Legal
Privacy.
A plain-English summary of what we collect, why, how long we keep it, and the rights you have under GDPR and the Swiss nDSG.
1. Controller
Munga Expeditions AG
Schindellegistrasse 73
8808 Pfäffikon SZ, Switzerland
info@mungaplains.com
2. Data we collect
Transactional data. When you submit a form or send yourself an email summary, we collect the information you provide (e.g. name, email address, form responses).
Analytics data. We collect device type, browser, approximate location (country), UTM campaign parameters, and navigation events (which screens you visit) to understand how people use our site.
Newsletter opt-in.If you check the “Keep me informed” box, we record your consent so we can send you updates about Munga Plains retreats and experiences.
3. Purpose & legal basis
- Legitimate interest(Art. 6(1)(f) GDPR · Art. 31 nDSG) — analytics to improve the site and understand visitor behaviour.
- Consent(Art. 6(1)(a) GDPR · Art. 31 nDSG) — newsletter communications. You can withdraw consent at any time by contacting us.
- Contract performance(Art. 6(1)(b) GDPR) — processing enquiry responses and sending email summaries you request.
4. Third-party processors
- Supabase(AWS eu-central-1) — database and serverless functions
- Resend— transactional email delivery
- Vercel— website hosting and edge network
- Cloudinary— image and video CDN
- HubSpot— CRM and marketing automation
- Mailchimp— newsletter distribution
- Plausible(EU-hosted) — cookie-free website analytics. No personal data collected.
- Google Analytics 4 & Google Ads (Google LLC) — analytics and advertising attribution. Loaded only after you accept cookies.
- Meta Pixel & Conversions API(Meta Platforms, Inc.) — advertising attribution and remarketing on Instagram and Facebook. Loaded only after you accept cookies; hashed email and phone may be sent from our server to Meta when you submit a form.
All processors are bound by data processing agreements. Data may be transferred to the US under EU Standard Contractual Clauses or equivalent safeguards.
4a. Cookies & tracking
We keep cookies to the minimum needed. On your first visit you’ll see a banner asking whether to accept advertising and analytics cookies.
- Always on.Plausible analytics — no cookies, no personal data, just aggregated page counts.
- With your consent.Google Analytics, Google Ads, and Meta Pixel — these set cookies and help us measure which campaigns actually work.
You can change your mind at any time by clearing your browser’s site data for mungaplains.com. We’ll show the banner again on your next visit.
5. Data retention
We retain transactional data for the duration of our business relationship and up to 10 years thereafter for legal compliance. Analytics data is retained for 24 months. You can request earlier deletion at any time.
6. Your rights
Under the GDPR and Swiss nDSG you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Data portability (receive your data in a structured format)
- Object to processing based on legitimate interest
- Withdraw consent at any time, without affecting prior processing
- Lodge a complaint with your local data protection authority
7. Contact
For any privacy-related request, contact us at info@mungaplains.com.
Last updated: April 2026