Privacy Policy — How Rundil Handles Your Personal Data

Rundil Services is a trading name of CANICET GmbH, a limited liability company registered in Switzerland. CANICET GmbH is the controller responsible for the personal data described in this policy — meaning we decide why and how it is processed.

We have not appointed a statutory Data Protection Officer, as neither Swiss nor EU law requires one for our size and activities. All privacy matters are handled directly by management at the address above.

This policy applies to the four Rundil service lines — Cleaning, Tutoring, Childcare and Companions — and to the websites rundil.com and rundil.de.

Rundil is a Swiss company. Our processing is governed in the first instance by the Swiss Federal Act on Data Protection (FADP / nDSG) and its implementing ordinance.

Because our tutoring service also operates in Germany and the Netherlands, and because we market to residents of the European Economic Area, the EU General Data Protection Regulation (GDPR) applies to that processing as well. Where the two regimes differ, we apply the stricter standard to everyone — you do not get weaker protection because you live in Switzerland.

This policy covers personal data we process about:

• Enquirers and prospective customers — anyone who submits a booking form, requests a quote or contacts us.
• Customers — households and individuals who book cleaning, tutoring, childcare or companionship.
• Service recipients — children in our care, and elderly clients receiving companionship, whose details are usually provided by a family member.
• Job applicants — people applying to work as a cleaner, tutor, nanny or companion.
• Website visitors — including people who only browse and never make contact.
• Account holders — customers and staff using the login area of the site.

Employed staff receive a separate, more detailed employment privacy notice covering payroll, social insurance and HR records. This policy does not replace it.

Our Terms of Use govern the commercial relationship; this policy governs the data.

We collect only what we need to quote for, arrange, deliver and invoice a service — plus the technical data any website receives when you visit it.

Some fields are mandatory: without a name, contact detail, address and service requirement we cannot produce a quote or send anyone to your home. Optional fields — such as “How did you hear about us?” — can be left blank with no consequence.

Two of our services involve information that both Swiss and EU law treat as particularly sensitive.

• Health-related information. Childcare bookings may include a child’s allergies, medication or additional needs. Companions bookings may include mobility limitations, dietary requirements or general wellbeing notes. We ask for this only where the assigned nanny or companion genuinely needs it to keep the person safe and comfortable.
• Criminal record data. Every nanny and companion must produce a Swiss special private extract (Sonderprivatauszug) before their first assignment. We check it, record the fact and date of the check, and do not retain a copy longer than necessary.

Sensitive data is processed on the basis of your explicit consent, which you give when you supply it, and because it is necessary to perform the service you have booked. You can withdraw that consent at any time — but be aware that withdrawing safety-critical information may mean we can no longer deliver the service.

Under the GDPR we must name a legal basis for every purpose. Swiss law does not require a basis in the same way, but it does require processing to be lawful, proportionate, transparent and in good faith. The table applies to both.

Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms and concluded that the processing is proportionate and would be expected by you. You can object to any of it — see section 11.

When you first arrive on rundil.com a consent banner appears. Nothing beyond strictly necessary cookies is set until you make a choice. You can accept everything, reject everything except the essentials, or set your preferences category by category — and you can change your mind at any time through the cookie settings link.

Analytics and marketing tags are held back until consent is given, and are released only for the categories you have accepted. Refusing them has no effect on your ability to browse the site, request a quote or make a booking.

You can also delete or block cookies in your browser settings at any time. Doing so may sign you out and reset your saved preferences. We honour Global Privacy Control signals where your browser sends one.

We do not sell, rent or trade personal data. We share it only with the people and suppliers who need it to make the service work, and each supplier is bound by a data processing agreement that limits them to our instructions.

The person who comes to your home

Your assigned cleaner, tutor, nanny or companion receives the minimum needed to do the job: your name, address, agreed schedule and any instructions you have given. They are employed by Rundil, contractually bound to confidentiality, and have no access to your payment data or your account.

Our suppliers and service providers

Others, in specific situations

• Insurers — where you make a damage or liability claim.
• Swiss social insurance bodies and authorities — AHV, BVG, UVG, tax and VAT administration, in respect of our staff and our own obligations.
• A debt collection agency — if an invoice remains unpaid for four weeks or more, as set out in our Terms of Use.
• Legal advisers, auditors and courts — where necessary to establish, exercise or defend legal claims.
• Emergency services or a family contact — if there is a serious risk to someone’s life or health during a visit.
• A buyer — if the business is ever sold or restructured, with notice to you and no reduction in protection.

Our website, database and backups are hosted in Switzerland and the European Union. Several of the suppliers listed above are based in the United States, so some data — typically an IP address, an email address or a form submission — is transferred there.

We rely on the following safeguards:

• Adequacy. Switzerland recognises the Swiss–US Data Privacy Framework, in force since 15 September 2024, for US companies certified under it. The European Commission’s EU–US Data Privacy Framework decision of 10 July 2023 covers the equivalent EU transfers. The European Commission also recognises Switzerland as providing an adequate level of protection, so EU-to-Switzerland transfers need no further measure.
• Standard Contractual Clauses. Where a supplier is not certified under a Framework, we use the European Commission’s Standard Contractual Clauses together with the Swiss addendum recognised by the FDPIC, supported by a transfer impact assessment and, where relevant, additional technical measures such as encryption.

You may request a copy of the safeguards applying to a specific transfer by writing to info@rundil.com.

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires — whichever is longer. Then we delete or anonymise it.

Deleting a record from a live system does not remove it instantly from an encrypted backup; backups are overwritten on the rolling cycle above and are never used to repopulate deleted data.

• All traffic to and from rundil.com is encrypted in transit with TLS.
• Passwords are stored hashed and salted — nobody at Rundil can read yours.
• Administrative access requires two-factor authentication and is limited to the few people who need it.
• A web application firewall, malware scanning and login-attempt limiting run continuously.
• Backups are encrypted and stored separately from the live system.
• Card data is entered directly into Stripe’s PCI-DSS certified environment and never reaches our servers.
• Every employee is bound by a confidentiality obligation and is trained on handling household information.
• Suppliers are engaged only under a written data processing agreement.

Whether you are in Switzerland, the EU or elsewhere, we apply the following rights to everyone.

Write to info@rundil.com with the words “Privacy request” in the subject line, or post your request to CANICET GmbH, Oberneuhofstrasse 10, CH-6340 Baar, Switzerland.

• No charge. Requests are handled free of charge. We may charge a reasonable fee only for a manifestly unfounded or repetitive request, and we will tell you before doing so.
• Identity check. So that we do not hand your data to someone else, we will ask you to confirm your identity — usually by replying from the email address we already hold for you.
• Timing. We respond within 30 days. If a request is unusually complex we may extend this by a further two months and will tell you why within the first 30 days.
• Acting for someone else. If you are requesting on behalf of a child, a parent or a supported adult, send written authority or evidence of your legal capacity.

If you are unhappy with how we have handled your data, please contact us first — most issues are resolved quickly. You always retain the right to go to a regulator.

Rundil’s website and services are directed at adults. Accounts and bookings may only be created by someone aged 18 or over, and we do not knowingly collect data directly from children.

Where our Childcare or Tutoring services involve a child, the child’s data is provided by a parent or legal guardian, is limited to what the nanny or tutor needs, and is deleted on the schedule in section 9. A parent or guardian may exercise every right in section 11 on the child’s behalf.

If you believe a child has given us personal data without a parent’s involvement, contact info@rundil.com and we will delete it.

We do not make decisions about you by automated means alone where those decisions have a legal or similarly significant effect. Every assignment of a cleaner, tutor, nanny or companion is made by a person, weighing your requirements, location, language and schedule against staff availability.

Our booking forms calculate a price automatically from the options you select. That is a calculation, not a decision about you, and you are free to change the options or contact us for a quote instead.

The website assistant answers questions about our services. It provides information only, cannot access your account or booking records, and makes no decisions affecting you. Please do not type payment details or sensitive personal information into it.

Analytics and advertising tools may group visitors into broad audience segments when you have consented to marketing cookies. This does not produce a legal effect for you and you can withdraw consent at any time.

We review this policy at least once a year and whenever we add a service, change a supplier or a law changes. The current version and its date always appear at the top of this page, and the version history below records what changed.

Where a change materially affects how we use your data, we will tell you by email or through a notice on the site before it takes effect. Continuing to use rundil.com after that point means you have seen the revised policy.