I. GENERAL PROVISIONS
A. Principle
Protecting the privacy of our customers is important to Reka. To follow, we outline the principles by which we collect and process personal data (information that specifies your identity or makes it specifiable for us; hereinafter also referred to as “data”) via our website reka.ch and other applications operated by Reka (customer portal profile, etc.).
We collect and process personal information only for those purposes described in this data protection declaration and only to the extent necessary and within the framework of the applicable legal provisions. We handle your data with care and will only store it to the extent and for as long as is necessary to provide our services, or as long as we are legally obliged to do so.
We generally collect and process personal data for the following purposes:
- to fulfil our contractual obligations towards our customers;
- to fulfil legal obligations (i.e. the obligation to report lodging, combating money laundering);
- other purposes, such as maintaining IT security, undertaking training and professional development (i.e. recording customer support telephone calls), for internal administrative purposes, and to enforce our rights and to defend Reka against claims;
- we are permitted to create customer, purchasing and transaction profiles by linking the above personal data with data from other sources (e.g. purchase data from data publishers). We do this to process contractual relationships, for risk management (i.e. the prevention of credit defaults and fraudulent transactions) and for marketing purposes (i.e. to improve our offers and services for you).
More detailed information about the data collection and processing purposes in our Reka Holidays, Reka Money and social offers businesses can be found in Sections II, III and IV of this declaration.
In addition to this data protection declaration, our terms of use apply in accordance with the General Terms and Conditions for the Reka account, the Reka customer portal and the Reka-Card as well as the rental conditions of Reka Holidays.
B. Use of websites
You can visit our reka.ch website as well as visit other specific, time-limited web platforms and find out about our offers without disclosing any personal data. These services will only request the personal information that is necessary to provide our own services and to process transactions.
When you visit our websites, our system will collect technical information about the requesting computer. Information will be collected about the browser type and version, the operating system, the Internet provider and the IP address of the user, the date and time of access, websites from which the user’s system accesses our website, as well as the web pages that are accessed by the user’s system via our website.
Reka uses so-called browser cookies to simplify the use of our website and other websites and applications operated by Reka and to obtain indications for the improvement of the information and services that are accessible via the website. This evaluation is done anonymously, i.e. without reference to personal information. Our Cookie Policy provides information about our use of cookies and analysis services on the Reka website.
C. Storage of customer data
For accounting reasons, Reka will generally keep the personal data collected from customers to process business transactions (booking of holidays, use of Reka Money, etc.) for 10 years after the last payment transaction. Other data will be retained for as long as is necessary to fulfil a contract and to protect our rights. We reserve the right to longer legal and operational data retention obligations/reasons.
Personal data collected for marketing activities will usually be deleted as soon as the purpose of the activity has been met.
D. Data security
We protect your personal data by appropriate technical and organisational security measures and store it exclusively on secure servers. The website is protected against loss, destruction and manipulation as well as against access, modification or distribution by unauthorised persons by measures that are state of the art. Particularly sensitive data (e.g. access data for the customer portal profile) is encrypted during transmission via the Internet (SSL).
However, Reka does not guarantee the security of your data. It is your responsibility to always make an up-to-date backup copy of any transmitted data and to store this independently of the website. It is also your responsibility to provide a secure password for your customer portal profile, to keep this safe and to change it at regular intervals (Reka Account GTC, customer portal and Reka-Card).
E. Involvement of third parties
We work together with appointed third parties in particular to provide our services (order data processing). These third parties are subject to contractual and legal confidentiality and data protection obligations. External processors of personal data include, in particular, service providers in the fields of bulk mailings, payment services, credit ratings, transport, customer feedback, IT, marketing and platforms for the dispatch of newsletters, as well as government agencies and authorities.
F. Advertising block
If you have booked Reka holiday offers or are receiving Reka Money, we will regularly provide you with suitable information and offers in electronic and/or analogue form based on the information about you that we have collected in connection with Section A. If you do not wish to receive this information or our offers, but still wish to make use of Reka services, you can place an advertising block on your electronic (email) and analogue (physical) address. With an advertising block in place, you will only receive information that we are obliged to send you (i.e. any changes to your General Terms and Conditions).
