Privacy Notice – Enquiries and Bookings
Hollandia 15, Riederalp, Switzerland. Last updated: 14 November 2026
1. Who we are
We are Mr and Mrs Bromilow, two private individuals who rent out our holiday home in Riederalp, Switzerland. We are jointly responsible for the personal data described in this notice (the “controller” under the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR)).
Contact for all privacy matters: privacy@bromilow.net, Unterer Batterieweg 1, 4053 Basel, Switzerland
We have not appointed a data protection officer.
2. What personal data we collect
We collect the information you give us through our enquiry form, by email, or otherwise when you deal with us about a stay:
- Contact details: name, email address, telephone number, postal address.
- Booking details: requested dates, number and names of guests (including the ages of children where relevant), your messages and preferences, and any special requests.
- Identity details for guest registration: the name, date of birth, nationality, home address and passport or ID document details of guests, where we are required by law to collect them.
- Payment details: bank account details (for example IBAN, account holder name) where you pay us by bank transfer or where we need to refund a deposit or payment to you, and records of payments made.
- Correspondence: copies of emails and messages exchanged with you.
We do not knowingly collect any data from you that you have not provided yourself, other than what is generated in the course of managing your booking (for example booking confirmations and payment records).
If you give us personal data about other people (for example the other members of your travelling party), please make sure they know about this notice.
3. Why we use your data and on what legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Responding to your enquiry and preparing a booking | Contact details, booking details, correspondence | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Processing and managing your booking: confirmations, payments, refunds, arrival information, communication during and after your stay | Contact details, booking details, payment details, correspondence | Performance of the rental contract (Art. 6(1)(b)) |
| Complying with local legal requirements, such as collecting and reporting tourist tax and registering guests with the competent authorities | Names, dates of birth, nationality, address, passport or ID details, dates of stay | Legal obligation (Art. 6(1)(c)) |
| Keeping accounting and tax records | Booking and payment records | Legal obligation (Art. 6(1)(c)) |
| Contacting you in future years to ask whether you would like to rebook | Name, email address (or other contact detail you gave us), dates of your previous stay | Our legitimate interest in welcoming returning guests (Art. 6(1)(f)). You can object at any time (see section 7) |
| Establishing, exercising or defending legal claims, for example a dispute about a booking or damage | Booking details, correspondence, payment records | Legitimate interest (Art. 6(1)(f)) |
Under Swiss Data Privacy legislation, we process your data in line with the principles of lawfulness, good faith, proportionality, purpose limitation and transparency (Art. 6 FADP).
We do not use your data for any other purpose. We do not sell your data, we do not use it for marketing other than the rebooking message described below, and we do not make decisions about you by automated means.
4. Rebooking messages
Unless you tell us otherwise, we will contact you in later years to ask whether you would like to stay with us again. We will use only the contact details you gave us for this. You can tell us at any time, by email or in reply to any message from us, that you do not want to hear from us again, and we will stop straight away.
5. Who we share your data with
We share personal data only where necessary, for example with:
- Public authorities and tourism bodies where the law requires it, for example the local tourist office or municipality for tourist tax, and the competent police or other authorities for guest registration.
- Service providers who help us run the rental, acting on our instructions. We use a property manager and cleaning service, and they receive only the arrival information they need and not your identity or payment details.
- Our bank, when you pay us or we refund you.
- Professional advisers (for example our accountant or lawyer) and authorities or courts if we are legally required to or need to defend a legal claim.
6. How long we keep your data
| Data | Retention |
|---|---|
| Passport or ID details collected for guest registration | Only until the registration has been completed and any reporting deadline has passed. Then securely deleted. We keep only the information the authorities require us to keep, for the period they require. |
| Bank account details | Only as long as needed to receive payment or make a refund, then deleted, except where they form part of accounting or banking records. |
| Booking records, invoices and payment records | 10 years from the end of the financial year. |
| Enquiries that did not result in a booking | 12 months, then deleted. |
| Contact details used for rebooking messages | Until you tell us you no longer wish to be contacted, or until 3 years after your last stay or contact, whichever is earlier. |
| Correspondence about a booking | 3 years after your stay, unless needed for a legal claim or accounting purposes. |
7. Your rights
Subject to the conditions in the applicable law, you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected or incomplete data completed;
- have your data deleted;
- restrict how we use your data;
- receive your data in a commonly used electronic format and have it transferred to someone else (data portability);
- object to our use of your data based on legitimate interests, including for rebooking messages. We will stop unless we have compelling reasons that override your interests, except that you can always object to rebooking messages and we will always stop;
- withdraw consent at any time where we rely on your consent (this does not affect what we did before);
- not be subject to a decision based solely on automated processing (we do not use any).
To use these rights, contact us at the address in section 1. We may need to confirm your identity first. We will respond within one month, or 30 days under the FADP.
You also have the right to complain to a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch, or, if you are in the EU/EEA, the authority in the country where you live, work or where you think a breach took place. We would appreciate the chance to resolve your concern first.
8. Is providing data compulsory?
You do not have to give us your data, but we cannot process an enquiry or booking without your contact and booking details and the identity details we are legally required to register. If you do not provide the identity details required for guest registration or make a required payment, we will not be able to accept your booking.
9. Security
We take reasonable technical and organisational measures to protect your data, such as password-protected devices and accounts, restricted access, and deleting sensitive documents when they are no longer needed. Email is not a fully secure channel. Please do not send passport or bank details by email unless we have asked for them, and where possible use alternative secure methods.
10. Changes to this notice
We may update this notice from time to time. The current version is always available at www.hollandia15.ch and shows the date it was last updated.