Privacy Policy
How we handle your personal data, and the rights you have under data protection law.
Last updated: July 31, 2026
Who is responsible
The controller responsible for data processing on this website is Marlon Böhland, Staffelackerstrasse 23, CH-8953 Dietikon, Switzerland. You can contact us through the contact form on this site.
As a Swiss-based operator, we process personal data under the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to visitors from the EU/EEA, we honor its requirements as well.
Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you browse the site, Vercel processes technical data on our behalf (such as your IP address, browser type, and the pages you request) as far as necessary to deliver the pages and keep the service secure. This is based on our legitimate interest in operating a functional, secure website (Art. 6(1)(f) GDPR).
Vercel processes this data in the USA and other countries. Transfers are safeguarded by Vercel’s certification under the EU–U.S. and Swiss–U.S. Data Privacy Framework and by EU standard contractual clauses.
Contact form
When you send us a message through the contact form, we process the name, email address, subject, and message you provide, so that we can read and respond to your inquiry (Art. 6(1)(b) and (f) GDPR).
To protect the form against automated abuse, we store a one-way, salted hash of your IP address together with a timestamp — we do not store your raw IP address for this purpose. This spam-prevention processing rests on our legitimate interest in keeping the form usable (Art. 6(1)(f) GDPR).
We keep contact messages only as long as needed to process your request and to meet any legal retention obligations, then delete them.
Cookies and tracking
This site currently sets no non-essential cookies and runs no third-party analytics or advertising trackers. If we introduce an analytics service in the future, we will ask for your consent via a cookie banner before it loads, and describe the service here.
The Vonda iOS app
The Vonda app for iPhone, iPad, and Apple silicon Macs does not collect or store any personal data on our servers. Everything you create in the app — trips, packing lists, bucket lists — is stored locally on your device and, if you enable iCloud synchronization, in your personal iCloud account. We have no access to your iCloud data. The app and this website do not share what you save.
Subscriptions are processed and managed through Apple's App Store; billing and payment information is handled entirely by Apple. Apple provides us with limited, aggregated information about subscriptions that contains no personal identifiers and no payment details.
The app uses Apple Maps to display places and trips on a map. When map content loads, Apple processes usage data under its own privacy policy (www.apple.com/legal/privacy).
To promote the app in the App Store, we use Apple Search Ads, which attributes downloads using Apple's advertising identifier. You can decline the app's tracking permission request or reset the identifier in your iOS settings at any time; details are described in Apple's privacy notice for Search Ads (searchads.apple.com/privacy).
The app is intended for users aged 14 and over. We do not knowingly collect data from children; minors should use the app with a legal guardian's permission. Questions about privacy in the app? Reach us through the contact form on this site.
Your rights
Under the GDPR (and, in comparable form, the Swiss FADP) you have the right to:
- access the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- restrict processing of your data (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on our legitimate interests (Art. 21)
- lodge a complaint with a supervisory authority (Art. 77)
How to exercise your rights
To exercise any of these rights, contact us through the contact form on this site. We will respond within the periods required by law.
You may also lodge a complaint with a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU/EEA, the data protection authority of your member state.