Privacy policy
Version of 22 October 2026
1. Controller
The controller for the processing described here is Durabilite-suisse.ch Sàrl, Route de Vuisternens 18, 1726 Farvagny, Switzerland, company identification number CHE-333.923.278, which operates the Séjours Alpin brand (hereafter "Séjours Alpin" or "we"). Contact person for data protection: Marc Vincent, managing director. For any question or request about your data: info@sejours-alpin.ch.
2. Scope
This policy applies to the website sejours-alpin.ch, the booking engine sejours-alpin-reservation.ch, stays in the properties we manage, our relations with owners and prospects, and job applications. It applies whatever the booking channel. Airbnb, Booking.com and Vrbo process your data under their own responsibility and their own policies.
3. Data we process
Website visitors: technical connection data (IP address, browser, pages viewed, date and time) and, depending on your cookie choices, audience measurement and advertising data (see section 7).
Owners and prospects: name, e-mail, telephone, language, location and features of the property, the content of your requests (audit, contact, revenue simulator) and, for our clients, contracts, bank details, statements and exchanges relating to the management of the property.
Guests: name, e-mail, telephone, address, language, dates of stay, number and age of persons, property booked, amounts paid, messages exchanged with us, identity verification data (identity document scanned by our partner Truvi for direct bookings), data required by the municipalities for the tourist tax and guest registration (identity, place of residence, dates, number of persons), reviews and any incidents. Payment card data is entered directly with Stripe; we have no access to it.
Applicants: data from the application form (identity, contact details, country, availability, languages, experience) and the exchanges that follow.
4. Purposes and legal bases
We process your data to: answer your requests and prepare an offer; conclude and perform management and rental contracts (booking, payment, access to the property, assistance during the stay, statements); verify the identity of guests on direct bookings and prevent fraud; meet our legal obligations (declaration and collection of the tourist tax, accounting); run, secure and measure the website; promote our services through online advertising; recruit.
Depending on the case, this processing is based on the performance of a contract or pre-contractual steps, on a legal obligation, on our legitimate interest (security, fraud prevention, improvement of our services, business development) or on your consent (statistics and marketing cookies), which you may withdraw at any time. The processing complies with the Swiss Federal Act on Data Protection (FADP) and, where it applies to persons in the European Union, with the General Data Protection Regulation (GDPR).
5. Recipients and processors
We do not sell your data. We entrust it to the following providers, who process it on our behalf and on our instructions:
| Provider | Use | Registered office and place of processing | Safeguards |
|---|---|---|---|
| Netlify, Inc. | Website hosting, server relay of the forms | United States | EU-US and Swiss-US Data Privacy Framework, standard contractual clauses |
| Make (Celonis, Inc.) | Automation of forms, CRM and guest messaging | United States; data hosted in the European Union (Ireland) | Data processing agreement, EU-US and Swiss-US Data Privacy Framework |
| Zoho Corporation B.V. | Prospect and owner relationship management (CRM) | Netherlands; data centres in the European Union | Standard contractual clauses |
| EmailJS Pte. Ltd. | Backup sending of the website forms if the main channel fails | Singapore; servers in the United States | Standard contractual clauses |
| Google (Google Ireland Limited) | E-mail and documents (Google Workspace), forms (applications, pre-registration), Tag Manager, Analytics and Google Ads subject to your consent | Ireland; processing in the United States | EU-US and Swiss-US Data Privacy Framework, standard contractual clauses |
| Microsoft Ireland Operations Limited | Business e-mail (Microsoft 365) | Ireland; European Union | Standard contractual clauses |
| Meta Platforms Ireland Limited | Measurement of advertising campaigns (Meta pixel subject to your consent, Conversions API for qualified requests) | Ireland; processing in the United States | EU-US and Swiss-US Data Privacy Framework, standard contractual clauses |
| Hostaway Opco Oy | Booking management software, calendar, messaging, booking engine | Finland; hosting and messaging sub-processors in the United States | GDPR-compliant contract |
| Stripe Payments Europe, Limited | Card payment of direct bookings | Ireland; processing in the United States | EU-US and Swiss-US Data Privacy Framework, standard contractual clauses |
| Truvi Technologies Limited | Identity verification of guests on direct bookings | United Kingdom; some providers in the United States | Adequacy decision, standard contractual clauses |
| Anthropic | Automated assistant answering guest messages and stay summaries | United States | Data processing agreement with standard contractual clauses and Swiss addendum; data deleted within 30 days, never used for training |
We also pass certain data to third parties who process it under their own responsibility: the municipalities and tourist offices of the resorts where the properties are located, for the tourist tax and guest registration; the owners of the properties (dates, number of persons and amounts, without your name and contact details); cleaning and on-site service providers (dates and information needed for their work); the booking platforms through which you booked; the authorities and our advisers (insurer, accountant, lawyer) where the law requires it or to assert our rights.
6. Transfers abroad
Your data is processed in Switzerland, the European Union, the United Kingdom, the United States and Singapore. Transfers to countries without a recognised equivalent level of protection (United States, Singapore) rely on the recipient's certification under the Data Privacy Framework or on the standard contractual clauses of the European Commission, supplemented for Switzerland.
7. Cookies and audience measurement
The website only sets the cookies needed for it to work until you make your choice in the banner. Statistics cookies (Google Analytics) and marketing cookies (Google Ads, Meta pixel) are only activated with your consent, through Google Consent Mode v2; without consent, no measurement data is sent. Your choice is kept for 12 months and can be changed at any time with the "Cookie preferences" button at the bottom of the page. Measurement data is used to understand how the website is used, to measure our campaigns and to show you relevant ads.
8. Retention periods
We keep data for as long as the purpose requires, then for the following periods: booking files, contracts, invoices and statements: 10 years from the end of the financial year, under Swiss accounting law; prospect requests without follow-up: 24 months after the last contact; guest messages handled by the automated assistant: 30 days in the automation tool and at the artificial intelligence provider, the conversation remaining in the booking software with the file; identity verification data: according to Truvi's rules, and at most for the life of the booking file; unsuccessful applications: 6 months after the end of the recruitment; cookie choices: 12 months.
9. Security
We protect your data with appropriate technical and organisational measures: restricted, personal access to our tools, two-factor authentication, encrypted connections, providers selected for their security guarantees, owner access limited to their own property and without your identity data. No transmission over the internet is entirely secure, however.
10. Your rights
You may request access to your data, its rectification, its erasure, the restriction of its processing, a copy in a common format, object to processing based on our legitimate interest, in particular to business development, and withdraw consent at any time. Write to info@sejours-alpin.ch or to the postal address in section 1; we may ask you to prove your identity. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, the data protection authority of your country.
11. Changes
We update this policy when our processing or the law changes. The version published on this page prevails; its date appears at the top.