Privacy policy

Last update : august 2026

1. Our commitment to data protection

RainbowInn Guesthouse attaches particular importance to protecting the privacy and personal data of its guests, visitors and website users.

This Privacy Policy explains what personal data is collected when using the RainbowInn website, making an enquiry, making a booking or staying at the Guesthouse, as well as the purposes for which this data is processed, how long it is retained and the rights available to the persons concerned.

We endeavour to collect and process only the data necessary for managing our accommodation activities, providing the requested services, complying with our legal obligations, ensuring the security of our systems and sending communications to which the persons concerned have consented.

This Privacy Policy has been drawn up in particular with regard to the Swiss Federal Act on Data Protection (FADP).

2. Data controller

RainbowInn is a brand operated by:

Pink Beach S.A.
Avenue de Tivoli 9
1007 Lausanne
Switzerland

UID: CHE-108.702.649

Pink Beach S.A. is responsible for the processing of personal data carried out in connection with the operation of RainbowInn Guesthouse, except where a third party processes certain data under its own responsibility in accordance with its own legal or contractual obligations.

For any questions regarding the protection of your personal data or to exercise your rights, you may contact us at:

info@pinkbeach.ch

3. Scope

This Privacy Policy applies in particular to personal data processing carried out in connection with:

  • browsing the RainbowInn website;
  • making an enquiry or contacting us;
  • making a booking with RainbowInn;
  • managing a booking;
  • guaranteeing a booking by bank card;
  • your arrival and stay at RainbowInn Guesthouse;
  • invoicing and administrative management;
  • communications before, during and after your stay;
  • the use of services provided to guests, including Wi-Fi access;
  • sending commercial communications where these have been accepted by the person concerned.

RainbowInn manages its bookings directly and does not currently receive bookings from external booking platforms such as Booking.com, Expedia or Airbnb.

4. What personal data do we collect?

4.1 Identification and contact details

When making a booking or as part of our relationship with our guests, we may collect:

  • title;
  • surname;
  • first name;
  • address;
  • postcode;
  • city;
  • country;
  • telephone number;
  • email address.

When several people are staying together, the surname and first name of an accompanying guest may also be recorded.

4.2 Booking and stay information

We process the information necessary to organise and manage your stay, including:

  • arrival and departure dates;
  • number of guests;
  • room booked;
  • information relating to the payment method;
  • specific requests or comments communicated when booking or during the stay;
  • information required to reserve a parking space, including whether the vehicle is standard-sized or oversized;
  • communications with RainbowInn before, during or after your stay.

We ask that you do not provide, in free-text comment fields, personal information that is not necessary for processing your booking or request.

4.3 Bank card details used as a guarantee

RainbowInn may request bank card details in order to guarantee a booking.

The information concerned is:

  • cardholder's name;
  • card number;
  • expiry date.

This information is recorded in RainbowInn's management system exclusively for the purpose of guaranteeing the booking and managing the stay.

Bank card details are not intended to be retained on a long-term basis. They are deleted after the guest's check-out and, at the latest, within one week following check-out.

Given the particularly confidential nature of this information, access is restricted to authorised persons who require it in the course of their duties.

4.4 Identity documents and arrival formalities

This section will be completed once RainbowInn's procedure for guest arrivals has been confirmed.

In particular, it will specify whether an identity card or passport must be presented, what information is recorded, whether a copy of the document is made and, where applicable, how long this information is retained.

5. When do we collect your data?

Your personal data may be collected in particular:

  • when you make a booking;
  • when you contact us by telephone or email;
  • when you complete a form on the website;
  • when you provide the information required to guarantee your booking;
  • upon your arrival and during your stay;
  • when you make a specific request;
  • when services are invoiced or paid for;
  • when you send us a question, comment or complaint;
  • when you agree to receive commercial information or newsletters;
  • when you use the website, where certain technical information necessary for its operation is processed automatically.

6. Why do we use your data?

6.1 Managing your booking and stay

We use the necessary data in order to:

  • record and confirm your booking;
  • check availability;
  • allocate and prepare the room booked;
  • organise your arrival and departure;
  • communicate with you regarding your booking;
  • respond to specific requests;
  • manage parking spaces where applicable;
  • handle the administrative aspects of your stay;
  • prepare the necessary documents and invoices;
  • handle any requests or complaints.

6.2 Guaranteeing your booking

Bank card details requested when making a booking are used to provide the guarantee required under RainbowInn's booking terms and conditions.

They are retained for a deliberately limited period and deleted after the stay in accordance with the arrangements described in this Privacy Policy.

6.3 Complying with our legal and administrative obligations

Certain data may be retained or processed to enable Pink Beach S.A. to comply with its applicable legal, accounting, tax, administrative or other obligations.

6.4 Communicating with our guests

We use the contact details provided to communicate information necessary for the booking and stay and to respond to requests addressed to us.

Depending on the services in place, communications may also be sent after the stay, particularly as part of customer relationship follow-up or to request feedback on the guest experience.

6.5 Newsletters, offers and commercial communications

Pink Beach S.A. operates both RainbowInn and Pink Beach Club.

Where you have agreed to receive commercial communications, your email address may be used by Pink Beach S.A., in particular to send newsletters, information, news or offers relating to its activities, including those offered under the Pink Beach Club name.

The use of your email address for commercial purposes must be distinguished from communications strictly necessary for managing your booking or stay.

Where a commercial communication is based on your consent, you may withdraw that consent and unsubscribe from the relevant communications.

