We, Hotel Fafleralp AG, Faflerstrasse 2, 3919 Blatten, Switzerland, are the operator of the hotel HIDEWAY RESORT FAFLERALP (hotel) and the website www.fafleralp.ch (website) and, unless otherwise stated in this privacy policy, we are responsible for the data processing listed in this privacy policy.Please take note of the following information so that you know what personal data we collect from you and for what purposes we use it. We base our data protection policy primarily on the statutory provisions of Swiss data protection law, in particular the Federal Act on Data Protection (FADP).Please note that the following information is reviewed and amended from time to time. We therefore recommend that you consult this privacy policy regularly. Furthermore, other companies are responsible or jointly responsible with us under data protection law for individual data processing operations listed below, so that in these cases the information provided by these providers is also authoritative.
If you have any questions about data protection or wish to exercise your rights, please contact our data protection contact person by sending an e-mail to the following address: direktion@faflerap.ch.Contact person isTatjana Jaggyc/o Hideaway Resort FafleralpFaflerstrasse 23919 Blattendirektion@fafleralp.ch
If you contact us via our contact addresses and channels (e.g. by e-mail or telephone), your personal data will be processed. The data that you have made available to us, such as your name, your e-mail address or telephone number and your request, will be processed. In addition, the time of receipt of the request is documented. We process this data in order to implement your request (e.g. to provide information about our hotel, support with contract processing such as questions about your booking, incorporation of your feedback into the improvement of our services, etc.).We use a PMS from Huber & Kreuzeder OG, X Software Solutions, Hauptstraße 20, 5166 Perwang am Grabensee, Austria, to process contact requests via the contact form. Therefore, your data may be stored in a database of Huber & Kreuzeder OG, which may enable Huber & Kreuzeder OG to access your data if this is necessary for the provision of the software and for support in the use of the software. Information on the processing of data by third parties and any transfer abroad can be found in section 4 of this privacy policy.
You have the option of booking an overnight stay on our website. We collect the following data for this purpose:- First name- Surname- Telephone number- Email- Booking details- Comments- Confirmation of acknowledgement of the reservation conditions- Confirmation of acknowledgement and agreement regarding terms and conditions and data protection provisionsWe use the data to establish your identity before concluding a contract. We need your e-mail address to confirm your booking and for future communication with you that is necessary to process the contract. We will store your data together with the peripheral data of the booking (e.g. room category, period of stay as well as name, price and features of the services) as well as the information on the processing and fulfillment of the contract (e.g. receipt and handling of complaints) in our PMS (see section 4) so that we can guarantee correct booking processing and contract fulfillment.Insofar as this is necessary for the fulfillment of the contract, we will also pass on the required information to any third-party service providers (e.g. tour operators, transport companies).The provision of data that is not marked as mandatory is voluntary. We process this data in order to tailor our offer to your personal needs in the best possible way, to facilitate the processing of contracts, to contact you via an alternative communication channel if necessary with a view to fulfilling the contract or for statistical recording and evaluation to optimize our offers.We use a software application from simpleBOOKING Zucchetti Group, Via Lucca, 52-50142 - Florence, Italy to provide the online store. Therefore, your data may be stored in a database of simpleBOOKING Zucchetti Group, which may allow simpleBOOKING Zucchetti Group to access your data if this is necessary for the provision of the software and for support in the use of the software. Information on the processing of data by third parties and any transfer abroad can be found in section 4 of this Privacy Policy.The legal basis for this data processing is the performance of a contract with you pursuant to Art. 6 para. 1 lit. b GDPR.simpleBOOKING Zucchetti Group may wish to use some of this data for its own purposes (e.g. to send marketing emails or for statistical analysis). simpleBOOKING Zucchetti Group is responsible for this data processing and must ensure compliance with data protection laws in connection with this data processing. Information on data processing by simpleBOOKING Zucchetti Group can be found at https://www.simplebooking.it/ibe/hotelbooking/search?hid=6541 - Data protection.
