Privacy Policy
We ask you for a few details to organise your rides, not to build a database. Here is which ones, why, for how long, and how you take back control whenever you want.
In short
WE SELL NOTHING
Your data is not sold, rented or exchanged. It is there to organise your rides and keep you informed, nothing else.
YOU STAY IN CONTROL
Access, correction, deletion, newsletter unsubscribe: one message is enough, and we do it without arguing.
HOSTED IN SWITZERLAND
The site, the customer database and the email accounts are hosted in Switzerland. The few tools located abroad are listed below.
Who is responsible for your data
The data controller is Exoride, chez-les-Addy 5, 1937 Orsières, Suisse, represented by Christian Dassi. For any question about your data, write to
This policy applies to the exoride.net site, the customer area, event bookings, equipment rental and the newsletter. It follows the Swiss Federal Act on Data Protection, as well as the European regulation when you live in the European Union.
What we collect and why
| Situation | Data | Why |
|---|---|---|
| Your customer account | Last name, first name, email, phone, postal address, encrypted password | Manage your account and your bookings. Performance of the contract. |
| Your booking for a ride | Event chosen, rental options (bike, pedals, inverted brakes, protection), your height in centimetres, your free comment, and the person to contact in an emergency with their number | Organise the day, put the groups together, get the right kit ready, keep you safe. Performance of the contract. |
| Your payment | Amount, date, means of payment, transaction reference. Card numbers never pass through our servers. | Take payment and keep the accounts. Legal obligation. |
| Your Exo'points | History of your bookings, points balance, personal code | Run the loyalty programme. Performance of the contract. |
| The newsletter | Email, language, sign up date, opens and clicks | Announce departures and news to you. Your consent, which you can withdraw at any time. |
| That day's gallery | The photos and videos taken during the day, in which you may appear, and the access link sent after the ride | Hand you your images, then show our rides. Performance of the contract, then your agreement given at booking. |
| The contact form | Name, email, phone if you give it, content of the message | Answer you and follow up your request. Legitimate interest. |
| Your visit to the site | IP address, browser, pages viewed, date and time, in the server logs | Security, troubleshooting and visitor statistics. Legitimate interest. |
Photos and videos from the rides
We take photos and film during the days out, and it is first of all a service for you. After the ride, every participant receives a link to that day's gallery and can download the photos of their choice, free of charge, to use as they wish.
We sometimes keep the best ones to show our rides on the site, in the newsletter and on social media. You give your agreement for that use when you book, by accepting the terms and conditions of sale, which set this out in detail.
And you keep control afterwards: if a photo published on the site does not suit you, ask us to take it down and we will remove it. No need to explain yourself. For participants who are minors, the parental authorisation covers this too.
Who else has access
We work with a small number of service providers, each on a precise scope, with no right to use your data for their own purposes. Our guides only see the participant list for the day they are leading.
| Service provider | Role | Where |
|---|---|---|
| Infomaniak Network SA, Genève, Suisse | Hosting of the site, the database and the email accounts | Switzerland |
| Stripe Payments Europe, Limited, Dublin, Ireland | Processing of online payments. Payment happens on a page hosted by Stripe: card numbers do not pass through us. Depending on the services used, Stripe Payments UK Ltd may also be a party to the contract. | Ireland, United Kingdom, and the United States for the Stripe group's technical processing |
| Google Ireland Ltd | Audience measurement (Google Analytics) and online advertising (Google Ads), only if you accept the corresponding cookies. Also reCAPTCHA, which protects our forms from spam and runs at all times. | Ireland and United States |
| Meta Platforms Ireland Ltd | Measurement of Facebook and Instagram ads, only if you accept advertising cookies | Ireland and United States |
| Microsoft Ireland Operations Ltd | Microsoft Clarity, page usage statistics, only if you accept measurement cookies | Ireland and United States |
| Partners on a ride | Accommodation, restaurants, transport operators and local agencies on trips: only the name and what is needed for the booking | Country of the trip |
Cookies and audience measurement
On your first visit, a banner asks you what you accept. Until you have accepted something, only the essential cookies are set.
ESSENTIAL
They make the site work: your session, your rental basket, your language, your currency, and Google reCAPTCHA which protects our forms from spam. They do not ask for your agreement, without them nothing works.
FUNCTIONAL
They enrich your visit. In our case, that means OpenStreetMap maps. Set only if you accept them.
MEASUREMENT
They tell us which pages are read and where visitors come from, so we can improve the site. We use Google Analytics and Microsoft Clarity. Set only if you accept them.
ADVERTISING
They make it possible to know that an ad led to a booking, and to show you our rides again elsewhere on the web. We use Google Ads and the Meta pixel, which covers Facebook and Instagram. Set only if you accept them.
You can change your mind whenever you want: the Manage my cookies link, at the bottom of every page, reopens the choice. Your browser also lets you block or delete cookies, at the risk of some site functions no longer responding.
How long we keep it
| Duration | What |
|---|---|
| As long as you ride | Your customer account, until you ask for it to be deleted. |
| 10 years | Accounting records, invoices and payments. That is the law, we have no choice. |
| 48 months | The balance and history of your Exo'points, aligned with their validity. |
| Until removal | That day's gallery. It stays accessible until we take it down, and no fixed period is set in advance. You can ask at any time for a photo, or the whole gallery, to be removed. |
| 10 days | The server logs, deleted automatically by our host. |
| Until you unsubscribe | Your newsletter subscription. |
Your rights, and how to use them
KNOW
Ask what data we hold about you and receive a copy.
CORRECT
Have anything false or incomplete put right, directly in your customer area or by message.
ERASE
Ask for your account and your data to be deleted, apart from accounting records.
OBJECT
Refuse a processing based on our legitimate interest, including the use of your image.
TAKE AWAY
Receive your data in a machine readable format, to pass it on elsewhere.
WITHDRAW YOUR AGREEMENT
At any time, without calling into question what was done before.
HOW TO DO IT
An email to
For the newsletter, the unsubscribe link at the bottom of every send does the job immediately.
SECURITY AND RECOURSE
The site is served over HTTPS, access to the database is restricted and passwords are stored in encrypted form. As no system is infallible, we cannot guarantee absolute security.
If our answer does not satisfy you, you can refer the matter to the Federal Data Protection and Information Commissioner in Bern, or to the authority in your country if you live in the European Union.
This policy can change when our tools or our obligations change. The version in force is always the one published on this page, with its update date.
