Privacy Policy

At Bollywood Tour / Ruci AG, we are committed to protecting your privacy and ensuring that your personal data is handled responsibly, transparently, and in strict compliance with the revised Swiss Federal Act on Data Protection (FADP / nDSG) and, where applicable, the General Data Protection Regulation (GDPR).

2. What Personal Data We Collect

We process personal data that you provide to us directly or that is generated automatically when you interact with our website:

• Tour Reservations & Inquiries: Full name, email address, telephone number, number of participants, preferred tour dates, language preference, dietary requirements, and billing details.
• Direct Communications: Any inquiries or messages you send via our contact form, email, or telephone.
• Technical & Server Log Data: IP address, device type, operating system, browser type and version, date/time of access, and referring URL.
• Cookies & Tracking Data: Consent choices, session identifiers, and aggregated performance metrics (see our Cookie Policy).

3. Purpose and Legal Grounds for Processing

We process your personal data under the following legal bases in accordance with Swiss FADP (Art. 6 & Art. 31) and GDPR (Art. 6(1)):

• Contractual Performance: To organize, confirm, manage, and execute your Bollywood film location tour reservations, dining experiences, and customer support.
• Legitimate Interests: To ensure the cybersecurity, stability, and optimal technical performance of our website infrastructure and protect against spam/fraud.
• Consent: For optional analytical cookies, newsletter communications, and third-party integrations. You can withdraw your consent at any time.
• Legal Compliance: To satisfy statutory Swiss accounting, tax, and commercial record retention obligations.

4. Third-Party Services & Processors

To deliver our services securely and efficiently, we collaborate with selected trusted service providers who process data on our behalf:

• Tour Reservation System (Bookeo): Online scheduling and booking management. Data submitted during booking is processed in accordance with strict privacy safeguards.
• Web Security & CDN (Cloudflare & Turnstile): Used to protect the website from distributed denial-of-service (DDoS) attacks, malicious bots, and automated spam.
• Hosting Infrastructure: Hosted on high-security European VPS infrastructure compliant with Swiss and EU data protection standards.

5. Data Transfers Outside Switzerland

Your data is primarily processed in Switzerland and the European Economic Area (EEA). If data is transferred to service providers in third countries that do not provide an adequate level of data protection, we ensure adequate protection through standard contractual clauses (SCCs) approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

6. Data Storage & Retention Period

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by statutory Swiss retention periods (e.g., up to 10 years for accounting and commercial documentation under the Swiss Code of Obligations).

7. Technical Data Security

We employ robust technical and organizational security measures (TOMs), including 256-bit SSL/TLS encryption, firewall systems, and restricted access protocols, to protect your data from unauthorized access, accidental loss, alteration, or misuse.

8. Your Rights as a Data Subject

Under the revised Swiss Data Protection Act (FADP) and GDPR, you have the following rights regarding your personal data:

• Right to Access: Request confirmation and details about your personal data processed by us.
• Right to Rectification: Request the correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request the deletion of your personal data, subject to legal retention obligations.
• Right to Restriction & Objection: Object to specific data processing operations or request processing restrictions.
• Right to Withdraw Consent: Revoke consent for marketing or optional cookies at any time.
• Right of Complaint: Lodge a complaint with the competent supervisory authority: Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, 3003 Bern, Switzerland (www.edoeb.admin.ch).

9. Contact for Privacy Inquiries

To exercise any of your privacy rights or if you have questions regarding this Privacy Policy, please contact our Data Protection Officer at:

Ruci AG / Mango Restaurant
Attn: Data Privacy Officer
Viktoriastrasse 1, 3780 Gstaad, Switzerland
Email: mango@ruci.ch

Last updated: September 2026. This Privacy Policy may be updated periodically to adapt to evolving legal frameworks and service developments.