If you make bookings via a third-party platform (i.e. via Booking, Lötschental Tourism, etc.), we receive various personal data from the respective platform operator in connection with the booking made. This is generally the data listed in section 4.1 of this privacy policy. In addition, we may receive inquiries about your booking. We will process this data by name in order to record your booking as requested and to provide the booked services.Finally, we may exchange personal data with the platform operators in the event of disputes or complaints in connection with a booking, insofar as this is necessary to protect our legitimate interests. This may also include data relating to the booking process on the platform or data relating to the booking or processing of services and the stay with us. We process this data to safeguard our legitimate claims and interests in the processing and maintenance of our contractual relationships with the following platform operators:Processing and maintenance of our contractual relationships with the following platform operators:- Booking.com B.V., Oosterdokskade 163, 1011 DL, Netherlands. Further information on data processing in connection with Booking.com B.V. can be found at https://www.booking.com/content/privacy.de.html- TouristDataShop AG, rue du midi 3, 1860 Aigle, Switzerland. Further information on data processing in connection with Tourist Data Shop AG can be found at https://touristdatashop.ch/de/datenschutz.htmlYour data is stored in the databases of the platform operators, which enables you to access your data. Information on the processing of data by third parties and any transfer abroad can be found in section 4 of this privacy policy.
If you purchase products, services or pay for your stay at our hotel using electronic payment methods, the processing of personal data is required. By using the payment terminals, you transmit the information stored in your payment method, such as the name of the cardholder and the card number, to the payment service providers involved (e.g. providers of payment solutions, credit card issuers and credit card acquirers). They also receive the information that the payment method was used in our hotel, the amount and the time of the transaction. Conversely, we only receive the credit of the amount of the payment made at the relevant time, which we can assign to the relevant receipt number, or information that the transaction was not possible or was canceled. Please always refer to the information provided by the respective company, in particular the privacy policy and the general terms and conditions.
If you purchase services as part of your stay (e.g. additional overnight stays, wellness, restaurant, activities), we will collect and process the data relating to the booking (e.g. time and comments) and the data relating to the booked and purchased service (e.g. subject matter of the service, price and time of purchase) in addition to your contract data in order to process the service, as described in sections 3.2 and 3.3.
If you register for our marketing emails (e.g. by ticking this box on the registration form when you arrive at the hotel), the following data will be collected. Mandatory fields are marked with an asterisk (*) during registration:- e-mail address- language- first name and surnameBy registering, you consent to the processing of this data in order to receive marketing e-mails from us about our hotel and related information on products and services. These marketing emails may also include invitations to participate in competitions, to provide feedback or to rate our products and services. The collection of the salutation and the first and last name allows us to assign the registration to a possibly already existing customer account and thus to personalize the content of the marketing e-mails. The link to a customer account allows us to make the offers and content contained in the marketing e-mails more relevant to you and better tailored to your potential needs.We use your data for sending marketing e-mails until you withdraw your consent. Revocation is possible at any time, in particular via the unsubscribe link contained in all marketing e-mails.Our marketing e-mails may contain a so-called web beacon, 1x1 pixel (tracking pixel) or similar technical aids. A web beacon is an invisible graphic that is linked to the user ID of the respective subscriber. For each marketing email sent, we receive information on which email addresses it was successfully sent to, which email addresses have not yet received the marketing email and which email addresses failed to receive it. We also see which email addresses have opened the marketing email and for how long, and which links have been clicked on. Finally, we also receive information about which subscribers have unsubscribed from the mailing list. We use this data for statistical purposes and to optimize the marketing e-mails in terms of frequency and time of sending as well as the structure and content of the marketing e-mails. This enables us to better tailor the information and offers in our marketing emails to the individual interests of the recipients.The web beacon is deleted when you delete the marketing emails. You can prevent the use of web beacons in our marketing emails by setting the parameters of your email program so that HTML is not displayed in messages. You can find information on how to configure this setting in the help section of your email software application, e.g. here for Microsoft Outlook.By subscribing to the marketing emails, you also consent to the statistical analysis of user behaviour for the purpose of optimizing and adapting the marketing emails.To provide marketing emails, we use a software application from Mailchimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. Therefore, your data may be stored in a database of The Rocket Science Group, which may allow The Rocket Science Group to access your data if this is necessary for the provision of the software and for support in the use of the software. Information on the processing of data by third parties and any transfer abroad can be found in section 4 of this privacy policy.You can revoke your consent at any time for the future.The Rocket Science Group may wish to use some of this data for its own purposes (e.g. to send marketing e-mails or for statistical analyses). The Rocket Science Group is responsible for this data processing and must ensure compliance with data protection laws in connection with this data processing. Information about data processing by The Rocket Science Group can be found at https://www.intuit.com/privacy/statement/.
In our hotel you have the opportunity to use the WiFi network operated by Swisscom (Switzerland) Ltd, Alte Tiefenaustrasse 6, 3050 Bern, Switzerland, free of charge. Registration is not necessary.In addition to the above data, data on the time and date of use, the network used and the end device are recorded each time the WiFi network is used. You can revoke this consent at any time for the future.The controller for this data processing is Swisscom (Switzerland) Ltd. As part of the registration process, you give your consent to Swisscom (Switzerland) Ltd and must accept the terms of use and privacy policy of Swisscom (Switzerland) Ltd.
