B2B Privacy Policy
This B2B Privacy Policy explains how personal data relating to businesses, authorised company users and passengers whose bookings are created through VIF Transfer corporate services is collected, used, shared and protected.
1. Data Controller
The business responsible for processing personal data in connection with VIF Transfer B2B services is:
2. Scope and Legal Framework
This Privacy Policy applies to businesses and individuals using the VIF Transfer B2B application process, corporate account, booking platform and related transfer services.
Personal data is processed primarily in accordance with the Swiss Federal Act on Data Protection (FADP/DSG). Where VIF Transfer's activities fall within the territorial scope of the European Union General Data Protection Regulation (GDPR), the relevant GDPR requirements will also apply.
Mandatory data protection provisions of another jurisdiction remain applicable where required by law in relation to a particular processing activity.
3. What Personal Data Do We Process?
| Data Category | Examples |
|---|---|
| Company information | Company name, address, registration information, tax and invoicing details. |
| Authorised user information | Name, telephone number, email address, position and authorisation within the Company. |
| Account and security information | User account details, login data, authentication records, IP address and security logs. |
| Passenger information | Name, telephone number, email address, number of passengers and information required for the booking. |
| Transfer information | Pickup and drop-off locations, date, time, flight number, route, stops, vehicle category and booking notes. |
| Payment and financial records | Transaction amount, currency, payment status, invoices, refunds and payment provider transaction identifiers. |
| Communications | Support messages, email correspondence, booking notes and complaint records. |
| Technical information | Browser, device, operating system, IP address, error logs and security-related information. |
4. Sources of Personal Data
Personal data may be obtained from:
- The business submitting the B2B application,
- Company managers and authorised users,
- Passengers for whom the Company creates bookings,
- System records generated during bookings and transfer operations,
- Payment, mapping, flight, communications and other technical service providers,
- Authorised public sources where permitted by applicable law.
5. Why Do We Process Personal Data?
Personal data may be processed for purposes including:
- Evaluating B2B applications and creating corporate accounts,
- Verifying businesses and authorised users,
- Creating and managing transfer bookings,
- Coordinating passengers, drivers and transport providers,
- Calculating prices and processing payments,
- Preparing invoices and accounting records,
- Providing customer and B2B support,
- Preventing fraud, abuse and security incidents,
- Complying with legal and regulatory obligations,
- Improving service quality, security and technical infrastructure,
- Establishing, exercising or defending legal claims.
6. Legal Bases for Processing
Depending on the applicable law and nature of the processing, personal data may be processed because it is necessary to enter into or perform a contract, comply with a legal obligation, pursue legitimate interests of VIF Transfer or a relevant third party, or on the basis of consent where consent is required.
Where processing is based on consent, consent may be withdrawn in accordance with applicable law. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7. Passenger Data Provided by B2B Companies
When a Company creates a booking for its customer or another passenger, it may provide passenger personal information through the VIF Transfer Platform.
VIF Transfer processes passenger information for legitimate purposes including arranging the booking, coordinating transfer operations, communicating with the passenger, security, support, payment, dispute resolution and compliance with legal obligations.
Companies should not enter sensitive or excessive personal information into booking notes unless the information is genuinely necessary for providing the requested service.
8. Payment and Financial Information
Depending on the payment method used, online payments may be processed through Stripe or other approved payment service providers.
VIF Transfer does not intend to store complete payment card numbers or card security codes within its own systems. Transaction amounts, currencies, transaction identifiers, payment status, refund, dispute and invoicing information may be retained.
9. Who May Receive Personal Data?
Where necessary to provide the service, personal data may be shared with the following categories of recipients and service providers:
- Independent carriers and drivers assigned to the booking,
- Payment service providers, including Stripe,
- Hosting, cloud, database and backup providers,
- Google Maps, Firebase and related mapping or location services,
- Email, SMS and notification service providers,
- Flight information and operational technology providers,
- Accounting, tax, legal, audit and insurance advisers,
- Courts, regulators and public authorities where legally required,
- Relevant parties involved in a merger, acquisition, transfer or restructuring, subject to appropriate confidentiality obligations.
VIF Transfer does not sell personal data as commercial mailing or customer data lists.
