Legal & Data Governance

Privacy Policy & Data Protection Notice.

Effective Date: January 1, 2026. This comprehensive Privacy Policy explains how Sortnestrout Travel Media Ltd collects, uses, protects, and handles your data under Swiss FADP and EU GDPR.

1. Data Controller Identification

This website (Sortnestrout.homes) is owned and operated by Sortnestrout Travel Media Ltd, a corporation registered in Switzerland under Company No. CH-020.3.042.881-9, having its registered seat at Bärengasse 29, 8001 Zürich, Switzerland ("Sortnestrout", "we", "our", or "us"). For all inquiries regarding data protection and user privacy rights, our designated Data Protection Officer (DPO) can be contacted at: [email protected].

2. Scope and Legal Basis for Data Processing

We process personal data in strict compliance with the Swiss Federal Act on Data Protection (FADP) and Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR). Our legal bases for processing data include:

  • Consent (Art. 6(1)(a) GDPR): When you explicitly subscribe to our European route dispatch or opt in to non-essential cookies.
  • Performance of a Contract (Art. 6(1)(b) GDPR): To respond to your direct queries, editorial suggestions, and contact form requests.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To maintain system security, detect fraudulent attacks, optimize interactive SVG map rendering speed, and ensure layout responsiveness across browser types.
  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): For mandatory financial, tax, or corporate record keeping under Swiss commercial statutes.

3. Categories of Information We Collect

We collect information in three primary ways:

A. Information You Voluntarily Provide

When you fill out the contact form or register for travel dispatches, you may provide your full name, email address, inquiry topic, and message content.

B. Automatically Collected Technical Data

When you navigate our hierarchical platform, our servers log technical metadata including your truncated (anonymized) IP address, browser type and version, operating system, referrer URL, pages visited, time spent per municipal guide, and screen viewport dimensions.

C. Cookies and Local Storage

We use small data files stored on your device to remember user preferences (such as your cookie consent state via `localStorage`) and analyze aggregated site telemetry without tracking individual identities across non-affiliated third-party domains.

4. Third-Party Service Providers & Data Transfers

We do not sell, rent, or trade your personal data to data brokers or advertising networks. We may transfer data to trusted sub-processors who assist us in operating our web infrastructure, subject to rigorous Data Processing Agreements (DPAs):

  • Cloud Hosting & CDN Providers: Distributed European edge networks for high-speed page delivery and DDoS mitigation.
  • Email Infrastructure: Encrypted transactional mail services handling contact form routing.
  • Anonymous Telemetry Tools: Self-hosted or privacy-first analytics suites operating with IP masking.

Any cross-border data transfer outside the European Economic Area (EEA) or Switzerland is governed by EU Standard Contractual Clauses (SCCs) and verified adequacy decisions.

5. Data Retention Policies

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory retention obligations. Contact form transmissions are deleted or irreversibly anonymized after 24 months of resolved correspondence. Server access logs are automatically rotated and purged every 30 days.

6. Your Statutory Privacy Rights (GDPR & Swiss FADP)

Under applicable international data protection laws, you enjoy specific enforceable rights regarding your personal data:

  • Right of Access: You may request confirmation and copies of all personal data held about you.
  • Right to Rectification: You may demand correction of inaccurate or incomplete records.
  • Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where no prevailing legal obligation requires its retention.
  • Right to Restriction of Processing: You may request that your data be quarantined under specific contested conditions.
  • Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format.
  • Right to Object: You may object at any time to processing based on legitimate interests.
  • Right to Withdraw Consent: Where processing is predicated on consent, you may withdraw it at any time without retroactive penalty.

To exercise any of these rights, send a written request to [email protected]. We respond to all verified requests within 30 calendar days.

7. Security Safeguards

Sortnestrout implements robust technical and organizational security measures (TOMs), including 256-bit TLS/SSL encryption in transit, strict access control permissions, automated firewalls, and routine vulnerability scanning to prevent unauthorized access, alteration, or disclosure of data.

8. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy periodically to reflect shifts in regulatory frameworks or technical site updates. The updated version will be indicated by the "Effective Date" at the top of this document.