Our websites are subject to Swiss data protection law, in particular the Federal Data Protection Act (DSG) in its currently valid version. Our websites are also subject to applicable foreign data protection law, such as the General Data Protection Regulation (GDPR) of the European Union (EU). The EU recognizes that Switzerland has legislation that guarantees adequate data protection. We reserve the right to adapt this privacy policy at any time by publishing it on this website.

1. Definitions / legal basis

To ensure that this privacy policy is easy to read and understand, the most important terms are explained below: Personal data is all information relating to an identified or identifiable natural person. A natural person is considered identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Processing encompasses any operation performed on personal data, in particular the storage, disclosure, acquisition, deletion, storage, alteration, destruction, and use of personal data, regardless of the means and procedures used. Our processing of personal data is in accordance with Swiss data protection law. To the extent that the GDPR applies, we generally process personal data for the purpose of fulfilling a contract. Furthermore, personal data is processed in accordance with the following legal basis:

• Art. 6 (1) (a) GDPR for the processing of personal data with the consent of the data subject.
• Art. 6 (1) (b) GDPR for the necessary processing of personal data to fulfill a contract with the data subject and to carry out corresponding pre-contractual measures.
• Art. 6 (1) (c) GDPR for the necessary processing of personal data to fulfill a legal obligation to which we are subject under applicable EU law or under applicable law of a country in which the GDPR is fully or partially applicable.
• Art. 6 (1) (d) GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another natural person.
• Art. 6 (1) (f) GDPR for the necessary processing of personal data to protect our or third parties' legitimate interests, unless the fundamental freedoms and rights and interests of the data subject override these interests. Legitimate interests include, in particular, our business interests in providing our website, information security, the enforcement of our own legal claims, and compliance with Swiss law.

2. Data processing in connection with our website

2.1 Accessing the website

When you visit our website, user identification data (IP address, date and time of access, URL of the accessed page) is automatically and temporarily stored in a so-called log file (as is standard practice when accessing any website). We need this general information to deliver the website, maintain its long-term functionality, and continuously improve it. Under no circumstances do we use the collected data to draw conclusions about you personally.

2.2 Contact form

Wherever you have the option to use a contact form on our website, the data entered in the input form will be transmitted to us. If you use this option, the data entered in the input form and transmitted to us will be stored until the purpose for storing the data no longer applies or you request us to delete it. Storing the above-mentioned data serves to provide the best possible, personalized response to your contact request.

2.3 Newsletter

Where you have the option to subscribe to our newsletter on our website, registration is required. The following information is required for registration:
• Title
• First and last name
• Email address.
We process this data exclusively to personalize the information and offers we send you and to better tailor them to your interests.
By registering, you give us your consent to process the data you provide for the regular delivery of the newsletter to the email address you specify, for the statistical analysis of user behavior, and for newsletter optimization.
You can unsubscribe from the newsletter at any time by sending us a corresponding message.

2.4 Links to external websites

Where links to external websites are found on our website, you will be redirected from our website to the linked websites of other providers. We have no influence on the content of external links and are therefore not responsible for it; in particular, we do not adopt their content as our own. If you are redirected to an external site, the privacy policy provided there applies. Please therefore inform yourself on the linked websites about how the respective providers handle your data.

2.5 Cookies

Cookies are small text files that are stored by the web browser on the user's device to store certain information. The next time our website is accessed using the same device, the information stored in the cookie is sent back to our website ("first-party cookie") or another website to which the cookie belongs ("third-party cookie"). The information stored and sent back in the cookie allows the respective website to recognize that the user has already accessed and visited this website using the web browser on their device. We use this information to be able to display the website optimally to the user according to their preferences. However, only the cookie itself is identified on the device. Any further storage of personal data only occurs if the user gives us their express consent or if this storage is absolutely necessary in order to be able to use the offered and accessed service. However, you can set your browser so that a decision is made on a case-by-case basis before installation whether a cookie should be accepted or blocked. You also have the option of regularly deleting cookies from your device. Make sure you have configured all browsers on your various devices (tablets, smartphones, computers, etc.). Cookie management settings and preferences vary from browser to browser. For more information, refer to your browser's help menu, which also tells you how to change your cookie preferences. Please note that disabling cookies may prevent you from using all the features of our website.

