Legal
Privacy policy
Last updated: 3 November 2026
This privacy policy explains how Riviera Rentals SA collects and uses personal data when you visit this website, submit a rental request, contact us or subscribe to our journal updates. It is based on the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, for example when a vehicle is delivered to a destination in the European Union, this policy also provides the information the GDPR requires.
1. Controller
Riviera Rentals SA
Registered office: Rue des Champs du Bourg 28, 1920 Martigny, Switzerland
Geneva office: Rue du Rhône 118, 1204 Geneva, Switzerland
Email: info@riviera.rentals
Telephone: +41 22 707 04 76
For any question about data protection or to exercise your rights, contact us by email or by post at the addresses above.
2. Personal data we process
Rental requests
When you submit a request through the booking form, we collect your first and last name, email address, telephone number, country, preferred language, the age of the main driver, the selected vehicle and optional extras, the delivery and collection dates, times, locations or addresses, your flight number if you provide it, and any message you add. We also record the date and time at which you acknowledged this policy, whether you agreed to receive optional marketing messages, the IP address from which the request was sent and the indicative price calculated for the request.
Contact form
When you use the contact form, we collect your name, email address, telephone number if you provide it, the subject of your enquiry, your message, the language of the page, the date and time at which you acknowledged this policy and the IP address from which the message was sent.
Journal updates
When you subscribe to journal updates, we collect your email address, your language, the page from which you subscribed and the dates of your consent and confirmation. You are subscribed only after you click the link in the confirmation email we send you (double opt-in).
Direct communication
When you contact us by email, telephone, WhatsApp or Instagram, we process the information you share with us and the content of our exchanges.
Rental contract
If a request leads to a rental, we process the further data needed to conclude and perform the contract, such as driving licence and identity document details, billing and payment information, the security deposit, records of the vehicle handover and return, and information about damage, traffic offences or claims arising during the rental. These data are collected during the rental process, not through the forms on this website.
Technical data
When you visit the website, our server processes the technical data required to deliver the pages and keep the service secure, such as your IP address, the date and time of access, the page requested, the referring page, and your browser and operating system. Your IP address is also used for a short time to limit abusive or automated form submissions. Information about cookies is set out in our Cookie policy.
3. Purposes of processing
- reviewing and answering your rental request, including availability, driver eligibility, delivery feasibility and the preparation of a quotation;
- concluding and performing the rental contract, including delivery, handover, collection, the security deposit, invoicing and the handling of damage, fines and claims;
- answering your enquiries and communicating with you;
- sending journal updates or marketing messages if you have agreed to receive them;
- operating the website securely, preventing fraud and abuse, and keeping a record of the consents you give;
- complying with our legal obligations, in particular in accounting, tax and insurance matters and towards authorities, and establishing, exercising or defending legal claims.
Every rental request is reviewed by a member of our team. We do not make decisions based solely on automated processing and we do not carry out profiling.
4. Legal basis
We process personal data in accordance with the principles of the FADP. Where a justification is required, we rely on the conclusion or performance of a contract with you, our overriding private interests, a legal obligation or your consent.
Where the GDPR applies, we rely on the following legal bases: the steps you request before entering into a contract and the performance of the rental contract (Art. 6(1)(b) GDPR); compliance with legal obligations (Art. 6(1)(c) GDPR); our legitimate interests in operating a secure website, preventing abuse, answering enquiries and defending legal claims (Art. 6(1)(f) GDPR); and your consent for journal updates and marketing messages (Art. 6(1)(a) GDPR). You may withdraw your consent at any time with effect for the future.
Fields marked as required in our forms are needed to process your request. Without them, we cannot review the request or reply to you.
5. Recipients
Within Riviera Rentals SA, personal data is accessible only to the people who need it to process your request or rental. We disclose personal data to the following categories of recipients:
- IT service providers acting on our behalf, in particular for website hosting, data storage and the sending of emails, who are contractually bound to process the data only according to our instructions and to protect it;
- partners involved in a specific rental where this is necessary, such as partners carrying out delivery or handover at the destination, insurers, payment service providers and banks;
- authorities, courts and legal advisers, where we are legally required to do so or where this is necessary to establish, exercise or defend legal claims, for example in the case of traffic offences committed during a rental.
If you contact us through WhatsApp or Instagram, the operator of the platform also processes your data under its own privacy policy. We do not sell personal data.
6. Disclosure abroad
Personal data may be disclosed to recipients outside Switzerland where this is necessary for a rental involving delivery or travel abroad, in particular to France, Italy, Monaco and other European countries, or where one of our service providers processes data abroad. We disclose data to countries whose legislation the Swiss Federal Council recognises as ensuring an adequate level of protection, which includes the member states of the European Union and the European Economic Area. For any other country, we use recognised safeguards such as the standard contractual clauses of the European Commission, or we rely on a statutory exception, in particular where the disclosure is directly connected with the conclusion or performance of a contract with you.
7. Retention
- Rental requests and contact enquiries are kept for as long as needed to process them, handle any follow-up and document our exchanges, then deleted or anonymised.
- Contracts, invoices and other accounting records relating to a rental are kept for ten years, as required by Swiss law.
- IP addresses recorded with contact messages and consent records are deleted after 30 days.
- Subscription requests that are not confirmed are deleted after 7 days. Confirmed subscriptions are kept until you unsubscribe; we then keep a record of your unsubscription so that we respect your choice.
- Session data expires after two hours of inactivity.
Data may be kept longer where a legal obligation requires it or for as long as it is needed to establish, exercise or defend legal claims.
8. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse, including encrypted connections (HTTPS), role-based access for our staff, logging of administrative actions and protection of our forms against forgery and automated abuse. No transmission over the internet is completely secure; please do not send identity documents or payment card details through the contact form or by unencrypted email.
9. Your rights
Subject to the conditions and exceptions provided by law, you have the right to:
- obtain information about whether and which personal data we process about you;
- have inaccurate or incomplete data corrected;
- have your data erased or its processing restricted;
- object to processing based on our legitimate interests and to the use of your data for marketing;
- receive the data you have provided to us in a commonly used electronic format, or have it transmitted to another controller;
- withdraw your consent at any time with effect for the future.
To exercise these rights, contact us at info@riviera.rentals. We may ask for proof of identity before answering. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland. Where the GDPR applies, you may also contact the data-protection supervisory authority of your country of residence in the European Union.
10. Journal updates and marketing
We send journal updates and marketing messages only if you have agreed to receive them. Every message contains a link to unsubscribe, and you can also withdraw your consent by writing to us.
11. Cookies and external websites
This website uses only the cookies that are strictly necessary for its operation. It does not use analytics, advertising or social-media tracking. Details are set out in our Cookie policy. Links to external websites, such as WhatsApp or Instagram, take you to services operated by third parties under their own privacy policies.
12. Changes to this policy
We may update this privacy policy to reflect changes to our services or to the law. The version published on this page, with the date shown at the top, applies.