Legal

RentMora Legal Documents

Review the Terms and Conditions, Privacy Policy, and DPA in a single tabbed, locale-aware view.

Terms and Conditions

Last updated: 4 April 2026

These Terms and Conditions ("Terms") govern access to and use of the RentMora software platform and related website and services (collectively, the "Services").

The Services are provided by:

Luis Hoffmann
Sulzerallee 77
8404 Winterthur
Switzerland
Email: [email protected]

By registering for, accessing, or using the Services, you agree to be bound by these Terms. If you do not agree, you must not use the Services.

1. Scope and Business Use Only

1.1 RentMora is software for the management of short-term rental operations.

1.2 The Services are offered exclusively for business and professional purposes. They are not intended for consumers acting primarily for personal, family, or household purposes.

1.3 You may use the Services only if you are at least 18 years old and legally capable of entering into binding contracts.

1.4 If you use the Services on behalf of a company or other organization, you represent and warrant that you have authority to bind that entity to these Terms.

2. Description of the Services

2.1 RentMora is a software-only offering. Unless explicitly agreed otherwise in writing, no onboarding, implementation, migration, consulting, support, response times, uptime commitments, or service levels are included.

2.2 The Services may include, among other things, booking management, calendar synchronization, guest/contact management, automated messaging, staff coordination, financial overviews, seasonal pricing, webhook-based smart home functionality, and related operational tools.

2.3 Certain features may be marked or offered as beta, preview, experimental, or similar. Such features are provided on an "as available" and "as is" basis and may be modified, restricted, or withdrawn at any time.

2.4 We may update, improve, change, suspend, or discontinue parts of the Services at any time.

3. Account Registration and Security

3.1 To use the Services, you must create an account and provide accurate, complete, and up-to-date information.

3.2 You are responsible for maintaining the confidentiality of your login credentials and for all activities occurring under your account.

3.3 You must promptly notify us of any unauthorized use of your account or any security incident affecting your account.

3.4 We may require email verification or other verification steps before activating or maintaining your account.

4. Trial Period

4.1 New users may receive a 14-day free trial, as offered on the website or in the application at the relevant time.

4.2 During the trial, you may receive access to some or all features of the Services.

4.3 At the end of the trial, if no paid subscription is activated, your account may become read-only or otherwise restricted.

4.4 We may modify, withdraw, or limit any free trial offer at any time.

5. Subscription, Fees, Billing, and Payment

5.1 After the trial period, continued active use of the Services requires a paid monthly subscription.

5.2 Subscription fees are charged in euros (EUR) and are billed monthly.

5.3 Subscription payments are processed through PayPal. Your use of PayPal is subject to PayPal's own terms, conditions, and privacy practices.

5.4 Subscription fees are payable in advance for each billing period.

5.5 The minimum subscription term is one month.

5.6 Subscriptions renew automatically for successive monthly periods unless cancelled before the end of the current billing period.

5.7 You may cancel at any time with effect at the end of the current billing period through the billing interface or other method we make available.

5.8 No refunds are provided for partial billing periods, unused time, downgrades during a billing period, accidental non-use, or termination for breach, except where mandatory law requires otherwise.

5.9 Unless otherwise stated, prices are shown without VAT. If VAT or any similar tax becomes legally applicable, we may add it as required by law.

6. Late Payment and Deactivation

6.1 If payment is overdue, we may suspend or restrict access to the Services.

6.2 If payment remains outstanding for more than one month, we may deactivate the account.

6.3 Suspension, restriction, or deactivation for non-payment does not release you from your obligation to pay outstanding amounts.

7. Customer Data and Retention After Termination

7.1 As between you and us, you retain ownership of the content, listings, reservation data, guest/contact data, messages, files, and other data you upload to or process through the Services ("Customer Data").

7.2 You grant us a worldwide, non-exclusive, royalty-free license to host, store, reproduce, process, transmit, and otherwise use Customer Data solely as necessary to provide, maintain, secure, improve, and administer the Services and to comply with legal obligations.