2.6 Google Analytics (only if used)

This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to analyze website usage. This service uses cookies – text files that are stored on your device. The information generated by the cookie about your use of the website is generally transmitted to and stored by Google on servers in the United States. IP anonymization is activated on this website. The IP address of users is shortened within the member states of the EU and the European Economic Area. This shortening removes the personal reference from your IP address. Under the terms of the data processing agreement that the website operators have concluded with Google Inc., Google uses the collected information to compile reports on website activity and to provide other services relating to website activity and internet usage. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google. You can prevent Google from collecting and processing data generated by the cookie and related to your use of the website by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de . Alternatively, you can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie that prevents the collection of your data on future visits to this website: Disable Google Analytics.

2.7 Facebook plugins (only when used)

Our website integrates plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our site. An overview of the Facebook plugins can be found here: developers.facebook.com/docs/plugins/. When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. This allows Facebook to receive the information that you have visited our site with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Facebook. You can find further information in Facebook's privacy policy at www.facebook.com/about/privacy/.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

3. Storage and exchange of data with third parties

3.1 Booking platforms

If you make bookings through a third-party platform, we receive various personal information from the respective platform operator. In addition, inquiries regarding your booking may be forwarded to us. We will process this data specifically in order to process your booking as requested and provide the booked services. It is possible that the platform operators will inform us of any disputes related to a booking. In doing so, we may also receive data relating to the booking process, which may include a copy of the booking confirmation as proof of the actual booking. In these cases, we process this data to protect and enforce our claims. Please also note the data protection information of the respective provider.

3.2 Transfer of data to third parties

We will only share your personal data if you have expressly consented, if there is a legal obligation to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. Furthermore, we will share your data with third parties if this is necessary for the use of the website and the execution of the contract (including outside the website), namely the processing of your bookings, for example, when purchasing vouchers.

3.3 Retention period

We only store personal data for the period necessary to fulfill the respective purpose and our legitimate interests. If the data is subject to a retention obligation due to legal regulations to which we are subject, we will retain the data in accordance with the statutory retention period. Retention obligations that require us to retain data arise, for example, from regulations governing reporting law, accounting, and tax law. According to these regulations, the retention period for business communications, concluded contracts, and accounting documents is up to ten years.

4. Your rights regarding your data

4.1 Right to information

You have the right to request confirmation, free of charge, that personal data concerning you is being processed or that no data is being processed. If data is being processed, you have the right to access this personal data.

4.2 Right to rectification, restriction and erasure

You have the right to request that your data be corrected, supplemented, or blocked as quickly as possible. You have the right to have your data deleted ("right to be forgotten"). In such a case, we are obliged to confirm any correction, deletion, or restriction of data processing to you.

4.3 Right to data portability

If and to the extent that the GDPR is applicable, you have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format.

4.4 Right of objection

You have the right to object at any time to the processing of your personal data based on Art. 6 (1) (f) GDPR (see section 2 of this data protection declaration).

4.5 Right to notification of data breaches

We are obligated to inform you about personal data breaches if they pose a high risk to your personal rights and freedoms.
Individuals whose personal data we process have the right to lodge a complaint with a competent data protection supervisory authority. The data protection supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

5. Organisational and technical measures

We take appropriate and suitable organizational and technical measures to ensure data protection and data security. When personal data is processed by third parties, we ensure that adequate data protection is guaranteed.
Despite organizational and technical measures, the processing of personal data on the internet can, in principle, have security vulnerabilities, meaning that absolute data protection and absolute data security cannot be guaranteed. For this reason, you are free to provide us with personal data via other means, such as by mail or telephone.

6. Data Protection Officer

Seiler's Vintage Hotel
Nicolas Seiler
Äussere Dorfstrasse 99
3718 Kandersteg