Privacy Policy

Last updated: November 2025

 

This Privacy Policy explains how SAKAN Riviera (“SAKAN”, “we”, “us”, “our”) collects and processes personal data when you visit our website www.sakanriviera.ch or use our services (in particular, when you submit an enquiry, make a booking or stay in one of our apartments).

 

We comply with the applicable provisions of the Swiss Federal Act on Data Protection (FADP) and, where relevant, the EU General Data Protection Regulation (GDPR).

 

Data controller

The controller responsible for the processing of your personal data is:

 

SAKAN Riviera
Grand Rue 43
1814 La Tour-de-Peilz
Switzerland

 

Email: [insert contact email, e.g. info@sakanriviera.ch]

 

Phone: [insert phone number]

 

If you have any questions about this Privacy Policy or about how we process your data, you can contact us using the details above.

​

2. What data we collect

We process the following categories of personal data, depending on how you interact with us:

 

2.1 Data you provide directly

When you contact us (e.g. via email, contact form or phone):

• Identification data (name, surname)

• Contact details (email address, phone number, postal address)

• Content of your message and any attachments

• Other information you choose to provide (e.g. preferred room type, dates)

​

When you make a booking and/or conclude a rental agreement:

• Identification data (name, surname, date of birth, nationality)

• Contact details (address, email, phone number)

• Booking details (apartment, dates of stay, number of occupants, special requests)

• Contract details (rental contract, duration, rent amount and included services)

• Payment information (payment method, billing details; we do not store full card numbers if you pay via a payment service provider)

• Official documents, where required by law or contract (e.g., copy of ID/passport, residence permit) – only if necessary and permitted by law

2.2 Data we collect automatically when you use the website

When you visit our website, certain data are automatically collected for technical and security reasons, such as:

• IP address and device identifier

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL and pages visited

• Amount of data transferred

This information is usually stored in server log files.

 

2.3 Cookies and similar technologies

We may use cookies and similar technologies on our website, for example to:

• Enable basic website functions (essential cookies)

• Save your settings (e.g. language preference)

• [Optionally: gather anonymised statistics on website usage, if you use analytics]

Details on the specific cookies used, purposes and storage periods are provided in our [cookie banner / cookie settings tool] (if available) and/or in a separate cookie section below.

If you do not wish cookies to be stored on your device, you can adjust your browser settings accordingly. Essential cookies, however, are necessary for the proper functioning of the website.

 

3. Purposes and legal bases of processing

We process your personal data for the following purposes and on the following legal bases:

1. Handling enquiries and communication

   • To respond to your enquiries, provide information about our apartments and services, and maintain our relationship with you.

   • Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR, where applicable); legitimate interests in providing customer service (Art. 6(1)(f) GDPR); and/or your consent where required.

2. Booking and contract management

   • To process your booking, prepare and manage rental agreements, organise your stay, and provide the services you request (e.g. cleaning, maintenance, Wi-Fi access).

   • Legal basis: performance and administration of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (e.g. tax and accounting law, registration obligations) (Art. 6(1)(c) GDPR).

3. Payment processing

   • To process payments, issue invoices, manage deposits and handle any refunds.

   • Legal basis: performance of a contract (Art. 6(1)(b) GDPR); compliance with legal obligations; and our legitimate interests in secure payment processing (Art. 6(1)(f) GDPR).

4. Website operation and security

   • To provide a stable and secure website, prevent misuse, detect and address faults, and ensure IT security (e.g. server logs, firewall logs).

   • Legal basis: our legitimate interests in operating a secure, functional website (Art. 6(1)(f) GDPR).

5. Marketing and information (optional)

   • To send you information about our offers, apartments and services (e.g. via email newsletter), if you have subscribed or where permitted by law.

   • Legal basis: your consent (Art. 6(1)(a) GDPR) or our legitimate interests in promoting our services, subject to your right to object.

6. Legal claims and compliance

   • To assert or defend legal claims, enforce house rules and contracts, and comply with legal obligations (e.g. storage under commercial and tax law).

