Controller and contact
The controller is Sevtron GmbH, operator of the Freihof Apartments brand, Vorstadt 15, 5200 Brugg, represented by its management.
For privacy questions, access requests, corrections, or deletion requests, contact info@freihofapartments.ch or call +41 79 306 22 08.
Data categories
We process contact details, booking details, apartment preferences, invoice and payment metadata, guest portal messages, check-in information, damage reports, uploaded documents, technical logs, consent records, and communication logs.
Payment card details are entered with Stripe Checkout and are not stored by Freihof Apartments. We store booking and payment status information needed to run the stay and accounting process.
Purposes and legal bases
Booking, payment, check-in, guest support, invoicing, housekeeping, damage handling, and pre-contract inquiries are processed to perform a contract or take steps before a contract.
Accounting records, tax retention, security logs, fraud prevention, and legally required business records are processed to meet legal obligations or legitimate operational interests.
Optional maps, embedded media, analytics, and marketing technologies are loaded only after consent. You can withdraw consent at any time through the cookie settings link in the footer.
Cookies and third-party services
Strictly necessary cookies support login sessions, CSRF protection, locale routing, payment security, and storage of your consent choices.
Functional cookies and embeds cover Google Maps and optional media such as tours or videos. Analytics and marketing categories are off by default and are not loaded before consent.
If your browser sends Global Privacy Control or a comparable opt-out signal, analytics and marketing stay disabled.
Processors and recipients
Operational processors may include Stripe for payment checkout, Resend for transactional email, S3-compatible storage for private uploads, hosting and database providers, Sentry for error and stability monitoring, and Google where you choose Google OAuth or enable Google Maps.
Data is shared only where needed for the requested service, security, accounting, or legal compliance.
Retention
Booking, invoice, payment, and accounting records are retained for statutory accounting and tax periods. Guest messages, damage records, upload audit logs, and communication logs are kept while needed for stay support, dispute handling, security, and operational accountability.
Consent records are stored with timestamp, version, region signal, GPC state, IP hash, and preference snapshot so we can demonstrate the choice recorded at that time.
Your rights
You may request access, correction, deletion, restriction, portability, or objection where the legal requirements apply. You may also withdraw consent for optional cookies and embeds at any time.
You may lodge a complaint with a competent supervisory authority if you believe your data is processed unlawfully.