Privacy policy

This Privacy Policy explains which personal data we process in connection with our activities and operations, including our website beanywhere.ch. In particular, we explain why, how and where we process personal data. We also inform you about the rights of the persons whose data we process.

Additional privacy policies and other legal documents such as General Terms and Conditions (T&Cs), terms of use or terms of participation may apply to individual or additional activities and operations.

We are subject to Swiss data protection law and, where applicable, to foreign data protection law, in particular that of the European Union (EU) with the General Data Protection Regulation (GDPR). The European Commission recognises that Swiss data protection law ensures an adequate level of data protection.

1. Contact details

Responsible for the processing of personal data:

beAnywhere Falko Burghausen
c/o Valesia Treuhand AG
Bahnhofstrasse 17
3930 Visp
Switzerland

hello@beanywhere.ch

We will point out if, in individual cases, other parties are responsible for the processing of personal data.

1.1 Data protection contact

For data protection enquiries from data subjects and supervisory authorities, the following person can be contacted directly:

Falko Burghausen
beAnywhere Falko Burghausen
c/o Valesia Treuhand AG
Bahnhofstrasse 17
3930 Visp
Switzerland

falko.burghausen@beanywhere.ch

2. Terms and legal bases

2.1 Terms

Personal data is any information relating to an identified or identifiable person. A data subject is a person whose personal data is processed.

Sensitive personal data includes, among other things, data relating to health. The GDPR refers to special categories of personal data.

Processing includes any handling of personal data, regardless of the means and procedures used, in particular storing, disclosing, obtaining, collecting, deleting, saving, modifying, destroying and using personal data.

The European Economic Area (EEA) comprises the member states of the European Union (EU) as well as the Principality of Liechtenstein, Iceland and Norway.

2.2 Legal bases

We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance on Data Protection (DPO).

Where and to the extent that the General Data Protection Regulation (GDPR) applies, we process personal data on the basis of at least one of the following legal bases:

  • Art. 6(1)(b) GDPR for the processing of personal data necessary for the performance of a contract with the data subject and for taking steps prior to entering into a contract.
  • Art. 6(1)(f) GDPR for the processing of personal data necessary to safeguard the legitimate interests of us or of third parties, unless the fundamental rights and freedoms and interests of the data subject override them. Legitimate interests include, in particular, our interest in being able to carry out our activities and operations permanently, in a user-friendly, secure and reliable manner and to communicate about them, ensuring information security, protection against misuse, enforcing our own legal claims and complying with Swiss law.
  • Art. 6(1)(c) GDPR for the processing of personal data necessary to comply with a legal obligation to which we are subject under any applicable law of member states of the European Economic Area (EEA).
  • Art. 6(1)(e) GDPR for the processing of personal data necessary for the performance of a task carried out in the public interest.
  • Art. 6(1)(a) GDPR for the processing of personal data with the consent of the data subject.
  • Art. 6(1)(d) GDPR for the processing of personal data necessary to protect the vital interests of the data subject or of another natural person.
  • Art. 9(2)(a) and (c) GDPR for the processing of health data with the explicit consent of the data subject or to protect vital interests where the data subject is unable to give consent (for example in an emergency in the mountains).

3. Type, scope and purpose

We process the personal data that is necessary to carry out our activities and operations permanently, in a user-friendly, secure and reliable manner. Such personal data may fall in particular into the categories of master and contact data, browser and device data, content data, metadata and usage data, location data, sales data, contract and payment data and, in connection with courses and tours, health data and photographs.

We process personal data for the period required for the respective purpose or purposes or by law. Personal data whose processing is no longer required is anonymised or deleted.

We may have personal data processed by third parties. We may process personal data jointly with third parties or transfer it to third parties. Such third parties are, in particular, specialised providers whose services we use. We also ensure data protection with such third parties.

We generally process personal data only with the consent of the data subject, unless the processing is permitted for other legal reasons, for example to perform a contract with the data subject and for corresponding pre-contractual measures, to safeguard our overriding legitimate interests, because the processing is evident from the circumstances or after prior notice.

