What the GeBüV actually requires
The GeBüV — Geschäftsbücherverordnung — is the Swiss ordinance that spells out how the books and records required by the Code of Obligations must be kept and retained. In plain terms it asks four things. Records must be retained for ten years. They must have integrity — kept so that any later change is detectable, so a figure cannot be quietly rewritten after the fact. They must be orderly — documented and organised so a third party can find their way through them. And they must be available — producible in readable form for an inspection within a reasonable time.
Those duties fall on you as the operator and on your Treuhänder who keeps the books. No software vendor can discharge them for you, and none can certify that your bookkeeping meets them — that judgement is your accountant’s and, ultimately, an auditor’s.
What software can do is stop being the weak link. If your booking, billing and payment records live in a system where anyone can edit history, where retention depends on somebody remembering, and where an audit means a week of exporting spreadsheets by hand, the GeBüV becomes a lot harder to satisfy than it needs to be.
The four mechanics Grondia contributes
Grondia is built around four things that map directly onto what the GeBüV asks.
A tamper-evident audit log. Every access and action against your records is written down with the user, the timestamp and what was done. Records are kept so that later alteration is detectable rather than silent — the integrity the ordinance is concerned with.
Enforced retention. Records are kept for the required period and then deleted, automatically, rather than left to someone to remember or to a manual purge that never happens.
Swiss hosting. Your data sits exclusively in ISO 27001-certified Swiss data centres, encrypted with AES-256 at rest and TLS 1.3 in transit, with nothing replicated abroad — no US sub-processor, no EU fallback region.
An audit-ready export. Every payment, tax line, deposit and refund exports in a DATEV-friendly, VAT-aware format, so producing your records for the Treuhänder or an auditor is a file, not a fortnight.
Records that reconcile themselves
Orderliness is easier to demonstrate when the numbers already agree. Every invoice Grondia issues is a compliant Swiss QR-Bill carrying a structured QR-IBAN reference. That reference is what makes the invoice pay itself in: when the guest settles it, the money lands already matched to the right folio, so there is no line-by-line reconciliation and no mystery deposit at month end.
The same holds across the stay. Pitch, tourist tax, shop, bar and rentals all accumulate on one running folio and settle once at check-out, as one record rather than a scatter of loose transactions. When your accountant opens the export, the payments, the tax lines, the deposits and the refunds are already tied to the bookings they belong to.
That is the difference between records that are technically retained and records that are actually auditable.
Where your data lives, and for how long
Integrity is partly a hosting question. Grondia keeps everything in ISO 27001-certified Swiss data centres — databases, backups and file storage — and nothing is replicated to a US or EU region. Traffic is TLS 1.3 with HSTS; data at rest is AES-256; and every access to guest data is logged with user, timestamp and action.
Retention is enforced rather than optional. Records are held for the period they need to be and then securely deleted; guest data is retained per the nDSG, and after a cancellation there is a 90-day window to export before secure deletion.
None of that makes a legal determination for you. Where your data physically sits and how long you must keep which record are questions for your own advisor — we give you the facts and the controls, not an opinion dressed up as one.
The honest part: we explain GeBüV, we do not certify it
Be wary of any campsite-software vendor that sells you "GeBüV-compliant" as a checkbox. GeBüV compliance is not a property a piece of software can hand you — it is a property of how your whole bookkeeping is kept, and the responsibility for it stays with you and your Treuhänder.
What we will do is tell you precisely which mechanics exist — the tamper-evident audit log, the enforced retention, the Swiss ISO 27001 hosting, the audit-ready export — so that you and your accountant can judge them against your obligations. That is the substance behind the principles.
What we will not do is print a certificate we are not in a position to issue. If a competitor’s page claims one for you, treat it with the same curiosity you would treat any other too-good-to-be-true line.