Upon arrival at our hotel, we may require the following information from you and your accompanying persons, whereby mandatory information is marked with an asterisk (*) in the corresponding form:- First and last name- Billing address- Date of birth- Nationality- Identity card or passport (only for foreign nationals)- Arrival and departure dateWe collect this information to fulfill legal reporting obligations, which arise in particular from hospitality or police law. If we are obliged to do so under the applicable regulations, we will forward this information to the competent authority.
You have the opportunity to apply for a job in our company either spontaneously or in response to a specific job advertisement. In doing so, we process the personal data you provide.We use the data you provide to check your application and suitability for employment. Application documents of unsuccessful applicants will be deleted at the end of the application process, unless you explicitly consent to a longer retention period or we are legally obliged to retain them for a longer period.
Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to pass on your personal data to these companies to a certain extent. Data is only passed on to selected third-party service providers and only to the extent necessary for the optimal provision of our services.Various third-party service providers are already explicitly mentioned in this privacy policy. These are the following service providers:- feratel media technologies AG, Maria-Theresien-Straße 8, A-6020 Innsbruck, Austria. Further information on data processing in connection with feratel media technologies AG can be found at https://www.feratel.com/datenschutz.html- Lötschental Marketing AG, Dorfstrasse 80, CH-3918 Wiler, Switzerland. Further information on data processing in connection with Lötschental Marketing AG can be found at https://www.loetschental.ch/de/rechtliches/datenschutz- Idea Creation GmbH, Walchestrasse 15, CH-8006 Zurich, Switzerland. Further information on data processing in connection with Idea Creation GmbH can be found at https://www.e-guma.ch/datenschutz/Your data will also be passed on if this is necessary to fulfill the services you have requested, e.g. to restaurants or providers of other services for which you have made a reservation through us. The third-party service providers are responsible for this data processing within the meaning of the Data Protection Act and not us. It is the responsibility of these third-party service providers to inform you about their own data processing - beyond the disclosure of data for the provision of services - and to comply with data protection laws.In addition, your data may be disclosed, in particular to authorities, legal advisors or debt collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from the relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carry out a due diligence review or to complete the transaction.
We are also entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing mentioned in this privacy policy. Individual data transfers have been mentioned above in section 3. It goes without saying that the statutory provisions on the disclosure of personal data to third parties are complied with. The countries to which data is transferred include those that the Federal Council has decided have an adequate level of data protection (such as the member states of the EEA, but also countries (such as the USA) whose level of data protection is not considered adequate (see Annex 1 of the Data Protection Ordinance (DPA)). If the country in question does not have an adequate level of data protection, we ensure that your data is adequately protected by these companies by means of suitable guarantees, unless an exception is specified for individual data processing. Unless otherwise stated, these are standard contractual clauses that can be found on the website of the Federal Data Protection and Information Commissioner (FDPIC). If you have any questions about the measures taken, please get in touch with our contact person for data protection (see section 2).
Some of the third-party service providers mentioned in this privacy policy are based in the USA. For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland or the EU that there are surveillance measures in place in the USA by US authorities that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland or the EU to the USA. This is done without differentiation, restriction or exception based on the objective pursued and without an objective criterion that makes it possible to restrict the US authorities' access to the data and its subsequent use to very specific, strictly limited purposes that are capable of justifying the interference associated with both access to this data and its use. We would also like to point out that there are no legal remedies or effective legal protection in the USA for data subjects from Switzerland or the EU against general access rights of US authorities that would allow you to gain access to the data concerning you and to obtain its correction or deletion. We explicitly draw your attention to this legal and factual situation in order to enable you to make an appropriately informed decision to consent to the use of your data.We would also like to point out to users residing in Switzerland or a member state of the EU that the USA does not have an adequate level of data protection from the perspective of the European Union and Switzerland - partly due to the statements made in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google) are based in the USA, we will ensure that your data is adequately protected by our third-party service providers through contractual arrangements with these companies and any additional appropriate guarantees that may be required.
