Privacy policy

This text is a machine translation of the German version. In case of discrepancies, only the German version is binding. German version

1. Purpose of this privacy policy

This privacy policy informs you about how personal data is processed in connection with the presentation, enquiry, booking and use of the accommodation and when you visit the associated website.

Personal data means any information relating to an identified or identifiable natural person. Processing covers any handling of personal data, in particular collecting, recording, storing, using, disclosing, modifying, linking, restricting, deleting or destroying it.

Processing is carried out in accordance with the Swiss Federal Act on Data Protection. Where applicable in an individual case, the requirements of the General Data Protection Regulation of the European Union are also taken into account.

2. Controller

The host is, as a rule, responsible for processing your booking and stay data:

Claudia Erni
Route du Faubourg 16
1580 Avenches
Schweiz
E-mail:

Clavanza provides the technical platform. Where Clavanza processes personal data exclusively to handle your enquiry, booking or stay in accordance with the host's instructions, Clavanza acts as the host's processor. The contact details of the platform operator are given in the platform's legal notice.

For its own processing purposes, in particular the operation and security of the platform, the administration of user accounts, the prevention of misuse, technical support, its own operating logs, the payment integration and the settlement of the platform commission, Clavanza processes personal data as a controller in its own right.

3. Categories of personal data processed

Depending on how the website is used and how the booking proceeds, the following personal data in particular may be processed:

• master data such as form of address, first name, surname, date of birth, language and nationality, where required;
• contact data such as postal address, e-mail address and telephone number;
• booking data such as accommodation, travel dates, number and composition of guests, accompanying pets, additional services booked, price, cancellation terms and booking status;
• contract and communication data such as enquiries, messages, agreements, booking confirmations, complaints and support requests;
• payment and billing data such as billing address, amount, currency, payment status, payment reference, refunds and information on payment disputes;
• stay data such as arrival and departure times, special organisational requirements, key or access information and reported damage or defects;
• review data such as star ratings, review texts and details of the stay reviewed;
• technical data such as IP address, device and browser information, time of access, pages visited, referrer data, log and diagnostic data;
• consent and preference data such as your cookie selection and the time of a consent or withdrawal;
• other data that you provide to us voluntarily.

Sensitive personal data is only processed where this is exceptionally necessary and legally permissible. Please do not submit such information if it is not necessary for the booking or the stay.

4. Sources of personal data

We receive personal data primarily directly from you, for example when you visit the website, make an enquiry, make a booking, communicate with the host or submit a review.

In addition, personal data may originate from accompanying persons, payment service providers, technical service providers, authorities or other third parties, where this is necessary for the performance of the contract, security, law enforcement or compliance with legal obligations.

If you disclose personal data of other persons to us, you are responsible for ensuring that you are entitled to do so and that the persons concerned are informed about the processing.

5. Purposes of processing

Personal data is processed in particular for the following purposes:

• presentation and operation of the website and the listing;
• handling of enquiries and bookings;
• conclusion, performance and settlement of the accommodation contract;
• communication before, during and after the stay;
• payment processing, invoicing, refunds and handling of payment disputes;
• organisation of arrival, departure and access to the accommodation;
• handling of cancellations, complaints, defects and damage claims;
• operation and administration of the review system;
• technical operation, maintenance, error analysis and further development of the platform;
• ensuring security, stability and protection against misuse;
• compliance with statutory documentation, retention and disclosure obligations;
• establishing, exercising or defending legal claims;
• audience measurement and improvement of the offering, where you have consented to this;
• other purposes of which we inform you in the individual case.

6. Legal basis for processing

Under Swiss data protection law, processing is permitted in principle provided it does not unlawfully infringe the personality of the data subject.

Where the General Data Protection Regulation applies, we base processing in particular on:

• the implementation of pre-contractual measures and the performance of a contract;
• compliance with legal obligations;
• legitimate interests in the secure, efficient and user-friendly operation of the website and platform, in the prevention of misuse and in the enforcement or defence of claims;
• your consent, where such consent is required.

You may withdraw any consent given at any time with effect for the future. The lawfulness of processing carried out up to the withdrawal is not affected.

7. Obligation to provide data

Certain personal data is required so that an enquiry can be handled, a booking concluded or the stay organised.

Without this data, a booking may not be able to be concluded or carried out. Voluntary information is marked as such or is apparent from the respective context.

