Protecting your personal data is fundamental to how we operate. This Privacy Policy explains what information BLACKTRANSFER (operated by Airport Cab) collects when you use our website at blacktransfers.ch, make a booking, or contact us through any channel, how we use that information, with whom we share it, and what rights you hold under applicable law. Please read it carefully before submitting any personal data to us.
1. Controller
The data controller responsible for processing your personal data is:
BLACKTRANSFER (operated by Airport Cab) Blumenfeldstrasse 1 8046 Zürich Switzerland
E-mail: info@blacktransfers.ch Phone / WhatsApp: +41 79 177 24 24
If you have any questions or concerns about how we handle your data, please contact us at the address above.
2. Legal Framework
We are a company established in Switzerland. Our primary data-protection obligation is compliance with the Swiss Federal Act on Data Protection (revFADP / nDSG), which entered into force on 1 September 2023. Where we process the personal data of individuals located in the European Economic Area (EEA), the EU General Data Protection Regulation (GDPR) applies additionally, and we observe both frameworks concurrently. References to "applicable law" in this policy mean whichever of those instruments governs a given processing activity.
3. Data We Collect and How We Collect It
3.1 Booking and Quotation Forms
When you request a quote or complete a booking through our website, we collect:
- Full name and, where provided, company name
- E-mail address and telephone number
- Pickup and drop-off locations, date, time and flight number
- Vehicle category and number of passengers
- Special requests (child seats, luggage, etc.)
- Payment details (processed via our payment gateway; we do not store full card numbers)
3.2 Contact Form and E-mail
When you write to us via the contact form or directly by e-mail, we collect the name, e-mail address and any information you choose to include in your message.
3.3 Live Chat (Tidio)
Our website uses Tidio as a live-chat and chatbot platform. When you initiate a chat, Tidio may collect your IP address, browser type, pages visited before opening the chat, and any personal data you type in the chat window. Tidio processes this data on servers located in the EEA (Tidio LLC, headquartered in the United States, with EU infrastructure). You can review Tidio's own privacy policy at tidio.com. We retain chat transcripts for up to 12 months for quality and training purposes.
3.4 Google Maps / Places Autocomplete
Our booking form uses the Google Maps Platform (Places API) to autocomplete pickup and drop-off addresses. When you begin typing an address, your partial input and your IP address are transmitted to Google LLC. Google's privacy policy governs this processing; we recommend reviewing it at policies.google.com. We do not receive raw IP addresses from Google as part of the autocomplete response.
3.5 WhatsApp
If you contact us via WhatsApp (+41 79 177 24 24), your phone number, display name and message content are processed by WhatsApp LLC (Meta Platforms). We use the conversation solely to respond to your enquiry or manage your booking. Message history is retained by us for up to 12 months.
3.6 Website Logs and Analytics
Our hosting infrastructure automatically records standard server-log data (IP address, browser, referring URL, pages requested, timestamps) for security and operational purposes. We may also use aggregated, anonymised analytics to understand how visitors use our site. Where analytics tools set cookies, Section 9 explains your choices.
3.7 Corporate Accounts and Invoicing
For clients on a corporate account, we additionally hold billing address, VAT number, authorised bookers' contact details, and invoice history necessary for our accounting obligations.
4. Purposes of Processing and Legal Bases
The table below maps each purpose to the personal data used and the legal basis under nDSG / GDPR.
| Purpose | Data used | Legal basis (nDSG / GDPR) |
|---|---|---|
| Processing and fulfilling bookings and transfers | Booking data, payment data, flight number | Performance of contract (Art. 6(1)(b) GDPR) / overriding legitimate interest (nDSG) |
| Sending booking confirmations, driver details and status updates | Name, e-mail, phone | Performance of contract |
| Flight tracking and calculating free waiting time | Flight number, airline, scheduled times | Performance of contract |
| Responding to enquiries (form, e-mail, chat, WhatsApp) | Contact data, message content | Pre-contractual measures / legitimate interest |
| Processing payments and preventing fraud | Payment and transaction data | Performance of contract; legal obligation; legitimate interest |
| Corporate invoicing and accounting | Billing data, invoice history | Legal obligation (Swiss CO / VAT law) |
| Improving our website and services | Log data, anonymised analytics | Legitimate interest |
| Marketing communications (only with consent) | E-mail address, name | Consent (Art. 6(1)(a) GDPR / nDSG) |
| Compliance with legal obligations | All relevant data | Legal obligation |
We do not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects.
5. Retention Periods
We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law.
- Booking and journey records: 10 years (Swiss commercial and VAT-record retention requirement)
- Contact enquiries not leading to a booking: 12 months from last contact
- Live-chat and WhatsApp transcripts: 12 months
- Server logs: 30 days, unless a security incident requires longer retention
- Marketing consent records: until consent is withdrawn, then 3 years for proof of consent
- Cookie consent logs: 1 year
When the applicable retention period expires, data is securely deleted or anonymised.
