Sascha Abegglen, Hotel Châlet Du Lac, manages the Hotel Châlet Du Lac in Iseltwald and is the operator of the website www.dulac-iseltwald.ch and therefore responsible for the collection, processing and use of your personal data and the compliance of data processing with the applicable data protection law.
Your trust is important to us, which is why we take the issue of data protection seriously and pay attention to appropriate security. It goes without saying that we comply with the legal provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR). So that you know what personal data we collect from you and for what purposes we use it, please take note of the following information.
A. Data processing in connection with our website
0. SSL encryption
The website operators use SSL encryption to protect your transmitted data in the best possible way. You can recognize such encrypted connections by the prefix "https://" in the page link in the address bar of your browser. Unencrypted pages are marked with "https://".
Thanks to SSL encryption, all data that you transmit to this website - for example when making inquiries or logging in - cannot be read by third parties.
1. calling up our website
When you visit our website, our servers temporarily store every access in a log file. As with every connection to a web server, the following technical data is recorded without any action on your part and stored until it is automatically deleted:
- the IP address of the requesting computer,
- the name of the owner of the IP address range (usually your Internet access provider),
- the date and time of access,
- the website from which the access was made (referrer URL) with the search term used, if applicable,
- the name and URL of the retrieved file,
- the status code (e.g. error message),
- the operating system of your computer,
- the browser you are using (type, version and language),
- the transmission protocol used (e.g. HTTP/1.1) and
- If applicable, your user name from a registration/authentication
This data is collected and processed for the purpose of enabling the use of our website (connection establishment), ensuring system security and stability in the long term and enabling the optimization of our website as well as for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR. The IP address is also evaluated together with the other data in the event of attacks on the network infrastructure or other unauthorized or abusive website use for clarification and defense and, if necessary, used in the context of criminal proceedings for identification and for civil and criminal proceedings against the users concerned. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR.
2. use of our contact form
You have the option of using a contact form to get in touch with us to order a voucher. We require the following information for this:
- First and last name
- Complete address
- Phone number
- E-mail address
- Value and type of voucher
- possible message / remark
We only use this data to answer your request in the best possible and personalized way. The processing of this data is therefore necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the implementation of pre-contractual measures or is in our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
3. booking on the website, by correspondence or by telephone call
If you make bookings either via our website, by correspondence (email or letter post) or by telephone call, we require the following data in order to process the contract:
- Salutation
- First and last name
- Postal address
- Date of birth
- Phone number
- Language
- Credit card information
- E-mail address
We will only use this data and other information voluntarily provided by you (e.g. expected arrival time, motor vehicle license plate, preferences, comments) to process the contract, unless otherwise stated in this privacy policy or unless you have given your separate consent. We will process the data by name in order to record your booking as requested, to provide the booked services, to contact you in the event of ambiguities or problems and to ensure correct payment. The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR. When booking via our online booking "SuperBooking" of the company GHIX AG, Stanserstrasse 7, 6362 Stansstad, Switzerland, we refer to the privacy policy of the company GHIX, which you can find in the footer of the booking page.
4. Cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies process certain information from you, such as your browser or location data or your IP address, to an individual extent.
Cookies help in many ways to make your visit to our website easier, more pleasant and more useful. For example, we use cookies to temporarily store your selected services and entries when you fill out a form on the website so that you do not have to repeat the entry when you call up another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website without you having to log in again when you access another sub-page.
Most Internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. If you deactivate cookies, you may not be able to use all the functions of our website.
B. Data processing in connection with your stay
5. data processing to fulfill legal reporting obligations
Upon arrival at our hotel, we may require the following information from you and your accompanying persons:
- First and last name
- Postal address and canton
- Date of birth
- Place of birth
- Nationality
- Official identification card and number
- Arrival and departure day
- Room number
We collect this information to fulfill legal reporting obligations, which arise in particular from hospitality or police law. Insofar as we are obliged to do so under the applicable regulations, we forward this information to the competent police authority and our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the fulfillment of the legal requirements.