When you visit our website, the servers of our hosting provider Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA, temporarily store every access in a log file. The following data is collected without any action on your part and stored by us until it is automatically deleted:- IP address of the requesting computer- Date and time of access- Name and URL of the file accessed- Website from which the access was made, if applicable with the search term used- Operating system of your computer and the browser you are using (incl. type, version and language setting) Type, version and language setting)- Device type in the case of access by cell phone- City or region from which the access was made- Name of your Internet access providerThis data is collected and processed for the purpose of enabling the use of our website (connection establishment), ensuring system security and stability on a permanent basis, enabling error and performance analysis and optimization of our website (cf. for the last points also see section 5.3).In the event of an attack on the network infrastructure of the website or in the event of suspicion of other unauthorized or improper use of the website, the IP address and other data will be evaluated for clarification and defense and, if necessary, used in the context of civil or criminal proceedings to identify the user concerned.Finally, when you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. The data described here may also be processed in this context. You will find more detailed information on this in the following sections of this privacy policy, in particular section 7 below.
This website uses the Programmable Search Engine of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). This enables us to provide you with an efficient search function on our website.By pressing the enter key or clicking on the search button, the search function is activated and Google's search results are displayed on the search results page by means of an embedding (iFrame). When the search results are retrieved, a connection is established with Google's servers and your browser may send the log file data listed in section 5.1 (incl. IP address) and the search term you entered to Google. This may also result in data being transferred to servers abroad, e.g. in the USA (see sections 4.2 and 4.3, in particular on the lack of an adequate level of data protection and the guarantees provided).For further processing of the data by Google, please refer to Google's privacy policy: www.google.com/intl/de_de/policies/privacy.
We use the web analysis services listed below for the purpose of designing and continuously optimizing our website to meet your needs. In this context, pseudonymized user profiles are created and cookies are used (please also refer to section 5.1.). The information generated by the cookie about your use of this website is usually transmitted to a server of the service provider together with the log file data listed under section 5.1, where it is stored and processed. This may also result in a transfer to servers abroad, e.g. in the USA (see, in particular, the lack of an adequate level of data protection and the guarantees provided, sections 4.2 and 4.3).By processing the data, we receive the following information, among others:- navigation path that a visitor takes on the site (incl. content viewed and products selected or purchased or services booked); - navigation path that a visitor takes on the site (incl. content viewed and products selected or purchased); - navigation path that a visitor takes on the site (incl. content viewed and products selected or purchased or services booked). booked services);- time spent on the website or subpage;- subpage on which the website is left;- country, region or city from which access is made;- end device (type, version, color depth, resolution, width and height of the browser window); and- returning or new visitor.On our behalf, the provider will use this information to evaluate the use of the website, in particular to compile website activity and to provide other services related to website activity and internet usage for the purposes of market research and needs-based design of these websites. For these processing operations, we and the providers can be regarded as joint controllers under data protection law up to a certain extent.The legal basis for this data processing with the following services is your consent within the meaning of Art. 6 para. 1 lit. GDPR. You can withdraw your consent or refuse processing at any time by rejecting or deactivating the relevant cookies in your web browser settings (see section ) or by making use of the service-specific options described below.For further processing of the data by the respective provider as the (sole) controller under data protection law, in particular any disclosure of this information to third parties, e.g. to authorities due to national legal regulations, please refer to the respective social media Facebook, Instagram and LinkedIn.
On our website we have included links to our profiles in the social networks of the following providers:- Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA, Privacy PolicyIf you click on the icons of the social networks, you will be automatically redirected to our profile in the respective network. This establishes a direct connection between your browser and the server of the respective social network. As a result, the network receives the information that you have visited our website with your IP address and clicked on the link. This may also result in data being transferred to servers abroad, e.g. in the USA (see sections 4.2 and 4.3, in particular on the lack of an adequate level of data protection and the guarantees provided).If you click on a link to a network while you are logged into your user account with the network in question, the content of our website may be linked to your profile so that the network can assign your visit to our website directly to your account. If you want to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account takes place in any case if you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Please therefore note the data protection information on the network's website.
You can use social media plugins from the following providers on our website:- Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA, Privacy PolicyWe use social media plugins to make it easier for you to share content from our website. The social media plugins help us to increase the visibility of our content in social networks and thus contribute to better marketing.The content of the plugin is transmitted directly from the social network to your browser and integrated into the website. As a result, the respective provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in to it. This information (including your IP address) is transmitted directly from your browser to a server of the provider (usually in the USA) and stored there (see, in particular, the lack of an adequate level of data protection and the guarantees provided, sections 4.2 and 4.3). We have no influence on the scope of the data that the provider collects with the plugin, although from a data protection point of view we can be considered jointly responsible with the providers up to a certain extent.If you are logged in to the social network, it can assign your visit to our website directly to your user account. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g. that you like a product or service from us) may also be published on the social network and may be displayed to other users of the social network. The provider of the social network may use this information for the purpose of displaying advertising and tailoring the respective offer. For this purpose, usage, interest and relationship profiles may be created, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website and to provide other services associated with the use of the social network. The purpose and scope of the data collection and the further processing and use of the data by the social network providers as well as your rights in this regard and setting options to protect your privacy can be found directly in the data protection information of the respective provider.If you do not want the social network provider to assign the data collected via our website to your user account, you must log out of the social network before activating the plugins. You can revoke your consent at any time by declaring your revocation to the provider of the plugin in accordance with the information in their privacy policy.
