Ask your software vendor where your guests’ data physically is.
It is a simple question, and it is remarkably hard to get a straight answer to.
For the guest database, Grondia’s answer is one word: Switzerland. Here is exactly what that means: the data centres, the encryption, the access model, and how long records are kept.
In sintesi
- Guest database, backups and files at Infomaniak in Switzerland, with a Swiss standby
- Websites and booking pages delivered through a global CDN, with Cloudflare protecting the traffic
- Swiss-domiciled operating company under Swiss jurisdiction
- TLS 1.2 or 1.3 with HSTS on; long-term backup archive encrypted before it leaves our server
- Nightly backups, 30 daily copies, all on servers inside Switzerland
- Role-based access with individually revocable accounts
- Every change to a booking logged with user, time and action, in a log that cannot be edited
- Records kept as long as the law requires; personal data anonymised on request
- Card data tokenised via a PCI DSS Level 1 provider, never on Grondia servers
Scopri Grondia in azione
- Gestisci tutto il tuo campeggio su un unico sistema: prenotazioni, pagamenti, conformità.
- Riempi più piazzole con molta meno amministrazione.
- Operativo in due settimane. Migriamo i tuoi dati per te.
Grazie. Sei in lista.
Ti contatteremo entro un giorno lavorativo per fissare la tua demo.
Why the question got sharper
The revised Federal Act on Data Protection (the nDSG, in force since September 2023) raised the bar for how Swiss businesses handle personal data. It expects a lawful basis for processing, transparency about what is collected and why, data minimisation, security appropriate to the risk, and real mechanisms for access, correction and erasure. The EU’s GDPR is closely aligned, though the two are not identical.
A campsite sits squarely inside this. You gather names, addresses, dates of birth, vehicle details and identity information: for the booking, for the Meldeschein, for HESTA, for Kurtaxe, and sometimes for marketing. That is a meaningful amount of personal data about a lot of people, and the operator, not the vendor, is the one answerable for it.
Which makes "where is it stored, and who else can reach it" a question worth being able to answer without a phone call to a support desk.
Swiss data centres for the guest database
The guest database, its backups and file storage run at Infomaniak in Swiss data centres, with a standby copy at a second Swiss provider.
We name the parts on purpose, because the usual answer in this category has an asterisk on it. Websites and booking pages are delivered through a global CDN, Cloudflare protects the traffic, and an email provider sends the emails. The guest database and its backups stay in Switzerland.
The operating company is domiciled in Switzerland and operates under Swiss jurisdiction, including the nDSG itself, so the legal entity and the data are in the same place, which is not always true of vendors who advertise Swiss hosting.
Encryption and backups
All traffic runs over TLS 1.2 or 1.3, and HSTS is on. There is no unencrypted path to your data, including no downgrade path.
We back up every night, archive database changes continuously and keep 30 daily copies, all on servers inside Switzerland. The long-term backup archive is encrypted on our server before it leaves, with keys only we hold.
Card data is a special case and is handled the way it should be: tokenised and processed by a PCI DSS Level 1 provider. Raw card numbers never touch Grondia’s servers at all.
Minimisation, access and the change log
nFADP compliance is not a document produced once and filed. In Grondia it is expressed in how the product behaves.
Collection is minimised: the fields asked for are the ones a booking and a legal HESTA record require, and optional fields stay optional. Guests can see why each field is being asked for, and marketing consent is separate, explicit and revocable rather than bundled into the booking.
Access is role-based. Admins, managers and staff get different rights, and every account is individually revocable. And every change to a booking is logged with user, time and action, and the log cannot be edited afterwards. If you need to show who changed what, the answer is a query, not an investigation.
Kept as long as the law requires
Retention is where good intentions usually fail: the law sets a period, and in practice nobody tracks which records it covers or for how long.
In Grondia, records are kept as long as the law requires. When a guest asks for their data to be removed, we anonymise that guest’s personal data on request, so the request has a clear answer.
Domande frequenti
Not the guest database. It runs, with its backups and file storage, at Infomaniak in Swiss data centres, with a standby copy at a second Swiss provider. Websites and booking pages are delivered through a global CDN, Cloudflare protects the traffic, and an email provider sends the emails.
Grondia was designed around the revised Federal Act on Data Protection rather than retrofitted to it: collection is minimised to what a booking and a legal HESTA record need, consent for marketing is separate and revocable, access is role-based, every change to a booking is logged, and records are kept as long as the law requires and anonymised on request. Note that compliance is ultimately a property of how you operate as the data controller. The platform is built to make the compliant path the default one.
In transit, all traffic runs over TLS 1.2 or 1.3, and HSTS is on, so there is no unencrypted path to your data. The long-term backup archive is encrypted on our server before it leaves, with keys only we hold.
Access is role-based: admins, managers and staff get different rights, and each account is individually revocable. Every change to a booking is logged with user, time and action, and the log cannot be edited afterwards, so showing who changed what is a query rather than an investigation.
Records are kept as long as the law requires. On request, we anonymise a guest’s personal data.
No. Card data is tokenised and handled by a PCI DSS Level 1 provider. Raw card numbers never touch Grondia’s servers. Swiss methods such as TWINT and PostFinance run through a licensed payment provider.
Bring your data-protection questions
Residency, retention, the change log, sub-processors: the specific ones your Datenschutzberater asked you to check. We will answer them directly.
Inizia
Regala al tuo campeggio la sua stagione più tranquilla.
Prenota una demo di 30 minuti. Ti mostriamo il tuo campeggio su Grondia e pianifichiamo il passaggio con te.
