Privacy Policy

Updated: 15 March 2026

This Privacy Policy explains how Grande Turismo collects, uses, processes, and protects personal data when you visit our platform, grandeturismo.com, create an account, or book activities through our services.

We are committed to protecting your privacy and ensuring transparency regarding how personal data is handled. This Privacy Policy is designed to comply with applicable data protection laws, including the Swiss Federal Act on Data Protection (nFADP) and other relevant regulations where applicable.

1. Introduction and Data Controller

Grande Turismo (hereinafter “we,” “us,” or “our”) operates the online platform grandeturismo.com, which enables users to discover and book automotive events, experiences, and activities offered by independent third-party suppliers.

This Privacy Policy describes how we collect, use, disclose, and protect personal data when you:

  • visit our website
  • create a user account
  • book activities or interact with suppliers through the platform
  • contact our support team
  • submit reviews or other content.

For the purposes of the Swiss Federal Act on Data Protection (nFADP), the data controller responsible for the processing of personal data is:

Grande Turismo GmbH
Grosswiesenstrasse 167, 8051 Zurich, Switzerland
Email: info@grandeturismo.com

2. Categories of Personal Data We Collect

We collect personal data that you provide directly to us, as well as information collected automatically when you use our Platform.

2.1 Information You Provide Directly

We may collect personal data that you voluntarily provide when using our Platform, including when creating an account, making a booking, contacting support, or interacting with Suppliers.

This may include:

  • Contact and Identity Data: Name, email address, telephone number, and postal address.
  • Account Data: Username, encrypted password, and account preferences.
  • Booking and Transaction Data: Details of the Activities you book, including event name, date, time, price, booking history, and transaction details.
  • Participant Data: Information about participants included in a booking, such as name, age, and any specific requirements necessary for the Activity (for example weight requirements for certain vehicles or driver’s license details for driving experiences).
  • Communication Data: Records of communications with our customer support team, suppliers, or other interactions with the Platform.
  • Marketing Preferences: Your preferences regarding receiving marketing communications such as newsletters or promotional messages.

2.2 Information Collected Automatically

When you use the Platform, we may automatically collect certain technical and usage data about your device and interaction with the website.

This may include:

  • Technical and Usage Data: IP address, browser type, device identifiers, operating system, language settings, referral URLs, and pages visited on our Platform.
  • Location Data: Approximate geographic location derived from your IP address or device settings.
  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to support the functionality of the Platform, analyze usage patterns, improve user experience, and deliver personalized content or marketing.

Further information about our use of cookies and tracking technologies is provided in our Cookie Policy or the relevant section of this Privacy Policy.

3. Purpose of Processing

We process personal data for the following purposes:

  • Service Delivery and Contract Performance:
    To create and manage user accounts, facilitate bookings of Activities, issue confirmations or vouchers, and communicate with you regarding your bookings.
  • Supplier Coordination:
    To share relevant booking information with the third-party Suppliers providing the Activities so they can deliver the services you have booked.
  • Customer Support:
    To respond to inquiries, provide assistance before, during, and after an Activity, and manage customer service requests.
  • Marketing and Platform Optimization:
    To send you relevant offers, updates, or promotional communications (where permitted by law or based on your consent) and to improve the functionality and user experience of our Platform.
  • Security and Fraud Prevention:
    To verify eligibility for certain Activities, detect and prevent fraudulent transactions, protect the Platform against abuse, and ensure the security of user accounts.
  • Legal and Regulatory Compliance:
    To comply with applicable legal obligations, including tax reporting, accounting requirements, and regulatory obligations under Swiss law.

