Data Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.

The use of our website is usually possible without providing personal data. As far as personal data (e.g. name, address or e-mail addresses) is collected on our pages, this is always done on a voluntary basis, as far as possible. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Cookies

The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit us.

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request

These data cannot be assigned to specific persons. A consolidation of this data with other data sources is not carried out. We reserve the right to check this data subsequently if we become aware of concrete indications of illegal use.
Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

Newsletter data

On our website you have the possibility to subscribe to our newsletter. For this purpose a registration is required. The following data must be provided during registration:

Salutation
First and last name
E-mail address

The above data are necessary for data processing. In addition, you can voluntarily provide further data (date of birth and country). We process these data exclusively to personalize the information and offers sent to you and to better align them with your interests.

By registering, you give us your consent to process the data provided for the regular dispatch of the newsletter to the address you have given us and for the statistical evaluation of user behaviour and optimisation of the newsletter. This consent constitutes our legal basis for processing your e-mail address in accordance with Art. 6 Para. 1 letter a DSGVO. We are entitled to commission third parties with the technical processing of advertising measures and are entitled to pass on your data for this purpose (cf. point 13 below).

At the end of each newsletter there is a link which you can use to cancel the newsletter at any time. When you unsubscribe, you can voluntarily inform us of the reason for the cancellation. After cancellation, your personal data will be deleted. Further processing is only carried out in an anonymous form to optimise our newsletter.

Opening of a customer account

To make bookings on our website, you can order as a guest or open a customer account. When registering for a customer account, we collect the following data:

Salutation
First and last name
Postal address
Date of birth
Phone number
email address
Password

The collection of this and other data provided voluntarily by you (e.g. company name) is carried out for the purpose of providing you with password-protected direct access to your basic data stored with us. You can view your previous and current bookings or manage or change your personal data.

The legal basis for processing the data for this purpose is the consent you have given us in accordance with Art. 6 Para. 1 letter a DSGVO.

Booking on the website, by correspondence or by telephone

If you make bookings either via our website, by correspondence (e-mail or letter post) or by telephone call, we require the following data for the processing of the contract:

Salutation
First and last name
Postal address
Date of birth
Phone number
Language
Credit card information
E-mail address

We will only use this data as well as other information provided voluntarily by you (e.g. expected time of arrival, motor vehicle control plate, preferences, remarks) for processing the contract, unless otherwise stated in this data protection declaration or unless you have given your separate consent. We will process the data by name in order to record your booking according to your wishes, to provide the booked services, to contact you in case of any uncertainties or problems and to ensure correct payment.

The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b DSGVO.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Ireland Limited in Dublin, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland is responsible for users from the European Economic Area.

Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

IP Anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Opposition to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your information on future visits to this site: Google Analytics deaktivieren

You can find more information on how Google Analytics handles user data in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Contract data processing

We have concluded a contract with Google for commissioned data processing.

Google Maps

This website uses the "Google Maps and Route Planner" function of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"), for users from the European Economic Area Google Ireland Limited in Dublin, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. to display and calculate geographical information and directions. Through Google Maps, data about your use of this website can be transferred to Google, collected and used by Google. You can prevent such a data transfer if you deactivate "Javascript" in your browser. In this case, however, no maps can be displayed. By using this website and not deactivating "Javascript", you declare your consent to the processing of your data by Google for the above purpose. Further information about how "Google Maps" and the route planner use your data and the Google privacy policy can be found at: https://www.google.com/intl/de_de/help/terms_maps.html
Facebook Plugins (Like Button)

Our pages integrate plugins from the social network Facebook, provider Facebook Inc. 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like Button" ("Like") on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook "Like-Button" while you are logged in to your Facebook account, you can link the contents of our Pages on your Facebook profile. This allows Facebook to associate your visit to our Pages with your user account. We would like to point out that we, as the provider of the Pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find more information on this in the Facebook privacy policy at https://de-de.facebook.com/policy.php.

If you do not want Facebook to be able to assign visits to our Pages to your Facebook user account, please log out of your Facebook user account.

Google Fonts

Our website uses features of the CDN Google font. Provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, for users from the European Economic Area is Google Ireland Limited in Dublin, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Each time you access one of our pages that contains Google Fonts features, a connection to Google Fonts servers is established. Google Fonts is informed that you have visited our website with your IP address.

Data processing to fulfil legal reporting obligations

Upon arrival at our hotel, we may need the following information from you and your accompanying persons:

First and last name
Postal address and canton
Date of birth
Place of birth
Nationality
Official identification card and number
Arrival and departure day
Room number

We collect this information in order to fulfil legal reporting obligations, which arise in particular from hospitality or police law. Insofar as we are obliged to do so under the applicable regulations, we forward this information to the competent police authority.

