Privacy NOTICE

1. Data Controller

The data controller for personal data collected through the website www.luxx.swiss is:

Luxx Sagl
Viale Serfontana 4a
6834 Morbio Inferiore
Ticino, Switzerland
Phone: +41 79 940 83 19
Email: luxx@luxx.swiss

2. Categories of Personal Data Processed

In connection with your use of our website and services, we may collect and process the following categories of personal data:

2.1 Data Provided Voluntarily

Contact details (name, surname, email address, phone number) provided through contact or booking request forms; messages and communications sent to us; preferences regarding contact methods (phone or email); specific requests related to our services (villas, jets, yachts, cars, events, private chefs); data required to become a member.

2.2 Data Collected Automatically

Technical data such as IP address, browser type, operating system, pages visited, date and time of access, referring website; browsing and interaction data; data collected through cookies and similar technologies (please see our Cookie Policy).

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

3.1 Handling Inquiries and Bookings

Responding to your information requests; managing service bookings (villas, jets, yachts, cars, events, chefs); providing customer assistance. Legal basis (GDPR): performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR). Legal basis (FADP): legitimate interest and contractual performance.

3.2 Service Communications

Contacting you according to your preferred method (phone or email); sending confirmations, updates, and information regarding requested services. Legal basis (GDPR): performance of contract (Art. 6(1)(b) GDPR). Legal basis (FADP): legitimate interest.

3.3 Membership Management

Processing membership applications; managing relationships with members. Legal basis (GDPR): performance of contract (Art. 6(1)(b) GDPR). Legal basis (FADP): contractual performance.

3.4 Service Improvement

Analyzing website usage to improve our services; ensuring the security and proper functioning of the website. Legal basis (GDPR): legitimate interest (Art. 6(1)(f) GDPR). Legal basis (FADP): overriding legitimate interest.

3.5 Legal Compliance

Fulfilling legal, regulatory, or authority-mandated obligations. Legal basis (GDPR): legal obligation (Art. 6(1)(c) GDPR). Legal basis (FADP): compliance with legal obligations.

4. Data Disclosure and Transfer

4.1 Data Recipients

Your personal data may be disclosed to: technical and IT service providers; providers of booked services (villa owners, private jet companies, yacht charterers, car rental companies, event organizers, professional chefs); professionals and consultants; competent authorities, where required by law.

4.2 International Transfers

Given the international nature of our services, your data may be transferred to recipients located outside Switzerland and the European Economic Area. In such cases, we ensure an adequate level of data protection through: adequacy decisions by the European Commission or the Swiss FDPIC; standard contractual clauses approved by the European Commission; other appropriate safeguards under applicable law.

5. Data Retention

We retain your personal data for the time necessary to fulfill the purposes for which they were collected and, in any case: data relating to information requests: 2 years from the last communication; contractual data: 10 years from the end of the contractual relationship (in compliance with Swiss statutory retention requirements); browsing data: maximum 12 months. After the retention periods expire, data will be deleted or irreversibly anonymized.

6. Data Subject Rights

In accordance with the Swiss FADP and the GDPR (where applicable), you have the right to:

• Access: obtain confirmation of whether your personal data is being processed and access such data;
• Rectification: obtain correction of inaccurate data or completion of incomplete data;
• Erasure: obtain deletion of your data in cases provided by law;
• Restriction: obtain restriction of processing in cases provided by law;
• Portability: receive data in a structured format and transfer it to another controller (GDPR);
• Objection: object to processing on legitimate grounds;

Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact us at luxx@luxx.swiss or at the postal address indicated above.

7. Supervisory Authority

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland. For residents in the EU/EEA, complaints may also be lodged with the supervisory authority in your Member State of residence.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Such measures include: encrypted communications (HTTPS); access controls to systems; regular backups; staff training on data protection.

9. Communications via WhatsApp

We offer the option to contact us via WhatsApp for inquiries and 24/7 assistance. By using this channel, your data (phone number, messages) will also be processed by WhatsApp Ireland Limited (for EU/EEA users) or WhatsApp LLC (for other users), companies within the Meta group. Please consult WhatsApp’s privacy policy for further details on their data processing.

10. Changes to This Notice

We reserve the right to modify this privacy notice at any time. Changes will be published on this page with an indication of the last update date. We encourage you to review this page periodically.

11. Contact

For any questions regarding this notice or the processing of your personal data, please contact us:

Email: luxx@luxx.swiss
Phone: +41 79 940 83 19
Address: Viale Serfontana 4a, 6834 Morbio Inferiore, Switzerland