PRIVACY POLICY

1. Introduction and Data Controller

This Privacy Policy describes how Innova Space SAGL (“Innova Space”, “we”, “us”, or “our”) processes the personal data of users who visit and use the website innovaspace.ch as well as the dedicated website travel.innovaspace.ch (collectively, the “Websites”).

The processing of personal data is carried out in accordance with the Swiss Federal Act on Data Protection (FADP / revFADP) and, where applicable, Regulation (EU) 2016/679 (GDPR).

  • Data Controller: Innova Space SAGL
  • Operational Headquarters (Sede Operativa): Via Monte Boglia 7, 6900 Lugano, Switzerland
  • Registered Office (Sede Legale): Via Maria Ghioldi Schweizer 5, 6850 Mendrisio, Switzerland
  • UID / CHE: CHE-288.656.904
  • E-mail: info@innovaspace.ch / travel@innovaspace.ch
  • Phone: +41 76 412 75 64

2. Personal Data Collected and Purposes of Processing

Data provided voluntarily by the user

When you contact us through the forms available on the Websites (including general inquiries and bespoke travel itinerary requests), we collect the information you voluntarily provide, which may include:

  • Name and surname
  • E-mail address
  • Phone number
  • Selected service, product model, or travel preferences
  • Content of your message and details of your request

The data is processed for the following purposes:

  • Responding to inquiries and itinerary requests;
  • Providing the requested information, quotes, or bespoke offers;
  • Preparing or executing requested services;
  • Managing pre-contractual and contractual relationships.

The contact forms are managed using WPForms.

Technical and browsing data

When visiting the Websites, certain technical data may be collected automatically, such as the IP address, date and time of access, browser type, operating system, and other technical information transmitted by your device.

This data is processed primarily to ensure the operation, security, and stability of the Websites, as well as to identify and prevent potential abuse or unauthorized access attempts.

For detailed information regarding cookies, tracking tools, and how to manage your consent, please refer to our Cookie Policy.

3. Legal Basis for Processing

Depending on the specific processing activity, personal data is processed on the basis of:

  • The necessity to take pre-contractual steps or perform a contract with you;
  • Your explicit consent (Art. 6(1)(a) GDPR and Art. 6(6) FADP), granted when submitting our contact forms by ticking the mandatory privacy confirmation checkbox;
  • Our legitimate interest in ensuring the security, stability, and proper functioning of the Websites;
  • Compliance with applicable legal obligations.

4. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.

Inquiries and data submitted via contact forms are retained for the duration necessary to handle your request, maintain relevant communication, and comply with statutory retention periods or protect legal rights.

Data that is no longer required is permanently deleted or anonymized in accordance with applicable legal provisions.

5. Third-Party Services and Data Transfers

  • Hosting and E-mail: The Websites and corporate e-mail services are hosted by Infomaniak Network SA, Rue Eugène Marziano 25, 1227 Les Acacias (GE), Switzerland. As a technical service provider, Infomaniak processes data solely for the provision, security, and maintenance of the hosting infrastructure.
  • Anti-spam Protection: Our contact forms utilize technical spam-prevention mechanisms (such as honeypots) to distinguish genuine user inquiries from automated bot submissions and protect the Websites.
  • Google Maps: The Websites may embed Google Maps to display our office location. The interactive map is only loaded after you enable Preference cookies. When loaded, your device connects to Google servers (Google Ireland Limited / Google LLC), transmitting technical data including your IP address. For more details, consult the Google Privacy Policy.
  • International Data Transfers: Where service providers process personal data outside Switzerland or the European Economic Area (EEA), such transfers are governed by appropriate safeguards, including European Commission Standard Contractual Clauses (SCCs) recognized under Swiss law.

6. Data Subject Rights

Under the FADP and, where applicable, the GDPR, you have the following rights regarding your personal data:

  • Right of access: Obtain confirmation and information about your personal data being processed;
  • Right to rectification: Request correction of inaccurate or incomplete data;
  • Right to erasure (“right to be forgotten”): Request deletion of your personal data, subject to legal retention obligations;
  • Right to restriction: Request the restriction of data processing;
  • Right to object: Object to processing based on legitimate interests;
  • Right to data portability: Request the transfer of your data (where GDPR applies);
  • Right to withdraw consent: Withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at:
👉 info@innovaspace.ch (or travel@innovaspace.ch)

You also have the right to lodge a complaint with the competent supervisory authority (in Switzerland, the FDPIC / IFPDT, or your local EU supervisory authority).

7. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect technological, operational, or legal changes. The version published on the Websites is the version currently in effect.