Personal data

Privacy policy

Version of 12 October 2026 (courtesy translation; the French version prevails)

1. Preamble

The protection of your personal data matters to Cozynest. This privacy policy explains transparently which data we process, why, on what basis, with whom we share it, how long we keep it and what your rights are.

It applies to the use of the cozynest.ch website, as well as to our concierge and short-term rental management activities: our relationship with property owners, guests, service providers and anyone who contacts us.

2. Controller

The controller within the meaning of the Swiss Federal Act on Data Protection (FADP) is:

Cozynest Sàrl
Rue des Fortifications 2a, 1844 Villeneuve (VD), Switzerland
UID: CHE-483.742.609
Commercial register no.: CH-550.1.239.986-6
Phone: +41 79 782 48 46
Email: hello@cozynest.ch

For any question about data protection or to exercise your rights, you can write to us at hello@cozynest.ch or at the postal address above. We are not required to appoint a data protection officer; this address serves as the single point of contact.

3. Legal framework

We process your data in accordance with the Swiss Federal Act of 25 September 2020 on Data Protection (FADP) and its ordinance (DPO), as well as other applicable Swiss law (in particular the Code of Obligations and cantonal and municipal legislation on tourist tax). Where the European Union’s General Data Protection Regulation (GDPR) applies to processing, for example for people staying in the European Union, we also comply with its requirements.

4. Data we process and where it comes from

Depending on your relationship with us, we may process the following categories of data:

  • Website visitors: IP address, date and time of the visit, pages viewed, browser and device type, referring page (technical browsing data).
  • People who contact us or request an estimate: first and last name, email address, telephone number, municipality and type of property, the content of your message and any information you choose to share with us.
  • Property owners: identity, contact details, address and characteristics of the property, information on the legal status and compliance of the property (permits, co-ownership regulations), bank details for the payment of income, contractual and invoicing data, communications with us.
  • Guests: identity, contact details, dates and conditions of the stay, number of people, payment method (handled by the booking platform or our payment provider), communications with us and, where the municipality requires it for tourist tax, the information needed to collect it.
  • Service providers and partners: business contact details, contractual and invoicing information.
  • Messaging: email address and the content of your messages; telephone number and the content of messages if you write to us on WhatsApp.

We receive this data in principle directly from you. It may also come from booking platforms (for example Airbnb or Booking.com) for guests, or from publicly available sources when we contact an owner in a professional context. We do not process sensitive personal data within the meaning of the FADP unless you provide it on your own initiative; we ask you not to do so.

5. Purposes and legal bases

We process your data only for specific and recognisable purposes, and only to the extent necessary:

  • Responding to your requests (contact, free estimate, getting in touch) and providing the information requested, on the basis of pre-contractual measures taken at your request and our legitimate interest in responding to enquiries.
  • Entering into and performing the management contract with owners: management of listings, calendar, rates and bookings, coordination of cleaning and maintenance, reporting and payment of income. Basis: performance of the contract.
  • Managing guests’ stays: processing bookings, welcoming guests, communication before and during the stay, handling any incidents. Basis: performance of the contract concluded through the booking platform or with us.
  • Complying with our legal obligations accounting and record keeping, collection and remittance of tourist tax, responses to the authorities. Basis: legal obligation.
  • Ensuring the operation, security and improvement of the site technical logs, protection against abuse and spam, visitor statistics. Basis: legitimate interest.
  • Establishing, exercising or defending our rights in the event of a dispute. Basis: legitimate interest.
  • Professional outreach to owners, agencies and partners, in compliance with applicable rules and your right to object at any time. Basis: legitimate interest.

Where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of prior processing. We do not sell your personal data and do not use it for advertising purposes on behalf of third parties.

6. Use of our website

Server logs. On each visit, our host automatically records certain technical data (IP address, date and time, pages viewed, browser). This data is necessary for the display and security of the site and is kept only for a limited period.

Cookies. A cookie is a small file saved by your browser. Our site uses technical cookies necessary for its operation. You can configure your browser to refuse or delete cookies; some site functions may then be limited.

Visitor statistics. We use a privacy-friendly audience measurement tool, installed on our own site. It allows us to understand which pages are viewed so that we can improve our content. It is not used for advertising or to build individual profiles, and the data is not passed on to advertising networks.