Refusing commercial communications does not prevent you from making a booking with RainbowInn and does not affect communications necessary for managing your booking.

7. How long do we retain your data?

RainbowInn and Pink Beach S.A. endeavour to retain personal data only for as long as necessary for the purposes for which it is processed and to comply with applicable obligations.

The retention periods currently applied or planned include:

Booking records: up to 10 years.

Invoicing documents: up to 10 years, subject to applicable legal obligations.

Data required for PMS management and customer relations: may be retained for as long as necessary for managing the commercial activity, subject to applicable data protection principles and obligations.

Professional correspondence and emails: may be retained as part of the management of the commercial activity, particularly where necessary for monitoring a customer relationship, booking, administrative obligation or potential dispute.

Bank card details used as a guarantee: until check-out, followed by permanent deletion after check-out and no later than one week thereafter.

Where data is no longer required for the purposes for which it was collected and there is no legal obligation or legitimate reason requiring its retention, it must be deleted or anonymised.

8. Who may access your data?

Personal data is accessible only to persons who require it to perform their duties in connection with the operation of RainbowInn and Pink Beach S.A.

Depending on the nature of the processing, certain data may also be accessible to technical service providers operating in areas such as:

  • IT hosting;
  • technical maintenance;
  • email services;
  • telecommunications;
  • Wi-Fi services;
  • services necessary for the operation or security of the website and management system.

These service providers are intended to receive only the information necessary to perform their services.

Where necessary, certain information may also be disclosed to competent authorities or bodies where required by law or where such disclosure is necessary for the establishment, exercise or defence of legal claims.

RainbowInn does not currently transmit booking data to external booking platforms such as Booking.com, Expedia or Airbnb.

9. RainbowInn hosting and management system

RainbowInn uses its own management system to administer, among other things, rooms, bookings and information necessary for operating the Guesthouse.

Technical and organisational measures are implemented to protect personal data against unauthorised access, loss, alteration, disclosure or any other unauthorised use.

Access rights to administrative functions and data are restricted according to the needs of authorised persons.

Data requiring enhanced protection, including information used to guarantee a booking, is subject to security measures appropriate to its nature.

10. Wi-Fi access

RainbowInn provides Wi-Fi access to its guests.

The Wi-Fi service and any technical connection logs are managed by the service provider.

RainbowInn does not intend to use data relating to the content of communications made by users of the Wi-Fi network.

The precise arrangements concerning the processing of technical data by the provider may be added once the provider's identity and terms have been confirmed.

11. Data relating to use of the website

When visiting rainbowinn.ch, certain technical information may be processed automatically in order to enable the website to be displayed, operated and secured.

Depending on the technical configuration of the service, this information may include:

  • IP address;
  • date and time of access;
  • page or resource requested;
  • information relating to the browser and device used;
  • technical data necessary for the security and diagnosis of the service.

This information must not be used for purposes incompatible with those stated in this Privacy Policy.

12. Cookies and similar technologies

The RainbowInn website may use cookies or similar technologies necessary for its operation.

Strictly necessary cookies may be used in particular to:

  • ensure the technical operation of the website;
  • maintain a session;
  • ensure the security of forms and interactions;
  • retain certain technical choices or preferences necessary for browsing;
  • remember, where necessary, privacy or cookie choices.

If audience measurement tools, content from third-party services, advertising technologies or other non-essential trackers are subsequently integrated into the website, this Privacy Policy and the consent management mechanism will be adapted accordingly.

RainbowInn intends to limit the use of trackers to those genuinely useful for the operation and improvement of its services.

13. Security and confidentiality

Pink Beach S.A. takes technical and organisational measures intended to protect personal data processed in connection with RainbowInn.

These measures are intended in particular to restrict access to authorised persons, protect systems against unauthorised access and reduce the risks of loss, disclosure, alteration or misuse of information.

As no computer system can guarantee absolute security, protective measures are adapted according to the nature of the data, identified risks and developments in available technical means.

14. Your rights

In accordance with applicable data protection legislation, you may request information regarding the processing of your personal data.

Depending on the circumstances and within the limits provided by law, you may in particular request:

  • whether Pink Beach S.A. processes personal data concerning you;
  • access to personal data concerning you;
  • correction of inaccurate data;
  • deletion of certain data where its retention is no longer justified;
  • restriction or cessation of certain processing where the applicable conditions are met;
  • withdrawal of consent previously given, particularly for commercial communications.

However, certain data cannot be deleted immediately where its retention remains necessary to comply with a legal obligation, perform a contract, recover a debt, or establish, exercise or defend legal claims.

To exercise your rights or ask a question regarding the processing of your personal data, you may contact:

Pink Beach S.A. – RainbowInn Guesthouse
Avenue de Tivoli 9
1007 Lausanne
Switzerland

Email: info@pinkbeach.ch

In order to protect your data against disclosure to an unauthorised person, reasonable verification of your identity may be requested where necessary.

15. Changes to this Privacy Policy

This Privacy Policy may be amended when the services offered by RainbowInn change, when new personal data processing activities are introduced or when applicable legal or regulatory requirements change.

The version published on the website constitutes the currently applicable version.

The date of the latest update appears at the beginning of the document.

16. Contact

For any questions concerning this Privacy Policy or the processing of your personal data:

Pink Beach S.A.
RainbowInn Guesthouse
Avenue de Tivoli 9
1007 Lausanne
Switzerland

UID: CHE-108.702.649
Email: info@pinkbeach.ch