   • Legal basis: legitimate interests (Art. 6(1)(f) GDPR) and/or legal obligations (Art. 6(1)(c) GDPR).

Where we rely on your consent, you may withdraw it at any time with effect for the future (see section 8).

 

4. Sharing of personal data

We only share your personal data with third parties where necessary and permitted by law, including:

• Service providers (processors): e.g. IT/hosting providers, email providers, property management software, [cleaning/maintenance service providers], who process data on our behalf and according to our instructions.

• Booking and payment service providers: if you book or pay via an external booking system or payment provider, the data required for booking or payment will be transferred to that provider. [The specific provider and its privacy policy are shown during the booking/payment process.]

• Public authorities and agencies: where we are legally obliged to do so (e.g. tax authorities, registration authorities, law enforcement).

• Advisers and legal representatives: e.g. accountants, lawyers, where necessary for advice or to establish or defend legal claims.

 

Where data are transferred to countries outside Switzerland or the EU/EEA, we ensure an adequate level of protection, e.g. through adequacy decisions or standard contractual clauses, in line with applicable data protection law.

 

5. Storage period

We store personal data only for as long as necessary for the purposes described above or as required by law, in particular:

• Enquiry and communication data: as long as necessary to process your request and for a reasonable retention period thereafter for documentation and to avoid repeated discussions.

• Booking and contract data: for the duration of the contractual relationship, plus statutory retention periods (e.g. under commercial and tax law – typically 10 years in Switzerland).

• Technical logs and security data: usually for a short period (e.g. a few weeks or months), unless longer retention is necessary for security or evidence reasons.

• Marketing data: until you unsubscribe or object to receiving marketing communications.

 

After these periods, data are deleted, anonymised or securely archived, unless further processing is required by law or for legitimate interests.

 

6. Your rights

Under the FADP and, where applicable, the GDPR, you have the following rights in relation to your personal data:

• Right of access: to obtain information on what personal data we process about you and how.

• Right to rectification: to have inaccurate or incomplete personal data corrected.

• Right to erasure: to request deletion of your data, where legal grounds for this exist.

• Right to restriction: to request that processing be restricted in certain circumstances.

• Right to data portability (GDPR where applicable): to receive data you have provided to us in a structured, commonly used and machine-readable format or to have it transmitted to another controller.

• Right to object:

  • to processing based on our legitimate interests, on grounds relating to your particular situation;

  • at any time, to processing for direct marketing purposes.

• Right to withdraw consent: where processing is based on your consent, you may withdraw this consent at any time, without affecting the lawfulness of processing before withdrawal.

 

To exercise your rights, please contact us using the details in section 1. We may ask for proof of identity to ensure we only provide information to the correct person.

You also have the right to lodge a complaint with the competent data protection authority, for example:

• In Switzerland: the Federal Data Protection and Information Commissioner (FDPIC)

• In the EU/EEA: your local supervisory authority

 

7. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, such as:

• Access controls and role-based permissions

• Secure servers and backups

• Encryption where appropriate

• Regular monitoring of IT systems and training of staff

However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

 

8. Cookies and tracking 

We may use:

• Essential cookies: required for the basic functions of the website (e.g. navigation, security). These cannot be deactivated in our systems.

• Functional cookies: to remember your preferences (e.g. language)

 

You can control cookies via:

• Our cookie banner/settings tool (if implemented), where you can accept or reject certain categories of cookies; and/or

• Your browser settings, where you can delete existing cookies and block the storage of new cookies.

Please note that disabling certain cookies may affect the functionality of our website.

 

9. Children and minors

Our website and services are primarily aimed at students and young professionals as prospective tenants. They are not intended for children under 16 years without the consent of their parents or legal guardians. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such data.

 

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example if our website or services change or if legal requirements are modified. The version published on our website is the current version.

Significant changes will be clearly indicated (e.g. by updating the “Last updated” date and, where appropriate, through a notice on the website).

 

Important note:
This text is a template and does not constitute legal advice. Before publishing it on sakanriviera.ch, you should adapt it to your actual data processing activities (tools used, booking system, cookies, etc.) and have it reviewed by a qualified legal professional if necessary.