Forms. The information entered in our contact and estimate forms is sent to Cozynest electronically and used only to process your request. Fields marked with an asterisk are mandatory; without them, we cannot process your request. An anti-spam mechanism is used to protect the forms.

WhatsApp and email. If you click the WhatsApp link, a conversation opens in the WhatsApp application (Meta). Your telephone number and the content of your messages are then processed by WhatsApp under its own terms. Use of this channel is optional: you can also reach us by email or telephone.

Links to third-party sites. Our site may contain links to external sites (for example Airbnb or social networks). We have no influence over their privacy practices; we encourage you to read their policies.

7. Recipients and processors

We share your data only with recipients whose involvement is necessary for the purposes described above:

  • booking platforms (for example Airbnb, Booking.com), for publishing listings and managing stays;
  • cleaning, maintenance and reception providers working in the properties, only for the information needed for their assignment;
  • municipalities and competent authorities, for tourist tax and compliance with legal obligations;
  • our IT and service providers (website hosting, email, calendar, payment tools, accounting, backup);
  • our advisers (fiduciary, lawyers, insurers) bound by confidentiality;
  • judicial or administrative authorities where the law requires it.

Where we use processors, we ensure by contract that they process your data only on our instructions and guarantee its security.

8. Disclosure of data abroad

Some of our providers or the platforms you use (for example Google, Meta, Airbnb, Booking.com) may process data outside Switzerland, in particular in the European Union or the United States. Where the destination country does not offer an adequate level of protection recognised by the Federal Council, we use appropriate safeguards, such as standard contractual clauses, certification under the Swiss–US Data Privacy Framework or, in the cases provided for by law, an exception (in particular the performance of a contract with you or in your favour).

9. Retention period

We keep your data for as long as necessary for the purposes pursued, then delete or anonymise it:

  • contact and estimate requests with no follow-up: in principle 12 months after the last exchange;
  • owners’ data: for the duration of the management contract, then contractual and accounting records are kept for 10 years, in accordance with Swiss law;
  • guests’ data: for the time needed for the stay and the handling of any claims, then according to legal obligations (accounting, tourist tax);
  • technical website logs: limited period, in principle a few weeks;
  • data needed to defend our rights: until the applicable limitation periods expire.

10. Data security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure: access limited to those who need it, secure passwords and access, encrypted connection (HTTPS) to the site, backups, and the choice of reliable providers. However, no transmission over the internet is completely free of risk.

11. Automated decisions

We make no decision based exclusively on automated processing that produces legal effects concerning you or significantly affects you, and we do not carry out profiling of this kind.

12. Your rights

Within the limits provided by law, you have the following rights:

  • right of access: obtain confirmation that we process your data and receive a copy of it;
  • right to rectification: have inaccurate or incomplete data corrected;
  • right to erasure: request the deletion of your data, subject to our legal retention obligations;
  • right to object and to restriction: object to processing or request its restriction;
  • right to data portability in a common electronic format, where the legal conditions are met;
  • right to withdraw your consent at any time, where processing is based on it.

To exercise your rights, write to us at hello@cozynest.ch or at our postal address, enclosing a copy of an identity document if necessary, to avoid disclosure to an unauthorised person. We reply in principle within 30 days and, as a rule, free of charge. We may refuse, restrict or defer the exercise of a right in the cases provided for by law, for example to protect the rights of third parties or to comply with a legal obligation.

13. Right to complain

If you believe the processing of your data does not comply with the law, you may first contact us so that we can examine your request. You also have the right to lodge a complaint with the competent supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch; in the European Union, the data protection authority of your place of residence.

14. Minors

Our site and services are intended for adults. We do not knowingly collect data from people under 16 without the consent of their legal representative. If you think a minor has sent us data, contact us so that we can delete it.

15. Data security breaches

In the event of a data security breach resulting in a high risk to your personality or fundamental rights, we will inform you, and the FDPIC where the law requires it, as soon as possible.

16. Changes to this policy

We may amend this policy at any time, in particular if our services or the legislation change. The version published on cozynest.ch, with its update date, is the version in force.

17. Contact

Cozynest Sàrl
Rue des Fortifications 2a, 1844 Villeneuve (VD), Switzerland
Phone: +41 79 782 48 46
Email: hello@cozynest.ch
Website: cozynest.ch