1. Responsible body
Who is responsible for data processing
Doggy Deluxe Loft GmbHFännring 4
6403 Küssnacht am Rigi
Switzerland
Email: info@doggydeluxe.ch
Phone: +41 77 507 42 80
For data protection questions and to exercise your rights, you can contact this email or postal address. A legally required data protection advisor has not currently been appointed.
2. Validity and legal basis
To which offers this declaration applies
This privacy policy applies to the website doggydeluxe.ch, the Doggy Deluxe booking portal, public course booking without a customer account as well as the associated customer, administrative, payment, invoice and email processes.
The Swiss Data Protection Act (DSG) and the Data Protection Ordinance (DSV) are particularly relevant. To the extent that the EU General Data Protection Regulation (GDPR) is applicable in individual cases, we process data in particular to fulfill the contract and pre-contractual processing, to fulfill legal obligations, based on legitimate interests in secure and economical operations and on the basis of consent if this is expressly obtained.
The provision of data is required if it is designated as a mandatory field for registration, approval, support, course booking, payment or invoicing. Without this information we cannot provide the relevant service or cannot provide it completely.
3. Processed data
What information we process
- Master and contact details: First name, last name, street, house number, zip code, city, country, email address and telephone number.
- Account and security details: Customer or management role, approval status, encrypted password proof, email confirmation, sessions, change and security logs.
- Dog data: Name, breed, date of birth, gender, neutering status, weight, chip number, vaccination status, veterinarian, food, medication, care instructions, emergency contact, profile picture and uploaded evidence.
- Booking data: Service, dates, check-in and check-out, course series, price, surcharges, payment method, status, cancellation, waiting list, exchange, instant place and notifications.
- Payment and billing details: Amounts, payment statuses, transaction and invoice references, service fees, refunds and Bexio and statutory accounting data.
- Communication and consent data: Content and metadata of emails, inquiries and WhatsApp messages, telephone number, shipping and delivery status, newsletter registration as well as time, content and revocation of consent.
- Technical data: IP address, date and time, accessed address, browser, operating system, device type, referrer, response status, amount of data transferred and security-relevant events.
Information about a dog is generally not personal data in itself. However, by being assigned to the holder account, they become part of the customer and contractual relationship and are protected by us accordingly.
4. Homepage, server logs and contact
What happens during a visit and an inquiry
Deployment and security
When you access the homepage or portal, technical access data is processed so that content can be delivered, errors can be detected, attacks can be fended off and stability can be monitored. This data is not used for personal advertising profiles.
Contact
If you contact us by email, telephone, contact form or via a linked service, we will process your information to answer you, prepare an offer, process the contract and document the customer relationship.
Hosting via Hetzner
We use this to host the homepage and the booking portal as well as to store web, database and backup data Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. In particular, Hetzner processes website and portal files, database content, backups and technical log data such as IP address, time, address accessed, browser information, response status and security-relevant events, to the extent that this is necessary for operation, maintenance, error analysis, data backup and protection of the systems. Further information: Hetzner’s privacy policy.
Business email via Hostpoint
We use this for our business email inboxes Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland. When sending or receiving emails, the sender and recipient addresses, subject, time of sending, technical header and transmission data, message content and attachments as well as spam and virus check results can be edited. Further information: Hostpoint privacy policy.
Newsletter with Brevo
As long as the newsletter button is activated and linked to Brevo, you can voluntarily register for the Doggy Deluxe newsletter. The registration is not part of the registration and takes place via one of Brevo / Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France, provided form. When opening the form and registering, in particular the IP address, browser and device information, time, email address, voluntarily provided name, proof of consent and - depending on the Brevo configuration - delivery, opening and click data can be edited.
We use the double opt-in procedure if it is activated in Brevo: After registering, you will receive a confirmation email and will only be included in the mailing list once it has been confirmed. You can revoke your consent at any time using the unsubscribe link in every newsletter email with effect for the future. The portal works independently of Brevo; a missing or disabled Brevo connection does not affect bookings. Brevo can process data outside Switzerland and the EEA, particularly in the USA or India, and provides contractual protective measures for this. Further information: Brevo privacy policy.
WhatsApp Business
If WhatsApp Business is activated, we only use the service as an additional, voluntary communication channel for requested information and activated booking, waiting list or exchange notifications. The responsible provider for users in the European Region is WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. In particular, mobile phone number, profile and account information, message content, booking reference, shipping and delivery status as well as technical connection and device information can be edited. Please do not transmit any particularly sensitive health, medication or emergency data via WhatsApp unless this is necessary and expressly agreed with us.