7.3 You also grant us the right to use anonymized and aggregated data derived from use of the Services for analytics, benchmarking, security, and product improvement, provided such data does not identify you, your guests, or any natural person.

7.4 Following termination or deactivation, we may retain Customer Data for up to 3 months, after which we may delete it unless longer retention is required by law or justified for legitimate legal, accounting, fraud-prevention, or enforcement purposes.

7.5 You are responsible for exporting any data you wish to retain before final deletion.

8. Data Protection and Roles

8.1 Each party shall comply with applicable data protection laws.

8.2 To the extent we process personal data on your behalf in connection with guest, contact, reservation, or other customer-related data, you are the controller or responsible party for such data, and we act as your processor or service provider to the extent provided by applicable law.

8.3 Our handling of personal data for our own business purposes, such as account management, billing, website operation, and legal compliance, is described in our Privacy Policy.

8.4 You are solely responsible for ensuring that you have a valid legal basis and all required notices, permissions, and policies for the personal data you input into the Services.

9. Acceptable Use and Prohibited Conduct

You must not, and must not permit others to:

9.1 use the Services for unlawful, fraudulent, misleading, or abusive purposes;

9.2 use the Services in violation of rental, housing, tourism, tax, sanctions, consumer, privacy, or other applicable laws or regulations;

9.3 upload, transmit, or store malicious code, malware, spyware, or harmful content;

9.4 interfere with, disrupt, damage, test vulnerabilities of, or gain unauthorized access to the Services or related systems;

9.5 copy, resell, sublicense, lease, distribute, reverse engineer, decompile, scrape, mirror, frame, or create derivative works of the Services except to the extent mandatory law prohibits such restriction;

9.6 misuse guest or contact data, send unlawful communications, or engage in spam;

9.7 use the Services to infringe intellectual property, privacy, publicity, or other rights of third parties;

9.8 misrepresent identity, ownership, property availability, or booking information;

9.9 use the Services in a way that could impair the proper functioning, security, or integrity of the Services.

10. Third-Party Services and Integrations

10.1 The Services may interoperate with third-party services, platforms, payment providers, APIs, websites, software, hardware, webhooks, or other integrations, including PayPal and external booking/calendar services.

10.2 Third-party integrations are provided on an "as available" basis only. We do not control third-party services and do not guarantee their availability, compatibility, functionality, performance, legality, or continued operation.

10.3 We are not responsible for outages, API changes, sync failures, listing suspensions, payout delays, data inaccuracies, or other errors, losses, or damages caused by third-party providers or services.

10.4 Your use of any third-party service is subject to that provider's own terms and privacy practices.

11. Customer Responsibilities

11.1 You are solely responsible for your properties, listings, prices, booking rules, guest communications, taxes, regulatory compliance, permits, insurance, house rules, cancellation terms, tourism obligations, registrations, and all business decisions made using the Services.

11.2 You are solely responsible for compliance with all laws applicable to short-term rentals in the jurisdictions where you operate, including licensing, zoning, tax, reporting, registration, and consumer protection requirements.

11.3 The Services are a software tool only. We do not act as a property manager, booking agent, broker, travel agency, merchant of record, fiduciary, tax adviser, legal adviser, or regulatory adviser.

11.4 You are responsible for maintaining your own backups and records to the extent necessary for your business and compliance obligations.

12. Intellectual Property

12.1 The Services, including all software, code, design, structure, content created by us, branding, logos, trademarks, and related intellectual property, remain our exclusive property or that of our licensors.

12.2 Except for the limited rights expressly granted in these Terms, no rights are transferred to you.

12.3 Subject to these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable right during the subscription term to access and use the Services for your internal business operations.

12.4 You may use our name and logo solely to identify that you use RentMora, provided such use is truthful, non-misleading, and complies with any brand guidance we may provide.

