Privacy Policy
This Privacy Notice (the “Privacy Notice”) describes the principles based on which Hightide Kayak School GmbH (hereinafter “Hightide”, “us” or “we”) processes personal data collected through this Website (the “Website”). It informs you in particular about what personal data we collect, for which purposes it is processed, with whom it may be shared, for how long we retain it and which rights and options relating to the use of your personal data you may have. “Personal data” means any and all information relating to an identified or identifiable natural person, for example name, address, e-mail address, an online identifier or the phone number.
This Privacy Notice applies as far as the processing activities are not subject to other privacy policies or are provided for by applicable law. Please read this Privacy Notice carefully. By using the services of our Website or by registering on our Website you consent to the collection and processing of your personal information as set forth in this Privacy Notice.
CONTENT
1. Who controls the personal data
2. How do we process personal data
3. What personal data do we collect
4. For what purposes and on what legal basis do we process personal data about you
5. With whom do we share your personal data
6. Transfer of personal data to countries outside the EEA
7. For how long do we keep information about you
8. Cookies, Google Analytics and Social Media Plug-ins
9. Email mailing for advertising purposes
10. Security
11. Third-party privacy policies
12. Children
13. What are your rights
14. Changes to our Privacy Notice
1. Who controls the personal data
The Controller of personal data is:
Hightide Kayak School GmbH
Am Quai 1 | CH-3806 Bönigen | Switzerland
+41 (0)79 906 0551
info@hightide.ch
Hightide determines the purposes and means of the processing of your personal data and is therefore responsible for the processing and use of your personal data as described in this Privacy Notice. If you have any questions or concerns regarding this Privacy Notice or how we process your personal data, kindly contact us at any time by sending an email to info@hightide.ch.
2. How do we process personal data
Any personal data collected through the Website is processed in accordance with the provisions of applicable data protection and privacy laws. We collect and process personal data carefully and for the purposes described in this Privacy Notice. In accordance with applicable law, we may also use your personal data in other ways as described in this Privacy Notice. In such event, we will provide specific privacy policies or notices at the time of collection and obtain your consent where necessary. We always seek, to the extent reasonably possible, to collect information on an anonymized or pseudonymized basis so we cannot recognize your identity.
3. What personal data do we collect
We may collect the following personal data via our Website:
3a. Information automatically collected
Hightide collects and stores information that your browser automatically transmits to us in “server log files” when visiting our Website. These may include the following data:
-Browser type and browser version
-Operating system used
-Referrer URL
-Host name of the accessing computer
-Time of the server request
-IP address
These data will not be combined with data from other sources. It is stored by us until it is automatically deleted.
3b. Information provided by you
We collect information which you actively and voluntarily provide us with through the Website via registration, by creating a login, by creating a booking, by sending a message to our contact channels or by phone call. This may include the following personal data: name, first name, address, email address, phone number, gender, additional information about yourself. If you register a booking on behalf of other persons, please provide their personal data only if you are allowed to do so in line with applicable data protection laws and only if the other person would agree to you providing its personal data to us for the purposes the data are collected and the processing of its personal data according to our Privacy Notice.
3c. Information generated in connection with a service-booking and during a trip.
If you register a booking to use our services and during a booked trip, we may collect the following personal data: name, first name, address, email address, phone number, payment information, and, where applicable, photos or videos of you.
During some activities, our guides may take photos or short videos of participants as part of our free guest photo and video service. These images are intended as a souvenir for the participating guests. Photos and videos may show you, other participants, our guides, the activity, equipment, the lake, and the surrounding landscape. We process these images only for the purpose of making the guest photo and video service available to participants after the activity.
We do not use identifiable guest photos or videos for public marketing, advertising, website, social media, print, or similar promotional purposes unless we have obtained the required consent or another valid legal basis applies. In some cases, consent may be provided by agreeing to the General Terms and Conditions.
If you do not want to be photographed or filmed, you can tell your guide. If you would like a photo or video of you to be deleted, you can contact us at info@hightide.ch. We will handle such requests in accordance with applicable law and practical limitations, for example where an image also shows other participants or has already been shared with the group.