4. Legal Basis for Processing (nFADP)

Under the Swiss Federal Act on Data Protection (nFADP) and other applicable data protection laws, we process personal data based on the following legal justifications:

  • Performance of a Contract:
    Processing is necessary to create and manage your account, facilitate bookings, process payments, issue vouchers, and coordinate with the Suppliers providing the Activities you have booked.
  • Legitimate Interests:
    Processing is necessary for our legitimate business interests, including operating and improving the Platform, ensuring platform security, preventing fraud, analyzing usage of the Platform, and providing relevant information about our services.
  • Consent:
    Where required by law, we rely on your consent to process certain personal data, such as sending marketing communications, newsletters, or processing certain categories of optional data.
  • Legal Obligations:
    Processing is necessary to comply with applicable legal obligations, including accounting, tax reporting, regulatory compliance, and responding to lawful requests from public authorities.

5. Sharing Your Data with Third Parties

To provide and operate our services, we may share personal data with the following categories of recipients.

5.1 Experience Suppliers

When you book an Activity through the Platform, we share relevant information with the Supplier providing the Activity.

This may include:

  • your name and contact details
  • booking details
  • participant information necessary for the Activity (for example age, weight, or driver’s license status).

This information is necessary for the performance of the contract and to ensure safe and effective delivery of the Activity.

Suppliers act as independent data controllers and are responsible for their own data protection practices.

5.2 Payment and IT Service Providers

We use trusted third-party providers to operate our services and infrastructure.

These may include providers of:

  • payment processing services (such as Stripe or PayPal)
  • cloud hosting and infrastructure services (such as AWS or Google Cloud)
  • analytics and platform optimization services (such as Hotjar or similar tools).

Payment providers process payment information directly in accordance with their own privacy policies. Grande Turismo does not store full payment card details on its servers.

These service providers process personal data only on our behalf and are contractually bound by appropriate Data Processing Agreements (DPAs).

5.3 Legal and Regulatory Authorities

We may disclose personal data to public authorities, regulators, or law enforcement agencies where required by applicable law or where necessary to comply with legal obligations.

This may include disclosures to Swiss tax authorities (such as the Swiss Federal Tax Administration) for VAT reporting or to other authorities where a valid legal request or court order is received.

5.4 Corporate Transactions

If Grande Turismo undergoes a business transaction such as a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the relevant parties involved in the transaction, subject to appropriate confidentiality obligations.

5.5 Responsibility of Experience Suppliers

When you book an Activity through the Platform, certain personal data necessary for the organization and execution of the Activity may be shared with the respective Experience Supplier.

Experience Suppliers act as independent data controllers with respect to the personal data they receive. They are responsible for processing such data in accordance with applicable data protection laws and their own privacy policies.

Grande Turismo does not control how Experience Suppliers process personal data once it has been transferred to them for the purpose of delivering the booked Activity.

If you have questions or concerns regarding how a Supplier processes your personal data, you should contact the Supplier directly.

Grande Turismo is not responsible for any processing of personal data carried out independently by Experience Suppliers beyond what is necessary for the facilitation of the booking and delivery of the Activity.

6. International Data Transfers

As part of providing our services, your personal data may be transferred to or processed in countries outside Switzerland.

This may occur, for example, when:

  • an Activity supplier is located in another country
  • we use international payment processors
  • our cloud infrastructure or service providers operate outside Switzerland.

Some of these countries may not provide a level of data protection considered equivalent to Swiss data protection standards.

Where personal data is transferred to such countries, Grande Turismo implements appropriate safeguards to protect your data, including:
  • reliance on countries recognized by Switzerland as providing an adequate level of protection
  • participation in recognized frameworks such as the Swiss-U.S. Data Privacy Framework, where applicable
  • the use of Standard Contractual Clauses (SCCs) or equivalent contractual safeguards adapted for Swiss data protection law.

These safeguards are designed to ensure that your personal data remains protected when transferred internationally.

You may request further information about the safeguards applied to international data transfers by contacting us using the contact details provided in this Privacy Policy.

7. Data Retention and Security

7.1 Retention Period

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including providing our services, complying with legal obligations, resolving disputes, and enforcing our agreements.