12.5 Unless you notify us otherwise in writing, you grant us the right to identify you by name, logo, and general description as a customer or reference on our website, sales materials, and similar business communications.

13. Suspension and Termination

13.1 You may terminate your subscription at any time with effect at the end of the current billing period.

13.2 We may suspend or terminate your access immediately, with or without notice, if: a) you breach these Terms; b) payment is overdue; c) your use creates security, legal, reputational, or operational risk; d) we reasonably suspect fraud, abuse, or unlawful activity; or e) we are required to do so by law or by a third-party provider.

13.3 Upon termination, your right to access and use the Services ends immediately, except to the extent we allow limited read-only or export access.

13.4 Sections that by their nature should survive termination will survive, including those relating to fees, liability, intellectual property, data use rights, confidentiality, governing law, and dispute resolution.

14. No Warranties

14.1 The Services are provided "as is" and "as available."

14.2 To the maximum extent permitted by law, we disclaim all warranties, representations, and conditions, whether express, implied, statutory, or otherwise, including any implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, uninterrupted availability, accuracy, reliability, or fitness for your business needs.

14.3 We do not warrant that the Services will be uninterrupted, error-free, secure, available at any particular time, or free from loss, corruption, delay, or incompatibility.

14.4 We do not warrant any business outcome, booking increase, occupancy result, revenue result, compliance result, or cost savings.

15. Limitation of Liability

15.1 To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, special, punitive, exemplary, or consequential damages, or for any loss of profits, revenue, business, goodwill, bookings, data, expected savings, or business opportunity.

15.2 To the maximum extent permitted by law, we shall not be liable for: a) acts or omissions of customers, guests, property owners, staff, contractors, or third parties; b) failures or changes of third-party services, integrations, APIs, marketplaces, payment providers, or internet/network services; c) errors in customer-entered data or data supplied by third parties; d) unlawful or non-compliant rental activity; e) tax, legal, regulatory, zoning, permit, licensing, or registration issues; f) unauthorized access caused by your failure to secure credentials or systems; g) loss of data where you failed to maintain appropriate backups.

15.3 Our total aggregate liability arising out of or in connection with the Services or these Terms shall not exceed the total subscription fees actually paid by you to us in the 12 months preceding the event giving rise to the claim.

15.4 Nothing in these Terms excludes or limits liability where such exclusion or limitation is prohibited by mandatory law.

16. Indemnification

You agree to indemnify and hold harmless Luis Hoffmann and his affiliates, contractors, and representatives from and against claims, liabilities, damages, losses, fines, penalties, and expenses, including reasonable legal fees, arising out of or related to: a) your use of the Services; b) your Customer Data; c) your breach of these Terms; d) your violation of law or third-party rights; or e) your rental business, listings, guests, properties, or operations.

17. Confidentiality

17.1 Each party may receive non-public information of the other party in connection with the Services.

17.2 The receiving party shall use such confidential information only as necessary for the purposes of these Terms and shall protect it with reasonable care.

17.3 This section does not apply to information that is public without breach, already lawfully known, independently developed, or lawfully obtained from a third party.

18. Force Majeure

We shall not be liable for delay, non-performance, or interruption caused by events beyond our reasonable control, including natural disasters, war, terrorism, cyberattacks, labor disputes, internet outages, infrastructure failures, governmental actions, or third-party service failures.

19. Changes to the Services and Terms

19.1 We may modify these Terms from time to time.

19.2 Updated Terms become effective upon publication on the website or within the Services, or on the date otherwise indicated.

19.3 If a change materially adversely affects you, we may provide notice by email or through the Services.

19.4 Your continued use of the Services after the effective date of updated Terms constitutes acceptance of the revised Terms.

20. Notices

20.1 You agree that we may provide notices electronically, including by email, through the website, or through the Services.

20.2 Legal notices to us should be sent to the contact details published in the legal notice/imprint or otherwise designated by us.