At the time of booking, we also ask for payment information such as credit card number or bank transfer details. Credit Card information is held by third party software and the data privacy policy of the third party applies. In the case of payments by credit card, we only receive the information that a payment has or has not been made. We therefore have no knowledge of your credit card number. If you pay by invoice, we will transfer your personal data to Hightide Kayak School GmbH based in Switzerland, which will process the data for payment processing.
The providing of such personal data will always be voluntary based on your consent or, based on a contract, for the performance of our services requested by you. Without providing such information you may, however, not be able to use the services or purposes for which the information is requested.
4. For what purposes and on what legal basis do we process personal data about you
a. Purposes of processing
i) Information automatically collected
The data automatically collected as described above is processed for the purposes of proper functioning of our Website, e.g. for establishing a connection, ensuring stability and uninterrupted system security, to improve our services, and for statistical purposes in the event of attacks on the network infrastructure on which the Website is made available.
ii) Information provided by you
We will use the information provided by you for the lawful purposes which were evident from the circumstance or indicated at the time of collection which may include the following purposes:
– communicating with you (e.g. about our services) and provide you with the best possible and personalized information you may require from us; for answering any questions or requests you may have about our services in the best possible manner, asking you questions and giving additional information tailored to your interests in connection with our services prior to entering into a possible contract relation;
– For complying with legal or other regulatory requirements and internal rules; and
– For establishing, exercise and/or defend actual or potential legal claims, investigations or similar proceedings.
iii) Information generated in connection with a service-booking and during a trip
We will use the information provided by you for the provision of our services as requested by you and to enhance your customer experience and our business performance. Where this includes photos or videos taken during an activity, we process these images for the purpose of providing the free guest photo and video service and making them available to participating guests as a souvenir after the activity.
b. Legal basis for processing
The legal basis for processing your personal data for the purposes described above may be based on the following legal grounds:
-your consent, only if it may be withdrawn at any time;
-for the performance of a contract with you or for the intention to enter into a contract with you;
-to comply with a legal obligation (e.g. for tax reasons or for purposes of legal investigations or proceedings); or
-for the purposes of our legitimate interests, for example for maintaining and improving our internal business administration, organization, operations, risk management, protection of systems and premises, prevention of fraud and other offences, for advertising and marketing activities, to guarantee an effective, efficient, secure and harmonized service, to comply with legal or other regulatory requirements and internal rules, and for establishing, exercise and/or defend actual or potential legal claims, investigations or similar proceedings.
Should the processing be based on your consent or our legitimate interests, you may withdraw consent or object to that processing at any time by contacting us directly at info@hightide.ch. Please note, however, that the withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal.
5. With whom do we share your personal data
We take necessary measures to ensure only our authorized personnel on a need to know basis will have access to your personal data to fulfill the purposes for which your personal data was collected.
We may share your personal data with the following categories of recipients in accordance with the purposes of processing as described herein:
5.1. Bookings:
When you book a tour, activity or similar on our site, we collect the data required to carry out the tour. This usually includes the following information: First and last name, billing address, email address, telephone number, number of participants, date and time. Depending on the activity booked, it may also be necessary for us to collect further information, such as your prior experience, health, or the age of the participants. The processing that takes place in connection with this is based on Art. 6 para. 1 lit. b GDPR. To the extent necessary, we will transfer your data to the body responsible for the tour or activity.
5.2 Third-party service providers:
We may share your personal data with our trusted third-party service providers, including processors (e.g. providers of IT services);
-Website designers and developers;
-the public, including through our website, social media channels or printed materials, only where we are permitted to publish the relevant personal data, for example where the required consent has been obtained for identifiable guest photos or videos;
-professional advisors and auditors;
-governmental administrations, courts and other competent authorities;
-other parties in potential or actual legal proceedings.
We choose our partners and data processors carefully and only upon sufficient guarantees they have appropriate technical and organizational measures in place. Our third-party partners are subject to confidentiality requirements and may use your personal data solely to the extent necessary to fulfill the purpose for which your personal data was collected, except as otherwise required by law.
For more detailed information on the data collected and shared with third parties, please see:
Google: https://policies.google.com/privacy
Microsoft: https://privacy.microsoft.com/en-us/privacystatement
Trekksoft AG: https://www.trekksoft.com/de/datenschutzerklaerung
Mailchimp: https://www.intuit.com/privacy/statement/
Dropbox: https://www.dropbox.com/privacy
CookieYes: https://www.cookieyes.com/privacy-policy
WhatsApp: https://www.whatsapp.com/legal/privacy-policy/
Meta: https://www.facebook.com/privacy/policy/
TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en
Ahrefs: https://ahrefs.com/privacy-policy
Breezy Chat: https://breezy.chat/privacy
5.3. AI Chat Assistant (Breezy Chat)
We use Breezy Chat, an AI-powered customer service assistant, to help visitors with questions about our activities, bookings and services.
The chatbot is connected to our booking system (TrekkSoft) and photo storage service (Dropbox). Depending on your enquiry, it may retrieve booking information, verify your booking details and provide links to photos from your activity. This may involve processing information such as your name, booking reference, activity date and guide's name.
When you interact with the chatbot, your messages and any personal information you provide may be processed by Breezy and its AI technology providers to generate responses and fulfil your request. Technical information, including your IP address, browser information and the page you are visiting, may also be processed.
Breezy uses browser session storage to support the chat widget. The service is classified as functional and loads according to your cookie consent preferences.
Please avoid sharing sensitive personal information or payment details through the chat. For further information, see Breezy's Privacy Policy.
AI-generated information: Responses provided by Breezy Chat are generated automatically using artificial intelligence and may occasionally contain errors, omissions or outdated information. For important matters, particularly booking conditions, availability, prices and safety requirements, we recommend confirming the information directly with our team at info@hightide.ch.
6. Transfer of personal data to countries outside the EEA
We use third-party service providers that may process or store personal data in Switzerland, the European Economic Area (EEA), the United States and other countries.
Where personal data is transferred internationally, we take appropriate measures to protect it in accordance with applicable data protection laws. These may include transfers to countries recognised as providing an adequate level of data protection, appropriate contractual safeguards such as Standard Contractual Clauses, or other legally permitted transfer mechanisms.
For transfers to the United States, we may rely on the Swiss–U.S. or EU–U.S. Data Privacy Framework where the receiving organisation is appropriately certified and the relevant framework applies.
For further information about international data transfers and the safeguards used, please contact us at info@hightide.ch.
7. For how long do we keep information about you
We retain your personal data for as long as necessary to fulfill the purposes for which your personal data was collected. For this reason, we will delete or anonymize personal data (or equivalent) once they are no longer necessary to achieve the purposes, subject however (i) to any applicable legal or regulatory requirements to store personal data for a longer period (e.g. for tax or accounting reasons), or (ii) if we have an overriding interest (e.g. an interest for reasons of proof to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings, including legal holds, which we may enforce to preserve relevant information, or if we have an interest in non-personalized analysis).
On that basis, we normally process personal data subject to the following rules and obligations:
For contract related personal data (including business records and communication), we retain personal data as long as the contractual relation is ongoing and for ten years after the termination of the contractual relationship unless (i) a shorter or longer statutory storage obligation is applicable on a case-by-case basis, (ii) the retention is required for reasons of proof or another valid reason based on applicable law, or (iii) the deletion of the data is required earlier (because e.g. the data is no longer required or we are required to delete the respective data);
For operational data containing data (e.g. protocols, logs), we retain personal data for a period of 3 – 12 months.
Photos and videos taken as part of the free guest photo and video service are kept only for as long as reasonably necessary to provide that service, unless a longer retention period is required by law.
8. Cookies, Google Analytics and Social Media Plug-ins
When you access or use the Website, we may place so called cookies – small text files – or similar tools on your computer. We use these cookies to recognize you as a user of the Website, to customize content, to improve the Website’s performance and to enhance your user experience.
a. Categories of Cookies we use
Depending on their function and intended purpose, cookies and similar technologies used on our Website can be divided into the following categories: necessary, functional, performance (analytics), and advertising cookies.