In this context, we process in particular information that a data subject provides to us voluntarily when contacting us, for example by letter, email, instant messaging, contact form, social media or telephone, or when registering for a user account. We may store such information, for example, in an address book or with comparable tools. If we receive data about other persons, the persons transmitting the data are obliged to ensure data protection towards those persons and to ensure the accuracy of such personal data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources or collect in the course of our activities and operations, if and to the extent that such processing is permitted for legal reasons.

4. Courses, tours, trips and social events

4.1 Booking and registration

When you book or register for a course, tour, trip or social event, we process the information we need for planning, carrying out and invoicing. This includes in particular your name, contact details, billing address, booked offer, date, payment details and your information on experience, fitness and sure-footedness.

If you book an offer via a third-party platform such as OpenBooking or MySwitzerland, the privacy provisions of the respective platform also apply. We receive from the platform the information we need to carry out the offer.

4.2 Health information

So that we can plan and carry out tours safely, depending on the offer we ask for information about your health, for example pre-existing conditions, allergies, medication, injuries, pregnancy or fear of heights. Such information is sensitive personal data.

Providing this information is voluntary. By submitting it, you consent to us processing it exclusively for planning and safely carrying out the booked offer. We only ask for what is genuinely necessary and do not pass this information on to third parties. Emergencies are the exception: in that case, we may pass health information on to rescue services, doctors or hospitals to the extent necessary for your protection.

We delete health information after the offer has ended, unless we exceptionally need to retain it for longer to investigate an incident or to safeguard legal claims.

4.3 Emergency contacts

For tours in the mountains, we ask you for an emergency contact. We will contact this person exclusively in an emergency. Please let your emergency contact know that you are passing their details on to us. We delete emergency contacts together with the health information after the offer has ended.

4.4 Disclosure to partners

Where necessary to carry out the offer, we pass on information such as names and number of participants to accommodation providers (for example mountain huts), transport companies or equipment rental providers. In the event of a claim, we may transmit the necessary information to insurers.

5. Photos of participants

Falko regularly takes photos during courses, tours, trips and social events; photographic coverage is often even part of the offer. This includes pictures in which participants can be recognised.

We use selected pictures for the following purposes:

  • on our website, including the Online Magazine and offer pages,
  • on our Instagram account,
  • in our newsletter.

Participants receive the pictures from their offer, provided this is included in the offer. We do not sell or license pictures in which participants can be recognised to third parties without their explicit consent.

You would rather not appear in pictures, or you don't want us to publish pictures of you? No problem: it's best to tell us before or during the tour, or get in touch at any time via our contact form. We remove pictures already published on our own channels within a reasonable period. Unfortunately, we have no influence on copies that third parties have shared further, for example on social media.

6. Personal data abroad

We generally process personal data in Switzerland and in the European Economic Area (EEA). However, we may also export or transfer personal data to other countries, in particular to process it there or have it processed there.

We may export personal data to all countries and territories on Earth and elsewhere in the universe, provided that the law there ensures adequate data protection according to a decision of the Swiss Federal Council (Annex 1 of the Ordinance on Data Protection) and, where and to the extent that the General Data Protection Regulation (GDPR) applies, according to a decision of the European Commission. For the United States of America (USA), this applies to companies certified under the Swiss-U.S. Data Privacy Framework or the EU-U.S. Data Privacy Framework.

We may transfer personal data to countries whose law does not ensure adequate data protection, provided that data protection is ensured for other reasons, in particular on the basis of standard data protection clauses or other appropriate safeguards. In exceptional cases, we may export personal data to countries without adequate or appropriate data protection if the special data protection requirements are met, for example the explicit consent of the data subjects or a direct connection with the conclusion or performance of a contract. Upon request, we are happy to provide data subjects with information about any safeguards or a copy of such safeguards.

7. Rights of data subjects

Data subjects whose personal data we process have the rights granted under Swiss data protection law. These include in particular the right of access, the right to rectification and erasure, the right to object to processing and the right to receive or transfer their personal data.

Where and to the extent that the General Data Protection Regulation (GDPR) applies, data subjects whose personal data we process may, free of charge, request confirmation as to whether we process their personal data and, if so, request access to information about the processing of their personal data, have the processing of their personal data restricted, exercise their right to data portability and have their personal data rectified, erased («right to be forgotten») or completed.

