Privacy Policy

1. Data controller

The controller responsible for processing personal data under the Swiss Federal Act on Data Protection (nDSG) and the European General Data Protection Regulation (GDPR) is:

CampOne GmbH
c/o Christoph Tonini
Habüelstrasse 112
8704 Herrliberg
Switzerland
UID: CHE-134.912.193

Email: hello@grondia.com

2. Data we collect

On this website, we process the information you enter in the contact or demo-request forms, including your name, business contact details, campsite details, subject and message. Our hosting infrastructure also processes technical request data such as IP address, browser type and access time for delivery, security and abuse prevention. When customers use the Grondia platform to process guest data, CampOne acts as a data processor under the applicable agreement.

3. Purposes of processing

We use personal data to provide and improve our services, fulfil the contract, issue invoices, communicate with you, comply with legal obligations (e.g. HESTA reporting, accounting) and, with your consent, for marketing purposes.

4. Legal bases

Processing takes place on the basis of your consent (Art. 6(1)(a) GDPR), for the performance of a contract (1(b)), to comply with legal obligations (1(c)), or based on legitimate interests (1(f)). Under the nDSG, we rely on the corresponding justifications.

5. Disclosure to third parties

We use service providers only where necessary to operate the website and our services. The marketing website is deployed through Vercel, form notifications are delivered through Resend, and aggregate website usage is measured with our Umami installation, with Ahrefs Web Analytics (Ahrefs Pte. Ltd., Singapore) and with Google Analytics 4 (Google Ireland Limited, Dublin). If you allow advertising, we also use Google Ads (Google Ireland Limited, Dublin) to measure which advertisement led to a demo request and to personalise advertising; section 9 sets out what this stores and how to withdraw. Further processors may be used for the contracted Grondia platform, payments and support; details are provided in the relevant agreement or on request. Providers are bound by applicable data-protection obligations.

6. Data location and international transfers

Customer data in the contracted Grondia platform is hosted in Switzerland as described in the applicable service agreement. The public website and email-delivery infrastructure may process technical and enquiry data outside Switzerland. Where data is transferred to a country without an adequate level of protection, we use recognised safeguards such as contractual clauses, unless a statutory exception applies.

7. Retention period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention periods (e.g. ten years for accounting records).

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object. You may also withdraw any consent given at any time. To exercise these rights, contact hello@grondia.com.

9. Cookies and analytics

Necessary storage. This website keeps your market and language in the cookies grondia-locale and grondia-market (twelve months), remembers a dismissed announcement bar in your browser's local storage, and records your cookie choice in the cookie grondia-consent (six months). These are needed to deliver the site you asked for and are not used to profile you.

Measurement that stores nothing. Umami and Ahrefs Web Analytics count visits without cookies and without writing anything to your device, so they are not put behind a consent prompt. We checked this against the scripts those services actually serve, not only their documentation.

Measurement that needs a cookie. Google Analytics 4 stores first-party cookies whose names begin with _ga, for up to two years, to recognise repeat visits. In the European Economic Area and the United Kingdom it is not loaded at all until you allow it. Advertising storage and advertising personalisation are not covered by this consent; they are dealt with separately below. In Switzerland it loads by default, as Swiss law permits, and you can switch it off at any time.

Advertising. We advertise with Google Ads (Google Ireland Limited, Dublin). It runs on the same Google tag as Google Analytics 4, but it is asked for separately and can be allowed or refused on its own. Advertising is opt-in in every country this website serves, Switzerland included.

If you allow advertising, two kinds of storage are written. Google sets cookies whose names begin with _gcl_ and _gac_, for up to 90 days. We set a first-party cookie named grondia-attribution, for 90 days, holding the Google click identifier (gclid or wbraid), the campaign parameters utm_source, utm_medium, utm_campaign, utm_term and utm_content, and the path of the page the advertisement pointed at. If you then submit a demo request, those values are sent along with it and stored with your enquiry, and we report to Google Ads that a conversion took place. That report carries no name, email address or message. We use this both to measure which advertisement led to a demo request and, because your consent covers it as well, to let Google personalise the advertising it shows you.

If you do not allow advertising, none of that storage is written. In the European Economic Area and the United Kingdom the Google tag is not loaded at all until you allow advertising or analytics, so nothing reaches Google either. In Switzerland the tag is loaded by default for analytics, so Google does receive a request from your browser, but every advertising signal on it is set to denied: no advertising cookie is set, no click identifier is stored or transmitted, and nothing is used to personalise advertising. The legal basis for advertising is your consent (Art. 6(1)(a) GDPR).

Changing your mind. Use the cookie settings link in the footer of any page. Rejecting analytics also deletes the Google Analytics cookies already stored. Withdrawing advertising consent switches the advertising signals back to denied and deletes the _gcl_ and _gac_ cookies together with the grondia-attribution cookie; the same deletion runs on any page load where no advertising consent is on record. Independently of this site you can install Google's browser opt-out add-on (https://tools.google.com/dlpage/gaoptout).

10. AI demo agent on this website

If you start the interactive product demo on this website, the conversation is handled by an AI assistant. What you type (and, if you use the voice option, your audio recording) is transmitted to OpenAI in the United States to generate the replies; spoken output is generated by ElevenLabs. If you provide an email address, we derive an approximate company name from its domain and notify our team so that we can follow up. Your country is inferred from network metadata solely to select the right currency and number format.

An email address is required to start the demo: it is how we know who we are talking to and how we follow up. We keep a record of the conversation for up to 12 months, so that we can come back to what you actually asked about; it is then deleted automatically. If you would rather not give us an address, please contact us directly instead. The same information is available from a person. The controller for this processing is CampOne GmbH. Transfers to the United States are covered by recognised safeguards (standard contractual clauses). A current list of the recipients involved is available on request.

11. Changes to this policy

We reserve the right to update this Privacy Policy to reflect changes in legal or technical requirements. The current version is always available on this page.