When you use the Service, we may collect personal data relating to identifiable individuals. This may include names, business contact details, email addresses, telephone numbers, account credentials and information relating to event guests uploaded by our customers. We also collect technical information that your browser automatically transmits when accessing the Service. This may include your IP address, browser type, device information, date and time of access and accessed pages (“Log Data”). GuestDesk does not use tracking technologies for advertising or behavioural profiling purposes.

In relation to personal data uploaded by customers (e.g., guest lists), the customer acts as data controller and GuestDesk acts as data processor. GuestDesk processes such data solely for the purpose of providing and maintaining the Service and in accordance with the customer’s instructions. In relation to personal data relating to account holders and website visitors, GuestDesk acts as data controller.

Personal data is processed for the following purposes:

• Providing and operating the Service
• Managing user accounts
• Enabling event guest administration
• Ensuring system security and integrity
• Preventing misuse and fraud
• Complying with legal obligations

GuestDesk does not sell personal data and does not use personal data for advertising purposes.

Processing of personal data is carried out in accordance with the Swiss Federal Act on Data Protection (FADP 2023). Processing is based on contractual necessity, legitimate business interests, or legal obligations, as applicable.

The Service is hosted on secure infrastructure located in Switzerland and/or the European Union. GuestDesk may engage trusted third-party service providers for hosting and infrastructure services. Such providers are contractually bound to process data only in accordance with applicable data protection laws and appropriate security standards.

GuestDesk implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration. However, no method of electronic transmission or storage is entirely secure. Absolute security cannot be guaranteed.

Personal data is stored for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations. Upon termination of an account, personal data may be deleted after a reasonable retention period, unless statutory retention requirements apply.

The GuestDesk website and web application use technically necessary cookies to ensure the proper functioning of the Service. Cookies are small text files stored on your device. GuestDesk uses session cookies for authentication, security and system functionality. No tracking, marketing or profiling cookies are used. Session cookies are automatically deleted when the browser is closed. Disabling cookies may limit certain features of the Service.

Under applicable Swiss data protection law, individuals have the right to request information about their personal data, request correction of inaccurate data, request deletion where legally permissible and request restriction of processing. Requests may be submitted using the contact details below.

In the event of a merger, acquisition or restructuring, personal data may be transferred as part of the business assets. In such cases, appropriate safeguards will be implemented.

GuestDesk reserves the right to update this Privacy Policy from time to time. The current version will always be available on the website.

If you have any questions regarding this Privacy Policy or data protection matters, you may contact:

GuestDesk
Bodenhof-Terrasse 89
6005 Luzern
Switzerland
hello@guestdesk.ch

Last updated: 24 February 2026