21. Governing Law and Jurisdiction

21.1 These Terms are governed by the substantive laws of Switzerland, without regard to conflict of law rules.

21.2 The courts of Winterthur, Switzerland shall have exclusive jurisdiction, subject to mandatory law.

22. Language

These Terms may be provided in English and German. In the event of conflict or inconsistency, the English version shall prevail.

23. Miscellaneous

23.1 If any provision of these Terms is held invalid or unenforceable, the remaining provisions remain in full force and effect.

23.2 Our failure to enforce any provision is not a waiver.

23.3 You may not assign or transfer these Terms without our prior written consent. We may assign these Terms in connection with a business transfer, restructuring, or sale of the Services.

23.4 These Terms, together with any policies expressly incorporated by reference, constitute the entire agreement between you and us regarding the Services.

Privacy Policy

Last updated: April 10, 2026

This Privacy Policy explains how Luis Hoffmann, trading as RentMora ("RentMora", "we", "us", "our"), collects, uses, discloses, and otherwise processes personal data in connection with the RentMora website, software platform, and related services (collectively, the "Services").

1. Controller and Contact Details

The controller for personal data described in this Privacy Policy, unless stated otherwise, is:

Luis Hoffmann
Sulzerallee 77
8404 Winterthur
Switzerland
Email: [email protected]

For privacy-related questions or requests, you can contact us at: [email protected]

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed when you:

visit our website;
create, access, or use a RentMora account;
subscribe to or pay for the Services;
contact us;
receive emails or other communications from us;
interact with integrations or connected services through the Services; or
are included in data uploaded to the Services by one of our customers.

This Privacy Policy does not apply to third-party websites, platforms, or services that are linked to or integrated with RentMora and are governed by their own privacy notices.

3. Roles: When We Act as Controller and When We Act as Processor

For some personal data, we act as an independent controller. This includes, for example, personal data processed for:

website operation;
account registration and account administration;
billing and subscription management;
support communications;
security, fraud prevention, and abuse detection;
legal compliance; and
our own business operations.

When our customers use RentMora to store or manage guest, booking, contact, staff, or other operational data, we generally process that personal data on behalf of the customer. In that context, the customer is typically the controller and RentMora acts as the processor. Processing of such customer-controlled personal data is governed by our agreement with the customer, including the Data Processing Agreement where applicable.

If you are a guest or other individual whose data was uploaded by a RentMora customer, that customer is usually the first point of contact for privacy requests relating to that data.

4. Categories of Personal Data We Process

4.1 Account and identity data

name;
business name;
username;
login credentials or authentication-related data;
email address;
telephone number;
account verification data.

4.2 Subscription and billing data

billing contact details;
subscription plan;
billing status;
invoicing records;
limited transaction and payment-related metadata received from payment providers such as PayPal.

We do not intentionally store full payment card details.

4.3 Customer content and operational data

Data uploaded to or processed through the Services by customers, including:

property and listing data;
reservation and booking details;
guest name, email address, phone number, and booking dates;
guest communication content;
staff or team member details;
notes, files, preferences, and operational records.

4.4 Usage and technical data

IP address;
browser type and version;
device identifiers;
operating system;
referral URL;
pages viewed;
timestamps;
log data;
feature usage data;
crash and diagnostic information.

4.5 Communications data

emails, support messages, and other correspondence with us;
responses to surveys, product feedback, or feature requests.

4.6 Compliance and security data

access logs;
login history;
account actions;
audit trail information;
fraud, abuse, or security incident data.

5. How We Collect Personal Data

We collect personal data:

directly from you when you register, subscribe, fill in forms, contact us, or otherwise use the Services;
automatically through your use of the website or Services, including through logs, cookies, and similar technologies;
from payment providers such as PayPal in connection with payment confirmation and subscription administration;
from integrations or third-party services you or our customers connect to the Services; and
from our customers who upload or input personal data into the Services.