6. Disclosure of Your Data
We share personal data only as described below and never sell it to third parties.
6.1 Chauffeurs and Operational Partners
Your name, pickup address, destination, flight number and any accessibility requirements are shared with the assigned chauffeur. Where we subcontract a transfer to a vetted partner operator, that partner receives the same minimum data and is bound by equivalent confidentiality obligations.
6.2 Payment Processors
Payment card data is handled by our payment gateway provider(s) operating under PCI-DSS standards. We transmit only the data necessary to authorise and capture payment.
6.3 Technology Service Providers
We engage the following categories of processors who act on our documented instructions:
- Tidio – live-chat platform (EU infrastructure)
- Google LLC – Maps / Places autocomplete; potentially Analytics
- Hosting and cloud provider – servers located in Switzerland or the EEA
- E-mail delivery service – for transactional booking e-mails
6.4 Legal and Regulatory Disclosure
We may disclose personal data if required by Swiss law, a court order, or a competent authority, and where we are legally permitted to do so.
7. International Data Transfers
BLACKTRANSFER is based in Switzerland. Where we transfer personal data to recipients outside Switzerland or the EEA, we ensure an adequate level of protection by one or more of the following mechanisms:
- Adequacy decision: The European Commission has recognised Switzerland as providing adequate protection; the Swiss FDPIC maintains its own list of adequate countries.
- Standard Contractual Clauses (SCCs): For transfers to the United States (e.g. Tidio LLC, Google LLC, Meta/WhatsApp LLC), we rely on the EU SCCs adopted by the European Commission (2021 version) or equivalent Swiss transfer instruments.
- Supplementary measures: Where required, we implement additional technical and organisational safeguards (encryption in transit and at rest, data minimisation).
8. Your Rights
Depending on the law applicable to your situation, you may have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Access | Obtain confirmation of whether we process your data and receive a copy |
| Rectification | Have inaccurate or incomplete data corrected |
| Erasure | Request deletion where data is no longer necessary or processing is unlawful |
| Restriction | Ask us to suspend processing in certain circumstances |
| Data portability | Receive your data in a structured, machine-readable format (GDPR, where applicable) |
| Objection | Object to processing based on legitimate interests, including direct marketing |
| Withdrawal of consent | Withdraw consent at any time without affecting prior lawful processing |
| Right to information (nDSG) | Request information about all personal data held about you |
To exercise any of these rights, please contact us at info@blacktransfers.ch or in writing to our address in Section 1. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.
If you are not satisfied with our response, you have the right to lodge a complaint with:
- Swiss Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch
- Your EU supervisory authority: if you are located in an EEA member state
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. Some are strictly necessary for the site to function; others are optional.
9.1 Categories of Cookies
| Category | Purpose | Basis |
|---|---|---|
| Strictly necessary | Session management, security, booking-form functionality | No consent required |
| Functional | Remembering your language or chat preferences | Consent |
| Analytics | Understanding traffic and page performance (anonymised) | Consent |
| Third-party (Google Maps, Tidio) | Autocomplete functionality and live chat | Consent |
9.2 Managing Your Preferences
When you first visit our website, a cookie-consent banner allows you to accept or decline optional cookies. You may change your preferences at any time by clicking "Cookie Settings" in the website footer. You may also control cookies through your browser settings; however, disabling strictly necessary cookies will affect site functionality.
We do not use cookies for advertising or cross-site behavioural tracking.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include:
- Encrypted connections (TLS/HTTPS) for all data transmitted to and from our website
- Encryption at rest for databases containing personal data
- Access controls and role-based permissions limiting staff access to data on a need-to-know basis
- Regular security reviews of our systems and those of key processors
- Staff training on data-protection obligations
- Incident-response procedures compliant with the 72-hour breach-notification requirement under GDPR and the equivalent obligation under nDSG
No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.
11. Children's Privacy
Our services are directed at adults and corporate clients. We do not knowingly collect personal data from children under the age of 16. If you believe we have inadvertently received data relating to a child, please contact us at info@blacktransfers.ch so we can delete it promptly.
12. Links to Third-Party Websites
Our website may contain links to external sites (hotel partners, airline status pages, etc.). This Privacy Policy applies only to blacktransfers.ch. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before providing any personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law. When we make material changes, we will update the "Last updated" date below and, where appropriate, notify you by e-mail or a prominent notice on our website. Continued use of our services after the effective date constitutes acceptance of the revised policy.
14. Contact Us
For any questions, requests or concerns relating to this Privacy Policy or your personal data, please reach out to us:
BLACKTRANSFER (operated by Airport Cab) Blumenfeldstrasse 1, 8046 Zürich, Switzerland E-mail: info@blacktransfers.ch Phone / WhatsApp: +41 79 177 24 24 Website: blacktransfers.ch Available: 24 hours a day, 7 days a week
Last updated: July 2025