Privacy Policy

This policy explains how your personal data is collected, used and protected when you use heliskitravel.com or contact us. Because we are based in Switzerland and address customers in Norway and the wider EEA, we apply both the revised Swiss Federal Act on Data Protection (FADP / nLPD, in force since September 2023) and the EU General Data Protection Regulation (GDPR).

1. Data controller

The Alps Experience Travel, Knudsen (trading as Heliski Travel)
Nyon, Canton of Vaud, Switzerland · UID CHE-485.511.570
Owner: Vegard Knudsen · Email: [email protected]

Given the size of our business, we are not required to appoint a Data Protection Officer.

2. What data we collect

We collect only what we need to answer your enquiry and arrange your trip:

• Enquiry & booking data you provide — your name, email address, telephone number, group size, preferred dates and any details you share about your trip.
• Correspondence — the content of emails and messages you send us.
• Newsletter sign-ups — your email address, if you choose to subscribe.
• Technical data — where applicable, your IP address, browser type and basic analytics about how the site is used.

3. Purposes and legal bases

• Responding to enquiries and arranging bookings — to take steps at your request and perform our agreement with you (contract / pre-contractual measures).
• Marketing and newsletters — only with your consent, which you may withdraw at any time.
• Analytics and site improvement — on the basis of your consent or our legitimate interest in operating and improving the site, depending on the tool used.

4. Sharing your data with third parties

To fulfil a booking, your enquiry and relevant trip details are forwarded to Viking Heliskiing ehf. in Iceland, the operator who delivers the heliski service. Iceland is part of the EEA and is recognised by Switzerland as providing an adequate level of data protection, so this transfer is lawful — but we disclose it clearly here.

We also rely on carefully chosen service providers who process data on our behalf, which may include our website hosting provider, our email provider, and — where used — analytics or advertising tools (for example Google Analytics, or a Meta/Instagram pixel if we run such campaigns). We do not sell your personal data.

5. International transfers

Some of our providers (for example Google or Meta) may process data on servers outside Switzerland and the EEA, including in the United States. Where this happens, we rely on recognised transfer mechanisms such as the Swiss–US and EU–US Data Privacy Framework and, where required, standard contractual clauses.

6. How long we keep it

We keep enquiry and correspondence data only as long as necessary to handle your request and any resulting trip, and for a reasonable period afterwards. Accounting-relevant records are kept for ten years, as required by Swiss law (Art. 958f Swiss Code of Obligations). Newsletter data is kept until you unsubscribe.

7. Your rights

You have the right to access your data, and to request its rectification, erasure or the restriction of its processing. You may object to certain processing and, where applicable, request data portability. Where processing is based on consent, you may withdraw that consent at any time. To exercise any of these rights, email [email protected].

You also have the right to lodge a complaint with a supervisory authority — the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, Datatilsynet in Norway, or your local authority in the EEA.

8. Security

We use appropriate technical and organisational measures, including encryption in transit (HTTPS), to protect your data against loss, misuse and unauthorised access.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with its effective date.

10. Contact

Questions about this policy or your data? Email [email protected] or see our contact page. See also our Imprint and Cookie Policy.