Privacy Policy

1. Introduction

PATRIVELA ("we," "our," or "us") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we process information when you visit our website, contact us, purchase products, submit a producer candidature, recommend a producer through a tourism organisation, or otherwise interact with us.

This notice covers consumers, producer candidates, prospective and selected producers, tourism organisations, and people whose details are included in a producer recommendation. Separate producer or collaboration terms will apply only if and when a commercial relationship is agreed.

2. Data We Collect

The data collected depends on how you interact with PATRIVELA. It may include:

• Consumer and contact data: name, email address, telephone number, delivery and billing information, messages, order details, and payment-related information handled through our payment provider.
• Producer candidature data: company and contact details; role; telephone, website, and social-profile information; region, province, municipality, activity type; product, business-story, content, logistics, international-sales, and market information; and other information voluntarily included in the candidature.
• Tourism-organisation referral data: the organisation and contact person's details, the recommended producer's name, location, website or social profile, any contact detail shared for that producer, and the reason for the recommendation.
• CRM and relationship data: candidature or referral source, status, submission and update timestamps, follow-up information, and internal notes that are necessary for producer qualification and relationship management.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform.
• Usage and funnel data: information about how you navigate, browse, and interact with the website, including producer-candidature and tourism-referral journey events where analytics is enabled.

3. How We Use Your Information

We process your personal data for the following purposes:

• To process, fulfill, and ship product orders where the relevant service is available.
• To communicate order status, logistics updates, and customer support inquiries.
• To evaluate a producer or product against PATRIVELA's selection criteria, including potential suitability for international markets.
• To manage a candidature, contact the applicant, progress suitable candidates to further evaluation, and manage prospective producer relationships.
• To receive and assess producer recommendations from tourism organisations and, where appropriate, contact the recommended producer to determine whether they wish to engage with us.
• To manage source attribution, lead status, follow-up, and only those internal notes necessary for qualification and relationship management.
• To improve website functionality and understand website, candidature, and referral journeys where analytics is enabled.
• To comply with legal obligations, tax laws, and accounting requirements.

4. Legal Bases

Depending on the activity and applicable law, we rely on the performance of a contract, steps taken at your request before entering into a contract, compliance with legal obligations, our legitimate interests in operating and improving PATRIVELA and managing prospective business relationships, or consent where it is required. We do not treat every interaction as consent. The legal basis applicable to each processing activity is subject to the final legal review of PATRIVELA's operations.

5. Data Received Through Recommendations

A tourism organisation may recommend a producer before that producer has contacted PATRIVELA directly. In that case, we may receive limited business and contact information from the organisation, assess the recommendation, and contact the producer to explain the opportunity. A recommendation does not create an onboarded supplier relationship or a commercial agreement, and the producer decides whether to proceed.

6. Payment Processing & Data Security

We do not store complete credit card or payment credential details on our servers. Payment processing is handled by secure, PCI-DSS compliant payment gateways. We implement administrative, technical, and physical safeguards to protect your personal information against unauthorized access, loss, or alteration.

7. Recipients and Service Providers

We do not sell or rent personal information. We may share it with service providers that support the website and our operations, including:

• Logistics and courier partners for order delivery.
• Stripe, for payment processing where checkout is available.
• Sanity, which supports website content and the producer-lead records submitted through our forms.
• Resend, which sends form, candidature, and service communications by email.
• Google Analytics, where enabled, to measure website and funnel events.
• IT support, cloud infrastructure, hosting, and media-delivery providers that are necessary to operate the website.
• Legal authorities when required by applicable laws or court orders.

Some providers may process data outside Switzerland or the EEA. Where applicable, PATRIVELA will use the transfer mechanisms and safeguards required by applicable data-protection law. The production vendor and transfer inventory is subject to ongoing review.

8. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, including managing orders, enquiries, candidatures, recommendations, prospective relationships, and legal or accounting obligations. For producer leads, the applicable period depends on the relationship status, including whether a candidature is under review, contacted, shortlisted, selected, deferred, rejected, or progresses to onboarding. Specific retention periods are subject to PATRIVELA's approved retention schedule and legal review.

9. Your Rights Under GDPR / Applicable Laws

Under applicable data protection laws, you have rights including:

• Access & Rectification: The right to request access to and correction of your personal data.
• Erasure: The right to request deletion of your personal data ("right to be forgotten").
• Data Portability: The right to request a copy of your personal data in a structured, machine-readable format.
• Objection & Restriction: The right to object to processing or request restriction of data handling.

10. Controller and Contact

PATRIVELA is the controller for the processing described in this notice. The controller's legal entity name, registered address, and any applicable data-protection contact details must be confirmed before the final lawyer-approved publication of this policy. For questions or privacy requests in the meantime, please contact: