Privacy
Privacypolicy.
What this website does with your data, based on a technical check of the site. In short: no cookies, nothing stored in your browser, no analytics, no tracking, no forms, and nothing loaded from other companies.
Last updated 27 September 2026, after a technical audit of every page.
Who is responsible
Basel Notes (baselnotes.ch) is a local guide to Basel. It is run by Rubén Garzón, who also hosts Bright Studio, a holiday apartment in Basel Old Town that is booked through Airbnb.
Responsible for data processing: Rubén Garzón
Postal address: Landskronweg 17, 4107 Ettingen, Switzerland
Email: info@baselnotes.ch
When you visit a page
To show you a page, your browser sends a request to the server that hosts this website. Like any request on the internet, it contains technical information: your IP address, the date and time, the page requested and details your browser sends automatically, such as browser type and language. This is needed to deliver the page and to keep the server secure.
Hosting (Cloudflare)
This website is hosted by Cloudflare, Inc. (USA) and delivered through Cloudflare’s global network. Every page request passes through that network. Cloudflare processes the technical data of the request on our behalf, as a data processor: for example your IP address, the date and time, the page requested and information your browser sends automatically, such as browser type. Cloudflare uses this data to deliver the website and to protect it against attacks and abuse.
Because the network is global, a request may be handled in a data centre outside Switzerland. According to Cloudflare, it stores personal data primarily in the United States and the European Economic Area. For transfers to the United States, Cloudflare is certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework; it also uses standard contractual clauses.
Cloudflare does not publish one fixed retention period for this data: it keeps it for as long as its purpose and legal obligations require. We have not switched on any additional request logging or analytics for this website. In some situations, for example when a security check is shown, Cloudflare can set a strictly necessary security cookie.
More information: Cloudflare privacy policy, Cloudflare data processing addendum and Cloudflare cookies.
Links to other websites
The booking buttons open our listing on Airbnb. Other links lead to official sources such as Basel Tourism, BVB and Messe Basel, and the photo credits link to Unsplash and Pexels. These websites are only contacted if you click a link; from then on, their own privacy policies apply and, like any website, they receive your IP address and browser details.
We have set the site up so that it does not pass on the address of the page you came from: every link to another website carries the noreferrer attribute, and the site asks browsers to send this information only within this website (Referrer-Policy: same-origin). Current browsers follow these instructions, but we cannot guarantee how every browser, extension or setting behaves.
Bookings
This website has no booking system, forms or payment functions. Availability, bookings, payments and messages about a stay are handled entirely by Airbnb, under Airbnb’s privacy policy. When you book, Airbnb shares with us, as your hosts, the details needed for your stay.
If you write to us
If you write to us at info@baselnotes.ch, we use your message and contact details only to reply, and keep them only as long as that requires.
Your rights
Under the Swiss Federal Act on Data Protection (FADP) you have the following rights, within the limits set by law:
- Access: you can ask whether we process personal data about you and, if we do, receive information about it.
- Correction: you can have incorrect personal data corrected.
- Deletion and objection: you can ask us to delete your data or object to its processing. These rights are not absolute: for example, we may not delete data that the law requires us to keep.
- Data portability: where the legal conditions are met, you can receive personal data you have given us in a common electronic format.
Please send your request to the privacy contact above first.
If you believe we are not complying with data protection law, you can report this to the Federal Data Protection and Information Commissioner (FDPIC). The FDPIC reviews how controllers handle data and can order corrections, but it does not enforce individual claims, and the person making the report does not become a party to its procedure. To enforce your own rights, for example a request for access, you can go to the Swiss civil courts.
Where the EU General Data Protection Regulation (GDPR) applies to our processing of your data (see Applicable law), you also have the rights it grants, including the right to lodge a complaint with a data protection supervisory authority.
Applicable law
The controller is established in Switzerland, and this website is operated from Switzerland. It is therefore subject to the Swiss Federal Act on Data Protection (FADP).
The EU General Data Protection Regulation (GDPR) does not apply merely because people in the EU can open this website. For a controller established outside the EU, it applies only to processing related to offering goods or services to people who are in the EU, or to monitoring their behaviour there (Article 3(2) GDPR).
This website does not monitor visitors: there is no analytics, tracking or profiling. Whether offering the studio to guests from EU countries brings any of our processing within the GDPR depends on the circumstances of each case. Where it does, the GDPR applies to that processing in addition to the FADP.
Changes
We update this page whenever the website changes in a way that affects your data, for example if we ever add analytics. The current version is always the one published here.