Data protection
What the SynCal application (app.syncal.ch) processes, where, for how long, and how to exercise your rights, in line with the Swiss Federal Act on Data Protection (nFADP). This text covers the booking application. The syncal.ch website has its own section in the legal notice.
Last updated: 12 October 2026
Who does what
The host, meaning the SynCal customer who offers appointments, is the controller of their guests' data. ZRS-Holding Sàrl, Le Chenit (Vaud), Switzerland, contact@zrs-holding.com, is the processor: it operates SynCal, hosts this data and processes it on the host's behalf.
Guest data (the person who books)
Name and email address (required); phone, company and message (optional); answers to the host's questions, if any; page language; chosen slot, video call link, cancellation token; creation, cancellation and attendance confirmation dates. The guest has no account. Their time zone and IP address are not stored. They receive confirmation, reminder and cancellation emails, sent by Infomaniak.
Host data (the person offering appointments)
Name and email address of the account, language, organisation name, page address, title, colour, logo and welcome message if set; accepted terms version with date and time; account creation and email confirmation dates. Two sign-in modes: email and password (the password is never stored, only a hash is), or the Infomaniak account (OIDC: SynCal never sees the Infomaniak password). Access to their calendar (CalDAV app password or private iCal address) is stored encrypted.
Host's calendar
CalDAV reading: SynCal only asks for free or busy periods, never titles, participants or details. Writing: if the host has connected an Infomaniak calendar, each appointment is entered there with the guest's name, email, phone, company, message and answers.
Purpose
Offer slots, record and confirm appointments, send reminders and cancellations. No resale, no advertising.
Retention
Appointments and guest data: deleted automatically twelve months after the end of the appointment, whatever its status. Refused access requests: deleted twelve months after the refusal. Demo: demo bookings are deleted after one hour and the address entered is never stored. Server access logs: kept 14 days, the IP address appears in them. Daily backup at Infomaniak (Swiss Backup). Account created but never confirmed: deleted automatically after 7 days. Host accounts: kept until the host deletes them; no automatic deletion of inactive accounts today.
Place of processing and subcontractors
SynCal is hosted in Geneva at Infomaniak, which also provides email, kMeet video calls, calendar and backups. ZRS uses no other subcontractor for SynCal.
Optional calendars, at the host's choice
If the host connects a Google or Microsoft calendar by iCal address, Google or Microsoft receives a request to read that calendar: this processing takes place outside Switzerland, it is the host's choice and it is optional. SynCal keeps only the busy periods, five minutes in memory, with no title or participant.
Cookies and analytics
The application contains no analytics tool. No cookie is set for guests. A technical session cookie is set only when a host signs in.
Your rights
You may request access to your data, its correction or deletion by writing to contact@zrs-holding.com; we reply within thirty days. A guest may also contact the host directly, who is the controller of their data. A host can delete their account themselves (Account, at the bottom of the page): this erases their types, appointments, guests' data, tokens, connected calendar and logo; upcoming guests are notified.