6. Purposes of Processing and Legal Bases

Where the GDPR applies, we rely on one or more legal bases depending on the processing activity.

6.1 To provide and operate the Services

We process personal data to create accounts, authenticate users, provide core features, store and display customer data, manage bookings and related workflows, and operate the platform.

Legal basis: performance of a contract; legitimate interests in operating and improving our business.

6.2 To manage subscriptions, invoices, and payments

We process personal data to administer subscriptions, issue invoices, record payment status, and manage account billing.

Legal basis: performance of a contract; legal obligations; legitimate interests in running our business.

6.3 To communicate with users

We process personal data to send service messages, transactional emails, support replies, technical notices, and other operational communications.

Legal basis: performance of a contract; legitimate interests in customer service and platform administration.

6.4 To maintain security and prevent misuse

We process personal data to monitor platform use, prevent fraud, investigate suspicious activity, secure accounts, maintain logs, and respond to incidents.

Legal basis: legitimate interests in platform security, fraud prevention, and service integrity; legal obligations where applicable.

6.5 To improve, maintain, and troubleshoot the Services

We process usage, diagnostic, and technical data to debug issues, maintain performance, develop functionality, and improve system reliability.

Legal basis: legitimate interests in maintaining and improving the Services.

6.6 To comply with legal obligations

We may process personal data to comply with tax, accounting, legal, regulatory, disclosure, enforcement, or other compliance requirements.

Legal basis: legal obligation; legitimate interests in defending and enforcing our rights.

6.7 To send marketing communications

Where permitted by law, we may process contact details to send updates about the Services, new features, or relevant commercial communications.

Legal basis: consent where required; otherwise legitimate interests in promoting our business.

You can opt out of marketing emails at any time.

6.8 To use cookies and similar technologies

We use necessary cookies and, where applicable, analytics or similar technologies for security, preferences, and performance.

Legal basis: legitimate interests for strictly necessary technologies; consent where required for non-essential cookies or similar tracking.

7. Sharing of Personal Data

We may disclose personal data to the following categories of recipients where necessary:

hosting, cloud, and infrastructure providers;
authentication, email delivery, and communication providers;
payment providers such as PayPal;
technical service providers, support tools, analytics providers, and error monitoring providers;
professional advisers such as lawyers, accountants, and auditors;
competent authorities, regulators, courts, or law enforcement where required;
actual or prospective acquirers, successors, or transferees in connection with a business transaction.

Where we disclose personal data to service providers acting on our behalf, we require them to process personal data only as permitted and to implement appropriate safeguards.

8. International Data Transfers

We are based in Switzerland. Personal data may be processed in Switzerland, the European Economic Area ("EEA"), and, depending on the service providers used or the way the Services are configured, in other jurisdictions.

Where personal data is transferred to a country that does not provide an adequate level of protection under applicable law, we will seek to use an appropriate safeguard, such as:

standard contractual clauses;
contractual protections recognized under applicable law; or
another valid transfer mechanism.

You may contact us for more information about the safeguards we use for relevant transfers.

9. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain appropriate records.

Retention periods may vary depending on the type of data. In general:

account and subscription data is retained for the duration of the customer relationship and for a reasonable period thereafter;
customer operational data may be retained for up to 3 months after termination or deactivation to enable recovery, export, support, compliance, or dispute handling, unless longer retention is required or justified;
logs and technical records are retained for as long as reasonably necessary for security, diagnostics, and operational integrity;
legal, accounting, and tax records may be retained for longer periods where required by law.

After the applicable retention period, we may delete or anonymize the data.

10. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. Such measures may include access controls, authentication safeguards, logging, encryption in transit, backup procedures, and role-based restrictions.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Depending on the applicable law and your circumstances, you may have rights such as:

the right to access personal data;
the right to request correction of inaccurate data;
the right to request deletion;
the right to request restriction of processing;
the right to object to certain processing;
the right to data portability;
the right to withdraw consent where processing is based on consent.

