Summary: We collect only the personal data necessary to run our short-term rental management service. We do not sell your data. We use Stripe for payments and Resend for email. You have full rights to access, correct, or delete your data under Swiss law (nDSG) and the EU's GDPR.
1. Controller
The data controller responsible for this website is:
Riviera Host
Montreux, Switzerland
Email: info@rivierahost.ch
2. Data we collect
Contact form
When you submit our contact form at rivierahost.ch/#contact, we collect your name, email address, phone number (optional), and message. This data is used solely to respond to your enquiry and is not shared with third parties beyond the email delivery service described below.
Booking and payment
When you make a booking, you are redirected to a Stripe-hosted checkout page. Stripe collects and processes your payment details, name, and email address. We receive a confirmation of payment and your email address from Stripe. We never see or store your card number or payment credentials. Stripe's privacy policy is available at stripe.com/privacy.
Server logs
Our hosting provider (Cloudflare) automatically records standard access logs including IP address, browser type, pages accessed, and timestamps. These logs are retained for up to 30 days and used only for security and performance monitoring.
Cookies
This website does not set analytics or tracking cookies. Stripe may set session cookies on the checkout page for fraud prevention and security purposes. No third-party advertising or tracking cookies are used.
3. How we use your data
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form data | Responding to enquiries, sending property assessments | Legitimate interest / pre-contractual steps |
| Booking confirmation (email) | Sending booking confirmation and check-in information | Contract performance |
| Payment data | Processed entirely by Stripe | Contract performance |
| Server logs | Security and performance monitoring | Legitimate interest |
4. Data processors
We use the following third-party services which may process personal data on our behalf:
- Stripe (Stripe Payments Europe Ltd, Dublin) — payment processing
- Resend (Resend Inc., USA) — transactional email delivery
- Cloudflare (Cloudflare Inc., USA) — website hosting and CDN
All processors are bound by data processing agreements and provide appropriate safeguards for international data transfers.
5. Data retention
Contact enquiry data is retained for up to 2 years, after which it is deleted. Booking records may be retained for up to 10 years to comply with Swiss accounting and tax obligations. Server logs are retained for up to 30 days.
6. Your rights
Under Swiss data protection law (nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (where no legal retention obligation applies)
- Object to processing based on legitimate interest
- Request restriction of processing
- Receive your data in a portable format
To exercise any of these rights, contact us at info@rivierahost.ch. We will respond within 30 days.
7. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch, or with the data protection authority in your EU member state.
8. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.