Data controller
Nomadéa AG (in formation), c/o Cabinet Nigon, Glockengasse 18, 4001 Basel (Switzerland), is responsible for the data processed by the website www.mynomadea.com. Booking data is also processed by SAS TUMU ORA (French Polynesia), which operates the destination, to organise and provide your stay. For any question or to exercise your rights: contact@mynomadea.com.
We apply the Swiss Federal Act on Data Protection (FADP) and, for people located in the European Union, the General Data Protection Regulation (GDPR).
Data we process
| Situation | Data | Why | Basis |
|---|---|---|---|
| Booking a stay | Name, email, phone, country, dates, room, number of guests, meal plan, message, accessibility needs | Set up and carry out the booking, send you confirmations and payment requests, prepare your arrival | Contract |
| Stay preferences | Allergies, diet, reduced-mobility needs | Adapt your stay; this information is used for nothing else | Your explicit consent, which you can withdraw at any time |
| Payment by bank transfer | Amounts, dates, transfer references, account holder’s name | Match payments, keep the accounts | Contract, legal obligation |
| Customer account | Email, password (encrypted), language, booking history | Let you follow your bookings | Contract |
| Contact and quotes | Name, email, phone, message | Answer your request | Legitimate interest |
| Waiting list, newsletter | Email, language, destination you are interested in | Tell you when bookings open and how the sites are coming along | Consent |
| Investor area | Identity, contact details, confidentiality agreement, documents read, investments, identity document for a subscription | Give access to the documents, manage investor relations, meet our obligations | Contract, legal obligation |
| Browsing | IP address, technical logs; visit statistics if you accept them | Site security; audience measurement | Legitimate interest; consent for statistics |
We never receive your card details: payments are made by bank transfer only.
Who has access
- The Nomadéa team and the team of the destination where you stay, for what concerns your stay.
- Infomaniak Network SA (Geneva, Switzerland), which hosts the site, the database and our email.
- Google Ireland Ltd (Google Analytics), only if you accept visit statistics; data may then be transferred to the United States under the Data Privacy Framework.
- Public authorities, where the law requires it (for example tourist tax or accounting obligations).
Your data is neither sold nor rented.
How long we keep it
- Bookings and payments: 10 years, the period of accounting obligations.
- Stay preferences (allergies, accessibility): deleted 12 months after your last stay.
- Customer account: as long as the account exists. You can ask for it to be deleted at any time (bookings are kept for the accounting period).
- Contact requests: 3 years after the last exchange.
- Waiting list and newsletter: until you unsubscribe.
- Identity documents for investor subscriptions: 2 years, stored encrypted.
Cookies and local storage
The site uses a session cookie and a security token for forms, which it needs to work. Your language, theme (light or dark) and cookie choice are kept in your browser.
Visit statistics (Google Analytics) are only loaded if you accept them in the banner. You can change your mind at any time with the “Cookies” link in the footer.
Your rights
You can ask to access, correct, erase, restrict or receive your data, object to its processing and withdraw your consent at any time by writing to contact@mynomadea.com. We answer within 30 days.
You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the data protection authority of your country of residence.
Security
Exchanges with the site are encrypted (HTTPS), passwords are stored encrypted and sensitive documents (identity documents, signed agreements) are encrypted on the server. Access to data is limited to the people who need it.