10. International Data Transfers
VIF Transfer is based in Switzerland. Because payment, mapping, cloud infrastructure, notifications, email and other technology providers may operate internationally, personal data may be processed in Switzerland, the European Economic Area, the United Kingdom, the United States or other countries.
Where personal data is transferred to a country that is not considered to provide an adequate level of data protection, appropriate safeguards may be used where required by applicable law. These may include Swiss or EU standard contractual clauses, recognised adequacy mechanisms and supplementary contractual or technical safeguards.
11. How Long Do We Keep Personal Data?
Personal data is retained for as long as reasonably necessary for the purposes for which it was collected and in accordance with applicable statutory retention obligations.
- Booking, invoice and accounting records: may generally be retained for up to 10 years where required under applicable Swiss accounting or tax obligations.
- B2B account information: retained while the account remains active and afterwards for any necessary legal, security or financial retention period.
- Payment records: retained for the period necessary for transactions, refunds, chargebacks, fraud prevention and accounting.
- Technical and security logs: retained for a limited period required for security, troubleshooting and abuse prevention.
- Marketing information: retained until consent is withdrawn or an objection is made, subject to retaining necessary suppression records.
Once retention is no longer required, personal data is deleted, anonymised or access to it is appropriately restricted.
12. Data Security
VIF Transfer applies technical and organisational measures appropriate to the relevant risks to protect personal data against unauthorised access, alteration, loss, misuse or disclosure.
Measures may include access controls, secure connections, permission management, security logging, backups, software updates and appropriate encryption mechanisms.
No internet-based system can provide absolute security. Companies are therefore also responsible for protecting their own accounts, passwords, devices and authorised users.
13. Automated Processing and Decisions
The Platform may use automated rules for price calculation, payment status, fraud indicators, vehicle or driver availability, booking allocation and notifications.
Unless otherwise disclosed, VIF Transfer does not intend to make decisions that produce legal or similarly significant effects on individuals solely through automated processing.
Where applicable law requires information about an automated individual decision or the possibility of human review, the relevant rights will be provided.
14. Marketing Communications
To the extent permitted by applicable law, Company representatives may receive information about service updates, corporate offers or VIF Transfer B2B services.
Marketing communications may be stopped using the unsubscribe method provided in the relevant communication or by contacting info@viftransfer.com.
Operational communications concerning bookings, payments, account administration or security are service messages and are not treated as marketing communications.
15. Your Data Protection Rights
Depending on the applicable legislation and the nature of the processing, you may have some or all of the following rights:
- To obtain information about whether your personal data is being processed,
- To request access to your personal data,
- To request correction of inaccurate or incomplete information,
- To request deletion or anonymisation where the legal requirements are met,
- To object to or request restriction of certain processing,
- To request data portability where applicable,
- To withdraw consent where processing is based on consent,
- To object to direct marketing,
- To request human review of an applicable automated decision where required by law.
Data protection requests may be sent to info@viftransfer.com. VIF Transfer may request reasonable information to verify the identity of the person making the request.
The competent federal data protection supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC / EDÖB). Where the GDPR applies, individuals may also have the right to lodge a complaint with the competent EU or EEA supervisory authority.
16. Data Protection Roles of the B2B Company and VIF Transfer
The B2B Company and VIF Transfer may act as separate data controllers where each independently determines the purposes and means of processing personal data.
For example, the Company may process passenger information for its customer relationship, sales and customer management activities, while VIF Transfer may process the same information to perform the transfer booking, assign transport providers, process payments, maintain security and provide customer support.
This Privacy Policy does not by itself make VIF Transfer a processor of the Company or make the Company a processor of VIF Transfer. Where the parties enter into a separate data processing agreement, the roles and obligations specified in that agreement will apply to the relevant processing activities.
17. Changes to This Privacy Policy
This B2B Privacy Policy may be updated to reflect changes in applicable law, technology, services or VIF Transfer's data processing activities.
The current version will be published on this page and the last updated date will appear at the top of the Policy. Material changes may be communicated through additional methods where appropriate.
This Policy may be published in English, German and Turkish. Unless mandatory law requires otherwise, in the event of an inconsistency of interpretation, the English version shall prevail, followed by the German version and then the Turkish version.
18. Contact
For questions about privacy, data protection or your personal data rights, you may contact VIF Transfer using the details below.
For the contractual terms governing VIF Transfer B2B services, please read our B2B Company Terms and Conditions.