2026 Privacy Policy – VIF Transfer

Last updated: 24 June 2026

1. Privacy Policy: data controller and contact

The organization responsible for processing personal data:

• AirportTaxiTransferLine.COM, operating under the VIF Transfer brand
• Address: Waisenhausstrasse 9, 8820 Wädenswil, Switzerland
• Abrechnungs-Nr.: 10.047.981
• UID: CHE-289.853.146
• Commercial Register: CH-020.1.102.687-1
• Privacy and support email: info@viftransfer.com
• Phone: +41 78 900 03 49
• Web: https://viftransfer.com

All privacy-related requests may be sent to the email address above.

2. Scope and fundamental principles

This Privacy Policy applies to website visitors, customer account holders, persons making bookings, passengers, drivers, independent carriers, business partners and persons who contact us.

We process data only for specified and legitimate purposes, to the extent necessary, transparently and securely. We do not sell personal data. We implement reasonable technical and organizational measures to ensure that data is not used for purposes other than fulfilling a booking, complying with legal obligations, ensuring security or another clearly stated purpose.

We operate on the basis of the Swiss Federal Act on Data Protection (FADP). To the extent that we provide services to persons in the European Union or European Economic Area, applicable foreign data protection rules such as the GDPR are also taken into account.

3. Personal data we collect under this Privacy Policy

4. From which sources do we obtain data?

• Directly from you when creating an account or booking, contacting support, applying as a driver or uploading documents.
• From a person making a booking on your behalf, a corporate customer or a person travelling with you.
• From assigned independent carriers and drivers.
• From Stripe and payment method providers, including limited transaction data such as payment results, authentication and fraud signals.
• From map, address verification, flight information, messaging, email, push notification and technical infrastructure providers.
• From your device, browser and app in accordance with your permissions and settings.

If you provide information on behalf of another person, you confirm that you are authorized to share that information and that you have informed the relevant person about this Policy.

5. Purposes of processing and legal bases under this Privacy Policy

Where the GDPR applies, the principal legal bases are Article 6(1)(a), (b), (c) and (f) GDPR; where special-category data becomes necessary, applicable exceptions apply. We do not request unnecessary health or special-category data.

6. Booking and passenger data

Under this Privacy Policy, we process booking data to create the booking, assign the correct vehicle and driver, locate the passenger, track the flight, provide additional services, manage changes/cancellations/refunds and provide support.

If the person making the booking is different from the passenger, the passenger’s name, phone number, meeting information and other information necessary for the service may be shared with the assigned driver. The driver must use this data only to perform the relevant transfer, communicate and ensure safety.

Customer notes should not contain unnecessary sensitive information, payment card details, images of identity documents or third-party data unrelated to the service.

7. Payments and Stripe

Online payments and card payments accepted by a driver using a Stripe Terminal device are processed through Stripe infrastructure. Available cards, digital wallets and other payment methods shown on the payment screen are determined by Stripe.

Full card numbers, security codes and similar payment credentials are processed directly by Stripe or the relevant payment method provider; VIF Transfer does not store them in full in its own systems. We may receive limited data required for transaction identification, payment status, amount, currency, refunds and accounting.

For certain processing activities, Stripe may also act as an independent data controller for its own legal obligations and fraud-prevention purposes. For details, please see the Stripe Privacy Policy.

8. Privacy Policy: location, maps, routes and flight data

If location permission is granted in the customer app, the current location may be used for address selection, nearby location suggestions or journey-related functions. If permission is not granted, the address may be entered manually; some location features may not work.

When the driver is online/available or has an active assignment, the driver app may process precise location in the foreground and, where necessary, in the background for assignment, estimated arrival, live tracking, safety and operational management. The driver can manage permission in device settings; relevant work functions may not be available without required location permission.

Providers such as Google Maps Platform may be used for address search, route and map features. These providers may process IP, device, search and location data according to their own terms. For Google’s policy, please see the Google Privacy Policy.

When a correct flight number is provided, third-party flight-data providers may be used to obtain the actual landing time and flight status.

9. Driver and carrier data

Identity, contact, language, licence, driving licence, identity document, vehicle, insurance, document-validity and operational data may be collected from independent drivers and carriers. This data is used for eligibility checks, contracts, assignments, payment/settlement, security, quality and regulatory compliance.

A selfie or profile photo may be used to verify that the driver account matches the actual person, reduce fraud, support operational security and, where necessary, display the profile to customers or in the panel. Unless separately and explicitly stated, we do not intend to create biometric templates from selfie images or perform facial recognition.

Access to documents is restricted to authorized persons who need the data for their duties. Rejected or expired documents, or documents relating to a terminated business relationship, are deleted or access-restricted when there is no remaining legal retention, security or claims-related need.

10. Communication, notifications and marketing

Under this Privacy Policy, we may send emails, phone communications, in-app notifications or push notifications for booking confirmation, payment, driver assignment, changes, cancellation, security, account verification and support.

For push notifications, a device token may be registered with notification infrastructure such as Google Firebase Cloud Messaging and in our systems. Notification permission can be disabled in device settings; however, essential booking-related service messages may be sent by email or another appropriate channel.

Promotional and campaign messages are sent only where you have consented or to the extent permitted by applicable law. You may use the unsubscribe option in each marketing message or contact us. Service and security messages are independent of marketing preferences.

11. Privacy Policy and cookies

Essential cookies may be used on the website for sessions, security, language, form functions and payment flows. Preference, analytics or marketing cookies are used only where the relevant feature is enabled and, where legally required, with your consent.

