Tartarus
Beromünster

Privacy Policy

We process personal data exclusively in accordance with the Swiss Federal Act on Data Protection (nDSG) and – where applicable – the EU General Data Protection Regulation (GDPR).
1. Data We Process
We process the following categories of personal data in particular:

  • Master data (name, address, email, telephone number, nationality)
  • Booking and contract data (booking period, number of guests, payment details)
  • Communication data (emails, messages via Smoobu/Nowistay, enquiries)
  • Technical data when visiting the website (IP address, browser type, device, pages visited, referrer)
  • Payment data (processed via Stripe, pseudonymised where possible)

2. Purposes of Data Processing
We process your data for the following purposes:

  • Processing booking enquiries and contracts (including payment via Stripe)
  • Communication and guest support (including automated replies via Nowistay AI Co-Host)
  • Providing digital services (e.g. digital welcome guide via Nowistay)
  • Operation and security of the website
  • Compliance with legal obligations (e.g. guest registration statistics, accounting retention)

Legal basis: Contract performance (Art. 31 para. 1 lit. b nDSG), legitimate interest (Art. 31 para. 2 lit. a nDSG), consent (where required), or legal obligation.
3. Cookies and Tracking
This website uses:

  • Essential cookies (for the booking widget, session management, etc.) – no consent required.
  • No analytics or marketing cookies.

You can block cookies in your browser settings at any time.
4. Data Sharing and Processors
We only share your data where necessary with the following service providers:

  • Smoobu (booking system, France/EU) – for booking management and guest communication
  • Stripe (payment service, USA/Ireland) – for secure payment processing (credit card / Apple Pay)
  • Nowistay (AI Co-Host & digital welcome guide, EU/USA) – for automated guest communication and digital guest folder

These service providers are contractually bound as data processors. When transferring data to third countries (e.g. USA for Stripe and Nowistay), we ensure an adequate level of protection through EU Standard Contractual Clauses or equivalent safeguards. We do not sell your data or use it for third-party advertising.
5. Retention Period
We retain your data only as long as necessary for the purposes stated or as required by law (e.g. 10 years for accounting records). After this period, the data is deleted or anonymised.
6. Your Rights
You have the right to:

  • Access your data
  • Rectification
  • Deletion (where possible)
  • Restriction of processing
  • Objection
  • Withdrawal of consent

To exercise these rights, simply write to us at host@cozystay.ch. We will respond within 30 days.
7. Data Security
We use encryption (HTTPS), access restrictions, and other technical and organisational measures to protect your data.
8. Changes to this Privacy Policy
Status: March 2026. We will update this privacy policy as necessary (e.g. when new tools are introduced). The current version is always available here.
Data Controller
Dinah Gössi
Riedweg 5
4800 Zofingen
Switzerland
Email: host@cozystay.ch
Phone: +41 76 561 89 78
Zofingen, February 2026