CampOne GmbH offers the Grondia software for campgrounds. When a campground uses Grondia, we process personal data on its behalf, for example data of its guests and its staff. The campground is the controller of that data and we are its processor. Our Data Processing Agreement sets out how we do this.
A sub-processor is a company that we engage to help us provide Grondia and that processes this personal data on our behalf. This page lists our current sub-processors and explains how we inform you before we add or replace one.
Responsibility and locations
- We remain responsible to our customers for the work of our sub-processors.
- Our main database, file storage and backups are located in Switzerland. Other processing takes place in the European Economic Area, the United Kingdom and the United States, as listed below.
Sub-processors used for all customers
| Sub-processor | What it does for us | Personal data concerned | Where | Safeguard for transfers |
|---|---|---|---|---|
| Infomaniak Network SA, Switzerland | Hosting of servers, database, file storage and backups; AI models for Grondia’s AI features | All customer data | Switzerland | Not needed |
| Akenes SA (Exoscale), Switzerland | Standby copy of the database for disaster recovery | All data in the database | Switzerland | Not needed |
| Cloudflare, Inc., United States | Network protection and secure delivery of our interfaces | Data in transit, IP addresses | Worldwide network | Data Privacy Framework and standard contractual clauses |
| Vercel Inc., United States | Hosting and delivery of the Grondia apps, booking pages and websites | IP addresses, request data, data shown on pages | Worldwide network | Data Privacy Framework and standard contractual clauses |
| Railway Corporation, United States | Hosting of the website editor and its database | Website content, website form submissions, editor accounts | Outside Switzerland | Data Privacy Framework and standard contractual clauses |
| Plus Five Five, Inc. (Resend), United States | Delivery of emails | Email addresses, email content | United States | Data Privacy Framework (EU and UK) and standard contractual clauses; standard contractual clauses for Switzerland |
| Google, Ireland and United States | Email and office tools for our customer support | Personal data in support requests | European Union and United States | Data Privacy Framework and standard contractual clauses |
| Linear Orbit, Inc., United States | Support ticket system | Personal data in support tickets | United States | Standard contractual clauses |
| Functional Software, Inc. (Sentry), United States | Error monitoring, used only while it is switched on | Error reports and request data, filtered before sending | United States or EU, depending on the data region of the account | Data Privacy Framework and standard contractual clauses |
| Anthropic, United States | AI model (Claude) that helps our support team analyse support tickets and draft replies | Text of support tickets and attachments, support emails, onboarding documents, and customer data that our support tooling reads to investigate a ticket, which can include guest names, contact details, booking details, identity document data and bank details | United States |
Sub-processors used only for optional features
These sub-processors receive personal data only if a campground uses the feature concerned.
| Sub-processor | Feature | Personal data concerned | Where | Safeguard for transfers |
|---|---|---|---|---|
| Twilio Inc., United States | Text messages and WhatsApp messages to guests; phone numbers for the phone assistant | Phone numbers, message content, call data | United States and worldwide network | Data Privacy Framework and standard contractual clauses |
| ElevenLabs, United States | Voice of the phone assistant; ElevenLabs uses third-party language models, currently Anthropic (Claude) and OpenAI | Call audio, transcripts | United States | Data Privacy Framework and standard contractual clauses |
| OpenAI, United States | Settings assistant for campground staff | Staff questions about settings; no guest data | United States | Standard contractual clauses |
| Channex, United Kingdom | Connection to online travel agencies and booking portals (channel manager) | Reservation data from these channels | United Kingdom and the hosting locations used by Channex | Adequacy |
| Pingen AG, Switzerland | Printing and posting of letters | Name, address, letter content | Switzerland and EU | Not needed |
| Skribble AG, Switzerland | Qualified electronic signatures | Name, contact details, document | Switzerland and EU | Not needed |
| fiskaly GmbH, Austria | Fiscal signing of receipts where the law requires it | Receipt data | European Union | Adequacy |
| EFSTA, Austria | Fiscal signing of receipts (alternative provider) | Receipt data | European Union | Adequacy |
What is not a sub-processor
- Services a campground connects itself. When a campground connects an accounting system, a booking portal, a payment provider, a door or barrier system, its own mailbox or an authority’s reporting portal, we pass data to that service on the campground’s instruction. The campground has its own contract with that provider.
- Payments. The licensed payment institution that processes payments for Grondia Pay contracts directly with the campground and acts as an independent controller. It is named in the payment terms of the campground’s contract.
- Authorities. Police, tourist tax and statistics offices receive guest registration data from the campground under the campground’s legal duty.
- Tools we host ourselves. Our website analytics (Umami, without cookies) and our team chat run on our own servers.
Changes and how you are informed
We inform our customers at least 30 days before we add or replace a sub-processor. We send the notice by email to the privacy contact the customer has named in its contract, and we publish it in the change log below. A customer may object within 30 days on reasonable data protection grounds, as set out in section 8 of our Data Processing Agreement. We then discuss the objection with the customer in good faith for 30 days; if we find no solution, the customer may terminate the affected services and receives a refund of prepaid fees.
In an emergency (for example if a provider stops its service or suffers a security incident), we may have to replace a sub-processor at shorter notice. We then inform customers as soon as possible.
Subscribe to updates
Anyone can receive notices of changes to this page. To subscribe, send an email to hello@grondia.com with the subject “Subscribe: sub-processor updates”. To unsubscribe, use the subject “Unsubscribe: sub-processor updates”.
Customers do not need to subscribe: we send every notice to the privacy contact named in their contract. Customers can change that contact at any time by writing to us.
Our commitment on anonymised and deidentified data
Where we create anonymised, aggregated or deidentified data from customer data (for example for statistics or product improvement), we keep it in that form, we do not attempt to identify any person or campground from it, and we require anyone who receives it from us to do the same.
Change log
| Date | Change | Effective from |
|---|---|---|
| 24 October 2026 | First publication of this list | 24 October 2026 |
Contact
CampOne GmbH, c/o Christoph Tonini, Habüelstrasse 112, 8704 Herrliberg, Switzerland. Questions about this page: hello@grondia.com.