Privacy Policy

Last updated: January 2026

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

Detailed information on the subject of data protection can be found in the following sections of this privacy policy.

2. Responsible Party

The responsible party for data processing on this website is:

Stayoa Lionel Murbach Sole proprietorship Solarstrasse 27 8404 Winterthur Switzerland
Email: contact@stayoa.app Phone: –

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Hosting

This website is hosted by the following provider:

Vercel Inc. 440 N Barranca Avenue #4133 Covina, CA 91723 United States

When you visit our website, the hosting provider automatically collects so-called server log files.

The following data in particular is processed:

  • anonymized IP address
  • date and time of access
  • browser type and version
  • operating system
  • referrer URL

The IP address is anonymized immediately after collection, so that no inference to individual persons is possible. This data is not combined with other data sources.

Legal basis:

  • Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and stable provision of the website)
  • Art. 31 DPA (Switzerland)

For more information, please see the hosting provider's privacy policy: https://vercel.com/legal/privacy-policy

4. General Information on Data Processing

Legal Basis for Data Processing

We process personal data exclusively in accordance with the Swiss Data Protection Act (DPA) and the EU General Data Protection Regulation (GDPR).

Depending on the purpose of processing, this is done on the following legal bases:

  • Art. 6 para. 1 lit. a GDPR (consent)
  • Art. 6 para. 1 lit. b GDPR (contract performance or pre-contractual measures)
  • Art. 6 para. 1 lit. f GDPR (legitimate interest)
  • Art. 31 DPA (Switzerland)

5. Data Collection on this Website

Server Log Files

See section "Hosting".

No personal evaluation takes place, as IP addresses are processed exclusively in anonymized form.

6. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device.

Only the following are used:

  • technically necessary cookies or
  • optional cookies with your explicit consent

.

Personal data is only processed with anonymized IP addresses.

You can disable or delete cookies at any time via your browser settings.

Legal basis:

  • Art. 6 para. 1 lit. a GDPR (consent)
  • Art. 6 para. 1 lit. f GDPR
  • Art. 31 DPA (Switzerland)

7. Analytics and Statistics Tools

If analytics or statistics tools are used on this website, processing is done exclusively with anonymized data.

In particular, the following information may be processed:

  • anonymized IP address
  • page views
  • technical usage information (e.g., device, browser)

Identification of individual users is excluded.

Legal basis:

  • Art. 6 para. 1 lit. a GDPR (if consent is required)
  • Art. 6 para. 1 lit. f GDPR
  • Art. 31 DPA (Switzerland)

8. Contact

If you contact us via contact form, email or other means, your information will be processed to handle your inquiry.

Processed data:

  • name
  • email address
  • message content
  • timestamp
  • anonymized IP address (exclusively for technical security)

The IP address is also processed exclusively in anonymized form and is not used to identify you.

Legal basis:

  • Art. 6 para. 1 lit. b GDPR (pre-contractual measures)
  • Art. 6 para. 1 lit. f GDPR
  • Art. 31 DPA (Switzerland)

9. Registration and Use of the Platform

When registering and using the platform, we process personal data that is necessary for contract performance.

This includes in particular:

  • contact data
  • account and login data
  • usage and booking data
  • communication data

Processing is done exclusively for the purpose of contract performance.

Legal basis:

  • Art. 6 para. 1 lit. b GDPR
  • Art. 31 DPA (Switzerland)

10. Payment Service Providers

For payment processing, we use external payment service providers.

Only those personal data necessary for payment processing are transmitted to the payment service provider. We do not store complete payment data.

Legal basis:

  • Art. 6 para. 1 lit. b GDPR
  • Art. 31 DPA (Switzerland)

For more information, please refer to the privacy policy of the respective payment service provider: https://stripe.com/privacy

11. Data Transfer to Third Countries

If personal data is transferred to third countries (e.g., USA), this is done exclusively:

  • with anonymized data or
  • on the basis of appropriate safeguards in accordance with Art. 44 ff. GDPR (e.g., standard contractual clauses).

12. Storage Duration

We store personal data only for as long as is necessary for the respective purposes or as required by legal retention obligations.

After the purpose ceases to apply or legal deadlines expire, the data will be deleted.

13. Your Rights

You have the right at any time:

  • to receive information about your stored personal data
  • to have incorrect data corrected
  • to request deletion of your data
  • to request restriction of processing
  • to request data portability
  • to withdraw any consent given at any time

You also have the right to file a complaint with a competent data protection supervisory authority.

14. SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons to protect the transmission of confidential content.

15. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to reflect changed legal requirements or technical developments.