Privacy Policy

Who is responsible

The operators named in the imprint are responsible for processing your personal data. For any question about your data, write to:

When you request a booking

We collect your first and last name, email address, travel dates, the number of adults and children, the language you chose on the site, and the time you accepted the Booking Policies. We use this to review your request, confirm or decline it, take payment, and prepare your stay. Without it we cannot process a booking (GDPR: performance of a contract).

When you pay

Card and wallet payments are handled by Stripe on its own secure payment page. We never see or store your card details. We receive and keep the payment status, amount, fees, any refunds, and Stripe's reference numbers, so that we can confirm your booking and keep accounting records.

When you ask a question

The contact form collects your name, email address and message, and optionally your phone number, travel dates and number of guests. We use them only to answer you (GDPR: steps before a contract, or our legitimate interest in answering enquiries).

Emails

Booking, payment and refund emails, and our replies to questions, are sent through Resend. The operators receive a copy of each booking request and question.

When you visit the website

Our hosting provider records technical data for every visit, such as your IP address, the time, the page requested and your browser, to deliver the site and keep it secure. To stop abuse of the contact form, your IP address is kept briefly in server memory and never stored in our database.

When the map on the page loads, your browser requests map images directly from OpenFreeMap, which therefore receives your IP address. The site's fonts are served from our own server, not from Google.

Analytics, only with your consent

If you accept analytics in the cookie banner, Google Analytics and Microsoft Clarity measure how the site is used: pages viewed, clicks, scrolling, device and browser type, and approximate location. Clarity can also show this as heatmaps and recordings of how pages are used. Nothing is loaded before you accept, and the admin area is never measured.

You can change your choice at any time under "Cookie settings" at the bottom of every page (GDPR: consent).

What your browser stores

The site remembers your language and your cookie choice in your browser's local storage. These stay on your device and are not used for tracking. Google Analytics and Microsoft Clarity set their own cookies only after you accept analytics.

Who receives your data

We do not sell your data or share it for advertising. These service providers process it on our behalf, only for the purposes below:

Data sent abroad

Some providers are based in the USA. Transfers there rely on the Swiss-U.S. and EU-U.S. Data Privacy Framework where the provider is certified, or on the standard contractual clauses recognised in Switzerland and the EU.

How long we keep it

• Bookings and payments: 10 years, as Swiss accounting law requires.
• Questions sent through the contact form: 2 years after you sent them, then deleted automatically.
• Analytics data: at most 14 months.
• Server logs: as long as our hosting provider keeps them, usually a few days.

Your rights

You can ask us what data we hold about you, have it corrected or deleted, object to its processing or restrict it, receive it in a common format, and withdraw consent at any time. Write to the email address above. Data we must keep by law is deleted when that period ends.

You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the data protection authority where you live.

Changes

We update this policy when the website or our providers change. The date at the top shows the latest version.