Privacy Statement

BnB Switzerland GmbH, Sonnenweg 3, CH-4144 Arlesheim (CHE-112.495.235), represented by Dorothea Maria Provoost-Meier (Partner and Managing Director), operates the bnb.ch website, and is therefore responsible for ensuring that all data processing complies with Swiss data protection legislation.

We take data protection seriously and have the corresponding security measures in place. We naturally comply with the provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), and the Telecommunications Act (TCA). Where applicable we also abide by other provisions under data protection legislation, specifically the European Union's General Data Protection Regulation (‘GDPR’).

We ask you to read and to note the following information so that you know what personal data we collect from you, and what we use that data for.

1. What personal data is collected, processed. and used, and for what purpose?

1.1 when visiting www.bnb.ch

When you visit our website, our servers store each access temporarily in a log file. The following information is stored in this case:

This data is collected and processed to enable you to use our website (i.e., to establish a connection), to ensure ongoing system security and stability, to optimize our web presence, and for internal statistical purposes. This constitutes our legitimate interest in processing your data, as described in Article 6, paragraph 1, letter f GDPR. The IP address is used specifically to record the country in which the user is presently located and to pre-set the website language accordingly. In the event of an attack on the www.bnb.ch network infrastructure, the IP address is also analyzed for statistical purposes. In addition, when you visit our website we use both cookies and tracking tools. Further information on these can be found in Sections 2, 3 and 4 of this Privacy Statement.

Our platform also uses third-party services from Leaflet map materials, operated by © OpenStreetMap. The use of these services is subject to their own privacy policies.

1.2 When you use our contact form

You can use a contact form to get in touch with us. This is intended primarily for partner companies. You must give the following information:

Mandatory entries are marked. If this information is not provided we may be unable to offer our services in full. The provision of other information is optional and has no effect on the use of our website.

We use this data only to respond personally and as best we can to your inquiry. Processing your contact inquiry constitutes our legitimate interest, as described in Article 6 paragraph 1 letter f GDPR. You may object at any time to the processing of this data. For contact details please refer to Section 11.

1.3 When you subscribe to our newsletter

Via the website you can choose to subscribe to our newsletter. To do this, you need to register. When registering, you will have to give the following information:

We need this information to process your data. By registering, you give us your permission to process this data so that we can regularly send the newsletter to the email address you gave. You also allow us to conduct statistical analyses of user behavior, and to optimize the newsletter itself. This permission constitutes our legitimate interest in processing your email address, as described in Article 6, paragraph 1 letter a GDPR. We are entitled to engage third parties to handle the technical execution of marketing measures, and to pass your data on to them for this purpose (see Section 7). At the end of each newsletter there is a link that you can use at any time to cancel your subscription. We expressly draw your attention to the data analyses conducted as part of newsletter distribution (see Section 6).

1.4 When you inquire or book with a third party, whether you create a guest profile or not

Our website gives you several options to make inquiries or final bookings either with or without a guest profile. You will be notified accordingly that your inquiry or booking will be forwarded to our hosts. A variety of data may be collected here, depending on the service in question. Examples include:

Mandatory entries are marked. If this information is not provided we may be unable to offer our booking services in full. The provision of other information is optional and has no effect on the use of our website.

The data you enter is generally forwarded on directly. The data policy of the provider concerned then applies to the further processing of this data, which is lawful only if it is necessary to fulfil a contract, as described in Article 6, paragraph 1 letter b GDPR.  

as described in Article 6, paragraph 1 letter b GDPR.
Our website and applications are not aimed at children under the age of 16, and we deliberately do not collect any personal information about anyone younger than 16. In the interests of simplicity and the provision of a detailed quote, the host can be notified of accompanying children and their ages at the end of the booking process. If you do not wish this data to be transmitted, please contact the host by telephone instead. If you believe that we are processing personal data about a child inappropriately, please contact us because this is something that we take very seriously.

1.5 When you create a host profile with or without a special offer

Our website enables you to register accommodation. When doing so, you will have to give the following information:

Mandatory entries are marked. If this information is not provided we may be unable to offer our booking services in full. You may de-register at any time. We may ask you to provide further information to permit the use of certain functions or to make your accommodation easier to find.

1.6 When you order from our shop

Our website offers several ways of ordering products from us. You will have to give the following information as part of the ordering process:

Mandatory entries are marked. If you do not provide this information we may be unable to offer our services in full. We use this data only to respond personally and as best we can to your order. Depending on the product in question, the data you enter will be forwarded on directly to third-party providers. These products are marked accordingly.

1.7 When you use our payment service

The office in charge of payment services must collect the following information to enable us duly to fulfil the contract between us and to comply with applicable law, such as the regulations to combat money-laundering. If you do not provide these details it will not be possible to use our payment services.