G. Customer rights
You have the right to receive information about your data, as well as to correct and delete it. Furthermore, you have the right to restrict the processing of your data. Section I, Letter C (retention of customer data) and other statutory exceptions are excluded from this.
You have the right to object to the processing of your personal data. Any objection will only apply to the future and will not impact on data processing to date. If, because of your objection, Reka is no longer able to provide the services agreed with you, the objection shall be deemed a breach of contract by the customer, and Reka shall have the right to terminate the contract with you without notice. Any contractual payment obligations made by the customer shall remain in force.
To exercise these rights, please contact Reka at the address given in Section I, Letter H (Contact).
If Reka does not comply with the applicable data protection law, you have the right to file a complaint with the competent supervisory authority.
H. Contact
If you have any questions regarding this data protection declaration or data protection at Reka, please contact us at:
Schweizer Reisekasse
Datenschutz
Neuengasse 15
CH-3001 Bern
datenschutz@reka.ch
I. Updates
We will review our data protection declaration regularly and update it as needed. We will inform you about significant changes (i.e. via our website).
II. PROCESSING OF PERSONAL DATA IN CONNECTION WITH A TRIP / HOLIDAY STAY (REKA HOLIDAYS)
A. Purpose of data processing
Reka will process your personal data for the purpose of booking, undertaking a trip/holiday stay and improving your travel/accommodation experience as part of the following activities:
- reservations;
- bookings;
- rebookings;
- cancellations;
- check-in administration ;
- communicating with you about your trip / rental apartment;
- processing of irregularities / complaints;
- improvement of Reka’s offers (i.e. customer surveys) ;
- recommendations to third parties;
- gift vouchers;
- securing payment transactions.
B. Data transfer to third parties
If you book a holiday offer that is not provided by Reka (i.e. Center Parcs, Pradas Resort), any customer and booking data required to administer the holiday stay will be passed on to the contractual partner by Reka. Reka assumes no responsibility for how your data is used by the contractual partners and points out to you that the contractual partner may also use the data provided to it for its own marketing purposes.
C. Transfer of data to authorities
For legal and regulatory reasons, we need to collect certain information from our customers and then forward it to the authorities in the country of travel. This applies, for example, to the processing of health resort and tourism taxes and the obligation to report visitor stays. To this end, in addition to the personal master data (surname, first name, address) of the person making the booking and the stay dates (i.e. arrival date, departure date), we will collect the birth data, gender, citizenship, travel document data and contact data, etc., of the traveller.
III. PROCESSING OF PERSONAL DATA IN CONNECTION WITH THE PURCHASE AND USE OF REKA MONEY
A. Purpose of data processing
For the purpose of issuing Reka Money to you, processing payment transactions and improving your experience of using Reka Money, Reka will process your personal data as part of the following activities:
- opening of a customer portfolio and of customer accounts (we will receive the necessary data for this from your employer, from the company or organisation which provides you with Reka Money, or from you directly);
- sending you documents to enable you to deposit your Reka Money quota and to administer your payments;
- issue and replacement of Reka-Cards;
- delivery of Reka-Checks and Reka-Rail-Checks;
- management of your customer accounts (credits, debits, account correction entries);
- payment processing between you and the merchant (use of your Reka Money);
- communication with you as a customer regarding your bank account details and payment transactions as well as dealing with irregularities/complaints;
- as a financial intermediary, Reka is subject to various legal obligations (i.e. Money Laundering Act, relevant FINMA circulars, tax laws). In order to fulfil these obligations, we collect and process data for the purposes of identity and age verification, fraud and money laundering prevention, the fulfilment of tax-law monitoring and reporting obligations as well as archival obligations.
B. Data transfer to third parties
Reka works with third parties to help provide its contractual services. Reka will only provide these companies with the data necessary to complete their contracted orders; furthermore, these companies have signed a data protection and security agreement with Reka. Such companies specifically comprise:
- the company entrusted with the production and handling of Reka-Card and PIN mail-outs;
- various contractors for mail-outs (i.e. Reka Money quota letters and pay-in slips).
