights of our Facebook page, we are jointly responsible with Meta; Meta has undertaken in an agreement with us to fulfil your rights in this respect.

Reviews and testimonials. After a tour, we occasionally ask you personally by WhatsApp or email whether you would like to write us a review. Reviews on Google or Tripadvisor are public there and subject to the terms of these providers. On our website, we only show reviews with your consent, in full or as an excerpt, and only with your first name and the tour. You can withdraw your consent at any time; we will then remove the review from our website.

14. Fonts

The fonts used on our website are stored on our own server. No connection to Google is established for them when you visit the website.

15. Data relating to our tours

When you book, we ask you for an emergency contact, i.e. the name and phone number of a person we may contact in an emergency. This is voluntary; without it, we cannot notify anyone close to you in an emergency. Under clauses 10 and 12 of our Terms and Conditions, you must inform us before the tour of any health restrictions and medication that may affect your ability to ride. Details of allergies and diet are voluntary and help us choose restaurants.

Health data is sensitive personal data within the meaning of Art. 5(c) FADP. We process it solely for safety on tour and on the basis of your explicit consent, which you give in the booking form. Only Dominik Recktenwald and Paulina Milke have access to it. We do not pass this information on to hotels, restaurants or other participants unless you wish us to, for example in the case of a food allergy. For partner tours under clause 16 of our Terms and Conditions, the partner whose guides lead the tour receives the emergency contact and the safety-related details.

We delete emergency and health details within three months of the end of the tour.

We only send hotels and accommodation providers the details needed for the reservation, usually your name and room occupancy. If an incident, exclusion or complaint occurs on a tour, we record the time, place and reason in order to protect our rights and those of the participants.

16. Photos and videos

We take photos and videos on our tours. We make them available to the participants of the same tour for private use and use group shots, atmospheric images and general impressions of the tour for our website, our social media channels and our advertising. This is based on our overriding interest in documenting and marketing our tours (Art. 31(1) FADP; for guests from the EEA, Art. 6(1)(f) GDPR).

You can object to publication in writing at any time, before, during or after the tour, by email to team@motos-and-wonders.ch. After an objection, we no longer use any recordings in which you can be identified and remove recordings already published from our own channels, insofar as this is possible and reasonable. We have no influence on content that third parties have already shared.

We only use recordings in which you are particularly featured or portrayed for advertising purposes with your separate consent, which you can withdraw at any time.

What other participants record themselves is their responsibility. Our Terms and Conditions (clause 22) oblige them to publish recordings in which you can be identified only with your consent.

17. Disclosure to third parties

We only pass on your data insofar as this is necessary for the purposes stated or required by law. Recipients are:

• Infomaniak Network SA (hosting and email delivery), Switzerland
• Stripe (online payments), Ireland and USA
• Banks as part of the payment transaction for bank transfers
• Google Ireland Limited (audience measurement, Tag Manager, Business Profile, storage of our business records in Google Drive), Ireland and USA
• Cloudflare, Inc. (spam protection), USA
• Meta Platforms Ireland Ltd. (WhatsApp, Facebook, Instagram, advertising), Ireland and USA
• Providers of the payment method you choose (Apple, Google, Klarna, Amazon), if you choose one of these payment methods
• Incsub, LLC / WPMU DEV (forms and audience measurement), USA
• Participants of the same tour, insofar as we share the tour photos in the group
• Hotels, accommodation providers and partner businesses, insofar as necessary for your tour
• Partner operators for partner tours under clause 16 of our Terms and Conditions, insofar as necessary for guiding, vehicles and safety
• Our fiduciary and public authorities as part of legal obligations

If you conclude a rental agreement with the partner on site during a partner tour, the partner processes the necessary data under its own responsibility in accordance with its privacy policy.

We have data processing agreements in accordance with Art. 9 FADP with service providers who process data on our behalf. We do not sell any data.

18. Transfer of data abroad

Some of the recipients named process data outside Switzerland, in particular in the USA. If data is transferred to a country without an adequate level of data protection under Annex 1 of the Data Protection Ordinance, we rely on appropriate safeguards under Art. 16 FADP, usually the standard contractual clauses recognised by the European Commission with Swiss-specific additions.

19. Retention

20. Data security

All transmissions on our website are secured with TLS encryption, recognisable by the padlock in the address bar. Access to our systems is restricted to Dominik Recktenwald and Paulina Milke and protected by individual passwords. We keep software and extensions up to date.

21. Profiling and automated decisions

We do not make any automated individual decisions that have legal consequences for you. If you have consented to the «Marketing» category, Meta analyses your visit to select advertising (Section 12). If you choose Klarna as your payment method, Klarna may decide automatically on the payment under its own responsibility (Section 10). Beyond this, no profiling takes place.

22. Your rights

You have the right to:

• information about the data we process about you (Art. 25 FADP)
• correction of inaccurate data (Art. 32(1) FADP)
• deletion or destruction of your data and to prohibit a particular processing or disclosure (Art. 32(2) FADP)
• receive or transfer your data in a common format (Art. 28 FADP)
• withdraw consent at any time without giving reasons

To exercise these rights, an informal message to team@motos-and-wonders.ch or to our postal address is sufficient. For security reasons, we may ask for proof of identity. Statutory retention obligations may prevent deletion; in this case, we restrict the processing accordingly.

If you disagree with our response, you can contact the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.

23. Additional information for individuals in the European Economic Area

If you are habitually resident in the EEA, the GDPR also applies to you. The legal bases for our processing can be found in the table in Section 5.

You have the rights under Art. 15 to 22 GDPR: access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on a legitimate interest. You can object to direct marketing at any time without giving reasons.

You also have the right to lodge a complaint with a supervisory authority, usually the one in your country of residence.

24. Changes

We update this privacy policy when our services, our website or the legal requirements change. The version published on this page with the date stated on this page applies. This privacy policy is written in German; in the event of any discrepancy between language versions, the German version prevails.

25. Contact

Motos & Wonders KLG
Thörigenstrasse 13, 3368 Bleienbach, Switzerland
team@motos-and-wonders.ch
+41 (0)77 445 59 09