St. Gallen Flats
Privacy policy
How personal data is processed when you use this website.
Data controller
The St. Gallen Campus International AG, Tellstrasse 18, 9000 St. Gallen, Switzerland, is responsible for processing personal data on this website. Please send privacy enquiries to info@tsci.ch or write to this address. This policy covers use of the website.
Website access and hosting
When you visit, technical data such as your IP address, access time, requested page, browser and device information is processed to deliver and secure the website and resolve errors. Hosting is provided by Vercel Inc., USA. Data may be processed in the USA and other countries used by its infrastructure. The terms below describe Vercel’s processing, subprocessors and safeguards for international transfers.
Vercel – Data Processing Addendum ↗Vercel – Privacy Notice ↗Cookies, language and fonts
The website currently sets no first-party analytics or advertising cookies and uses no tracking or marketing tools. Language selection is handled through the page URL. Fonts and apartment images are served with the website without requests to external font providers.
OpenStreetMap
Apartment pages embed maps from the OpenStreetMap Foundation, United Kingdom. When a map loads, the map service receives your IP address and technical browser information to display it. Its privacy policy governs processing by the map service. Its terms also apply when you open an external map link.
OpenStreetMap Foundation – Privacy Policy ↗Enquiry form and contact
When you submit an enquiry, we process your first and last name, email address, phone number, requested apartment, rental dates, number of guests and rooms, purpose of stay and optional message. We also store a reference, receipt time, the acknowledged privacy-policy version and processing and email status. We use this information to check availability, reply personally, prepare a possible rental agreement and prevent abuse and duplicate enquiries. Form entries are transmitted only on submission. An enquiry is not a binding booking. There are no user accounts or online payments. Please do not include sensitive personal information in your message.
Storage with Neon
Enquiries are stored in a PostgreSQL database provided by Neon (Neon, LLC / Databricks, USA). The configured database region is Frankfurt, Germany. Enquiries are saved before emails are sent, so they remain available if delivery fails. Access is restricted to the application and authorised people handling enquiries. Despite the European database region, support, operations and subprocessors may involve processing in the USA or other countries. The provider describes its contractual data-protection arrangements and subprocessors in the linked documents.
Neon – Platform and data-protection terms ↗Neon / Databricks – Privacy Notice ↗Email delivery with Resend and correspondence through Hostpoint
We use Resend (Plus Five Five, Inc., USA) to send your acknowledgement and our internal notification. Resend processes sender and recipient addresses, message content including enquiry details and technical delivery information. Ireland is the configured sending region; this does not mean all processing takes place exclusively in Ireland. Resend and its subprocessors may process data in the USA in particular. Its Data Processing Addendum describes international-transfer safeguards, including standard contractual clauses. Correspondence is handled through info@tsci.ch at Hostpoint AG, Switzerland, and forwarded internally to the responsible people. Enquiries are not used for newsletters or advertising.
Resend – Data Processing Addendum ↗Resend – Privacy Policy ↗Retention and deletion
Enquiry records and correspondence are retained for as long as needed to handle the enquiry, ongoing contract discussions or a rental relationship. They are then deleted unless statutory retention obligations or legitimate reasons to establish or enforce claims require further retention. You can request deletion at info@tsci.ch. Database backups and technical logs are also subject to the respective providers’ retention rules. Resend states that email content and logs are retained for 30 days on standard plans; backups may remain longer. Deleting a database enquiry does not automatically remove messages already delivered to recipients’ mailboxes.
Resend – Retention and data protection ↗Your rights
Under applicable data protection law, you may request access to, correction or deletion of your personal data. Further rights, such as data portability or objection, may apply subject to the relevant conditions. Please write to the address above. You may also contact the Swiss Federal Data Protection and Information Commissioner.
FDPIC – Contact ↗Updates
Last updated: 19 September 2026. We will update this policy when the website or its data processing changes.