The WhatsApp consent is separate from general contractual messages and newsletter consent. You can revoke them in the customer profile or by notifying us for the future. The waiting list, exchange exchange and allocation of places remain functional even without WhatsApp; Important notifications will continue to be available in the portal or, if necessary, sent by email. WhatsApp can process data worldwide, including outside Switzerland and the EEA. Further information: WhatsApp privacy policy and Conditions for data processing for companies.
Google reviews
On the homepage we show selected, publicly accessible Google reviews in static form. The display name published on Google, the review text, the star rating and the publication reference can be adopted. The purpose is to provide information about experiences with Doggy Deluxe and to present our offer. The reviews are currently not uploaded via a live widget from Google; Simply displaying the static maps does not establish a connection to Google. To request a correction or removal from our display, you can contact us. Regardless, the original review on Google is subject to Google's rules and accountability.
Google Maps and external Google links
Google Maps and the full Google reviews are currently only accessible via external links; an interactive map and a Google review widget are not directly embedded. Only when you open such a link will a connection to Google be established. In particular, Google can process IP address, browser and device identifiers, referrer, time, address accessed, account activity and - depending on the device, authorizations and settings - location data. Depending on usage, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible in particular; Data may also be transferred to Google companies and infrastructure outside Switzerland and the EEA. Further information: Google privacy policy and Google Maps Terms of Service.
If we embed a Google map or a Google review widget directly in the future, the external content will only be loaded after a corresponding selection in the cookie or consent dialog. This data protection declaration and the cookie notice will then be adjusted before activation.
Further external content and links
The current homepage preview loads a background image from Unsplash and the portal loads the icon library Lucide via UNPKG. The IP address of the end device can be transferred to these providers. If possible, these files should be integrated locally before productive operation. Links to Instagram, Canima or other external sites only transfer data when you open the respective link; After that, the data protection regulations of the target provider apply.
5. Customer account, approval and dog profile
How the booking portal uses your data
For day and holiday care you need a registered, confirmed customer account approved by Doggy Deluxe. Each dog profile is also checked and approved individually before the first care. The administration can also create customers and dogs, record trial days and make bookings on behalf of the customer.
We use the account and dog details to assess suitability and safe care, provide care instructions, organize appointments, reach emergency contacts, manage vaccination and documentation status and maintain legal or contractual records. Access within administration is role-related and only to the extent necessary for the respective task.
Guest bookings without a customer account are possible for public dog courses. Contact, address and dog details are directly linked to the booked course series. If the same person later registers with the same email address, the existing data record can be merged to avoid double entry.
6. Bookings, prices and automated processes
Capacity, waiting list and price calculation
The portal checks bookings on the server side based on approved periods, shared capacity, daily and holiday quotas, existing bookings and individual customer or dog approvals. Prices and surcharges are calculated based on the selected service, the date, holidays, overnight stays, payment method and the information stored in the dog profile such as age, gender and neutering status.
If care is fully booked, the portal – if activated by the administration – can offer a binding waiting list, immediate places or the Doggy Deluxe exchange. The waiting list position is determined by the order of receipt and overlap of the requested period. If the entire period becomes available, an entry can automatically be converted into a confirmed booking. The administration can check the processes and intervene manually.
7. Payment methods and Stripe/TWINT
How online payments are processed
Depending on the individual approval, invoice, cash, card or TWINT can be offered. When paying by invoice or cash, no card details are stored in the portal. Forwarding is possible for cards and TWINT Stripe Payments Europe, Limited provided. Stripe receives in particular your name, email address, amount, currency, booking reference, payment method, technical device and security data. Card or account details are processed directly by Stripe or the payment network involved; Doggy Deluxe basically only receives payment status and transaction reference.
Stripe may process data in Ireland, the USA and other countries, among others. For such transfers, Stripe claims to use recognized transfer mechanisms, in particular standard contractual clauses, additional agreements for Switzerland and - where applicable - the Swiss-U.S. Data Privacy Framework. TWINT is used in the intended structure as a payment method within the Stripe checkout.
Online payments are not actually activated in the local test operation. This processing only begins when you select card or TWINT and the live payment service has been technically activated. Further information: Data protection at Stripe and Data protection at TWINT.
8. Invoicing with Bexio
Contacts, invoices and QR payment parts
There is an interface for accounting and later invoicing bexio AG, Alte Jonastrasse 24, 8640 Rapperswil, Switzerland, provided. Only the information required for contact, invoice, invoice items, due date, payment status and legal accounting is transmitted. Dog or course names can be part of the service description if this is necessary for a understandable invoice.
The current local preview does not yet generate a payable Bexio invoice. As soon as the live interface is activated, the transmission takes place on the instructions of Doggy Deluxe. Bexio states that it stores and processes the customer data stored in the bexio software in Switzerland. Further information: Bexio privacy policy.
