Privacy Policy

Last updated · April 2026

This Privacy Policy describes how EFFEX – Effortless Experiences (“we”, “us”, “our”) collects, processes and protects personal data. We comply with the Swiss Federal Act on Data Protection (revFADP / nLPD, in force since 1 September 2023) and, where applicable, with the EU General Data Protection Regulation (GDPR).

1. Data Controller

EFFEX – Effortless Experiences
Founders: Thomas Negri & Viola Orrico
Registered owner: Thomas Negri
Genestrerio
6852 Mendrisio, Switzerland
Email: info@effexperience.com

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: first and last name
• Contact data: email address, phone number (WhatsApp), address if required for delivery or logistics
• Service data: travel dates, number of guests, destination, budget indication, specific preferences or dietary requirements
• Payment data: method selected (bank wire, crypto wallet, etc.) — full banking details are collected only when strictly necessary and processed through secure channels
• Technical data: IP address, browser type, approximate location, device identifiers — collected when you visit our website

3. Purposes of Processing

We process personal data for the following purposes:

• Responding to enquiries received via the contact form, email or WhatsApp
• Organising, booking and coordinating the experiences you request
• Communicating with you before, during and after the experience
• Sharing only the necessary information with trusted third-party providers
• Meeting legal, accounting and tax obligations
• Improving the quality of our services

4. Legal Basis for Processing

We rely on the following legal bases: (a) performance of pre-contractual measures or of the contract you request; (b) our legitimate interest in operating and promoting our concierge services; (c) your explicit consent, where required (for example, for marketing communications); (d) compliance with legal obligations.

5. Recipients & Categories of Third Parties

To deliver our services we share strictly necessary data with:

• Hotels, private villas and accommodation partners
• Restaurants and venues we book on your behalf
• Private drivers, transfer companies, helicopter and yacht charter operators
• Partner concierge agents in specific destinations
• Payment processors and banking partners
• IT service providers (email hosting, website hosting, CRM)

We disclose only the minimum information necessary to fulfil the service (e.g., guest names for a restaurant booking, flight details for a transfer). We never sell personal data.

6. International Data Transfers

As we operate between Switzerland, the European Union and partners worldwide, personal data may be transferred to the following regions: European Union / EEA, United Kingdom, United States, United Arab Emirates, Monaco. Where the destination country does not offer an adequate level of data protection recognised by the Swiss Federal Council, we rely on appropriate safeguards such as Standard Contractual Clauses or your explicit consent.

7. Retention Period

We retain personal data only as long as necessary for the purposes set out above, and in any event no longer than Swiss legal retention obligations require (10 years for accounting documents, as per Art. 958f of the Swiss Code of Obligations). Data collected via the contact form without a subsequent contract are deleted within 24 months.

8. Your Rights

Under the revFADP and the GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”) where applicable
• Restrict or object to processing
• Request portability of your data in a structured, electronic format
• Withdraw consent at any time (without retroactive effect)

To exercise your rights, contact us at info@effexperience.com. We respond within 30 days.

9. Right to Lodge a Complaint

If you believe your personal data has been mishandled, you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / IFPDT): www.edoeb.admin.ch. EU residents may also contact their national supervisory authority.

10. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Communications are primarily conducted via encrypted channels (WhatsApp, email with TLS).

11. Cookies & Analytics

Our website uses only technically necessary cookies required for proper functioning. We do not use advertising or profiling cookies. If in the future we introduce analytics or marketing cookies, we will request your explicit consent through a cookie banner.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always published on this page with the date of the last update.