Privacy policy

Last updated: 17 September 2026

This English version is provided for your convenience. In case of any discrepancy, the German version is legally binding.

This privacy policy explains which personal data we process on tropimar.net (including subpages, the members' area and the customer portal) and in connection with our services, for what purpose, with which service providers, and what rights you have. The Swiss Federal Act on Data Protection (FADP) is authoritative. Where the EU General Data Protection Regulation (GDPR) applies, the rights provided for therein also apply.

1. Controller

The controller responsible for data processing is:

MHWE Services Supports
a company of CSI S.R.L. Group, República Dominicana
Villas Tropimar, Ático #27c, Sosúa – La Mulata, 57600 Puerto Plata, Dominican Republic
Email: support@mhwe.net · Phone: +1 829 341 15 81

Swiss branch
Bachstrasse 42, 3072 Ostermundigen (Bern)
Email: anfrage@mhwe.net · Phone: +41 79 284 66 77

For questions about data protection and to exercise your rights, please write to support@mhwe.net.

2. Principles and legal bases

We only process personal data to the extent necessary for the respective purpose: operating the website, answering enquiries, providing our services (IT support, crypto management, licences and subscriptions, apartment rentals, shop), invoicing, the security of our systems and – only with your consent – statistics, marketing and loading external media.

Where the GDPR applies, we rely on the following legal bases: contract or pre-contractual measures (Art. 6(1)(b) GDPR), legal obligations such as retention obligations (point (c)), legitimate interests such as the secure and proper operation of the website (point (f)), and your consent (point (a)), which you can withdraw at any time with effect for the future.

3. Hosting and server logs

The website, the database, file storage and server-side functions run on Google Firebase / Google Cloud (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA). The locations are:

• Website (hosting): Google's global content delivery network.
• Database (Cloud Firestore): Europe (region «eur3», Belgium/Netherlands).
• Server functions (Cloud Functions): Zurich, Switzerland (europe-west6); the automatic resizing of uploaded images runs in the USA (us-east1).
• File storage (Cloud Storage): USA (us-east1), e.g. images, documents and attachments to contact requests.

When you access the website, Google processes technically necessary data such as your IP address, date and time, the address accessed, browser and operating system in order to deliver the page and protect it against misuse. So that content can be loaded, each visit also receives an anonymous sign-in identifier (Firebase Authentication) that is not linked to your name. Firebase's program libraries are loaded from Google servers (gstatic.com). Machine translations of content on the English pages are created on our server using Claude by Anthropic PBC (see section 5); no visitor data is transmitted for this.

4. Visitor statistics

For simple visitor statistics of our own, we store the following once per visit: IP address, country, operating system, browser, screen size and time. We determine the country and IP address via the GeoJS service (get.geojs.io), to which your IP address is transmitted for this purpose. Only we can see the evaluation in the administration area. The purpose is to understand how the site is used and to detect misuse (legitimate interest).

5. Contact, booking requests, appointments and registration

If you contact us using a form, we process the information you enter in order to answer and handle your request:

• Contact form: name, email, phone, message, voluntary additional information and any file attachment (up to 5 MB). To protect against misuse, we also store the IP address and browser identifier and check a security question.
• Booking request (apartments): contact details, travel period, number of guests and message.
• Appointment booking: topic, date and time, name, email, optionally phone, address and message. You receive an acknowledgement of receipt, an appointment confirmation with a calendar file once we have confirmed, and a reminder 24 hours before the appointment.
• Registration (members' area): email address and password (Google Firebase only stores the password in encrypted form). We are notified of new registrations with email, time, IP address and approximate origin.

The information is stored in our database and sent to us by email. On request, we send a confirmation to the address provided. To prevent misuse, we limit the number of requests per sender and hour; for this purpose we briefly store a technical identifier.

Website assistant (AI chat)

On the home page you can ask questions to a chat assistant. It only starts when you open it and send a message. Your messages and the previous conversation are transmitted via our server (Google Cloud, Zurich) to the AI service Claude of Anthropic PBC (USA), which generates the answers. According to Anthropic, data from the API is not used to train its models and is deleted after a short period. Otherwise, the conversation only remains in your browser tab (session storage) and is discarded when you close the tab. To protect against misuse, we count requests per hour and day using a technical identifier and the IP address.

If you would like us to get back to you, the assistant forwards your request with your name, email or phone number and the conversation to us – only with your consent. We store this request like a message sent via the contact form and deliver it to us by email and, for quick handling, via Telegram (Telegram Messenger Inc., Dubai/United Kingdom). Please do not enter particularly sensitive data such as health information, passwords or payment details in the chat. The answers are generated by AI; they may contain errors and are not binding.

6. Members' area and customer portal

In the members' area we process your email address, messages between you and us, offers and documents provided for you and – if you make payments via Stripe – an overview of your payments, invoices and subscriptions (see section 7).

In the customer portal (login with licence number and password) we process your customer data (name, company, contact details, address), your licences with term and access details, and subscriptions. You can change your contact details there yourself. To protect against password guessing, the number of login attempts per licence number and IP address is limited.