8. Disclosure to recipients

Personal data may be disclosed to third parties where this is necessary for the purposes described. Recipients may in particular include:

• the host and Clavanza as the technical platform operator;
• Stripe, depending on the specific payment and Connect configuration in Switzerland, the European Economic Area and/or the USA, for payment processing, identity verification, fraud prevention and the optional “Link” feature;
• Infomaniak Network SA, Switzerland, for hosting and backups; Resend, USA, for transactional and informational e-mails;
• Google, in particular Google Maps after explicit activation and Google Analytics 4 only after consent, in each case with possible processing in the USA;
• Anthropic, USA, exclusively for explicitly triggered translation and content functions, for the automatic translation of published reviews and, only after documented approval, for pseudonymised technical analysis purposes;
• cleaning, key, management or other service providers engaged for the stay; insurers, legal advisers, fiduciaries and debt collection providers;
• authorities, courts and other public bodies where there is a legal obligation or entitlement to disclose;
• other recipients where you have consented or disclosure is necessary to safeguard legitimate interests.

Service providers process personal data either under their own responsibility or within the scope of contractual obligations and in accordance with documented instructions.

The specific role of a recipient depends on the function used and the applicable contracts.

Personal data is not sold.

9. Platform operation by Clavanza

As part of the technical handling of an enquiry or booking, Clavanza processes guest data as a rule on behalf of the host.

In addition, Clavanza has its own processing purposes for the operation of the platform. These include in particular the administration of the technical user and host accounts, system security, the detection and prevention of misuse, technical support, the keeping of operating and security logs, the payment integration and the calculation and settlement of the platform commission.

Where you use Clavanza functions, Clavanza's privacy policy may additionally apply.

10. Payment processing via Stripe

Payments are processed via Stripe. In doing so, your name, your e-mail address, the booking reference, the payment amount, the currency, the payment status, technical information and other details required for payment processing in particular may be transmitted to Stripe.

Credit card and other payment data is, as a rule, collected and processed directly by Stripe. It does not reach the servers of the host or of Clavanza in full.

Within its own payment service, Stripe may offer additional features such as “Link”. If you use such a feature, Stripe may store payment and account data for a cross-service Stripe account. This processing takes place under Stripe's responsibility and is governed by Stripe's information and terms.

Depending on the registered office of the Stripe entities involved and the infrastructure used, data may also be processed outside Switzerland.

11. E-mail delivery via Resend

The Resend service in the USA may be used to send booking confirmations, access links, informational messages and other contract-related e-mails.

In doing so, your e-mail address, technical delivery data and the content of the message concerned in particular are processed.

The service provider receives only the data required for sending and ensuring delivery.

12. Translation and processing of listing content with Anthropic

Listing texts, descriptions, details of amenities, house rules, information about the surroundings, FAQ entries and, where applicable, images or image descriptions may be processed or translated into other languages using a language model service from Anthropic in the USA.

Transmission takes place only at the host's instigation or within the scope of an expressly provided platform function. Published guest reviews are translated automatically into the languages of this website: only the text of the review and the host's reply are transmitted, without names, booking details or ratings; the original remains available next to the translation. Beyond this, guest, payment, account, contact, contract and confidential data is not transmitted to Anthropic for these purposes. Clavanza uses exclusively a business API or enterprise account for this, the contractual terms of which exclude the use of the transmitted content for training general models.

Where pseudonymised operating or error logs are used for technical analysis in future, they may only be transmitted after the specific data flow has been reviewed, contractually secured and transparently described in this privacy policy. Data that can be attributed to a person with reasonable effort continues to be personal data even in pseudonymised form.

Transmission to Anthropic in the USA takes place only if the legal requirements are met. Clavanza uses recognised standard data protection clauses and the necessary additional safeguards for this, unless another recognised guarantee, in particular a relevant certification under the Swiss-U.S. Data Privacy Framework, is available for the specific processing.

Automated evaluations serve only as support. Adverse decisions about a person are not based solely on an automated evaluation, unless this is legally permissible and transparently provided for.

13. Google Maps

A map may be provided via Google Maps. The map is only loaded when you explicitly call it up or activate it.

When the map is loaded, your IP address, device and browser information and technical usage data in particular may be transmitted to Google. Google may process this data under its own responsibility and link it with other data if you are signed in to a Google service.

For reasons of privacy protection, the map may show only the approximate surroundings and not the exact location of the accommodation.

14. Google Analytics

Where you have consented, Google Analytics 4 may be used for pseudonymised audience measurement and analysis of website usage.

In doing so, information about your device, your browser, your IP address, your approximate location, pages visited, time spent, interactions and technical events in particular may be processed.

Google Analytics is only activated after you have agreed via the consent banner. You can change or withdraw your selection at any time via the “Cookie settings” link available on every page.

Personal payment or guest links do not, as a rule, load any Google Analytics scripts.