Retention periods may vary depending on the type of data and the applicable legal requirements. For example:

  • booking and transaction records may be retained to comply with financial and tax obligations
  • account information may be retained for as long as the user maintains an active account
  • communication records may be retained to resolve customer service inquiries or disputes.

Where required by Swiss law, certain records (such as financial and accounting documentation) may be retained for up to ten years in accordance with the Swiss Code of Obligations.

Once the applicable retention period has expired, personal data will be securely deleted or anonymized, unless further retention is required by law.

Please note that Activity suppliers who receive your data in connection with a booking may retain and process such data independently in accordance with their own data protection policies.

7.2 Data Security

Grande Turismo implements appropriate technical and organizational measures (TOMs) designed to protect personal data against unauthorized access, loss, misuse, alteration, or destruction.

These measures include, among others:

  • encryption of data in transit using secure protocols such as TLS
  • encryption of sensitive data at rest where appropriate
  • restricted access to personal data based on role and necessity
  • regular monitoring and security audits of our systems
  • internal procedures for detecting and responding to potential security incidents.

Despite these safeguards, no online system can be guaranteed to be completely secure. Users are therefore encouraged to protect their account credentials and notify us immediately if they suspect unauthorized access to their account.

8. Your Rights Under Swiss Law

As a data subject under the Swiss Federal Act on Data Protection (nFADP), you have certain rights regarding the personal data we process about you.

These rights include:

  • Right to Information
    You have the right to request confirmation as to whether we process personal data about you and to obtain information about the data we hold and how it is processed.
  • Right to Rectification
    You may request that inaccurate or incomplete personal data be corrected.
  • Right to Erasure
    You may request the deletion of your personal data, subject to applicable legal retention obligations or other legitimate reasons for continued processing.
  • Right to Data Portability
    Where applicable, you may request that certain personal data you have provided to us be transferred to you or another service provider in a structured and commonly used format.
  • Right to Object
    You may object to the processing of your personal data where such processing is based on our legitimate interests, including for direct marketing purposes.
  • Right to Withdraw Consent
    Where processing is based on your consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us using the contact details provided in this Privacy Policy.

For security purposes, we may request additional information to verify your identity before responding to your request.

We will respond to requests within a reasonable period and in accordance with applicable law.

If you believe that your data protection rights have been violated, you also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

9. Cookies and Analytics

We use cookies and similar technologies to operate, analyze, and improve the performance of our Platform.

Cookies are small text files stored on your device when you visit a website. They allow websites to recognize your device and remember certain information about your visit.

We use different categories of cookies, including:

  • Essential Cookies
    These cookies are necessary for the operation of the Platform and enable core functionality such as account login, security, and booking processes.
  • Analytics and Performance Cookies
    These cookies help us understand how users interact with the Platform so we can improve performance and user experience. For example, we may use analytics tools to measure website traffic and usage patterns.
  • Marketing and Personalization Cookies
    These cookies may be used to deliver relevant content or marketing communications and to measure the effectiveness of advertising campaigns.

You can manage or disable non-essential cookies through our cookie banner or by adjusting your browser settings.

For visitors located in the European Union, we apply a consent-based (opt-in) approach for non-essential cookies in accordance with applicable data protection laws.

Some cookies may remain stored on your device for varying periods depending on their purpose. You may delete cookies at any time through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, data processing practices, or applicable laws and regulations.

When updates are made, the revised version will be published on the Platform and the “Last Updated” date at the top of this Privacy Policy will be modified accordingly.

Where changes materially affect how we process personal data, we may notify users through appropriate means, such as email notifications or notices displayed on the Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect and process your personal data.

curated.title
Curated only

We list what car lovers actually want. Handpicked, high-revving, no fluff.

fair.title
Fair gear, fair price

No setup fees, no monthly plans. You pay only if you sell.

drive.title
Every kind of drive

Track days, karting, safaris, rallies. All under one hood.

nostress.title
No stress, just drive

Need help? We’ve got your back. Fast support, smooth experience.