We take the privacy of the users of our website and the security of their personal data very seriously. We therefore comply with the relevant legal provisions, and in particular the Swiss Federal Data Protection Act (LPD), the order related to the Federal Data Protection Act (OLPD) and the European General Data Protection Regulation (GDPR).
This privacy policy describes the principles governing our use of the personal information that you provide to us or that we collect about you. By using this website, you agree to this use. Please read this privacy policy carefully.
Any dispute relating to confidentiality shall be subject to this policy, any data collection notice included on this website and the provisions of Swiss law.
We may change our privacy policy at any time. We therefore ask that you to review this privacy policy from time to time to ensure that you are aware of the most up to date version that shall apply each time that you access this website.
1. Scope
Our privacy policy applies in all cases where personal data is or must be collected, including but not limited to visits to the hotel website and online bookings or purchases.
2. Definition of the term "Personal data"
The term "personal data" covers all information that identifies a customer or visitor. This may include name, gender, occupation, e-mail address, credit card number, its expiry date or any other information required to provide a service which a customer may have requested.
3. Information collected and the purpose of collecting it
3.1 When visiting our website
When you visit our website, our server temporarily records each access in a log file. The following technical data is then entered, in principle as with any connection to a web server, without any action required by you and stored by us until its automatic deletion at the latest after 1 month:
- The computer's IP address which accesses the website
- The name of the owner of the IP address (usually your ISP)
- Date and time of access
- The website from which you accessed our website (original URL) and any key search words used
- The name and URL of the file accessed
- The status code (e.g. error message)
- Your computer's operating system
- The browser that you are using (type, version and language)
- The communication protocol used (e.g. HTTP/1.1) and
- Potentially your username used for registration/authentication
The collection and processing of this data is intended to enable use of our website (establishing a connection), ensure the long-term security and stability of the system and optimise our offer online, as well as for the purposes of internal statistics. This processing is legitimate under art. 6 para. 1 (f) of the GDPR.
The IP address is also analysed with other data for purposes of recognition and defence in the event of attacks on the network infrastructure or other unauthorised or abusive uses of the website, and may be used in criminal proceedings for identification purposes and civil and criminal proceedings against the user in question. This processing is also legitimate under art. 6 para. 1 (f) of the GDPR.
When visiting the hotel's website, the server hosting it automatically records information about this visit such as the visitor's IP address, the type of browser used, the pages visited, and the date and duration of the visit. These are cookies that most browsers automatically accept.
These cookies are in the form of files that can identify you as a visitor or a customer and save your personal preferences as well as technical information (including click-type or path-type data).
Path-type data enables us to know which pages on the website you visited and in what order.
We use cookies and other technical information to customise your visits to our website (for example to recognise your name when you return to the website), to analyse the traffic on the website and trends, uses and the selections of users concerning authorised downloads and for technical reasons concerning your use of our website.
This enables us to improve your experience as well as the design and content of the website to meet your needs. Cookies are either permanent (they stay on your computer until you delete them) or temporary (they are only active until you close your Internet browser).
In addition, cookies are also used for analytical purposes to optimise both the website and advertising using Google Analytics. This is a web analytics service provided by Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The information generated by these cookies about your use of the website is usually sent to a Google server in the USA and stored there, on the basis of the legitimate interest described above.
If you choose to provide personal data on the website, it may be linked to the data saved in the website cookies. Most browsers accept cookies by default. Nevertheless, you can set your browser to reject our cookies or those from any other website.
However, some areas of the website are only accessible with cookies or similar tools, and you should know that by disabling them you may not be able to access certain content on the website.
3.2 When booking on the website by mail or by phone
If you make reservations on our website by mail (e-mail or post) or by telephone, we require the following data to fulfil the contract:
- Title
- First name and surname
- Postal address
- Date of birth
- Telephone number
- Language
- Your credit card information
E-mail address
We only use this data, as well as other optional information that you provide (e.g. expected arrival time, motor vehicle number plate, preferences, remarks), to fulfil the contract, unless otherwise stated in this privacy policy or if you have consented to it separately. We will process this data in particular to enter your booking in accordance with your request, to provide the services booked, to contact you if there are any uncertainties or problems and to ensure that payment is correctly made.
