(Status: May 2023)
Name and contact of the responsible persons
Stay Switzerland GmbH
Wychelstrasse 18
3800 Matten b. Interlaken
Owner Stay Switzerland GmbH: Alexander Kassabov / Rosana Araujo Arevalos
Phone: +41 79 926 38 00
Aparthotel Krone Immobilien AG
Spielmatte 16
3800 Unterseen Interlaken
Switzerland
Phone: +41 33 820 12 00
E-mail: management@aparthotelkrone.ch
Privacy policy of the Aparthotel Krone
Version from May 2023
In this data protection declaration we, the Aparthotel Krone (operated by Stay Switzerland GmbH), explain how we collect and otherwise process personal data. This is not an exhaustive description; other data protection declarations [or general terms and conditions, conditions of participation and similar documents] may regulate specific matters. Personal data is understood to be all information that relates to a specific or identifiable person.
If you provide us with personal data of other persons (e.g. family members, data of work colleagues), please make sure that these persons are aware of this privacy policy and only share their personal data with us if you are allowed to do so and if this personal data is correct.
This Privacy Policy is designed to meet the requirements of the EU General Data Protection Regulation ("GDPR"), the Swiss Data Protection Act ("DPA") and the revised Swiss Data Protection Act ("revDSG"). However, whether and to what extent these laws are applicable depends on the individual case.
1. data controller / data protection officer / representative
The responsible party does not have a data protection officer in accordance with Art. 37 DSGVO:
Stay Switzerland GmbH, Wychelstrasse 18, 3800 Matten b. Interlaken [, unless otherwise specified in the individual case] is responsible for the data processing activities we describe here. If you have any data protection concerns, you can send them to us at the following contact address Stay Switzerland GmbH, Wychelstrasse 18, 3800 Matten b. Interlaken management@aparthotelkrone.ch.
2. collection and processing of personal data
We primarily process the personal data that we receive from our customers and other business partners in the course of our business relationship with them and other persons involved in it, or that we collect from their users when operating our websites, apps and other applications.
Aparthotel Krone (operated by Stay Switzerland GmbH) collects the following data for the purpose of room reservations: Name, first name, address, e-mail, telephone number, birthday, gender, means of payment/method and consent to data protection and GTC. This data is necessary for the processing of the reservation of your stay. The data can be deleted at any time, unless otherwise required by law. Aparthotel Krone retains the data for as long as required by law.
3. purposes of data processing and legal basis
We use the personal data we collect primarily to conclude and process our contracts with our customers and business partners, in particular in the context of booking flats with our customers and purchasing services from our payment and booking service providers, as well as to comply with our legal obligations at home and abroad. Please refer to the data protection agreements of our payment or booking service providers.
In addition, we also process personal data about you and other persons, where permitted and where we consider it appropriate, for the following purposes in which we (and sometimes third parties) have a legitimate interest commensurate with the purpose:
- Assertion of legal claims and defence in connection with legal disputes and official proceedings;
- Prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud);
- Guarantees of our operations, in particular IT, our websites, apps and other platforms;
- Video surveillance to maintain house rules and other measures for IT, building and facility security and protection of our employees and other persons and assets belonging to or entrusted to us (such as access controls, network and mail scanners,) The data is deleted immediately when it is no longer required to achieve the purpose (usually monthly);
If you have given us consent to process your personal data for certain purposes (for example, when you register to receive newsletters or carry out a background check), we process your personal data within the scope of and based on this consent, unless we have another legal basis and we require such a basis. Consent given can be revoked at any time, but this has no effect on data processing that has already taken place.
4 Cookies / tracking and other technologies in connection with the use of our website.
In the following, we inform you about the collection of personal data when using our website. Personal data are e.g. name, address, e-mail addresses, user behaviour when visiting our website.
When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- browser
- Operating system and its interface
- Language and version of the browser software.
(a) Use of cookies
(1) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie with certain information. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective.
(2) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (see a.)
- Persistent cookies (see b.)
Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser. 2.
2. persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time. 3.
3. you can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. So-called "third party cookies" are cookies that have been set by a third party, thus not by the actual website you are currently visiting. Please note that by deactivating cookies you may not be able to use all the functions of this website.