2. Use of Your Data for Marketing Purposes

2.1 Creation of pseudonymized usage profiles

To offer you personalized services and information on our website (known as on-site targeting), we use and analyze the data that we collect about you when you visit the website. When processing data in this way we may also use cookies (see Section 3). The analysis of your user behavior may also result be used to create a usage profile. This is based on pseudonymized personal data only. We never collate non-pseudonymized data to form these usage profiles.

To permit personalized marketing on social media, our website incorporates remarketing pixels from Facebook and Twitter. If you have an account on one of the social networks that is connected in this way, and you are logged in to it when you visit our site, this pixel links your visit with your account. To prevent this connection being made, log out of the account in question before visiting our site. You can change further marketing and advertising-related settings under your user profiles for the social network in question. The creation of pseudonymized user profiles for marketing and analysis purposes constitutes our legitimate interest, as described in Article 6, paragraph 1 letter f GDPR. This applies to all of the data processing procedures described under Section 2. Direct marketing and the analysis of how our website is used constitute the legitimate interest here.

2.2 Retargeting

We use retargeting technologies on our site. These analyze your user behavior on our website so that we can offer you personalized advertising on partner websites after you have left our own site. Your user behavior is recorded in pseudonymized form. Most retargeting technologies use cookies (see Section 3).

This website uses Google Ads, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’) to show advertising that is based on the use of websites visited previously. The information about your visits to these websites (including your IP address) that is generated by the cookie is transmitted to a Google server in the USA and stored there. Please refer to Section 9 for additional information on the transfer of personal data to the USA.

Google will use this information to evaluate your use of the website in determining the advertising that you will be shown, to compile reports on website activity and notifications for the website operator, and to provide further services relating to website and internet use. Google will also pass this information on to third parties if required by law or if such third parties process this data on behalf of Google.

We also use Google Tag Manager to manage usage-based advertising services. The Tool Tag Manager itself is a cookie-free domain that does not collect any personal data. Rather, it triggers other tags that may collect data independently (see above). If you have deactivated services at domain or cookie level, all of the tracking tags implemented using Google Tag Manager will also remain deactivated.

You can prevent retargeting at any time by rejecting or switching off the relevant cookies in the menu bar of your web browser (see section 3). In addition, you can prevent retargeting via the website of the Digital Advertising Alliance at optout.aboutads.info request an opt-out for the aforementioned additional advertising and retargeting tools.

  3. Cookies

Cookies are information files that your web browser stores automatically on your computer's hard drive when you visit our website. Cookies do not damage the hard drive, neither do they transmit personal data about the user to us. We use cookies to tailor the information, offers and advertising you see more closely to your individual interests. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or so that you are always notified when you get a new cookie. If you deactivate cookies, you may find that you are not able to use some of the functions of our website.

4. Tracking tools

We use a variety of tracking tools on our website. These monitor how you move through the site. We use this information to design the website around user needs and to optimize it continually. To do this, we use pseudonymized usage profiles and cookies.

5. Social Media Plugins

The social media plugins described below are used on the website. Their default setting is deactivated, so they do not transmit any data. You activate these plugins by clicking on the relevant social media button. When they are activated, your browser establishes a direct connection with the servers of the social networks in question as soon as you call up one of our webpages. The content of the plugin is transmitted by the social network directly to your browser and embedded by it into the website. Plugins can be deactivated again at a click. More information can be found in Facebook’s individual data policies.

5.1 Social media plugins from Facebook

Our website uses Facebook social plugins to make our web presence more personal. To do this, we use the LIKE and SHARE buttons. This is a service from the United States-based Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

By embedding the plugins, Facebook receives the information that your browser has retrieved a particular page on our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can link your visit to our website directly to your Facebook account. If you interact with the plugins, by clicking or tapping the LIKE or SHARE button for example, this information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends.


Facebook may use this information for marketing and market research purposes and to design Facebook pages in accordance with user needs. To do this, Facebook creates usage, interests, and personal network profiles, for example to evaluate your use of our website in determining the advertising that you will be shown on Facebook, to inform other Facebook users of your activity on our website, and to provide other services associated with the use of Facebook.

If you do not want Facebook to associate the data collected when you visit our website with your Facebook account, you must log out of Facebook before visiting our site. Please refer to the Facebook data policy statements for information about the purpose and scope of data collection, the further processing and use of data by Facebook, your rights in this regard, and your settings options to protect your privacy.