If you want to exercise your rights, contact us at [email protected].

If your personal data was submitted to RentMora by one of our customers, you may need to contact that customer directly first, as they are usually the controller of that data. We may assist our customers with such requests where required.

You may also have the right to lodge a complaint with a competent supervisory authority, including in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with a supervisory authority in the EU/EEA.

12. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for:

authentication and security;
remembering preferences;
core website and platform functionality;
analytics and performance measurement, where enabled.

Some technologies are strictly necessary for operation. Others may require consent depending on applicable law. For more details, please see our Cookie Notice.

13. Children

The Services are not intended for individuals under 18, and we do not knowingly market the Services to children.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version becomes effective when published on the website or within the Services, unless otherwise stated.

15. Contact

Luis Hoffmann
Sulzerallee 77
8404 Winterthur
Switzerland
Email: [email protected]

Data Processing Agreement

Last updated: April 10, 2026

This Data Processing Agreement ("DPA") forms part of the agreement between the customer identified in the applicable order, registration, subscription, or Terms ("Customer") and Luis Hoffmann, Sulzerallee 77, 8404 Winterthur, Switzerland, trading as RentMora ("RentMora", "Processor").

This DPA applies where RentMora processes personal data on behalf of Customer in connection with the Services.

1. Definitions

In this DPA:

Applicable Data Protection Law means the Swiss Federal Act on Data Protection ("FADP"), the GDPR to the extent applicable, and any other applicable data protection or privacy laws.
Controller means the entity that determines the purposes and means of processing personal data.
Processor means the entity that processes personal data on behalf of the Controller.
Customer Personal Data means personal data processed by RentMora on behalf of Customer in connection with the Services.
Subprocessor means any third party engaged by RentMora to process Customer Personal Data on behalf of Customer.
Services means the RentMora software platform, website, and related services provided under the main agreement.

Unless otherwise defined here, terms such as "personal data", "processing", "data subject", and "personal data breach" have the meaning given by Applicable Data Protection Law.

2. Scope and Order of Precedence

2.1 This DPA applies only to the extent that RentMora processes Customer Personal Data on behalf of Customer as Processor.

2.2 Customer is the Controller of Customer Personal Data, and RentMora acts as Processor, except where RentMora expressly acts as an independent Controller under the main agreement or Privacy Policy.

2.3 If there is a conflict between this DPA and the main agreement with respect to the processing of Customer Personal Data, this DPA prevails to the extent of that conflict.

3. Subject Matter, Nature, Purpose, and Duration of Processing

3.1 Subject matter of processing

RentMora provides a software platform for short-term rental operations, including hosting, display, organization, communication, synchronization, and related operational functionality.

3.2 Nature of processing

Processing may include collection, recording, organization, structuring, storage, hosting, adaptation, retrieval, consultation, use, transmission, synchronization, export, restriction, deletion, and destruction of Customer Personal Data.

3.3 Purpose of processing

Customer Personal Data is processed solely for the purpose of providing the Services to Customer in accordance with the main agreement and Customer's documented instructions.

3.4 Duration

RentMora will process Customer Personal Data for the duration of the Customer's use of the Services and for any limited retention period set out in the main agreement, this DPA, or required by law.

4. Categories of Data Subjects and Types of Personal Data

4.1 Categories of data subjects may include:

Customer users and account administrators;
guests, prospective guests, or contacts;
property owners, staff members, contractors, or service partners;
other individuals whose personal data Customer uploads to the Services.

4.2 Types of personal data may include:

name;
email address;
telephone number;
booking and reservation dates;
property- or reservation-related details;
communication content;
internal notes and records uploaded by Customer;
identifiers, account details, and technical metadata associated with use of the Services.

Customer determines which categories of Customer Personal Data are submitted to the Services.

