Legal

# Privacy policy

This policy describes what personal data is processed when you visit this website, when you contact us, and in our business dealings with hotels, tourism boards, and advertisers. The Swiss Federal Act on Data Protection (FADP) applies.

## Controller

sh ventures GmbH, Chamerstrasse 172, 6300 Zug, Switzerland. sh ventures GmbH publishes Secret Stays.

Email: [info@secret-stays.com](mailto:info@secret-stays.com)

## No tracking

This website sets no cookies for analytics or advertising, uses no tracking services and loads no content from third-party servers. Fonts, images, and the logo are served from the same server as the page.

## Technical data when you visit

This website is delivered through Cloudflare, Inc. (USA). When you visit, Cloudflare processes the technically necessary data: IP address, time of the visit, the page requested and the technical information sent by your browser. We use this data to deliver the page, keep the site secure and protect it against attacks.

## Contacting us

Through the contact form you send us your name, your company or organization, your email address, optionally a phone number, and a message. The message is delivered as an email to info@secret-stays.com through Cloudflare and is not stored on the website. If the form cannot send your message, your email app opens instead, and the message goes to the same address as a regular email. You can also write to us directly at info@secret-stays.com.

We use this information to answer your inquiry, to make an offer and to handle any collaboration that follows. There is no newsletter and no mailing list.

## Business contacts

When we approach hotels, tourism boards or companies ourselves, we process the name, position and business contact details of the people responsible. This information comes from public sources or from recommendations. We use it only to contact them about Secret Stays and for any collaboration that follows.

## Disclosure and service providers

We do not sell personal data or pass it on for advertising. To run the website and our email we use service providers who process data on our behalf: Cloudflare, Inc. (USA) to deliver the website and the contact form, and Google (Google Workspace) for our mailbox. Beyond that, we disclose data only where we are legally required to do so.

## Transfers abroad

Cloudflare and Google also process data in the United States. For U.S. companies certified under the Swiss-U.S. Data Privacy Framework, the Swiss Federal Council has found the level of data protection adequate. Where a provider is not certified, the transfer relies on standard contractual clauses recognized by the Federal Data Protection and Information Commissioner.

## Retention

We keep inquiries and related correspondence for as long as necessary to respond to them and for the duration of any business relationship, or for as long as statutory retention periods require. After that the data is deleted.

## Your rights

You can ask what data about you we process, request its correction, deletion or a copy of it, and object to its processing. Please write to us at the address above.

## Changes

We update this policy when the website or the legal requirements change. The version posted here is the one in effect.

Last updated: October 26, 2026. In the event of any discrepancy, the German version prevails.

https://secret-stays.com/en/privacy-policy