Privacy Policy

1. Data controller

The controller responsible for processing personal data under the Swiss Federal Act on Data Protection (nDSG) and the European General Data Protection Regulation (GDPR) is:

CampOne GmbH
c/o Christoph Tonini
Habüelstrasse 112
8704 Herrliberg
Switzerland
UID: CHE-134.912.193

Email: [email protected]

2. Data we collect

On this website, we process the information you enter in the contact or demo-request forms, including your name, business contact details, campsite details, subject and message. Our hosting infrastructure also processes technical request data such as IP address, browser type and access time for delivery, security and abuse prevention. When customers use the Grondia platform to process guest data, CampOne acts as a data processor under the applicable agreement.

3. Purposes of processing

We use personal data to provide and improve our services, fulfil the contract, issue invoices, communicate with you, comply with legal obligations (e.g. HESTA reporting, accounting) and — with your consent — for marketing purposes.

4. Legal bases

Processing takes place on the basis of your consent (Art. 6(1)(a) GDPR), for the performance of a contract (1(b)), to comply with legal obligations (1(c)), or based on legitimate interests (1(f)). Under the nDSG, we rely on the corresponding justifications.

5. Disclosure to third parties

We use service providers only where necessary to operate the website and our services. The marketing website is deployed through Vercel, form notifications are delivered through Resend, and aggregate website usage is measured with our Umami installation. Further processors may be used for the contracted Grondia platform, payments and support; details are provided in the relevant agreement or on request. Providers are bound by applicable data-protection obligations.

6. Data location and international transfers

Customer data in the contracted Grondia platform is hosted in Switzerland as described in the applicable service agreement. The public website and email-delivery infrastructure may process technical and enquiry data outside Switzerland. Where data is transferred to a country without an adequate level of protection, we use recognised safeguards such as contractual clauses, unless a statutory exception applies.

7. Retention period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention periods (e.g. ten years for accounting records).

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. You may also withdraw any consent given at any time. To exercise these rights, contact [email protected].

9. Cookies and analytics

The website stores your chosen locale in a technically necessary cookie and may store your colour-theme preference locally in your browser. We use Umami for aggregate, cookie-free audience measurement and do not set advertising or cross-site tracking cookies on this website.

10. Changes to this policy

We reserve the right to update this Privacy Policy to reflect changes in legal or technical requirements. The current version is always available on this page.