Privacy Policy

Hier der vollständige Text — copy/paste ready für Wix:

1. Data Controller

The entity responsible for the collection, processing and use of your personal data under the GDPR and the Swiss Federal Act on Data Protection (revFADP) is:

NOVAC Solutions GmbH Operating under the brand SwissStay Apartments Zypressenstrasse 60, 8004 Zürich, Switzerland Email: team@swissstay.ch

2. Overview

SwissStay Apartments is an online booking platform that enables guests and tenants to reserve properties and rooms. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to your data.

Providing your personal data is voluntary. However, certain information is required to use our services.

3. What Data Do We Collect?

Contact & Booking Data When you create an account, submit a booking inquiry, or contact us, we collect your full name, postal address, mobile phone number, and email address.

Payment Data When paying for our services, credit or debit card information may be collected on our behalf by a certified payment processor. Bank account details may additionally be collected where required by property owners.

Technical & Usage Data When you visit our website, we automatically collect your IP address, browser type and operating system, pages visited and session duration, and the referring website. This data is collected via cookies and similar tracking technologies (see Section 7).

4. Legal Basis for Processing

We process your personal data on the following legal bases:

– Consent (Art. 6(1)(a) GDPR / Art. 31 revFADP): e.g. for marketing communications or non-essential cookies. – Contract performance (Art. 6(1)(b) GDPR): for processing bookings and delivering our services. – Legitimate interests (Art. 6(1)(f) GDPR): e.g. platform security, fraud prevention, service improvement. – Legal obligation (Art. 6(1)(c) GDPR): e.g. responding to lawful authority requests.

5. How We Use Your Data

We use your data for the following purposes: processing and managing your bookings, communicating with you about your use of the platform, responding to inquiries and customer service requests, improving and developing our services, ensuring platform security and detecting misuse, conducting analytics and fixing technical issues, and complying with legal obligations and supporting authorities where required by law.

6. Sharing Data with Third Parties

We share your data with third parties only to the extent necessary to provide our services or as required by law. This includes payment processors, IT and hosting providers, analytics providers such as Google, and authorities or law enforcement agencies where legally required.

We do not sell your personal data. However, advertising networks such as Google and Meta may collect electronic activity on our website subject to your consent (see Section 7).

7. Cookies & Tracking Technologies

What Are Cookies? Cookies are small data files placed on your device when you visit our website. They help us operate the platform efficiently, remember your preferences, and understand how visitors use our site.

Cookie Categories We use four categories of cookies. You will be asked for your consent before any non-essential cookies are activated.

Strictly Necessary Cookies: These enable core platform functions such as login, the booking flow, and security. They cannot be disabled and do not require your consent. They are stored for the duration of your session or up to 1 year.

Functional Cookies: These remember your preferences such as language settings and UI choices to improve your experience. Your consent is required. Retention: up to 1 year.

Analytics Cookies: These measure website traffic, user behaviour, and booking funnel performance using tools such as Google Analytics 4 (cookies: _ga, _gid). Data is anonymised where possible. Your consent is required. Retention: up to 2 years.

Marketing Cookies: These track conversions and enable targeted advertising based on your browsing behaviour across websites, using tools such as Google Ads and Meta Pixel (cookies: _fbp, _fbc). Your consent is required. Retention: up to 90 days.

Google Consent Mode v2 Our website uses Google Tag Manager together with Google Consent Mode v2. This means Google tags such as Google Analytics 4 and Google Ads only activate tracking based on the consent choices you make in the cookie banner. If you decline analytics or marketing cookies, Google operates in a restricted mode that does not store identifying cookies on your device.

Managing Your Cookie Preferences When you first visit our website, a cookie banner will ask for your consent to non-essential cookies. You can adjust your preferences at any time via the cookie settings link in the footer of our website. You can also manage or delete cookies directly through your browser settings. Note that disabling cookies may affect the functionality of the platform.

To opt out of interest-based advertising cookies: https://optout.aboutads.info/

8. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Policy or as required by applicable law. Data that is no longer needed is deleted or anonymised.

9. Your Rights

You have the following rights regarding your personal data:

– Right of access: request a copy of the data we hold about you. – Right to rectification: request correction of inaccurate or outdated data. – Right to erasure: request deletion of your data where it is no longer necessary. – Right to withdraw consent: withdraw any previously given consent at any time, e.g. unsubscribe from marketing emails via the link in our communications. – Right to data portability: request your data in a structured, machine-readable format. – Right to restriction: request that we limit processing of your data in certain circumstances. – Right to object: object to processing based on legitimate interests or for direct marketing purposes.

Please note: even after withdrawing consent or requesting deletion, you may still receive transactional system messages such as booking confirmations.

To exercise any of these rights, contact us at: team@swissstay.ch

10. GDPR & Swiss revFADP Compliance

As a data controller, NOVAC Solutions GmbH is committed to protecting your privacy in compliance with the EU General Data Protection Regulation (GDPR) 2016/679 and the revised Swiss Federal Act on Data Protection (revFADP), which entered into force on 1 September 2023.

11. Children's Privacy

Our services are intended for persons aged 16 and over. We do not knowingly collect personal data from children under the age of 16. If we become aware that such data has been submitted, we will delete it immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or applicable law. The current version and its effective date are always available on our website. For material changes, we will notify you through the platform interface. Your continued use of our services after a change constitutes acceptance of the revised Policy.

13. Contact

For questions, requests, or to exercise your rights, please contact:

NOVAC Solutions GmbH – SwissStay Apartments Zypressenstrasse 60, 8004 Zürich, Switzerland Email: team@swissstay.ch