• Essential cookies: Website, session, security, language and booking functions.
• Preference cookies: Remembering language and user selections.
• Analytics cookies: Measuring visits and performance; only where enabled.
• Marketing cookies: Campaign measurement and personalization; only where enabled and permitted.

Cookie preferences can be changed through the banner/settings panel or browser. Blocking essential cookies may impair booking and account functions.

12. With whom do we share data?

Under this Privacy Policy, we may share data with the following recipients only to the extent necessary:

• Licensed and insured independent carriers and drivers fulfilling the booking;
• Stripe and payment method providers selected by the customer;
• Hosting, cloud, database, backup, security and software-maintenance providers;
• Google Maps, Firebase, address/geocoding, flight tracking, email, messaging and notification providers;
• Accounting, tax, audit, legal and insurance advisers;
• Courts, regulators, law-enforcement and public authorities legally entitled to receive the data;
• Relevant parties subject to confidentiality obligations in the event of a merger, assignment or transfer of business.

We take reasonable steps to bind our service providers through contracts, access restrictions, confidentiality and security obligations. Recipients acting as independent data controllers may apply their own policies.

13. International data transfers under this Privacy Policy

VIF Transfer is based in Switzerland. Some technology, payment, mapping, notification or cloud providers may process data in Switzerland, the European Economic Area, the United Kingdom, the United States or other countries.

Where transfers to countries without an adequate level of data protection are necessary, Swiss and/or EU Standard Contractual Clauses, supplementary contractual and technical safeguards, adequacy decisions or other legally permitted mechanisms are used where applicable.

14. Retention periods

Under this Privacy Policy, we retain data for as long as necessary for the relevant purpose, while the contractual and support relationship continues, where a legal retention obligation applies, or where necessary to establish or defend legal claims.

• Booking, invoice and accounting documents: Generally up to 10 years due to Swiss accounting and tax obligations.
• Customer account: For as long as the account remains open; after a deletion request, it is deleted or anonymized except for mandatory legal, financial and security records.
• Payment data: For as long as required for transactions, refunds, disputes, fraud prevention and accounting; full card data is retained by Stripe according to its own rules.
• Location and operational records: For a limited period necessary for active assignments, security, support and dispute resolution; thereafter deleted, reduced or anonymized unless a longer legal need exists.
• Driver documents: During eligibility and the business relationship and thereafter for as long as necessary for regulatory, insurance or legal-claim purposes.
• Technical and security logs: For a limited period for system security, error analysis and misuse investigations.
• Marketing data: Until consent is withdrawn or an objection is made; an opt-out record may be retained to prevent further messages.

At the end of the retention period, data is securely deleted or irreversibly anonymized.

15. Privacy Policy and data security

We implement appropriate technical and organizational measures against unauthorized access, alteration, disclosure, loss and misuse, including access controls, encryption, secure connections, session controls, backups, logging, updates and employee/business-partner confidentiality measures.

No system can guarantee absolute security. If a personal data breach occurs that requires notification in view of your rights and freedoms, we will notify the competent authority and, where necessary, affected persons in accordance with applicable law.

16. Children’s data

Under this Privacy Policy, a person creating an account or making a booking must be at least 18 years old. A child passenger’s name, age, height, weight or child-seat information should be provided only by the adult booking holder and only to the extent necessary for safe service delivery.

We do not collect children’s data that is unnecessary for the service and do not intend to market directly to children.

17. Automated processing and profiling

Automated rules may be used for price calculation, verification of payment status, fraud signals, selection of a suitable driver/vehicle, assignment sequencing and sending notifications.

We do not intend to base decisions producing legal or similarly significant effects solely on automated processing; if automation necessary for a contract or permitted by law is used, applicable rights, meaningful information about the decision logic and the possibility of requesting human review will be provided.

18. Your rights under this Privacy Policy

Depending on applicable law, you may have the following rights:

• To learn whether your data is being processed and request a copy;
• To correct inaccurate or incomplete data;
• To delete or anonymize data not subject to a legal retention obligation;
• To restrict processing or object to certain processing activities;
• Data portability where the relevant conditions are met;
• To withdraw consent with future effect;
• To object to direct marketing at any time;
• Where applicable, to request human intervention in a solely automated decision;
• Swiss Federal Data Protection and Information Commissioner (FDPIC) or to lodge a complaint with a competent EU/EEA supervisory authority.

We may need to verify your identity before responding to a request. We normally aim to respond within 30 days; for complex or numerous requests, we will inform you of any additional period permitted by law. Rights are not absolute; certain information may be retained due to legal retention requirements, the rights of others, security or legal claims.

19. Privacy Policy: account deletion and requests

Account deletion request under the Privacy Policy

You may submit an account deletion or data-rights request through the account deletion function in the app, if available, through our Account Deletion page, or by emailing info@viftransfer.com. In your request, state the email/phone number linked to your account and what you are requesting; do not send passwords, payment card details or identity documents by email.

When an account is deleted, active sessions, preferences and profile information are deleted or anonymized. Completed booking, invoice, payment, fraud-prevention, security and dispute records may be retained separately with restricted access for the applicable legal retention period.

20. Privacy Policy changes, language and contact

We may update this Policy in response to changes in our services, technology or law. Material changes will be announced through the website or app, and the date above will be updated.

The English, German and Turkish versions serve the same purpose. In the event of a conflict, the order of interpretive precedence is English, German and Turkish, subject to mandatory data protection rights.