C. Transfer of data to authorities
For legal and regulatory reasons falling under the Money Laundering Act, the regulation of financial market supervision and tax laws, it may be necessary for us to pass on certain customer data to the relevant authorities. This is only done in individual cases, i.e. justified suspicions of money laundering or in response to specific inquiries from tax authorities.
IV. PROCESSING OF PERSONAL DATA IN CONNECTION WITH REKA SOCIAL OFFERS
A. Special provisions
If you participate in a social offer offered by Reka (i.e. holidays for CHF 200.—, Mama plus), the regulations under Section II (Processing of personal data in connection with a trip / holiday stay) will apply. In addition to the data described there, Reka will collect data to verify your eligibility for our social offers. This includes, among other things, information on your income and assets (tax data). Such data collected by us will be deleted, at the latest, 3 years after a booking or rejection of your application, and any paper copies will be securely destroyed.
V. APPLICATION EXAMPLES
A. Customer portal profile
- 1. Purpose of the customer portal profile
The customer portal profile enables you to keep track of your Reka Money accounts, your Reka-Cards (i.e. change PIN, block cards) and administer your holidays that were booked with Reka. It will be opened when a customer portfolio is opened (see also Section III, Letter A). - 2. Personal data collected for the creation and operation of the profile
When opening a customer portal profile, personal data, in particular your surname, first name, address and email address will be requested. Depending on your needs, you can also store additional information in your profile: your mobile phone number (SMS TAN procedure), contact details of partner card holders, etc. If you choose not to include certain information in your profile (e.g. mobile phone number), certain features or procedures might not be available to you.
Reka is entitled to process the data you have provided in connection with the use of the customer portal profile in order to fulfil the contractual obligations arising from this and to operate the profile. - 3. Disclosure of data to third parties
Reka will not pass on to third parties any data you have disclosed either in your customer portal profile, whilst using any functionality of the profile, or during your use of the profile. Exceptions are third-party companies that provide services on behalf of Reka for the execution of online accounts services. - 4. Marketing actions and personalised advertising
- a. Analysis activities
To this end, Reka processes your personal data collected during the registration and use of the profile for the purpose of analysing customer behaviour. - b. Personalised information and offers
When you open a customer portal profile, we will merge and analyse your purchasing and usage behaviour data to be able to provide you with relevant and personalised information and offers tailored to your interests (i.e. additional services when booking Reka Holidays, special offers for users of Reka Money). By opening a profile on the customer portal, you agree that we may offer you such information and offers. - c. Market research
As part of market research, Reka may invite you to participate in surveys to improve our services and products. - d. Electronic and analogue communication
By opening a customer portal profile, you are giving us your consent to provide you with suitable information, recommendations and offers from Reka. This will be done electronically, i.e. by means of emails, telephone calls, SMS messages, instant messaging as well as by analogue means such as letters.
- a. Analysis activities
B. Newsletter
On request, we will keep you updated about relevant developments and offers from Reka. If, at a later stage, you no longer wish to receive a newsletter from Reka, you can unsubscribe at any time and without cost – either in the newsletter itself or in your customer portal profile. The use of your customer portal profile will not be restricted if you unsubscribe from our newsletter.
We will process your data in connection with the newsletter in order to send you news about and in connection with Reka and its partners. In addition, we will also process and use the email address you entered to send you personalised offers in connection with the newsletter.
Should a link from the newsletter take you to our websites, then you are also giving us permission to process and use your IP address, as well as geo data, web beacons and similar technologies to check whether the offers made to you in the course of this communication also satisfy your requirements.
Reka works with external service providers to dispatch the newsletter.
C. Satisfaction surveys
As part of our analysis activities and in order to provide an improved customer service, Reka can ask you to participate in customer satisfaction surveys after a holiday stay booked through Reka or in conjunction with your use of Reka Money.
D. User analysis by permaleads.ch
The internet offerings at reka.ch are tracked for the analysis of user behaviour and the identification of IP addresses of companies for marketing purposes. The use of this service entails the direct transfer of data pertaining to user behaviour (e.g. IP address, time of access, browser searches etc.) to the servers maintained by the service provider and being made available for use exclusively on reka.ch. The data collected are treated as strictly confidential and neither sold nor conveyed to third parties. If in future you do not wish to be identified, please send an e-mail to optout@permagroup.ch.
September 2021