Data subjects whose personal data we process may withdraw any consent given at any time with effect for the future and object to the processing of their personal data at any time.

Data subjects whose personal data we process have the right to lodge a complaint with a competent supervisory authority. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

8. Data security

We take appropriate technical and organisational measures to ensure a level of data security appropriate to the respective risk. Unfortunately, however, we cannot guarantee absolute data security.

Access to our website is via transport encryption (SSL / TLS, in particular with the Hypertext Transfer Protocol Secure, HTTPS for short). Most browsers indicate transport encryption with a padlock in the address bar.

Like basically all digital communication, our digital communication is subject to mass surveillance without cause or suspicion as well as other surveillance by security authorities in Switzerland, the rest of Europe, the United States of America (USA) and other countries. We have no direct influence on the corresponding processing of personal data by intelligence services, police forces and other security authorities.

9. Use of the website

9.1 Cookies

Cookies are data stored in the browser. Cookies can be stored temporarily as «session cookies» or for a specific period as so-called persistent cookies. «Session cookies» are deleted automatically when the browser is closed. Persistent cookies have a specific storage period.

We use only technically necessary (functional) cookies without which our website or our shop would not work properly. We do not use cookies for advertising, tracking or creating user profiles. That's why we don't ask for your consent with a cookie banner.

Cookies can be fully or partially disabled and deleted in the browser settings at any time. Without cookies, our website may no longer be fully available, for example the shopping cart or payment in the shop.

We use the following functional cookies:

  • NEXT_LOCALE: stores the language selected on the website; storage period 1 year
  • NEXT_CURRENCY_CODE: stores the selected currency; storage period 1 year
  • sessionId: identifies your session in the shop, for example for the shopping cart and checkout; storage period 7 days
  • __stripe_mid and __stripe_sid: hash values for the secure processing of online payments with the payment provider Stripe and for fraud detection; storage period 1 year and 30 minutes respectively (Privacy Policy, Cookie Policy)

9.2 Server log files

For each access to our website, we may record the following information, provided it is transmitted by your browser to our server infrastructure or can be determined by our web server: date and time including time zone, Internet Protocol (IP) address, access status (HTTP status code), operating system including user interface and version, browser including language and version, individual subpage of our website accessed including the amount of data transferred, and the web page last accessed in the same browser window (referer or referrer).

We store such information, which may also constitute personal data, in server log files. The information is necessary to provide our website permanently, in a user-friendly and reliable manner and to ensure data security and thus in particular the protection of personal data, also by or with the help of third parties.

10. Notifications and communications

We send notifications and communications by email, for example booking confirmations, order confirmations and our newsletter «Trail & Chill», and via other communication channels such as instant messaging or SMS.

10.1 Performance and reach measurement

Notifications and communications may contain web links or tracking pixels that record whether an individual communication was opened and which web links were clicked. Such web links and tracking pixels may also record the use of notifications and communications on a personal basis. We need this statistical recording of usage for performance and reach measurement in order to send notifications and communications effectively and in a user-friendly, permanent, secure and reliable manner based on the needs and reading habits of the recipients.

10.2 Consent and objection

You generally have to explicitly consent to the use of your email address and your other contact details, unless their use is permitted for other legal reasons. For any consent, we use the «double opt-in» procedure where possible, which means you receive an email with a web link that you have to click to confirm, so that no misuse by unauthorised third parties can occur. We may log such consents, including the Internet Protocol (IP) address and date and time, for evidence and security purposes.

You can generally object to receiving notifications and communications such as newsletters at any time. With such an objection, you can at the same time object to the statistical recording of usage for performance and reach measurement. This does not apply to necessary notifications and communications in connection with our activities and operations, for example booking confirmations.

10.3 Service providers for notifications and communications

We send notifications and communications with the help of specialised service providers.

In particular, we use:

11. Social media

We are present on social media platforms and other online platforms, in particular on Instagram, in order to communicate with interested persons and to inform them about our activities and operations. On our website, we merely link to these platforms but do not embed them. Data is only transmitted to the respective platform when you follow such a link. In connection with such platforms, personal data may also be processed outside Switzerland and the European Economic Area (EEA).