We have a legitimate interest in the fulfilment of the legal requirements within the meaning of Art. 6 Para. 1 lit. f DSGVO.

Recording of purchased services

If you receive additional services during your stay (e.g. you make use of the mini-bar or the pay TV offer), the object of the service and the time of the service receipt will be recorded by us for accounting purposes. The processing of this data is necessary in the sense of Art. 6 para. 1 lit. b DSGVO for the execution of the contract with us.

Booking platforms

If you make bookings via a third-party platform, we receive various personal information from the respective platform operator. As a rule, this is the data listed in section 5 of this data protection declaration. In addition, we may receive requests for information about your booking. We will process these data by name in order to record your booking as requested and to provide the services you have booked. The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b DSGVO.

Finally, we may be informed by the platform operators about disputes in connection with a booking. We may also receive information about the booking process, which may include a copy of the booking confirmation as evidence of the actual booking. We process this data to protect and enforce our claims. This is our legitimate interest within the meaning of Art. 6 Par. 1 lit. f DSGVO. Please also note the information on data protection of the respective provider.

Central storage and linking of data

We store the data specified in paragraphs 2-5 and 8-10 in a central electronic data processing system. The data concerning you will be systematically recorded and linked for the purpose of processing your bookings and handling the contractual services. For this purpose we use a software of altaica informatik GmbH, Oberdorfstrasse 120 3920 Zermatt, Switzerland. We base the processing of this data within the software on our legitimate interest in the sense of article 6 paragraph 1 letter f DSGVO in a customer-friendly and efficient customer data management.

Retention period

We store personal data only as long as it is necessary to use the above-mentioned tracking services and further processing within the scope of our legitimate interest. Contract data will be stored by us for a longer period of time, as this is required by legal storage obligations. Retention obligations which oblige us to retain data result from regulations on the right to report, on accounting and from tax law. According to these regulations, business communication, concluded contracts and accounting vouchers must be kept for up to 10 years. If we no longer need this data to provide services to you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

Transfer of data to third parties

We will only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we will pass on your data to third parties as far as this is necessary within the scope of the use of the website and the processing of the contract (also outside the website), namely the processing of your bookings.

One service provider to whom the personal data collected via the website is passed on or who has or can have access to it is our web host Umbraco. The website is hosted on servers in Switzerland. The data is passed on for the purpose of providing and maintaining the functionality of our website. This is our legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.

Finally, we forward your credit card information to your credit card issuer as well as to the credit card acquirer when you pay by credit card on the website. If you decide to pay by credit card, you will be asked to enter all mandatory information. The legal basis for the transfer of data is the fulfilment of a contract according to Art. 6 para. 1 lit. b DSGVO. With regard to the processing of your credit card information by these third parties, we ask you to also read the General Terms and Conditions and the data protection declaration of your credit card issuer.

Please also note the information in sections 7-8 and 10-11 regarding the transfer of data to third parties.

Transfer of personal data abroad

We may also transfer your personal data to third parties (commissioned service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are obliged to the same extent as we are ourselves to protect your data. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we will ensure by contract that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

Data security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you use the computer together with others.

We also take internal data protection very seriously. Our employees and the service companies we commission have been obligated by us to maintain confidentiality and to comply with data protection regulations.

Note on data transfers to the USA

For the sake of completeness, we would like to point out to users who are resident or domiciled in Switzerland that surveillance measures are in place in the USA by US authorities, which generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, restriction or exception based on the objective pursued and without any objective criterion that would make it possible to limit access to the data by the US authorities and its subsequent use to very specific, strictly limited purposes that could justify the interference associated with both access to and use of the data. Furthermore, we would like to point out that there are no legal remedies available in the United States for data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective judicial protection against general access rights of US authorities. We explicitly draw the data subject's attention to this legal and factual situation in order to make an appropriately informed decision to consent to the use of his or her data.

We would like to point out to users residing in a member state of the EU that, from the perspective of the European Union, the USA does not have an adequate level of data protection - among other things due to the issues mentioned in this section. Insofar as we have explained in this data protection declaration that recipients of data (such as Google) are based in the USA, we will ensure that your data is protected at an appropriate level with our partners, either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield.

SSL Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL encryption is activated, the data you send to us cannot be read by third parties.

Right to information, deletion, blocking

You have the right to receive information free of charge at any time about your stored personal data, its origin and recipients and the purpose of data processing, as well as the right to correct, block or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address given in the imprint.