For modifications and cancellations of reservations made online (hotel website, Booking.com, Expedia...): this must be done exclusively on the website or your account. For confidentiality reasons, the hotel does not have access to your online reservation.
Fulfilment of a contract pursuant to art. 6 para. 1 (b) of the GDPR is the legal basis for processing data for this purpose.
3.3 When you arrive at the hotel
When you arrive at our hotel, we need the following information about you and the people who are with you:
- First name and surname
- Postal address and town
- Date of birth
- Place of birth
- Nationality
- Official ID and number
- Date of arrival and departure
- Room number
- Telephone number
We collect this information to fulfil the legal obligations to inform, in particular arising from legislation related to policing and hotels. Insofar as we are obliged to do so according to the applicable provisions, we shall send this information to the relevant police authority. We have a legitimate interest under art. 6 para. 1 (f) of the GDPR to fulfil the legal provisions.
4. Personal data protection and security
If we collect information about you, we will store it on a secure server in accordance with Swiss and European legal provisions. The server, which groups together the encrypted data, is protected by password and a firewall.
We have put security policies in place to ensure, as far as possible, the security and integrity of all of your information, including your personal data.
However, all customers should be aware that no data transferred over the Internet can be 100% secure. Therefore we cannot ensure or guarantee the security of the information that you transfer to us over the Internet. In addition, it should be noted that e-mail is not encrypted and is not a secure way to transfer sensitive information such as credit card numbers or passwords. These are the limits to the confidentiality guarantees.
5. Amount of time personal data will be retained
We do not retain personal data for longer than is necessary to fulfil the purpose for which it was collected and, in any case, not for longer than the duration laid down by the applicable laws and regulations. The legal obligations related to retaining personal data derive from the provisions related to the right to notify the authorities, financial accounting and tax law. Therefore, the contracts entered into, accounting documents and commercial communications must be kept for 10 years. Insofar as we no longer need this data to fulfil services, it shall be blocked.
6. Personal data transferred to third parties
We only transfer your personal data if you have expressly agreed to it, if we are under a legal obligation to do so or if it is necessary to assert our rights, in particular to assert our rights resulting from the contractual relationship. In addition, we transfer your data to third parties insofar as it is necessary for the use of the website and to fulfil the contract (including off-website), particularly to process your bookings.
Our host [enter the name of the host] is a service provider to whom we transfer personal data collected on the website, or which has access or can have access to it. The website is hosted on servers in Switzerland. The purpose of transferring data is to provide and maintain the functions of our website.
We also transfer to the issuer and acquirer of your credit card, information about it when payment is made by credit card, on our website or in the hotel. If you choose to pay by credit card, you must enter all of the information required. Your credit card issuer and acquirer are also subject to the applicable regulations.
For more information about processing by them, please also read their terms and conditions and their privacy policy.
Finally, for the proper functioning of the website your data is transferred to the following third parties:
- MEWS
- Daily Point
- Leading Hotels of the World
This processing is legitimate under art. 6 para. 1 (f) of the GDPR.
7. Personal data transferred abroad
We are also entitled to transfer your personal data to third-party companies (hired service providers) abroad to process the data specified in this privacy policy. If the level of data protection in a given country does not correspond to Swiss or European level, we shall ensure by contractual means that the protection of your personal data corresponds to that of Switzerland or the European Union.
8. Rights to information, rectification, erasure and restriction of processing; right to data portability
You are entitled to obtain, upon request, information relating to the personal data that we record when it relates to you. In addition, you have the right to rectify incorrect data and delete your personal data from the moment when there is no legal obligation to retain it or no legal basis enabling us to process the data prevents it.
You also have the right to demand the return of the data you have transferred to us (right to data portability). On request, we shall also transfer the data to a third party of your choice. You have the right to obtain the data in a standard format.
You can contact the person in charge, Jay Gauer, for the abovementioned purposes at the Hôtel e- mail adress. Please clearly indicate your name and the name of this website in all of your correspondence. In addition, we may ask you, at our own discretion, for proof of identity to process your requests.
9. Modifications and amendments
We reserve the right to change, modify or amend this privacy policy and its security practices at any time without notice.
We therefore invite our customers and visitors to the hotel website to regularly visit it.
10. Right to make a complaint
You have the right to file a complaint with a data protection supervisory authority. Last update: August 2018