The General Terms and Conditions (T&Cs) and terms of use as well as privacy policies and other provisions of the individual operators of such platforms also apply. These provisions provide information in particular about the rights of data subjects directly vis-à-vis the respective platform, which include, for example, the right of access.

12. Third-party services

We use third-party services in order to carry out our activities and operations permanently, in a user-friendly, secure and reliable manner. Such services may also be used to embed content in our website. Such services require your Internet Protocol (IP) address, as the corresponding content cannot otherwise be transmitted.

For their own security-related, statistical and technical purposes, third parties whose services we use may process data in connection with our activities and operations in aggregated, anonymised or pseudonymised form. This includes, for example, performance or usage data.

In particular, we use:

12.1 Digital infrastructure

We use third-party services in order to use the digital infrastructure required in connection with our activities and operations. This includes, for example, hosting and storage services from specialised providers.

In particular, we use:

12.2 Maps

We use third-party services to embed maps in our website.

In particular, we use:

  • map.geo.admin.ch: map service; provider: Federal Geographic Information Coordination Body (GCG); privacy information: Privacy Policy, «Legal basis» (in German).
  • Mapbox: map service, integrated via the Mapbox GL JS SDK; provider: Mapbox, Inc. (USA); Mapbox stores a randomly generated identifier in your browser's local storage, which Mapbox uses to calculate aggregated usage statistics (no cookies, no advertising, no user profiles); privacy information: Privacy Policy, «Privacy & Security FAQ».

12.3 Audiovisual media

We use third-party services to enable audiovisual media such as music or videos to be played directly on our website.

In particular, we use:

12.4 Fonts and icons

We deliver all fonts and icons (including Font Awesome) locally from our own infrastructure. No data is transmitted to the providers of the fonts or icons.

12.5 Payments

We use a payment service provider to process payments from our customers securely and reliably. Payments are made via Stripe's payment functions, either directly on our website or via payment pages hosted by Stripe (Payment Links). You enter your card and payment details directly with Stripe; they are not stored on our servers. The terms of Stripe, such as General Terms and Conditions (T&Cs) or privacy policies, apply to the processing.

In particular, we use:

  • Stripe: payment processing; providers: Stripe Inc. (USA) / Stripe Payments Europe Limited (SPEL, Ireland) for users in the European Economic Area (EEA) and Switzerland and partly in the United Kingdom / Stripe Payments UK Limited (United Kingdom) and Stripe Capital Europe Limited (Ireland) partly for users in the United Kingdom; privacy information: «Stripe Privacy Center», Privacy Policy, Cookie Policy.

Depending on the payment method chosen, the respective providers additionally process data under their own responsibility, for example the card-issuing bank for payments by credit or debit card, as well as:

13. Online shop and digital downloads

13.1 Fine art prints

We run our shop with our own shop software on our own infrastructure (see section 12.1). To process an order, we process in particular your name, contact details, delivery and billing address, ordered items and payment status. For shipping, we pass your name and delivery address on to the respective shipping service provider.

13.2 GPX downloads

You can download GPX tracks from our Online Magazine for a small fee. Payment is made via Stripe (see section 12.5), and the download is then provided from our storage at Amazon S3 (see section 12.1). In doing so, we process the information required for payment and for providing the download.

13.3 Retention

Order and booking data relevant for accounting purposes is retained in accordance with the statutory retention obligations, generally for ten years.

14. Performance and reach measurement

We use a service to determine how our online offering is used. In this context, we can measure, for example, which content is particularly popular and via which third-party links visitors arrive at our website. Based on the results, we can in particular fix errors, strengthen popular content or make improvements to our online offering.

We have deliberately chosen a privacy-friendly solution: no cookies are set, no user profiles are created and visitors are not tracked across different websites. IP addresses are not stored but only used briefly to calculate an anonymous identifier that changes daily. We only see aggregated statistics, for example page views, referring page, country, device type and browser.

In particular, we use:

15. Final provisions

We originally created this Privacy Policy with the Privacy Policy Generator by Datenschutzpartner and have since adapted it to our activities and operations.

We may amend and supplement this Privacy Policy at any time. We will inform you of such amendments and supplements in an appropriate form, in particular by publishing the current Privacy Policy on our website.

Last updated: October 2026