5. Customer Instructions

5.1 RentMora shall process Customer Personal Data only:

on Customer's documented instructions;
as necessary to provide the Services;
as required by Applicable Data Protection Law.

5.2 The main agreement, Customer's configuration and use of the Services, and Customer's written support or administrative requests together constitute Customer's documented instructions.

5.3 If RentMora believes an instruction infringes Applicable Data Protection Law, RentMora may inform Customer and suspend the affected processing until clarified, where appropriate.

5.4 Where RentMora is required by law to process Customer Personal Data other than on Customer's instructions, RentMora shall inform Customer of that requirement unless legally prohibited.

6. Customer Obligations

Customer represents, warrants, and agrees that:

Customer has all necessary rights and legal bases to collect, use, and instruct RentMora to process Customer Personal Data;
Customer will provide all notices and obtain all consents, permissions, or other legal bases required under Applicable Data Protection Law;
Customer is responsible for the accuracy, quality, and lawfulness of Customer Personal Data and the means by which Customer acquired it;
Customer remains responsible for responding to requests from data subjects, except to the extent RentMora is required to assist under this DPA.

7. Confidentiality

RentMora shall ensure that persons authorized to process Customer Personal Data:

are subject to a duty of confidentiality; or
are under an appropriate statutory obligation of confidentiality.

RentMora shall ensure that access to Customer Personal Data is limited to personnel who need such access for the provision, support, security, or maintenance of the Services.

8. Security Measures

8.1 RentMora shall implement appropriate technical and organizational measures designed to protect Customer Personal Data, taking into account the nature of the data, the risks involved, and the state of the art.

8.2 Such measures may include, as appropriate:

access controls and account authentication;
role-based access restrictions;
encryption in transit;
secure hosting environments;
logging and monitoring of administrative access and security-relevant events;
backup and recovery measures;
incident response procedures;
vulnerability management and patching processes;
separation or logical segregation of customer environments where applicable.

8.3 Customer acknowledges that no security measure is infallible and that security requirements may evolve over time.

9. Subprocessors

9.1 Customer grants RentMora a general authorization to engage Subprocessors in connection with the provision of the Services.

9.2 RentMora shall ensure that any Subprocessor engaged to process Customer Personal Data is bound by data protection obligations that are not materially less protective than those set out in this DPA, as applicable to the services performed by that Subprocessor.

9.3 RentMora remains responsible for the performance of its Subprocessors to the extent required by Applicable Data Protection Law.

9.4 RentMora will make current Subprocessor information available upon reasonable request.

9.5 Where reasonably required under Applicable Data Protection Law or agreed commercially, RentMora will provide notice of material additions or replacements of Subprocessors.

10. International Transfers

10.1 RentMora may process Customer Personal Data in Switzerland, the EEA, and other jurisdictions where RentMora or its Subprocessors operate.

10.2 Where Customer Personal Data is transferred to a jurisdiction that does not provide an adequate level of protection under Applicable Data Protection Law, RentMora shall seek to implement an appropriate transfer mechanism, such as standard contractual clauses or another recognized safeguard. The European Commission has published SCCs both for cross-border transfers and for controller-processor arrangements, and those may be used where relevant.

10.3 Customer authorizes RentMora to enter into such transfer mechanisms on Customer's behalf where necessary for the provision of the Services.

11. Assistance With Data Subject Requests

11.1 Taking into account the nature of the processing, RentMora shall provide reasonable assistance to Customer, insofar as possible and appropriate, to help Customer respond to requests by data subjects to exercise their rights under Applicable Data Protection Law.

11.2 RentMora may do so by:

providing self-service functionality within the Services;
forwarding relevant requests to Customer;
assisting through support channels where reasonably necessary.

11.3 If RentMora receives a request directly from a data subject relating to Customer Personal Data, RentMora may refer the request to Customer unless legally required to respond otherwise.