Necessary cookies: These cookies are essential for the basic operation and security of the Website. They enable core functions and help us remember your cookie consent preferences.
Functional cookies: These cookies and similar technologies support additional website features and services, helping us provide a more convenient and personalised experience. They may remember information you have provided or preferences you have selected. Functional technologies are also used to support services such as our Breezy Chat assistant.
Performance (analytics) cookies: These cookies help us understand how visitors use our Website, such as which pages are visited, how visitors navigate between pages, and whether errors occur. This information helps us monitor and improve the Website's performance and usability.
Advertising cookies: These cookies may be used by us or third-party providers to measure the effectiveness of advertising campaigns, track advertising-related conversions and, where applicable, provide advertising tailored to visitors' interests.
Some services use similar technologies, such as browser session storage or cookie-free analytics, rather than traditional cookies.
For detailed information about individual cookies, their purposes and storage periods, please refer to our Cookie Policy.
b. Google Analytics
We use Google Analytics 4 (GA4), a web analytics service provided by Google, to analyse how visitors use our Website and to improve its performance and usability.
Google Analytics collects information about interactions with our Website, including page visits, navigation, traffic sources and booking-related activities. This information helps us understand how our Website is used, evaluate the effectiveness of our services and marketing activities, and compile statistical reports.
We use Google Consent Mode to adjust how Google Analytics operates according to your cookie preferences, which are managed through CookieYes. When you grant analytics consent, Google Analytics may use cookies to recognise visits and measure interactions across sessions.
When analytics consent is denied, Google Analytics does not read or write analytics cookies. However, it may still transmit limited, cookieless measurement signals to Google for statistical reporting and modelling purposes. These signals do not use persistent analytics cookie identifiers.
You can manage or withdraw your analytics consent at any time through our cookie preferences settings. Further information about Google's data processing is available in Google's Privacy Policy and its information about partner sites.
c. Management of Cookies
When you first visit our Website, you can accept, reject or customise your cookie preferences through our CookieYes consent banner.
You can change or withdraw your consent at any time using the cookie preferences control on our Website. Your updated preferences will apply to the subsequent use of cookies and consent-controlled services.
You can also manage or delete cookies through your browser settings. Please note that disabling certain cookies or functional services may affect the availability of some features of our Website.
For more information about the cookies used on our Website, including their purposes and storage periods, please refer to our Cookie Policy.
d. Social Media and Advertising Tracking
Our Website contains links to social media platforms, including Facebook, Instagram, TikTok and YouTube. When you follow these links, you leave our Website and the respective platform's privacy policy applies.
We use advertising tracking technologies provided by Google Ads, Meta (Facebook and Instagram) and TikTok to measure the effectiveness of our advertising campaigns and understand how visitors interact with our Website.
These technologies may collect information about pages visited, interactions with our Website and booking-related conversion events. Depending on your consent preferences, this information may be processed by the respective providers for advertising measurement, attribution and personalisation.
Our advertising tracking technologies operate according to your consent preferences managed through CookieYes. Google Ads uses Google Consent Mode to adjust its behaviour, including the use of cookies and cookieless measurement signals. Meta and TikTok advertising pixels are activated only when the relevant advertising consent has been granted.
You can change or withdraw your consent at any time through our cookie preferences settings.
For further information, please refer to the privacy policies of Google, Meta and TikTok.
e. Legal basis
We process personal data through cookies and similar technologies on the basis of your consent, where required by applicable law, or our legitimate interests in operating, securing, analysing and improving our Website and services.
Where processing is based on consent, you may withdraw it at any time through our cookie preferences settings. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
f. Microsoft Clarity and Ahrefs Web Analytics
We use Microsoft Clarity and Ahrefs Web Analytics to understand how visitors interact with our Website and to improve its usability, content and performance.
Microsoft Clarity helps us analyse visitor interactions, including navigation, clicks and scrolling behaviour. The service may collect technical information about your device and browser and uses cookies and similar technologies. Microsoft Clarity is activated only when you have granted analytics consent through CookieYes.