Further information on the cookies used and their storage period can be found in the cookie policy.

15. Cookies and similar technologies

The website uses technically necessary cookies and comparable technologies that are required for operation, security, session management and the storage of your privacy settings.

Optional analytics or statistics technologies are only used if you have given your prior consent.

You can withdraw or redefine your consent at any time with effect for the future via the “Cookie settings” link.

Details of the cookies used, their purpose and their storage period can be found in the cookie policy.

16. Server and security logs

When the website is accessed, technical log data may be recorded. This includes in particular the IP address, time of access, content accessed, referrer address, browser and device information and error messages.

This data is processed to ensure security and stability, for error analysis, to prevent abusive access and for technical optimisation.

Security and operating logs are, as a rule, deleted or anonymised after 90 days, unless a security incident, suspected misuse, an ongoing legal claim or a legal obligation requires longer retention.

17. Reviews

After your stay, a one-time invitation to leave a review may be sent to you by e-mail. Participation is voluntary.

Only the information designated in the review form is published. This may include in particular your first name, the initial of your surname, the month of your stay, star ratings and your review text. Your full e-mail address and your exact travel dates are not published.

Where publication is based on your consent, you may withdraw it at any time for the future and request the deletion of your review. Statutory retention obligations and overriding law enforcement interests remain reserved.

The host may review guests within the scope of the platform function. Such a review is made accessible only to the recipients provided for in the system and is not made public without corresponding information.

18. Disclosure abroad

Depending on the function used, personal data may be disclosed to the USA: to Resend for e-mail delivery, to Google where Google services are activated, to Anthropic for explicitly triggered content functions, the translation of published reviews or approved technical analysis, and to Stripe where the specific payment and Connect configuration requires this. Infomaniak processes the data intended for this in Switzerland.

For disclosures to the USA, it is ensured before the respective data flow is activated that the transfer is legally permissible. Where a recipient is certified for the relevant processing under the Swiss-U.S. Data Privacy Framework, this basis may be used; otherwise, recognised standard data protection clauses and the necessary additional safeguards are applied.

Disclosure abroad takes place only where it is necessary for the purposes described and legally permissible.

19. Data security

Appropriate technical and organisational measures are taken to protect personal data against loss, misuse, unauthorised access, impermissible alteration and unauthorised disclosure.

These may include in particular access restrictions, authorisation concepts, encryption, logging, backups, security updates and contractual obligations of service providers.

Despite appropriate safeguards, absolute security cannot be guaranteed in electronic data transmission and storage.

20. Retention and deletion

Personal data is retained for as long as is necessary for the respective processing purpose, a statutory retention obligation exists or there are legitimate interests in retention.

Business records subject to statutory retention, in particular booking, invoice, payment and commission records, are as a rule retained for ten years from the end of the relevant financial year.

Data relating to ongoing bookings, outstanding claims, complaints, damage claims or legal disputes may be stored until the matter concerned is closed and until the applicable limitation periods have expired.

Accounts may initially be deactivated at your request. Final deletion or anonymisation takes place as soon as no ongoing bookings, outstanding claims, statutory retention obligations or overriding law enforcement interests stand in the way.

Backups are deleted or overwritten as part of the regular backup and overwrite cycle.

21. Your rights

Within the scope of applicable data protection law, you have in particular the right:

• to request information about the processing of your personal data;
• to have inaccurate or incomplete personal data rectified;
• to request the deletion or anonymisation of your personal data;
• to request the restriction of processing, where applicable law so provides;
• to object to processing, where applicable law so provides;
• to receive the personal data you have provided in a common electronic format or to have it transferred to another controller, where the legal requirements are met;
• to withdraw a consent at any time with effect for the future;
• to lodge a complaint with the competent data protection authority.

These rights may be restricted or excluded where the legal requirements for this are met, in particular in the case of retention obligations, overriding interests of third parties, ongoing contractual relationships or the establishment, exercise or defence of legal claims.

To exercise your rights, you may contact the controller named in section 2. To prevent misuse, suitable proof of identity may be requested.

22. Automated individual decisions

As a rule, no decisions are taken that are based solely on automated processing and have significant legal or similar consequences for you.

Automated systems may be used to detect technical errors, abusive use or unusual activity. Adverse measures resulting from this are, as a rule, reviewed by a responsible person before they are implemented, unless applicable law permits otherwise.

23. Changes to this privacy policy

This privacy policy may be amended if processing, services, technical systems or legal requirements change.

The version published on the website at the relevant time applies. Where a change affects a consent already given or materially affects your rights, you will be informed in an appropriate manner and, where necessary, asked for your consent again.

Last updated: 29.10.2026