1. About this policy
Staytivo is the app for guests of campsites that use Grondia’s software. CampOne GmbH, trading as Grondia (“Grondia”, “we”, “us”), provides the app. This policy explains what happens to your personal data when you use Staytivo on Android or iOS.
Two parties are involved, and which one is responsible depends on the data:
- Your Staytivo account (sign-in, the links between your account and your stays, your settings, your searches for campsites): we decide how this data is used and are the controller.
- A stay at a campsite (your booking, the guest registration the campsite must keep by law, orders, messages to reception, your bill): the campsite is the controller. We process this data on the campsite’s behalf as its software provider. The campsite’s own privacy notice applies. You find it on the campsite’s website or ask the campsite for it.
For grondia.com and our dealings with campsites, our general Privacy Policy applies.
2. Who is responsible and how to contact us
CampOne GmbH
c/o Christoph Tonini
Habüelstrasse 112
8704 Herrliberg
Switzerland
UID: CHE-134.912.193
Privacy contact: hello@grondia.com
We have not appointed a data protection officer. Swiss law makes the appointment optional (Art. 10 revDSG).
3. What we process, why and on which legal basis
Which features you see depends on the campsite. Several of the functions below (keys on the phone, a stay pass in Google Wallet, ordering, the Marlo assistant and paying in the app) only exist where your campsite offers them.
| Data | Why | Legal basis (GDPR; Swiss law: Art. 6 and 31 revDSG) |
|---|---|---|
| E-mail address, name, account ID, language, sign-in data | your account and signing in | contract with you, Art. 6(1)(b) GDPR |
| The link between your account and your bookings, and the date and version of your consent to linking | showing your stays at every campsite in one account | your consent, Art. 6(1)(a) GDPR; you can withdraw it in the app at any time, which removes the links |
| Booking number and e-mail address you enter to add a booking made under another address, and the six-digit code we send to that address | checking that the booking is yours before we link it | contract with you, Art. 6(1)(b) GDPR |
| Your stays, bookings, orders, invoices and loyalty points as the campsite records them | showing and managing your stay | contract (with you and with the campsite); we process it for the campsite |
| Phone number, co-travellers and vehicle, if you or the campsite enter them | the booking and the campsite’s guest registration | contract; legal obligation of the campsite |
| Messages to the campsite’s reception and to Marlo | answering your questions about the stay | contract with you, Art. 6(1)(b) GDPR |
| Notification settings and language | applying your choices | contract with you, Art. 6(1)(b) GDPR |
| Searches in “Trips” (place, dates, number of guests) | showing campsites, availability and prices | legitimate interest in providing the search you asked for, Art. 6(1)(f) GDPR |
| A tap on a campsite marked “Sponsored” (which placement, a one-time display token) | counting clicks for the campsite that pays for the placement | legitimate interest in billing sponsored placements, Art. 6(1)(f) GDPR |
| Card details when you pay in the app | paying with Grondia Pay | contract, Art. 6(1)(b) GDPR |
You can use “Trips” without an account. Searches made without signing in are not linked to any person.
Sponsored campsites. Some campsites in “Trips” pay to be shown more prominently. They are always marked “Sponsored”, and “Why am I seeing this?” explains who pays. A sponsored campsite is shown only when it matches your search. We count taps on these entries; we do not build a profile of you from them and do not use them to show you advertising elsewhere.
Payments. Where a campsite offers payment in the app, card payments run through Grondia Pay. Your card details go from the app directly to our payment processing partner; neither the app, the campsite nor we store your card number. The app and the campsite receive only a reference and the last four digits. A card is saved for later only if you turn this on, and you can remove it in the app.
Marlo. Where a campsite offers Marlo, Marlo answers questions about the campsite with text generated by an AI model, using the information the campsite has given. A provider runs the model for us under a data processing agreement. Marlo’s answers can be wrong; the campsite’s reception is in the same chat. Marlo makes no decisions about you.
What the app does not do. No location tracking (the app does not ask for your location), no access to your contacts, photos, camera or microphone, no advertising identifier, no advertising from other companies, no analytics or crash reporting tools, no tracking across other apps or websites, no sale of your data.
4. On your phone
The app keeps your sign-in in the phone’s secure storage (Android Keystore, iOS Keychain) and a few settings. Signing out removes them. Your password is entered on our sign-in page in a secure browser window; the app never sees it.
The app checks with our servers whether an update is available. This sends the app version and the platform, not who you are. On Android, Google Play may also offer updates under Google’s own terms.
The map in “Trips” loads map images from a public map service. Like any website, that service receives your device’s IP address and the map area shown. We do not send it your account or your searches.
5. Who receives your data
- the campsite you book or stay at, for that booking and stay;
- our service providers, bound by contract and acting only for us: hosting of our database and files in Switzerland (Infomaniak Network SA, Geneva), our sign-in service, e-mail delivery, the AI model provider for Marlo, and our payment processing partner for Grondia Pay;
- authorities and courts, only where the law requires it.
We do not sell your data and do not share it with advertisers or data brokers.
6. International transfers
Your account and stay data are stored in Switzerland. Some service providers (for example e-mail delivery, the AI model provider and payment processing) may process data in the EU/EEA or the USA. For those transfers we rely on adequacy decisions, the Data Privacy Framework or standard contractual clauses, as described in section 6 of our general Privacy Policy.
7. How long we keep data
- Your account: until you delete it. Deleting the account also removes every link to your stays.
- Links to your stays: until you withdraw your consent to linking or delete your account.
- Bookings, guest registration, orders, invoices and messages to reception: these belong to the campsite, which keeps them as long as the law requires (in Switzerland usually 10 years for accounting records) and under its own privacy notice.
- Codes for adding a booking: valid for ten minutes.
- Technical logs: only as long as needed to run and secure the service.
When we delete data, it ages out of our backups in their normal cycle within 90 days. How to delete your account, and what is kept: Delete your Staytivo account.
8. Your rights
Depending on the law that applies to you, you can ask for access, correction, deletion, restriction and data portability; object to processing based on our legitimate interest; and withdraw your consent at any time, with effect for the future. Write to hello@grondia.com. We may ask you to confirm your identity. We answer within one month (Art. 12(3) GDPR) or, under Swiss law, normally within 30 days.
For data a campsite holds about your stay, the campsite decides. If you send us such a request, we forward it to the campsite within 2 business days.
You can complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch; in the EU/EEA the authority of the Member State where you live or work.
9. Delete your account
In the app under Account, “Delete account”, or without the app by e-mail. The steps and what is kept: Delete your Staytivo account.
10. Children
Staytivo is meant for adults who book and pay for a stay. Children travel on a booking made by an adult. We do not knowingly create accounts for children under 16.
11. Changes to this policy
We update this policy when the app changes what it does with data. The current version is always on this page with the date of its last update. If a change matters for you, we tell you in the app.