7. Shop and payments

We process payments in the shop, in the members' area and for licence subscriptions via Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland, and Stripe, Inc., USA). To pay, you are redirected to a Stripe page. There, Stripe collects your name, email, phone, billing address and payment details (e.g. card details); we do not receive card details. From Stripe we receive confirmation of the payment as well as name, email, phone, address and any licence number provided, in order to match the order, licence or subscription. Stripe also processes data for fraud prevention under its own responsibility; the Stripe privacy policy applies.

8. Email communication and advertising

We send and receive our emails via Apple iCloud Mail (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, and Apple Inc., USA). To answer enquiries and support customers, we keep a customer list with name, company, contact details, groups, notes and the history of the emails exchanged.

We only send advertising (e.g. information about offers and news) by email if you have consented. We record when and how consent was given. Every advertising email contains an unsubscribe link; after unsubscribing you will no longer receive advertising. Personal messages, offers and invoices that you have requested are not affected.

9. Cookies, local storage and consent

On your first visit we ask which optional services you allow. Necessary storage is always active; statistics, marketing and external media only load after your consent. You can change your choice at any time:

Open cookie settings

We do not use any advertising cookies ourselves. We store the following entries in your browser's storage (localStorage, sessionStorage, IndexedDB):

Third-party services may set their own cookies after your consent (see section 10).

10. Services used only with consent

Statistics: Google Analytics

With your consent, we use Google Analytics 4 (Google Ireland Limited, Ireland, and Google LLC, USA) to analyse the use of the website (e.g. pages viewed, time spent, approximate location, device type). Google sets cookies for this purpose (e.g. «_ga»). IP addresses are not stored in Google Analytics 4. If you withdraw your consent, we delete these cookies the next time a page is loaded. More information: Google privacy policy.

Marketing: Travelpayouts

With your consent, we load a script from Travelpayouts (emrld.ltd). It converts links to travel offers (e.g. flights, rental cars, transfers, eSIM) into partner links so that we can receive a commission on bookings, and may set cookies and collect usage data for this purpose.

External media: TradingView, Airbnb, Avionio

• TradingView (TradingView, Inc., USA): price ticker and price chart on the home page.
• Airbnb (Airbnb Ireland UC, Dublin, Ireland): preview cards of our apartments.
• Avionio: live flight schedule of Puerto Plata airport.

When this content is loaded, your IP address and browser data are transmitted to the respective provider, who may also set cookies. Without consent, you will see a placeholder instead; the normal links to the providers remain usable.

11. Other third-party content

For individual functions we load data from the following services. For technical reasons, the respective service receives your IP address and browser data; we do not set cookies as a result.

If you choose «My location» in the weather widget, your browser asks for permission first. The exact location is only used for the weather query and is not stored by us.

12. Embedded applications and links

Individual areas embed our own applications, which are only loaded when you open the area, including BTC Manager (bitcoin.mhwe.services), cash book (kasse.mhwe.services), QR bill (qrbill.mhwe.services) and the customer portal. The respective providers are responsible for links to external sites (e.g. WhatsApp, Proton Meet, Airbnb, travel portals via partner links, news sites); their privacy policies apply as soon as you open the link.

13. Disclosure abroad

Our service providers also process data outside Switzerland, in particular in the EU and the USA (Google, Stripe, Apple, TradingView, GitHub, Anthropic); the registered office of the controller is in the Dominican Republic. Where, in the opinion of the Swiss Federal Council or the EU Commission, a country does not offer adequate data protection, we rely – where the provider provides for this – on the Swiss-U.S. or EU-U.S. Data Privacy Framework or on standard contractual clauses, or the disclosure is necessary for the performance of a contract with you.

14. Retention period

We only store personal data for as long as is necessary for the purpose or as required by statutory retention obligations:

• Business records such as orders, invoices and payment receipts: 10 years (Art. 958f Swiss Code of Obligations).
• Chat with the website assistant: stored by us only if the request is forwarded (then like contact requests); otherwise only in the browser tab until it is closed.
• Contact, booking and appointment requests, email correspondence: until completed and thereafter only as long as necessary for any follow-up questions, unless a retention obligation applies.
• Accounts in the members' area and customer portal: until the account is deleted or the customer relationship ends, thereafter within the scope of retention obligations.
• Consent to advertising: until withdrawn; we keep proof of consent or unsubscription.
• Visitor statistics: for as long as the entries are needed for the evaluation.
• Misuse protection (counters per hour or day): only for checking the respective period.

15. Data security

We take appropriate technical and organisational measures: encrypted transmission (HTTPS), access rules under which visitors can only see their own data, access to customer and access data for administrators only, protection against automated requests, and storing access credentials for mail and payment services exclusively on the server. However, absolute security is not possible when transmitting data over the internet.

16. Your rights

Within the scope of applicable law, you have the right to

• request information as to whether and which personal data we process about you,
• have incorrect data corrected and have data deleted or its processing restricted,
• obtain your data in a common electronic format or have it transferred,
• object to processing based on legitimate interests, and to advertising at any time,
• withdraw consent given at any time with effect for the future.

To do so, please contact support@mhwe.net. We may ask for proof of your identity. You also have the right to lodge a complaint with a supervisory authority – in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, or, where the GDPR applies, with the supervisory authority at your place of residence or work.

17. Changes

We adapt this privacy policy when our data processing or the legal situation changes. The version published on this page applies.