12. Assistance With Compliance Obligations

Taking into account the nature of processing and the information available to RentMora, RentMora shall provide reasonable assistance to Customer with Customer's obligations relating to:

security of processing;
personal data breach notifications;
data protection impact assessments; and
prior consultation with supervisory authorities,

to the extent required by Applicable Data Protection Law and reasonably requested by Customer.

13. Personal Data Breach Notification

13.1 If RentMora becomes aware of a personal data breach affecting Customer Personal Data, RentMora shall notify Customer without undue delay.

13.2 Such notification may include, to the extent then available:

the nature of the breach;
the categories of data concerned;
the likely consequences;
the measures taken or proposed to address the breach;
information reasonably useful for Customer's own compliance steps.

13.3 RentMora's notification of or response to a personal data breach is not an acknowledgment of fault or liability.

14. Audits and Information Rights

14.1 RentMora shall make available to Customer information reasonably necessary to demonstrate compliance with this DPA.

14.2 Where required by Applicable Data Protection Law and where the information provided is not sufficient, Customer may request an audit or inspection of RentMora's relevant processing activities, subject to:

reasonable prior written notice;
appropriate confidentiality protections;
narrow scope and proportionality;
no unreasonable disruption to RentMora's business;
not more than once per year, unless required by law or following a confirmed serious incident.

14.3 RentMora may satisfy audit obligations through appropriate existing documentation, certifications, reports, questionnaires, or summaries where suitable.

14.4 Customer shall bear its own audit costs and reimburse RentMora's reasonable internal and external costs incurred in connection with customer-requested audits, except where Applicable Data Protection Law requires otherwise.

15. Deletion and Return of Customer Personal Data

15.1 Upon termination or expiration of the Services, RentMora shall, at Customer's choice where technically feasible and where made before final deletion:

return Customer Personal Data; or
delete Customer Personal Data,

unless retention is required by law or reasonably necessary for legal claims, compliance, fraud prevention, dispute handling, backup cycles, or enforcement purposes.

15.2 Customer acknowledges that some Customer Personal Data may remain in backups or residual systems for a limited period before deletion in accordance with RentMora's retention and backup practices.

15.3 If Customer does not request return of Customer Personal Data before deletion, RentMora may delete it in accordance with the main agreement.

16. Independent Controller Processing by RentMora

This DPA does not apply to personal data for which RentMora acts as an independent Controller, including personal data processed for:

account registration and administration;
billing and payment administration;
security, fraud prevention, and abuse monitoring;
legal compliance;
business operations; or
anonymized and aggregated analytics that do not identify any individual.

Such processing is governed by the Privacy Policy and the main agreement.

17. Liability

Liability arising under or in connection with this DPA shall be subject to the liability limitations and exclusions set out in the main agreement, to the extent permitted by Applicable Data Protection Law.

18. Governing Law

This DPA is governed by the governing law set out in the main agreement, unless Applicable Data Protection Law requires otherwise.

19. Annex 1 - Description of Processing

A. Subject matter

Provision of a software platform for short-term rental operations.

B. Duration

For the term of the customer relationship and any limited post-termination retention period.

C. Nature and purpose

Hosting, storage, display, synchronization, communication support, technical administration, troubleshooting, and related service delivery functions.

D. Categories of data subjects

Customers, account users, guests, prospective guests, contacts, staff, contractors, and other individuals whose personal data Customer submits.

E. Categories of personal data

Names, email addresses, phone numbers, booking dates, reservation details, communication content, operational notes, identifiers, and related platform data.

20. Annex 2 - Technical and Organizational Measures Summary

RentMora maintains measures designed to protect Customer Personal Data, which may include:

user authentication controls;
password protection and access management;
role-based access restrictions;
encrypted transmission over HTTPS/TLS;
logging of relevant system events;
secure hosting controls;
backup and recovery procedures;
incident handling processes;
least-privilege principles for internal access;
maintenance and patching processes.

RentMora may update these measures from time to time, provided that the overall level of protection is not materially reduced.

Back to home