Privacy Policy

How your personal data is handled

Last updated: 14 October 2026

This privacy policy explains which personal data I collect through www.switzerlandunscripted.com and when you book a hike, a private day or a travel planning session with me, why I collect it, who receives it and which rights you have.

I process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR), since many of my guests travel from the European Union.

1. Who is responsible

The controller is Urban Hikes and Alps by Giada Rocca, trading as Switzerland Unscripted, c/o Giada Rocca, Bahnhofstrasse 20, 8800 Thalwil, Switzerland. You can reach me by email at info@switzerlandunscripted.com or by phone at +41 78 240 80 30.

For any question about your data, write to info@switzerlandunscripted.com.

2. What data I collect and when

a) When you visit the website

The website is built and hosted on Wix. When you browse, Wix's servers automatically record technical data such as your IP address, browser and device type, the pages you visit, date and time and the website you came from. This is needed to deliver the pages, keep them secure and detect errors. Wix uses a few essential cookies for this.

Other services run only with your consent. On your first visit a banner, managed by Usercentrics, asks which services you accept. Only if you agree:

• Google Analytics 4, loaded through Google Tag Manager, measures how the website is used: pages viewed, length of the visit, device and browser information and an approximate location derived from your IP address. I look at these statistics only in aggregated form, to understand which pages are useful.
• The Tripadvisor reviews widget by MarketPushApps shows my latest reviews from Tripadvisor.
• The WhatsApp chat button by Certified Code lets you start a WhatsApp conversation with me.

If you don't agree, the website works the same way. You can change your choice at any time with the privacy button at the bottom left of every page.

The website also shows my reviews from Google through the Google Reviews app by Revit. To display them, your browser connects to the servers of the app and of Google, which can receive your IP address.

b) When you send a request

Tour request form: your name, email address and, if you give it, your phone number, when you will be in Zurich or Switzerland, how many people will join, the kind of experience you are looking for and your message.

Travel advisor form: your first name, agency or company, email address, country or time zone, the type of request, your clients' travel dates and the notes you choose to share about your clients. Please share only what is needed to prepare a proposal and leave out your clients' names. If you share data about your clients, you are responsible for informing them.

Newsletter: your email address. I use it only to send occasional trail notes and seasonal tips, and every email has a link to unsubscribe.

c) When you book or buy

Booking form: your name, email address, phone number and address, and your answers to the planning questions, such as travel dates, group size and ages, regions, preferences and budget range.

Some questions ask about physical considerations, mobility or accessibility needs. These are health data, a sensitive category of personal data. Answering them is up to you. If you do, I use them only to plan a day or an itinerary that suits you, I don't share them with anyone, and by answering you consent to this use. You can withdraw your consent at any time by writing to me.

Wix sends booking confirmations and reminders by email on my behalf.

Online payments are processed by Wix Payments and its payment partners. I never see your full card number: I only receive the confirmation, the amount, the payment method and, for cards, the last four digits. If you pay by TWINT, bank transfer or cash, I receive the details shown by your bank or by TWINT, such as your name, the amount and the reference.

When you buy the self-guided itinerary, I receive your name, email address, billing details and the order details, and the download link is sent to you by email.

If you create an account on the website, Wix stores your login email address and the profile details you add.

d) During a hike, a private day or a planning session

I use the information you share to organise the experience, for example your meeting point or hotel, food allergies or dietary needs for picnics and tastings, and your travel plans. If a planning session takes place by video call, the provider of the video call tool we agree on processes the call data.

e) When you write by email, WhatsApp, phone or social media

Emails to info@switzerlandunscripted.com are handled with Google Workspace. Messages on WhatsApp, Instagram or LinkedIn are also processed by those platforms under their own privacy policies. I use the content of your messages only to reply and to organise what you ask for.

3. Why I use your data

• To answer your requests and prepare a proposal.
• To plan, carry out and follow up your booking or session.
• To process payments, issue invoices and meet my accounting obligations.
• To send you the newsletter, if you subscribed.
• To run the website securely and, with your consent, to understand how it is used.
• To protect my rights in case of a dispute.

Where the GDPR applies, the legal bases are: the performance of a contract or steps before a contract (Art. 6(1)(b) GDPR), legal obligations such as accounting (Art. 6(1)(c)), my legitimate interest in running a secure website and answering messages (Art. 6(1)(f)), your consent for the newsletter, statistics and the optional services (Art. 6(1)(a)) and your explicit consent for health data (Art. 9(2)(a)).

4. Who receives your data

I don't sell your data. It is shared only with the service providers I need to run my business, and only as far as necessary:

• Wix.com Ltd., Israel, and its group companies: website and hosting, forms, bookings, online shop, members area, contact list, booking emails and payments through Wix Payments.
• Google Ireland Limited and Google LLC, USA: email through Google Workspace and, with your consent, Google Analytics and Google Tag Manager.
• Usercentrics GmbH, Germany: the cookie banner and the record of your choices.
• MarketPushApps: the Tripadvisor reviews widget, with your consent.
• Revit: the Google Reviews app that shows my reviews from Google.
• Certified Code: the WhatsApp chat button, with your consent.
• WhatsApp, a Meta company: if you write to me on WhatsApp.
• TWINT and banks: if you pay with them.
• Hotels, restaurants or other providers: only if you ask me to make a reservation for you, and only the data needed for it.
• Authorities: only when required by law.

5. Data processed abroad

Some providers process data outside Switzerland, in particular in Israel, in the European Union and in the United States. The Swiss Federal Council recognises Israel and the EU as offering an adequate level of data protection. For the United States, data is transferred to companies certified under the Swiss-U.S. Data Privacy Framework or, where this is not the case, on the basis of the standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner.

6. How long I keep your data

• Requests that do not lead to a booking: up to 24 months after our last contact.
• Bookings, invoices and payment records: 10 years, as required by Swiss accounting law.
• Answers about health or mobility: only as long as the booking they belong to, and I delete them earlier if you ask me after your experience.
• Newsletter: until you unsubscribe.
• Website statistics: at most 14 months.
• Your cookie choices: as long as needed to document them.

7. Cookies

Cookies are small files stored by your browser. Essential cookies from Wix and Usercentrics are needed for the website and for remembering your choices, and are always active. The other services are listed in the cookie banner by category: Functional for the Tripadvisor reviews widget and the WhatsApp button, Marketing for Google Tag Manager and Google Analytics. They are activated only if you accept them.

You can refuse or change your choice at any time with the privacy button at the bottom left of every page. You can also block or delete cookies in your browser settings: the website will still work, but some features may not be shown.

8. Your rights

You can ask me at any time which data I hold about you and receive a copy, have it corrected or deleted, object to its use, receive it in a common electronic format and withdraw any consent you gave, with effect for the future. Where the GDPR applies, you can also ask me to restrict the processing.

Write to info@switzerlandunscripted.com: the request is free of charge and I reply within 30 days. I may ask you to confirm your identity.

If you think your data is not handled correctly, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, or, if you live in the European Union, the data protection authority of your country.

9. Security

I protect your data with appropriate technical and organisational measures. Access to my accounts is protected, and the providers I use apply their own security measures. No transmission over the internet is completely secure, so please don't send sensitive documents by email unless needed.

10. Changes

I may update this policy when the website or my services change. The current version is always on this page, with the date at the top.