Privacy Policy

1. What is this Privacy Notice about?

This privacy notice (the “Notice”) outlines the principles and rules under which Port-Gitana SA (“Port-Gitana” or “We”) collects and/or processes personal data relating to you through the use of this website (the “Website”), primarily when you use the Website, submit data via the contact form, or subscribe to the newsletter. Please read this Notice carefully to understand how we process your personal data. By accessing the Website or providing us with information through it, you acknowledge the processing of your personal data in accordance with this Notice.

2. Who is responsible for processing your personal data?

Port-Gitana, headquartered at Route de Thonon 52, 1222 Vésenaz, Switzerland, and registered with the Geneva Commercial Register under number UID CHE-660.0.351.025-2, is the data controller for the personal data addressed in this Notice. We hope this Notice answers your questions about how we process your personal data. If you have any questions or comments in this regard, please contact us by email at: reception@portgitana.ch

3. What personal data do we collect, for what purpose, and under what legal basis?

We are based in Switzerland and therefore subject to Swiss law, including the Federal Act on Data Protection (FADP), as well as the GDPR, whose provisions may apply in certain cases. The competent supervisory authority for data protection is the Federal Data Protection and Information Commissioner (FDPIC).

When you browse our Website, use the contact form, or subscribe to our newsletter, we collect personal data about you. The processing of your data is primarily based on the following legal grounds:

  • Your prior explicit consent (Art. 6 para. 1 lit. a GDPR), e.g., if you wish to be contacted directly or subscribe to our newsletter. You may withdraw your consent at any time. This does not affect the lawfulness of any processing carried out before the withdrawal.
  • The performance of our contractual obligations to you (Art. 6 para. 1 lit. b GDPR).
  • Compliance with our legal obligations (Art. 6 para. 1 lit. c GDPR).
  • Our legitimate interests or those of third parties, unless overridden by your interests or fundamental rights and freedoms (Art. 6 para. 1 lit. f GDPR). This includes, in particular, offering our professional services, IT security, and fraud prevention.

Data Processing When Visiting Our Website (Log Files)
When you visit our Website, our hosting provider Infomaniak Network SA, Rue Eugène-Mariani 25, 1227 Les Acacias, Switzerland, temporarily stores access data in a log file. The following data is collected and stored until automated deletion:

  • IP address of the requesting computer;
  • Date and time of access;
  • Name and URL of the accessed file;
  • Website from which the access occurred, including search engine used;
  • Your operating system and browser (including type, version, and language settings);
  • Device type (for mobile access);
  • City or region of access;
  • Name of your internet service provider.

This data is processed to enable the use of the Website, ensure system security and stability, analyze errors and performance, and optimize the Website (legal basis: Art. 6 para. 1 lit. f GDPR).

Contact Form
When you contact us via the Website’s contact form, we process the personal data you provide in order to contact you as requested and handle your inquiry (legal basis: Art. 6 para. 1 lit. a, b, or f GDPR). The following data is collected, with required fields marked with an asterisk (*):

– First name;
– Last name;
– Email address;
– Phone number.

You can also subscribe to our newsletter by checking the corresponding box at the bottom of the form. More information on newsletters is provided below.

We use the software to manage contacts submitted through the contact form. Your data may be stored in a database. If necessary for the operation of the software, Port-Gitana may access your data. For details on third-party processing and potential international transfers, refer to section 4 of this Notice.

Newsletter Subscription and Marketing
When you subscribe, we send you our newsletter with information about our activities, events, products, and current offers. Your prior explicit consent (Art. 6 para. 1 lit. a GDPR) is the legal basis for sending newsletters. You may revoke your consent at any time using the unsubscribe link on our Website.

We may also send you invitations to events. Additionally, emails related to specific products or services you have purchased may be sent based on our contractual relationship or legitimate interest (Art. 6 para. 1 lit. b or f GDPR).

Links to Other Websites and Social Media
Our Website includes links to other websites not subject to this Privacy Notice, such as third-party booking platforms (Zenchef, Mews) or social media pages (Facebook, Instagram, Pinterest, LinkedIn). We have no control over those third-party websites or their privacy policies. Please read their privacy notices before submitting any personal data.

For your reference, here are the privacy policies of Zenchef and Mews:
(Add links to Zenchef and Mews privacy policies)

Use of Cookies (General Information)
When browsing our Website, cookies, pixels, and other trackers (“Cookies”) may be stored on your browser or device. A cookie is a small file, often encrypted, that identifies your device and is stored upon visiting a website. Cookies are used to enable website functionality, improve efficiency, and provide data to the site owners.

When visiting our Website for the first time, you’ll see a cookie banner providing privacy information and giving you the option to accept, refuse, or manage your cookie preferences.

We may also use technically necessary cookies that do not require prior consent.
More information on cookies can be found [here].

No Automated Decision-Making
We do not use automated decision-making or profiling without your explicit prior consent, unless authorized by law. If such processing occurs, we will inform you of the logic involved and potential consequences.

4. Disclosure of Your Personal Data to Third Parties

Your personal data may be disclosed to third parties when necessary for the operation of the Website, such as to our service providers managing technical components (e.g., the software for the contact form). We may also disclose data when required by law, public authorities, or to protect our or third-party rights.

5. Transfer of Your Personal Data Abroad

Your data is mainly processed in Switzerland. However, in some cases, it may be transferred abroad. If transferred outside Switzerland or the EU/EEA to a controller or processor, we ensure adequate data protection through appropriate safeguards. This includes the use of Standard Contractual Clauses (SCCs) recognized by the Swiss FDPIC, other contractual measures, or legal exceptions (e.g., contract necessity, consent, protection of vital interests).

6. Security and Confidentiality

We implement appropriate technical and organizational measures to protect your personal data and prevent security breaches. However, please note that no digital transmission or storage of personal data is completely secure.

7. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes described above or to comply with applicable legal retention obligations and limitation periods, or where there is an overriding private or public interest, or upon your request for delivery or deletion (where possible). Data is deleted when no legal obligation or legitimate interest remains.

8. Your Rights

Depending on the applicable law, you may have the following rights. Each of these may be restricted by our or others’ legitimate interests, legal obligations, or other grounds:

  • Right to Information: See this Notice.
  • Right of Access: You have the right to know whether we process your personal data and to access such data.
  • Right to Rectification: You can request the correction or completion of your personal data.
  • Right to Erasure: You may request deletion of your data.
  • Right to Restrict Processing: You may request restricted processing of your data.
  • Right to Data Portability: You have the right to receive your data in a structured, commonly used, machine-readable format and to transfer it to another controller.
  • Right to Object: You may object to the processing of your data.
  • Right to Withdraw Consent: You may withdraw consent at any time. This does not affect processing conducted before withdrawal.
  • Right to File a Complaint with a Supervisory Authority

Please ensure the data you provide is accurate and up to date. Notify us of any changes.

9. Changes to This Notice

This Notice was last updated on May 12, 2025. We may update this Notice at any time. Changes will be posted on this page. Please review this Notice regularly for updates.