Privacy Policy

1. Introduction and Data Controller

The protection of your data is important to us. This Privacy Policy explains what data we collect, how we use it, and what rights you have.

1.1 Data Controller

OpenBooking AG
Carl Spitteler-Str. 5
8352 Elsau, ZH
Switzerland
UID: CHE-174.196.729
Email: support@openbooking.ch

1.2 Scope

This Privacy Policy applies to the use of the Offer Studio platform by providers and their end customers (guests).

1.3 Legal Basis

Data processing is based on the Swiss Federal Act on Data Protection (FADP).

2. What Data Do We Collect?

2.1 Registration and Account Data (Providers)

During provider registration, we collect:

• Personal Data: First and last name, email address
• Organization Data: Company name, contact and billing email addresses
• Preferences: Preferred language
• Campaign Code: If provided
• Technical Data: IP address (for CAPTCHA verification)

2.2 Offer Data

When you create offers, we store:

• Content Data: Titles, descriptions, service details, important information
• Location Data: Address, coordinates (latitude/longitude), meeting point
• Availability: Calendar dates, weekdays, date ranges
• Prices: Amounts, currencies, price types
• Images: Uploaded images with captions and copyright information
• Categories and Labels: Activity types, tags, spoken languages
• Translation Instructions: Notes for automatic translations

2.3 Booking Data (Guests)

When guests submit booking requests through the platform, we collect:

• Contact Details: Guest name, email address
• Booking Details: Desired date, number of persons, messages/notes
• Booking Status: Confirmed, declined, cancelled, etc.
• Transaction Data: Total amount, currency
• Source Channel: Which publication channel the booking came from
• Timestamps: Request time and status changes

2.4 Booking Log

For traceability, we log:

• All actions related to bookings (confirmations, cancellations, changes)
• Actor (system, provider, guest) and action timestamp
• Additional action details (e.g., cancellation reasons)

2.5 Subscription and Billing Data

• Subscription Information: Selected plan, term, status
• Billing Address: Complete billing address (limited to Switzerland/Liechtenstein)
• Payment Information: Payment method (invoice), payment status

2.6 Usage and Session Data

• Login Tokens: One-time Magic Link tokens for login
• Session Cookies: To maintain your login
• Flash Messages: Temporary notifications during use
• Language Preference: Your chosen interface language

3. What Do We Use Your Data For?

3.1 Platform Provision

• Managing your account and organizations
• Enabling offer creation, editing, and publication
• Processing and forwarding booking requests
• Providing translation features

3.2 Communication

• Sending Magic Link emails for login
• Booking confirmations and notifications
• Important service messages (e.g., changes to terms)
• Responding to your support requests

3.3 Billing and Contract Fulfillment

• Managing subscriptions and campaigns
• Creating and sending invoices
• Checking publication quotas

3.4 Security and Fraud Prevention

• CAPTCHA verification during registration (Cloudflare Turnstile)
• Logging booking actions for dispute resolution
• Detecting and preventing abuse

3.5 Platform Improvement

• Analyzing platform usage (anonymized)
• Developing features
• Optimizing user experience

4. Data Sharing with Third Parties

4.1 Publication Channels

When you publish offers, they are made available through your selected publication channels (distribution partners). Offer data (descriptions, images, prices, availability) is transmitted to these partners.

4.2 Technical Service Providers

We work with the following service providers:

• Cloudflare Turnstile: CAPTCHA verification during registration
• Email Service: Sending Magic Link emails and booking notifications
• Translation Services: Automatic translation of offer content (AI-based)
• Geocoding Services: Converting addresses to coordinates
• Hosting Providers: Server and database hosting

All service providers are carefully selected and contractually obligated to comply with data protection requirements.

4.3 Legal Obligations

We share data when legally required (e.g., to law enforcement agencies upon court order).

4.4 No Data Sales

We do not sell your data to third parties for advertising purposes.

5. Data Storage and Security

5.1 Storage Location

Your data is stored on servers in Switzerland or the European Union.

5.2 Security Measures

We protect your data through:

• Encrypted data transmission (HTTPS/TLS)
• Secure database storage with access restrictions
• Regular security reviews
• Access logs and permission concepts
• Backups for emergency recovery

5.3 Retention Periods

6. Your Rights

You have the following rights regarding your personal data:

6.1 Right of Access

You can request information about what data we store about you at any time.

6.2 Right to Rectification

You can request correction of incorrect or incomplete data. Most data can be updated directly in your account settings.

6.3 Right to Erasure

You can request deletion of your data, provided there are no legal retention obligations. Please note:

• Booking data must be retained for 10 years (legal obligation)
• Billing data is also subject to a 10-year retention obligation
• Offer and account data can be deleted after subscription termination

6.4 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format (e.g., JSON or CSV).

6.5 Right to Object

You can object to the processing of your data for certain purposes. However, note that this may limit or prevent platform use.

6.6 Right to Complain

You have the right to file a complaint with the competent data protection authority:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
3003 Bern
Switzerland
www.edoeb.admin.ch

6.7 Exercising Your Rights

To exercise your rights, please contact us at:

Email: support@openbooking.ch
Subject: "Data Protection Request"

We will process your request within 30 days.

7. Cookies and Tracking

7.1 Necessary Cookies

We use session cookies that are required for platform operation:

• Session Cookie: Stores your login (required)
• Language Preference: Stores your language choice (functional)
• Flash Messages: Temporary notifications (functional)

7.2 CAPTCHA

During registration, we use Cloudflare Turnstile CAPTCHA. Your IP address is transmitted to Cloudflare to verify you are not a bot. Details can be found in Cloudflare's Privacy Policy.

7.3 No Advertising Tracking Cookies

We do not use cookies for advertising purposes or for tracking across different websites.

8. Special Notes for Providers

8.1 Your Role as Data Processor

When you receive booking requests as a provider, guest contact data (name, email) is transmitted to you. In this case, you act as an independent data controller and are obligated to:

• Use this data only for booking processing
• Treat the data confidentially and protect it appropriately
• Not use the data for advertising purposes without guest consent
• Delete the data after booking completion according to legal requirements

8.2 Sharing of Offer Data

By publishing your offers, you consent to the distribution of offer data (descriptions, images, prices) through your selected publication channels.

8.3 Translations

When using the automatic translation feature, your offer content is transmitted to an AI-based translation service. You remain responsible for the accuracy of translated content.

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our data processing or legal requirements.

Significant changes will be communicated to you by email at least 30 days before taking effect.

We recommend visiting this page regularly to stay informed about the current status.

10. Contact and Questions

For questions about data protection or to exercise your rights, please contact us:

Data Protection Contact
Carl Spitteler-Str. 5
8352 Elsau, ZH
Switzerland
Email: support@openbooking.ch
Phone: +41 32 511 1919