6. Evaluation of Newsletter Usage

We use third-party email marketing services to distribute our newsletter. The newsletter may contain technical services that allow us, for example, to see whether the emails containing our newsletter are actually opened. They can also be used to track and analyze the clicks of newsletter recipients. We use this data for statistical purposes and to optimize the content and structure of our newsletter. This allows us to tailor the information and offers in the newsletter more closely to the individual interests of the recipients concerned. To prevent tracking within the newsletter, please adjust your email settings so that no HTML is shown in your messages.

7. Text Message Service

By activating the text message (SMS) service, you expressly authorize BnB Switzerland to use automated or non-automated dialing facility to send text messages to the associated cellphone number. In collaboration with a messaging service provider, BnB Switzerland will make a reasonable effort to deliver automated text messages relating to booking inquiries and immediate bookings to the number that you provide via a compatible mobile telecoms provider. BnB Switzerland, the mobile telecoms provider and the messaging service provider bear no liability for messages that are not delivered or delivered late. This service is offered exclusively to hosts and may be deactivated at any time. The systems are located at data centers in Zurich, Switzerland. Please refer to the privacy notices of F24 Schweiz AG for information on the scope and purpose of data collection, and the further processing and use of that data.

8. Forwarding of Data to Third Parties

We pass on your personal data only if you have expressly agreed to it being forwarded, we are under a statutory obligation to do so, or it is necessary to assert our rights, specifically to assert claims arising from the contractual relationship between you and BnB Switzerland.

We also pass your data on to third parties if this is necessary in the context of your use of the website to provide services requested by you and to analyze your user behavior. Furthermore, data may be transmitted outside Switzerland if necessary for the purposes set out in clause 1. Where the website contains links to third-party websites, once you click on that link BnB Switzerland no longer has any control over the collection, processing, storage, or use of personal data by such third parties, and accepts no responsibility in this regard.

9. Notice on the Transmission of Data to the USA

In the interests of completeness, we draw the attention of users resident or registered in Switzerland to the fact that, under US legislation, the US authorities may conduct surveillance operations under which it may generally store all personal data forwarded from Switzerland to the USA. Data is held without distinction, limitation, or exception based on the objective of that surveillance, and without any objective criterion that would allow the US authorities’ access to that data and its later usage to be restricted to very specific, strictly delimited purposes that would justify the intervention in question. We also draw your attention to the absence in the USA of any legal remedy for affected individuals in Switzerland that would allow them access to the data in question and to have it corrected or deleted. There is no effective judicial protection against the general access rights of the US authorities.

We draw your attention explicitly to this legal and practical situation so that you are able to make an informed decision on your consent to the use of your data.

We also draw the attention of users resident in EU member states to the fact that the European Union does not recognize the USA as offering an adequate level of data protection, one of the reasons being the issues referred to in this Section. Where we have explained in this Privacy Statement that data recipients such as Google and Facebook have their registered offices in the USA, we will ensure either by means of contractual arrangements with these companies or by guaranteeing their certification under the EU-US Privacy Shield that our partners protect your data appropriately.

10. Data Security

We employ suitable technical and organizational security measures to protect the personal data that is stored with us against manipulation, full or partial loss, and unauthorized access by third parties. Our security is being improved continually as the corresponding technology develops. You should always keep your payment details confidential and close the browser window as soon as you have completed a booking or order on our website. This is particularly important if you share the computer with other users. We also take internal data protection very seriously. We require our staff and the service providers we engage to enter into a confidentiality undertaking and to comply with the provisions of data protection law.

11. Your Rights

You have the right, upon request, to information about the personal data that we hold about you. This information must be given free of charge. You also have the right to have incorrect data corrected and the right to have your personal data deleted unless there is a statutory requirement to retain that information, or other grounds that permit us to process that data. Under Articles 18 and 21 GDPR, you have the right to request that data processing be restricted, and to object to it entirely.
Furthermore, Article 20 GDPR entitles you to receive, in a commonly used format, the personal data concerning you that you provided to us, and to have that data transmitted by us directly to a third party of your choice. This is known as the right to data portability.
You can reach us in connection with the above via the admin@bnb.ch email address. We are permitted to exercise our discretion in requiring you to prove your identity before we process your requests. You may also issue us with instructions notifying us of what should happen to your data after your death.

If you are resident in an EU state, you have the right to complain at any time to a data protection authority.

12. Data Storage

We store personal data only for as long as is necessary

We hold contractual data for a longer period because it is subject to statutory retention requirements that derive from accounting, reporting, and tax regulations. These regulations state that business communications, contracts and posting vouchers must be retained for up to ten years, or for up to five years in the case of users resident in France. Where it is no longer required to provide services for you, this data is sealed. This means that it may be used exclusively for accounting, reporting, and tax purposes.

General Points

This page was last updated on 31 August 2021. If you have any questions or comments about our legal notices or about data privacy, please contact us at admin@bnb.ch.

Language selection
Share