(b) Further functions and offers of our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data which we use to provide the respective service and for which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, conclusion of contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or below in the description of the offer.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
(c) Contacting us
If you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary, or the processing is restricted if there are legal obligations to retain data.
(d) Registration
In order to be able to use the extended services of the offer, it is necessary that you register on our website beforehand. For this purpose, the following data (hereinafter referred to as "inventory data") will be requested from you:
- your e-mail address
- a user name that you assign to yourself
- a password that you assign to yourself. This password is stored in highly encrypted form and is never visible in plain text.
- your name
- Your address
We delete the data accruing in this context after the storage is no longer required or the processing is restricted if there are legal retention obligations. The individual data fields can be viewed on the registration form. Your consent to the processing of this personal data is requested on the form.
If social media plug-ins are used:
We also use so-called plug-ins from social networks such as Facebook or Instagram on our websites. This is apparent to you in each case (typically via corresponding icons). We have configured these elements so that they are deactivated by default. If you activate them (by clicking on them), the operators of the respective social networks can register that you are on our website and where and can use this information for their purposes. The processing of your personal data is then the responsibility of this operator according to its data protection regulations. We do not receive any information about you from him.
5. data disclosure and data transfer abroad
Within the scope of our business activities and the purposes set out in section 3, we also disclose data to third parties, where permitted and where it appears appropriate to us, either because they process it for us or because they want to use it for their own purposes. This concerns the following bodies in particular:
- Service providers of ours (external, such as web providers, credit card companies), including order processors (such as IT providers);
- Operator Aparthotel: Stay Switzerland GmbH
all recipients together.
These recipients are partly domestic, but can be anywhere on the planet. In particular, you must expect your data to be transferred to all countries, as well as to other countries in Europe and the USA where the service providers we use are located (such as Smoobu).
6. duration of the storage of personal data
We process and store your personal data for as long as it is necessary for the fulfilment of our contractual and legal obligations or otherwise the purposes pursued with the processing, i.e. for example for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) as well as beyond that in accordance with the statutory retention and documentation obligations. In this context, it is possible that personal data will be retained for the time during which claims can be asserted against our company and insofar as we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidence and documentation purposes). As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymised as a matter of principle and as far as possible. For operational data (e.g. system logs, logs), shorter retention periods of twelve months or less generally apply.
7. data security
We take appropriate technical and organisational security precautions to protect your personal data from unauthorised access and misuse. Obligation to provide personal data
Within the scope of our business relationship, you must provide the personal data that is required for the establishment and implementation of a business relationship and the fulfilment of the associated contractual obligations (as a rule, you do not have a legal obligation to provide us with data). Without this data, we will generally not be able to enter into or perform a contract with you (or the entity or person you represent). Also, the website cannot be used if certain information to secure traffic (such as IP address) is not disclosed.
8. rights of the data subject
Within the framework of the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR), you have the right to information, correction, deletion, the right to restrict data processing and otherwise to object to our data processing, to the release of certain personal data for the purpose of transfer to another body (so-called data portability). Please note, however, that we reserve the right to enforce the restrictions provided for by law, for example if we are obliged to retain or process certain data, if we have an overriding interest in doing so (insofar as we are entitled to rely on this) or if we need the data to assert claims. If you incur costs, we will inform you in advance. We have already informed you about the possibility of revoking your consent in section 3. Please note that exercising these rights may conflict with contractual agreements and may have consequences such as premature termination of the contract or costs. We will inform you in advance if this is not already contractually agreed. The exercise of such rights usually requires that you clearly prove your identity (e.g. by a copy of your ID card where your identity is otherwise not clear or cannot be verified). To exercise your rights, you can contact us at the address given in section 1.
Every data subject also has the right to enforce his or her claims in court or to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).
9 Changes
We may amend this privacy policy at any time without prior notice. The current German version published on our website applies.
******************
Order processors
We use external service providers (order processors), e.g. for the dispatch of goods, newsletters or payment processing. A separate order data processing agreement has been concluded with the service provider to ensure the protection of your personal data.
We work with the following service providers:
For hosting webshops and websites, email servers, web analytics:
LocalBranding GmbH, Theodor-Heuss-Allee 52, 53773 Hennef.
To the data protection declaration
Booking tool Smoobu GmbH Pappelallee 78/7910437 Berlin To the data protection declaration