Photo: David Birri / Camping Aaregg
Your guest database runs on Swiss servers.
Grondia’s database, backups and file storage run in Swiss data centres. This page says what runs where and how we protect it.
What runs where
Where your data lives is the foundation everything else is built on.
Database and backups in Switzerland
The guest database, its backups and file storage run at Infomaniak in Swiss data centres, with a standby copy at a second Swiss provider.
Named providers for the rest
Websites and booking pages are delivered through a global CDN (Vercel), Cloudflare protects the traffic, and an email provider sends the emails. Ask us for the full list.
Swiss company, Swiss law
CampOne GmbH is domiciled in Herrliberg and operates under Swiss jurisdiction, including the revised Federal Act on Data Protection.
Built to the revised Federal Act on Data Protection
Data protection is part of how the product collects and keeps guest data.
Data minimisation
We collect only what a booking and a legal eVisitor registration require. Optional fields stay optional.
Consent & purpose
Guests see why each field is asked for. Marketing consent is separate, explicit and revocable.
Retention & erasure
Records are kept for the period the law requires. On request, we anonymise a guest’s personal data.
Change log
Every change to a booking is logged with user, time and action, and the log cannot be edited afterwards.
Reporting that satisfies the auditor
Guest records are captured once, at check-in. Grondia registers each guest in eVisitor from that record through the official eVisitor interface and calculates the tourist tax from it, so what eVisitor holds always matches what you took.
Every figure traces back to its booking, so an audit is an export.
- Guest data flows straight into eVisitor: no manual re-entry
- Tourist tax calculated per municipality, with a monthly statement
- Records kept for the legally required period
- Every figure traceable to its source booking
Encrypted in transit, access by role
Encryption in transit
All traffic runs over TLS 1.2 or 1.3, and HSTS is on.
Encrypted backup archive
The long-term backup archive is encrypted on our server before it leaves, with keys only we hold.
Role-based access
Admins, managers and staff get different rights, and you decide what each person may do. Every account can be switched off on its own.
Nightly backups
We back up every night, archive database changes continuously and keep 30 daily copies, all on servers inside Switzerland.
Payments, handled by specialists
SEPA invoice
Invoices are issued as SEPA invoices. Payment references reconcile back to the booking automatically.
tap to pay & cards
Card and tap to pay payments run through a licensed payment provider certified to PCI DSS Level 1.
Card numbers stay with the provider
Guests type their card details into the provider’s secure fields. Card numbers never reach Grondia servers.
The compliance checklist
Get started
Give your campsite its quietest season yet.
Book a 30-minute demo. We show you your own campground on Grondia and plan the switch with you.