6. recording of purchased services
If you purchase additional services during your stay (e.g. consumption in the restaurant), we will record the subject of the service and the time of purchase for billing purposes. The processing of this data is necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the execution of the contract with us.
C. Storage and exchange of data with third parties
7. booking platforms
If you make bookings via a third-party platform (such as Booking.com), we receive various personal information from the respective platform operator. This is generally the data listed in section 3 of this privacy policy. In addition, we may receive inquiries about your booking. We will process this data by name in order to record your booking as requested and provide the booked services. The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR. Finally, we may be informed by the platform operators about disputes in connection with a booking. We may also receive data on the booking process, which may include a copy of the booking confirmation as proof of the actual completion of the booking. We process this data to safeguard and enforce our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Please also note the data protection information of the respective provider.
8. central storage and linking of data
We store the data specified in sections 2-3 and 5-7 in a central electronic data processing system. The data relating to you is systematically recorded and linked in order to process your bookings and handle the contractual services. We base the processing of this data within the software on our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in customer-friendly and efficient customer data management. 9. retention period
We only store personal data for as long as is necessary to use the above-mentioned tracking services and other processing within the scope of our legitimate interest. We store contractual data for longer, as this is required by statutory retention obligations. Retention obligations that oblige us to retain data result from regulations on reporting law, accounting and tax law. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes. 10. disclosure of data to third parties
We only disclose your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties insofar as this is necessary for the use of the website and the processing of contracts (including outside the website), in particular the processing of your bookings.
A service provider to whom the personal data collected via the website is passed on or who has or may have access to it is our web host netfuchs gmbh, untere Bönigstrasse 10a, 3800 Interlaken. The website is hosted on servers in Germany. The data is passed on for the purpose of providing and maintaining the functionalities of our website. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Finally, we forward your credit card information to your credit card issuer and the credit card acquirer when you pay by credit card on the website. If you decide to pay by credit card, you will be asked to enter all mandatory information. The legal basis for passing on the data is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR. With regard to the processing of your credit card information by these third parties, we ask you to also read the General Terms and Conditions and the privacy policy of your credit card issuer.
11. Transfer of personal data abroad
We are also entitled to transfer your personal data to third parties (contracted service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.
D. Further information
12. right to information, rectification, erasure and restriction of processing; right to data portability
You have the right to request information about the personal data that we store about you. In addition, you have the right to rectification of incorrect data and the right to erasure of your personal data, insofar as this does not conflict with a statutory retention obligation or a permission that allows us to process the data.
You also have the right to request that we return the data that you have provided to us (right to data portability). On request, we will also forward the data to a third party of your choice. You have the right to receive the data in a commonly used file format.
You can contact us for the aforementioned purposes via the e-mail address abegglen(at)dulac-iseltwald.ch. We may, at our discretion, request proof of identity in order to process your application.
13. data security
We use suitable technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.
We also take data protection within the company very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and to comply with data protection regulations.
14. note on data transfers to the USA
For the sake of completeness, we would like to point out to users resident or domiciled in Switzerland that there are surveillance measures in place in the USA by US authorities that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without differentiation, restriction or exception based on the objective pursued and without an objective criterion that makes it possible to restrict the US authorities' access to the data and its subsequent use to very specific, strictly limited purposes that justify the interference associated with both access to this data and its use. We would also like to point out that there are no legal remedies available in the USA for data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective legal protection against general access rights of US authorities. We explicitly draw the attention of the data subject to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.
We would like to point out to users residing in a member state of the EU that the USA does not have an adequate level of data protection from the perspective of the European Union - partly due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google) are based in the USA, we will ensure that your data is protected at an appropriate level by our partners either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield.
15. right to lodge a complaint with a data protection supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority at any time.
16. on our own behalf
This privacy policy was created to the best of our knowledge and belief based on the recommendations of Hotelleriesuisse. Status: January 2019
