Privacy Policy

HolidayHive is the public website and customer portal operated by Atlantico Reisen und Services, Militärstrasse 83, 8004 Zürich, Switzerland. For this policy, “HolidayHive”, “we”, “us”, and “our” mean Atlantico Reisen und Services.

We act as the data controller for the personal data processed through the HolidayHive website, customer accounts, booking requests, contact forms, gift voucher requests, invoices, and support communications.

Because HolidayHive is based in Switzerland, Swiss data protection law applies, including the Swiss Federal Act on Data Protection. Where services are offered to people in the European Economic Area or the United Kingdom, the GDPR or equivalent local rules may also apply.

We apply the same practical privacy standard across all HolidayHive language versions and customer workflows.

We collect account and identity details such as name, email address, phone number, country, preferred language, password credentials in hashed form, marketing preference, and billing details you choose to provide.

We collect travel and reservation details such as destination, dates, number of adults, children and infants, room or accommodation preferences, pickup location, special requests, traveller notes, request snapshots, and booking status.

We collect finance and document data such as invoices, invoice status, payment receipts uploaded by you, bank-transfer references, voucher requests, and internal booking references.

We collect communication data from contact forms, support messages, privacy requests, email replies, and operational messages sent by or to HolidayHive.

When you create a HolidayHive account, we use your data to authenticate you, show your reservation requests, invoices, payment confirmations, documents, and favourites, and continue requests that were started before sign-in.

Passwords are stored using hashing technology. We do not store your password in plain text. Account pages are protected so private booking and invoice data is shown only to the authenticated account allowed to access it.

Email verification may be required before full customer portal access is available.

HolidayHive is a request-to-book travel service. A submitted request is not an instant confirmed booking. We review availability, dates, supplier rules, cancellation conditions, traveller details, final pricing, invoices, and required payment steps before confirmation.

To handle a stay or trip request, we may process your contact details, travel dates, number of travellers, accommodation or room preferences, special requests, selected departure, price snapshot, invoice status, and operational notes needed to support the booking.

If a request is accepted or confirmed, we may keep the related booking record, invoice, payment receipt, and correspondence as required for contract, accounting, tax, and dispute-handling purposes.

You should only include sensitive information, such as health, accessibility, dietary, identity-document, or family details, when it is needed for your travel request or supplier arrangements.

Where you provide such information, we process it only to prepare or support the requested travel service, to meet legal obligations, or with your explicit instruction where required.

HolidayHive may issue invoices and record payment status, payment confirmations, payment receipts, bank-account references, partial payments, overdue status, refunds, and voucher order details.

The current HolidayHive website is designed around invoices, bank transfer/payment confirmations, and customer-uploaded receipts. We do not ask you to enter card details directly into the HolidayHive website unless a separate payment provider is clearly introduced at checkout.

Gift voucher requests may include buyer details, recipient name, amount, message, preferred language, and related correspondence.

When you contact us, we use your message and contact details to respond, prepare a travel offer, handle support, or manage a privacy request.

If you subscribe to HolidayHive updates or select marketing consent, we may send relevant travel updates. You can withdraw marketing consent at any time by contacting us or using an unsubscribe option where provided.

When you use the website, our systems may process technical data such as IP address, browser type, device type, visited pages, timestamps, request logs, error logs, security events, language preference, currency preference, and session identifiers.

HolidayHive currently uses essential cookies and local browser storage for functions such as sessions, forms, language or currency preferences, CSRF protection, and remembering that the cookie notice was acknowledged. We did not identify active advertising pixels, analytics trackers, live chat widgets, maps, or card payment scripts in the application code at the time of this update.

If additional optional analytics, advertising, maps, live chat, or payment integrations are added later, this policy and the cookie information should be updated before those tools are enabled.

We process personal data to provide the website, create and secure accounts, answer requests, prepare travel offers, manage booking workflows, issue invoices, process payment confirmations, provide customer support, send service emails, maintain records, improve reliability, prevent abuse, and comply with legal obligations.

Where GDPR applies, our legal bases include contract preparation and performance, legitimate interests in operating and protecting HolidayHive, legal obligations for accounting and compliance, consent for optional marketing or sensitive data where required, and vital or public-interest grounds only where strictly applicable.

We share personal data only where needed for the HolidayHive service. This may include accommodation providers, travel suppliers, transport or activity providers, payment and banking partners, email and hosting providers, IT support providers, professional advisers, insurers, authorities, and service providers that help operate the website and customer portal.

Suppliers may receive the traveller and request information needed to check availability, prepare an offer, confirm a reservation, support travel, handle changes, or meet legal and safety requirements.

Because travel services may involve destinations and suppliers outside Switzerland, your booking or traveller information may be shared internationally where needed for the requested travel service.

Where personal data is transferred to countries without an adequate level of protection, we use appropriate safeguards where required, such as contractual commitments, limiting the data shared, or relying on an applicable legal exception for the travel service you requested.

HolidayHive is not directed to children creating independent travel accounts. Adults may provide information about children or infants only where needed for a family travel request, accommodation occupancy, safety requirement, or supplier rule.

We use practical security controls such as HTTPS on production, account authentication, CSRF protection, access checks for private customer resources, hashed passwords, role-based admin access, and operational logging.

No system is perfectly secure. If a data incident occurs and notification is legally required, we will notify affected users and authorities as required by applicable law.

We keep personal data only as long as needed for the purpose collected, including active account use, travel request handling, booking administration, invoices, payment records, legal obligations, tax and accounting retention, dispute resolution, security, and business records.

Unsuccessful enquiries and support messages may be deleted or anonymised earlier unless we need them for follow-up, fraud prevention, legal claims, or record keeping.

HolidayHive does not use automated decision-making that produces legal or similarly significant effects for customers. Booking requests are reviewed by people before confirmation, invoicing, or payment instructions are issued.

Depending on the applicable law, you may have the right to request access, correction, deletion, restriction, portability, objection to processing, withdrawal of consent, marketing opt-out, and information about how your data is processed.

Some rights may be limited where we must keep data for legal, accounting, contract, security, fraud-prevention, or dispute-handling reasons.

You can send a privacy request using the form below or by contacting HolidayHive by email. We may ask for information needed to verify your identity before acting on a request.

If you ask to close or delete an account, we will remove or restrict data where possible while retaining records that must be kept for bookings, invoices, tax, accounting, security, or legal claims.

The HolidayHive website may link to external websites, social media pages, suppliers, or partners. Their privacy practices are their responsibility. Please review their privacy information before sending personal data to them.

We may update this policy when the website, customer portal, booking workflow, legal requirements, or service providers change. The updated date shows when this page was last revised.

If HolidayHive or Atlantico Reisen und Services is reorganised, transferred, merged, or sold, relevant personal data may be transferred as part of that business event subject to applicable law.

You may contact us first with any privacy concern. You may also contact the competent Swiss data protection authority or another applicable supervisory authority if you believe your rights have not been handled properly.