AURELIUS

Privacy

Privacy Policy

Last updated: 14 May 2026

1. Controller

The data controller for this website is:

Aurelius Society
8004 Zürich
Switzerland

Phone / WhatsApp: +41 79 285 79 79

2. Scope

This policy applies to the website aurelius-society.com and any enquiry or booking forms linked to it. It follows the revised Swiss Federal Act on Data Protection (revFADP) and the EU General Data Protection Regulation (GDPR), where applicable.

3. Personal data we process

We process personal data only to deliver our services, to respond to your enquiries, or where legally required. When you submit an enquiry, we typically collect:

  • First and last name
  • Phone number (and other contact details you provide)
  • Travel dates, party size, and special requests
  • Technical access data (IP address, browser, timestamp)

Legal bases are Art. 6(1)(b) GDPR (pre-contractual measures), (a) (consent, e.g. for cookies) and (f) (legitimate interest in operating the site securely and effectively).

4. Cookies and tracking

This site uses cookies and similar technologies, grouped into three categories:

  • Necessary — required for the site to operate (security, form handling, storing your preference). Active without consent.
  • Statistics — Google Analytics 4 (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland), with IP anonymisation and Google Consent Mode v2. Also Smartlook (provider: Smartsupp.com, s.r.o., Šumavská 524/31, 602 00 Brno, Czech Republic, EU region), which records anonymised session replays to help us improve usability. Input fields are masked by default.
  • Marketing — Google Ads conversion tracking, used to measure the effectiveness of our advertising campaigns.

Statistics and Marketing are only activated with your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time: .

5. Google Analytics and Google Ads

Where consent is given, anonymised data on page views, clicks and conversions is sent to Google. This may involve transfers to third countries (United States). Google is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses are applied in addition.

More information at policies.google.com/privacy.

6. Contact via WhatsApp

When you contact us via WhatsApp, your message content and phone number are processed by WhatsApp Ireland Limited. See their privacy notice at whatsapp.com/legal/privacy-policy.

7. Hosting

The site is hosted on the infrastructure of Railway Corp. (United States). Standard Contractual Clauses are applied. Server logs are kept short-term to ensure operation and to defend against attacks.

8. Retention

Enquiry data is retained for the duration of the business relationship and any statutory retention periods (typically 10 years under Swiss commercial law). Cookies have varying lifespans; consent is stored for 12 months.

9. Your rights

You have the right to access, rectify, erase, restrict processing, port your data, and object. You can withdraw any consent at any time, with future effect. You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your competent EU supervisory authority.

To exercise these rights, please contact us via WhatsApp at +41 79 285 79 79.

10. Security

We apply technical and organisational measures to protect your data against unauthorised access, loss, or manipulation. All transfers are encrypted via TLS.

11. Changes

We may update this policy to reflect legal or technical changes. The current version is always available on this page.