10. Recipient and foreign disclosure
To whom data can be disclosed
| Recipient | Purpose | Location/possible states |
|---|---|---|
| Doggy Deluxe Team and Eligible Management Accounts | Support, training, customer service, planning and administration | Switzerland |
| Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen | Hosting, database and backup storage and technical protocols | Germany and other contractually agreed infrastructure locations |
| Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona | Business email receiving and sending | Switzerland |
| bexio AG | Contact, invoice and accounting processing | Switzerland |
| Stripe and participating payment networks, when selecting card or TWINT | Payment processing, fraud prevention and refunds | Ireland, USA and other countries used by Stripe |
| Brevo / Sendinblue SAS, with voluntary newsletter registration | Registration form, double opt-in, newsletter dispatch as well as optional delivery, opening and click evaluation | France, EEA and possible processing particularly in the USA and India |
| WhatsApp Ireland Limited and affiliates if WhatsApp is activated and selected | Voluntary booking, waiting list, exchange and service communication | Ireland, USA and other countries according to WhatsApp infrastructure |
| Google Ireland Limited and affiliated companies, after opening Google Maps or Google Reviews | Map, location and rating offering; no automatic connection due to the currently static representation | Ireland, EEA, US and other Google infrastructure locations |
| Unsplash and UNPKG in the current preview | Delivery of an image or an icon library | Canada, USA and possible other infrastructure locations |
| Authorities, courts, insurance companies as well as legal or fiduciary advice | Legal obligations, legal enforcement and defense of claims | Depending on the procedure |
We do not sell personal data. Processors only receive the data necessary for their task and are contractually obliged to ensure data protection and security. When making announcements in countries without adequate legal data protection, we use, where necessary, recognized guarantees such as standard contractual clauses and the supplements necessary for Switzerland or rely on a legal exception.
11. Retention period
How long we store data
We only store personal data for as long as is necessary for the respective purpose, ongoing contracts, security interests or legal obligations. They will then be deleted or anonymized unless there is an obligation or overriding interest in further storage.
- Customer account and dog profile: during the active customer relationship and usually up to 24 months after the last support or course booking; Individual data remains longer if it is part of legally required accounting or invoice documents.
- Bookings, cancellations, payments and billing documents: generally ten years after the end of the relevant financial year.
- Proof of vaccination and care: until they are replaced or are no longer required for support, usually no later than twelve months after the end of the active customer relationship, unless an incident or legal claim requires longer backup.
- Expired waiting list and exchange entries: usually a maximum of twelve months; Processes relevant to billing are stored with the accounting documents.
- Technical security and access protocols: As a rule, a maximum of 90 days, in the case of security incidents until the investigation and any claims have been completed.
- Newsletter: Consent and shipping data until you unsubscribe or as long as they are necessary to prove consent and defend against claims; The operational deletion or blocking in the distribution list is carried out via Brevo.
- WhatsApp communication: as long as it is necessary for the customer relationship, the specific process or legal evidence; Content that is no longer required will be removed in accordance with our deletion concept.
- Static Google reviews: as long as they are current and suitable for displaying our offer or until a legitimate request for correction or removal is made.
- Sessions and one-time links: Session maximum twelve hours, password reset two hours, email confirmation seven days.
- Backups: rolling up to 30 daily saves; Data also disappears from the backups when it is regularly overwritten.
An account deletion request can be made directly in the customer account. Before deletion or anonymization, we check ongoing bookings, open claims, incidents and legal retention requirements.
12. Data Security
How we protect data
We use appropriate technical and organizational measures. This includes, in particular, encrypted transmission in live operation, secure and hashed passwords, time-limited sessions, protection against cross-site request forgery, role-based permissions, server-side release and capacity checks, change logs, access restrictions for documents, verified backups and restore tests.
Despite these measures, no electronic transmission or storage can be guaranteed to be absolutely secure. In the event of a security incident relevant to data protection, we inform the affected persons and the FDPIC to the extent required by law.
13. Data Subject Rights
What rights you have
According to the applicable data protection law, you can in particular request information, correction, deletion, restriction or objection as well as - provided the requirements are met - the release or transfer of your data. You can revoke your consent in the future. Legal retention obligations and overriding legitimate interests may restrict deletion.
In the customer account you can correct profile data, download your data and request account deletion. Please address any other concerns info@doggydeluxe.ch. We may request appropriate proof of identity and generally respond to requests for information within 30 days.
If you do not agree with our processing, you can contact us Federal Data Protection and Information Commissioner (FDPIC) turn. If the GDPR is applicable, you can also lodge a complaint with a responsible European data protection supervisory authority.
14. Changes
Update this statement
We adapt this data protection declaration if the legal situation, providers, functions or data processing change. The version published on this page is the current one. We display significant changes that affect existing customer accounts in the portal or communicate them by email and request further notice if this is necessary.