Privacy policy

1. Controller

Véronique Nemeth, Chemin des Chèvres 1, 1968 Mase, Switzerland. Email: veronique.nemeth@capucinesetromarin.ch. Phone: +41 79 544 81 73.

2. Data we process

Bookings: first and last name, email address, phone, postal address, country of origin, stay dates, number of adults and children, language, amount, acceptance of the terms (version, date and time) and payment status. We never receive card data.

Contact form: name, email address and message.

Technical data: to protect the site from abuse, your IP address is turned into a non-reversible hash and kept briefly to limit the number of attempts. The server may log technical information (date, page requested) without booking data.

3. Purposes and legal bases

Managing your booking and sending payment details, reminders and confirmations (performance of a contract; Art. 6(1)(b) GDPR).

Answering your messages (legitimate interest or pre-contractual steps).

Keeping the site secure and preventing abuse (legitimate interest; Art. 6(1)(f) GDPR).

Complying with legal obligations, in particular accounting and collecting the tourist tax.

4. Cookies and third-party services

The site uses no analytics or advertising tools. A single functional cookie remembers your chosen language. The administration area uses a session cookie reserved for the owner.

Google Maps: the map only loads if you click “Show the interactive map”. Google (Google Ireland Ltd / Google LLC) then receives, among other things, your IP address. Before that click, no data is sent to Google.

Spam protection: the forms may use Cloudflare Turnstile (Cloudflare, Inc.), which analyses technical information from your browser to tell humans from bots.

Payment: the QR-bill is paid through your bank or the TWINT app; these providers process the payment under their own responsibility.

5. Recipients and processors

Your data is never sold or rented. It may be processed by technical providers bound by contract: website hosting (TODO: hosting provider and server location) and email delivery (TODO: SMTP provider).

Where data is transferred outside Switzerland or the EEA (e.g. Google or Cloudflare in the United States), this is based on an adequacy decision or standard contractual clauses.

6. Retention

Booking data is kept for the statutory retention period for accounting records (10 years). Contact messages are deleted once no longer needed, at the latest after 2 years. IP hashes used against abuse are continuously replaced.

7. Your rights

Within the limits of the law, you may request access to, correction or deletion of your data, restriction of processing, object to processing, or ask to receive your data (portability). Write to veronique.nemeth@capucinesetromarin.ch.

You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, with your national data protection authority.

8. Security

The site is only available over HTTPS. Passwords and access keys are stored in irreversibly encrypted form, and access to the administration is protected and limited.

9. Changes

This policy may be updated. The online version prevails. Last updated: 2026-10-27.