Data Privacy Statement

Scope and purpose
Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Data Protection Act, DPA), every person has a right to protection of his or her privacy and to protection against misuse of his or her personal data. We observe the legal provisions of the Federal Act on Data Protection (FADP), Ordinance to the Federal Act on Data Protection (DPO), the Telecommunications Act (TCA) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).Personal data will be treated strictly confidential and will not be sold or passed on to third parties. In close cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorized access, loss, misuse or forgery. These third party companies, in particular Google Ireland Limited (hereinafter referred to as «Google»), may also be located abroad.

Contact with us
If you get in contact with us using the form on the website or by e-mail, we save your details to process the query. This data is not passed on to third parties without your consent.

Operation and hosting of this website (Cmsbox)
This website uses the content management system Cmsbox. The responsibility for the technical operation and hosting of this system lies with Cmsbox GmbH, Terrassenweg 18, 3012 Berne, Switzerland. To ensure Cmsbox GmbH is able to provide, verify and improve its services, it collects personal-related data. This comprises the following data:

Server logs
Each time the website is accessed, the server infrastructure collects a range of general details about the access, which is saved in so-called log files. The name of the website accessed, the URL, the date and time of the access, the transferred quantity of data, a report about the successful access, the browser type and version, the user's operating system, the referral URL (the site previously visited) as well as the IP address of the user are collected. This data is required to check and ensure the functionality and security of the Cmsbox system.

Matamo
Cmsbox uses the tracking system Matamo (formerly PiWiK) to evaluate visitor numbers. This collection of data helps Cmsbox GmbH to operate and improve the technical infrastructure, although it can be deactivated upon explicit request. The data is collected pseudonymised, meaning that any link to a user is no longer possible. The underlying logs are also deleted after 180 days.

reCaptcha
The forms on our website are protected against unauthorised automated sending by Google reCaptcha v3. It is essential from a technical perspective for a large amount of personal data to be transferred to Google. Google is obliged to ensure a suitable level of data protection.

Cookies
Our website uses cookies. Cookies are non-dangerous text files which your browser automatically saves on your device when you visit our website. They allow a visitor to be identified within a predefined period of time. These cookies are deployed to ensure you are able to use the technical functions, such as the contact form. In addition, they are a technical tool for the collection of data by third parties and Google Analytics mentioned in the section «Operation and hosting of this website». Most internet browsers automatically accept cookies. However, you can set up your browser at any time so that cookies are not saved. In general, this website can also be used without accepting cookies. If cookies are deactivated, however, the functioning of this website may be restricted.

Booking platforms
If you make bookings via a third-party platform, we receive various personal information from the respective platform operator. As a rule, this is the data listed in section 5 of this data protection declaration. In addition, we may be forwarded inquiries regarding your booking. We will process these data by name in order to record your booking as requested and to provide the services you have booked. The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR. Finally, we may be informed by the platform operators about disputes in connection with a booking. In doing so, we may also receive data relating to the booking process, which may include a copy of the booking confirmation as proof of the actual booking. We process this data to protect and enforce our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Please also note the data protection information of the respective provider.

Web-Fonts
This website uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to ensure the content is shown uniformly and in an appealing manner. When accessing a website, your browser loads the required web fonts in your browser cache, to show texts and fonts correctly. For this purpose, the browser you use must create a connection to Google's servers. This means that Google obtains information, for example, that your IP address accessed our website. Further information about Google web fonts can be found at developers.google.com/fonts and in Google's data privacy policy: policies.google.com/privacy

Google Maps
We use the map service of Google Maps from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website to show our company headquarters at Promenade 10. 3780 Gstaad. To use this map function, your web browser must generate a connection to a server of Google. Google thereby receives your IP address and information that you have visited the respective page with the map on our website. If you access the Google map services on our website while you are logged into your Google profile, Google can link this information to your Google profile. If you do not want this information to be allocated to your Google profile, you need to log out of Google before visiting our website. You can view the data privacy policy of Google here: www.google.com/policies/privacy

Google Analytics
To evaluate the use of our website, we use the Google Analytics service, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For this purpose, cookies are used which allow an analysis of the use of the website by its users. The information generated is transferred to a server of the service provider and saved there. Before that, the access data is anonymised by shortening its IP address. This makes it impossible to link the data to a user. Google will evaluate visitor behaviour to compile reports about website activities and to perform further services for the website operator associated with the use of the website and the internet. The underlying records of Google about your visit to our website are deleted automatically after max. 180 days. You can prevent this data being recorded, by installing a browser add-on on the following website and thereby rejecting the future processing of this data: tools.google.com. You can find more information about the data privacy policy of Google Analytics at policies.google.com/privacy

Subscription to our newsletter
You have the possibility to subscribe to our newsletter. For this purpose a registration is required. The following data must be provided during registration: First name, surname, e-mail address. These data are necessary for data processing. We process these data exclusively to personalize the information and offers sent to you and to better align them with your interests. By registering, you give us your consent to process the data provided for the regular dispatch of the newsletter to the address you have given us and for the statistical evaluation of user behaviour and optimisation of the newsletter. This consent constitutes our legal basis for processing your e-mail address in accordance with Art. 6 Para. 1 lit. a GDPR. We are entitled to commission third parties with the technical processing of advertising measures and are entitled to pass on your data for this purpose (cf. point 13 below). At the end of each newsletter you will find a link which you can use to cancel the newsletter at any time. When you unsubscribe, you can voluntarily inform us of the reason for the cancellation. After cancellation your personal data will be deleted. Further processing is only carried out in an anonymous form to optimise our newsletter.

Rights of data subjects
You have the right to exercise your data protection rights at any time. Contact us if you wish to exercise any of the following rights: 
Right to information: you can request information at any time about whether and what data we have stored about you and for what purpose we use it.
Right to be forgotten: If the data about you is no longer needed for the original purpose, this data will be destroyed.R
ight to erasure: You can ask us to erase your personal data at any time, provided there is no other legal obligation to retain it.
Right to object (opt-out): You can request us to stop processing your personal data at any time. 

Retention period
We only retain your data for as long as is legally necessary or in accordance with the purpose of the processing. If we process your personal data on the basis of a contractual relationship, this data will be stored for as long as required by legal and contractual retention obligations. 

Data security
We protect your personal data with the usual organisational and technical security measures. We review these measures on an ongoing basis and modify them as necessary to mitigate potential risks and prevent unauthorised use. However, we cannot guarantee that data will not be lost, misused or altered. In such cases, we take the measures required by law and inform those affected and the authorities immediately and transparently. 

Contact
If you have any questions about data protection of Posthotel Rössli, would like to request information or request the deletion of your data, please contact us: 

Posthotel Rössli
Fam. Widmer
Promenade 10
CH - 3780 Gstaad
+41 33 748 42 42
info@posthotelroessli.ch

Changes to the data protection regulations
Due to the further development of the legal framework as well as due to technological progress, it may become necessary to change these data protection provisions. You can access the current data protection regulations at any time on our website.

Status: August 2023