We use the services of various companies to provide you with interesting offers online. Your usage behaviour on our website and websites of other providers is analyzed in order to subsequently display online advertising tailored to you.Most technologies for tracking your usage behaviour (tracking) and for the targeted display of advertising (targeting) work with cookies, with which your browser can be recognized via various websites. Depending on the service provider, it may also be possible for you to be recognized online even when using different end devices (e.g. laptop and smartphone). This may be the case, for example, if you have registered with a service that you use on several devices.In addition to the data already mentioned, which may reach the companies involved in the advertising networks when you access websites (log file data, see section 5.1), the following data in particular is used to select the advertising that is potentially most relevant to you:- Information about you that you have provided when registering for or using a service from advertising partners (e.g. your gender, your age, your age group).e.g. your gender, your age group); and- usage behavior (e.g. search queries, interactions with advertising, types of websites visited, products or services viewed and purchased, newsletters subscribed to).We and our service providers use this data to identify whether you belong to the target group we are addressing and take this into account when selecting advertisements. For example, after you have visited our site, you may be shown advertisements for the products or services you have consulted when you visit other sites (re-targeting). Depending on the scope of the data, a usage profile may also be created that is automatically evaluated, whereby the ads are selected according to the information stored in the profile, such as membership of certain demographic segments or potential interests or behaviors. Such ads may be displayed to you on various channels, including our website or app (as part of on-site and in-app marketing) as well as ads that are placed via the online advertising networks we use, such as Google.The data may then be analyzed for the purpose of billing the service provider and assessing the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the performance of an action (e.g. visiting certain sections of our websites or sending information) is attributable to a specific advertisement. We also receive aggregated reports from the service providers on advertising activities and information on how you interact with our website and our advertisements.You can withdraw your consent at any time by rejecting or deactivating the relevant cookies in the settings of your web browser (see section 5.1.). Further options for blocking advertising can also be found in the information provided by the respective service provider, e.g. Google.
This website uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google) for online advertising, as explained in section 5.4.1. Google uses cookies for this purpose (see the list here), which enable your browser to be recognized when you visit other websites. The information generated by the cookies about your visit to these websites (including your IP address) is transmitted to a Google server in the USA and stored there (see, in particular, the lack of an adequate level of data protection and the guarantees provided, sections 4.2 and 4.3). Further information on data protection at Google can be found here.You can withdraw your consent at any time by rejecting or switching off the relevant cookies in the settings of your web browser (see section 5.1). Further options for blocking advertising can be found here.
We only store personal data for as long as is necessary to carry out the processing described in this privacy policy within the scope of our legitimate interest. In the case of contractual data, storage is prescribed by statutory retention obligations. Requirements that oblige us to store data result from accounting and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfill retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer an obligation to retain it and there is no longer a legitimate interest in retaining it.
We use suitable technical and organizational security measures to protect your personal data stored by us against loss and unlawful processing, in particular unauthorized access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and to comply with data protection regulations. Furthermore, these persons are only granted access to personal data to the extent necessary to perform their tasks.Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we can therefore not provide an absolute guarantee for the security of information transmitted in this way.
If the legal requirements are met, you have the following rights as a person affected by data processing:Right of access: You have the right to request access to your personal data stored by us at any time free of charge if we process it. This gives you the opportunity to check what personal data we process about you and whether we process it in accordance with the applicable data protection regulations.Right to rectification: You have the right to have incorrect or incomplete personal data rectified and to be informed of the rectification. In this case, we will also inform the recipients of the data concerned about the adjustments we have made, unless this is impossible or involves disproportionate effort.Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, particularly in the case of statutory retention obligations, the right to erasure may be excluded. In this case, the data may be blocked instead of erased if the conditions are met.Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.Right to data portability: You have the right to receive the personal data that you have provided to us in a readable format free of charge.Right to object: You can object to data processing at any time, particularly in the case of data processing in connection with direct marketing (e.g. marketing emails).Right to withdraw consent: You have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.To exercise these rights, please send us an e-mail to the following address: direktion@fafleralp.ch.Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way in which your personal data is processed.
