Privacy Policy

Protecting your personal data matters to us. We process your data in line with the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

2. Terms and Principles

We only process personal data to the extent necessary to provide a functional website and our services, where there is a legal basis, or where you have given your consent. We process data in accordance with the principles of good faith, proportionality and purpose limitation.

3. Hosting

This website is hosted by Netlify, Inc. (USA / EU). When you visit the website, Netlify processes technical access data in server log files on our behalf (e.g. anonymised IP address, date and time, the resource requested, browser type). This serves the secure and stable operation of the website. We have a data processing agreement in place with Netlify; for transfers to the USA, appropriate safeguards (e.g. EU Standard Contractual Clauses) are applied.

4. Contact Form & Enquiries

When you contact us via the form or by email, we process the details you provide (name, hotel/company, email address, phone number, the size of your property, message) in order to handle your enquiry and any follow-up questions. Submission is processed viaNetlify Forms (Netlify, Inc., USA) as a processor of our hosting provider; this may involve a transfer of data to the USA, for which appropriate safeguards (EU Standard Contractual Clauses) are in place. We do not pass this data on to third parties without your consent and delete it as soon as it is no longer needed for the purpose of handling your request and no statutory retention obligations apply.

5. Cookies & Analytics

Without your consent, this website does not set any non-essential cookies. Where enabled, we use Google Analytics 4 and Google Ads(Google Ireland Ltd.) to measure reach and advertising effectiveness. Both run in Google’s Consent Mode v2.

In practice: as long as you have not consented, all four consent types are set to denied. Google then sets no cookies, stores no identifier and cannot recognise you. A cookieless ping without any identifier is, however, already transmitted, from which Google estimates aggregated, modelled figures. Your truncated IP address is processed in doing so. Only after your consent are cookies set and the measurement made personally identifiable. The legal basis is your consent under Art. 6(1)(a) GDPR and Art. 31 revFADP respectively; for the cookieless ping we rely on our legitimate interest in aggregated audience measurement (Art. 6(1)(f) GDPR). You may object and withdraw at any time via “Cookie settings” in the footer.

When you submit the enquiry form, our server additionally reports the enquiry to Google server-side (Measurement Protocol and, where you have given marketing consent, Enhanced Conversions for Leads). Only irreversibly hashed values of your email address and, if provided, your phone number (SHA-256) are transmitted, together with the click identifier of the ad you came from, if any. Google can tell that one of its ads led to an enquiry, but cannot reconstruct the plain values. Without marketing consent this report does not happen. Transfers to the USA (Google LLC) are safeguarded by EU Standard Contractual Clauses.

Likewise only after your consent, we use the Meta pixel and the Meta Conversions API (Meta Platforms Ireland Ltd., Ireland) to measure the effectiveness of our ads on Facebook and Instagram (e.g. page views and submitted contact enquiries). Event data (page visited, timestamp, IP address, browser information and, where set, the Meta cookies _fbp/_fbc) is transmitted to Meta from the browser and from our server. For the collection and transmission of this event data we are jointly responsible with Meta (Art. 26 GDPR); transfers to the USA (Meta Platforms, Inc.) are safeguarded by EU Standard Contractual Clauses. Before you consent, no pixel is loaded and no data is sent to Meta. You can withdraw this consent at any time via the “Cookie settings” link in the footer.

For our Know-How blog we use Opinly (Opinly AI Ltd.) as our editorial and analysis system. Article content and images are fetched server-side from Opinly and served from our own domain — your browser never contacts Opinly directly for them. Where enabled, we additionally use the Opinly analytics pixel to measure which content leads to enquiries (page visited, referrer, timestamp, truncated usage data). This pixel too is loaded only after your explicit consent; before that, no data is transmitted and no identifiers are stored. Transfers outside Switzerland and the EEA are safeguarded by EU Standard Contractual Clauses. You can withdraw this consent at any time via “Cookie settings” in the footer.

6. AI Assistant (“Front Copilot”)

Where the AI assistant is enabled, you can voluntarily ask questions about our offering. The messages you enter are transmitted to our processor Anthropic(Anthropic PBC, USA) to generate the answer; your input is not used to train the AI models (zero data retention). For the transfer to the USA, appropriate safeguards (EU Standard Contractual Clauses) apply. Please do not enter sensitive personal data in the chat. If you would like to be contacted, use the contact form or WhatsApp — the processing then corresponds to section 4.

7. Machine-Readable Assistance Functions (WebMCP)

This website provides machine-readable assistance functions (WebMCP) that allow AI assistants in your browser to retrieve public information from this website and — at your explicit request — submit a non-binding contact enquiry. The data processing corresponds exactly to manually submitting the contact form (section 4); no additional tracking takes place.

8. Fonts

We serve fonts locally from our own server. As a result, no data is transmitted to third-party font providers when you visit the site.

9. Your Rights

Within the scope of the applicable law, you have the right to information, rectification, erasure and restriction of the processing of your personal data, the right to data portability, and the right to withdraw any consent you have given. To exercise these rights, please contact the controller named above. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the competent supervisory authority.

10. Data Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Data is transmitted in encrypted form via TLS/SSL.