Ahrefs Web Analytics provides statistical information about website visits, traffic sources and page performance. The service operates without tracking cookies and does not use persistent identifiers to track visitors across multiple days.
For further information, please refer to the privacy policies of Microsoft and Ahrefs.
g. TrekkSoft Booking System
We use TrekkSoft, a third-party booking platform, to manage online reservations and payments for our activities.
When you access the booking widget, TrekkSoft processes information necessary to display availability, manage reservations and complete bookings. This may include personal details you provide, booking information, payment-related data and technical information about your browser and device.
The booking interface may use cookies and similar technologies operated by TrekkSoft and its third-party technology providers, including analytics and customer support services. These technologies may operate on TrekkSoft's own domains and may not be controlled by the cookie preferences on our Website.
For further information about how TrekkSoft processes personal data, please refer to TrekkSoft's Privacy Policy.
9. Email mailing for advertising purposes
We will use your email address for sending you information about our services and other commercial communications that may be of interest for you as long as you will be subscribed to the email mailing list. You can unsubscribe from such emails at any time, by clicking the highlighted link “unsubscribe from this list” at the end of each email or by contacting us directly via email at info@hightide.ch.
10. Security
We have implemented various technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised use, disclosure or access, in particular where processing involves the transmission of data over a network, and against all other unlawful forms of processing and misuse.
Hightide may use third party data processors to collect and process your personal data. Any data processors commissioned by us will only process your personal data in accordance with our instructions and are legally obliged to adhere to strict security procedures when handling personal data.
Unfortunately, transmission of information via the internet is not wholly secure. Although we do our utmost to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is done so at your own risk. For this reason, you are always free to transfer your personal data to us via alternative means, e.g. by telephone. Once we have received your information, we employ strict procedures and rigid security measures to try to prevent unauthorised access.
11. Third-party privacy policies
Please note that if you click on the link to a third-party website (e.g. google or social media websites), you will be taken to a website we do not control, and our Privacy Notice will no longer be in effect. Your browsing and interaction on any other website are subject to the terms of use and privacy policies and notices of such third-party websites. We strongly encourage you to read the terms of use and privacy policies and notices of other websites carefully before providing personal data through that website. We are not responsible or liable for the information or content on such third-party websites.
12. Children
Our Website is not intended for children and we do not knowingly collect personal data from children under the age of 16, except with the explicit parental consent. If we are notified or otherwise learn that personal data of a child under the age of 16 has been improperly collected, we will take all reasonable steps to delete that personal data.
13. What are your rights
You may request information from Hightide as to whether data concerning you is being processed. In addition, you have the right to request the correction, destruction or restriction of personal data regarding yourself as well as to object to the processing of personal data. Should the processing of personal data be based on our consent, you may withdraw consent at any time. However, please note that a withdrawal does not affect the legitimacy of the processing activities that took place before you withdrew your consent. In countries of the EEA you may, in certain cases, have the right to obtain data generated during the use of online services in a structured, common and machine-readable format which allows for further use and transfer.
Requests in this respect shall be submitted to Hightide via the following email address: info@hightide.ch. Hightide reserves the right to restrict the rights of the affected user in accordance with applicable law and e.g. not to disclose comprehensive information or not to delete data.
If we refuse your request or if you are not satisfied with our processing, you are also entitled to lodge a complaint with the competent supervisory authority and seek a judicial remedy. For users located in Switzerland, the competent authority is the Federal Data Protection and Information Commissioner in Switzerland (http://www.edoeb.admin.ch). For the users located in the EU Countries, a list of the supervisory authorities can be found here.
14. Changes to our Privacy Notice
This Privacy Notice may be changed from time to time and without prior notice or announcement. All changes to this Privacy Notice are effective when they are posted on the Website unless indicated otherwise. When we change the policy in a material manner, we will let you know via email and/or a prominent notice on our Website or in another appropriate manner prior to the change becoming effective and update the ‘effective date’ at the top of this page.
Last modified on 16.10.2026