Data Protection
The responsible body as defined in data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Hotel Jägerhof Zermatt AG
Your rights as a data subject
You may exercise the following rights at any time by contacting our data protection officer at the address provided:
- Information about your stored data and how we process it (Art. 15 GDPR),
- correction of incorrect personal data (Art. 16 GDPR),
- deletion of your stored data (Art. 17 GDPR),
- restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- objection to your data being processed by us and (Art. 21 GDPR) and
- data portability, if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time, with effect for the future.
You can contact the supervisory authority responsible for you with a complaint at any time (art. 77 GDPR in conjunction with § 19 of the Federal Data Protection Act (BDSG)). Your responsible supervisory authority will vary depending on your country of residence, your work and the nature of the alleged infringement. A list of supervisory authorities (for the non-public sector) and their addresses can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of general information when you visit our website
Nature and purpose of the processing:
If you access our website – that is, if you do not register or otherwise provide information – information of a general nature is automatically collected. This information (server log files) includes, among other things, the type of browser used, the operating system used, the domain name of your internet service provider, and other similar data. It is exclusively information that cannot be connected to you as an individual.
It is processed for the following purposes in particular:
- Ensuring smooth connection to the website,
- Ensuring our website works properly,
- Evaluation of system security and stability and
- for other administrative purposes.
We do not use your data to draw conclusions about you personally.
Anonymous information of this kind can be statistically analysed in order to improve our website and its underlying technology.
Legal basis:
Processing is carried out in accordance with art. 6 para. 1 (f) GDPR based on our legitimate interest in improving the stability and functionality of our website.
Recipients:
Recipients of the data are only the responsible body and, if applicable, technical service providers who are involved in the operation and maintenance of our website as a data processor.
Storage duration:
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This is in principle the case for data that is used to enable provision of the website, once the session has ended.
Prescribed or required provision of data:
Provision of the above-mentioned personal data is neither required by law nor contractually prescribed. However, without the IP address and cookie identifier, the service and functionality of our website is not guaranteed. Additionally, individual services may not be available or may be limited. It is therefore not possible to object on this account.
The provision of chargeable services
Nature and purpose of the processing:
In order to provide chargeable services, we ask for additional data, e.g., payment details, in order to be able to execute your order.
Legal basis:
The processing of the data required to conclude the contract is based on art. 6 para. 1 (b) GDPR.
Recipients:
The only recipients of the data are the responsible body and, if applicable, data processors.
Storage duration:
We store this data in our systems until the legal retention periods have expired. These are generally 6 or 10 years, for reasons of proper bookkeeping and legal tax requirements.
Prescribed or required provision of data:
Providing your personal data is voluntary. If you do not provide your personal data, we cannot grant you access to the content and services we offer.
Newsletter
Nature and purpose of the processing:
Your data will only be used to send you the newsletter you have subscribed to by email. When you provide your name, this is in order to be able to address you personally in the newsletter and, if necessary, to identify you, should you want to make use of your rights as a data subject.
In order to receive the newsletter, all you need to provide is your email address. When you register to receive our newsletter, the data you provide will be used exclusively for that purpose. However, subscribers may also be notified by email of circumstances relevant to the service or registration (e.g., changes to the newsletter offering or technical conditions).
For effective registration, we need a valid email address. In order to verify that the person registering is actually the the owner of the email address provided, we use the "double opt-in" procedure. This involves logging the newsletter order, sending a confirmation email and receiving the requested answer. No additional data are collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.
Legal basis:
Based on your expressly given consent (art. 6 para. 1 (a) GDPR), we will regularly send you our newsletter or comparable information by email to the email address you provided.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. Each newsletter contains a link that will allow you to revoke consent. You can also unsubscribe directly from this website at any time or inform us of your request to unsubscribe by using the contact option at the end of this data protection notice.
Recipients:
The only recipients of the data are the responsible body and, if applicable, data processors.
Storage duration:
The data is only processed in this context so long as you have provided appropriate consent. It will subsequently be deleted.
Prescribed or required provision of data:
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we are unable to send you our newsletter without your consent in place.
Contact form
Nature and purpose of the processing:
The data you enter will be stored for the purpose of individual communication with you. A valid email address is required for this purpose. This is used to sort the request and then reply to it. The provision of any further data is optional.
Legal basis:
The data entered into the contact form is processed based on a legitimate interest (art. 6 para. 1 (f) GDPR.
We provide the contact form to make it straightforward for you to contact us. The information you provide to us will be stored for the purposes of processing your request, as well as for any follow-up questions.
If you contact us to request a quote, the data entered in the contact form is processed in order to implement pre-contractual measures (art. 6 para. 1 (b) GDPR).
Recipients:
The only recipients of the data are the responsible body and, if applicable, data processors.
Storage duration:
Data will be deleted no later than 6 months after processing the request.
If there is a contractual relationship, we are subject to the statutory retention periods under the German Commercial Code (HGB) and will delete your data after 6 years.
Prescribed or required provision of data:
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot contact you without your consent in place.
Use of Google Analytics
Nature and purpose of the processing:
Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics uses "cookies", i.e., text files stored on your computer that enable your website use to be analysed. Cookie-generated information about your use of this website is usually transmitted to and stored on a Google server in the USA. However, because IP anonymisation is enabled on this website, Google will store your IP address in shortened form if you are accessing this site from within the European Union or the European Economic Area. Only in exceptional cases will the entire IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage for the website operator. The IP address provided by your browser as part of Google Analytics will not be combined with other data from Google.
The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. The intention is for other related services to then be provided based on your use of the website and the internet.
Legal basis:
The data is processed based on the consent of the user (art. 6 para. 1 (a) GDPR).
Recipients:
The recipients of the data are the responsible body and Google as data processor. We have concluded the appropriate data processing contract with Google for this purpose.
Storage duration:
The data is deleted as soon as it is no longer necessary for our recording purposes.
Transfer to third-party countries:
Google processes your data in the USA and has submitted to the EU–US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. We also have concluded standard privacy clauses with Google for the use of Google Analytics.
Prescribed or required provision of data:
The provision of your personal data is voluntary, solely on the basis of your consent. If you block access, this may result in limited functioning of the website.
Revocation of consent:
You can prevent the use of cookies by selecting the corresponding settings on your browser; however, we would like to point out that if you do this, you may not be able to fully utilise all functions provided on this website. You can also prevent the data generated by cookies and associated with your use of the website (including your IP address) from being captured and processed by Google by downloading and installing the browser plugin available at the following link: browser-add-on for disabling Google Analytics.
In addition, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This will install an opt-out cookie on your device. This will prevent the collection of data by Google Analytics on this website when using this browser in future, as long as the cookie remains installed in your browser.
Profiling:
The Google Analytics tracking tool helps evaluate the behaviour of visitors to the website and analyse their interests. For this, we create a pseudonymous user profile.
Use of Google Maps
Nature and purpose of the processing:
We use Google Maps functions on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This allows us to display interactive maps directly on the website, and enables you to conveniently use the map function.
When you visit the website, Google is informed that you have accessed the corresponding page of our website. This takes place regardless of whether you are logged into a Google account or not. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated to your Google profile, you must first log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
If you do not want Google to collect, process or use, via our website, any data relating to you, you can disable JavaScript in your browser settings. However, in this case, you will not be able to use our website, or only to a limited extent.
For more information about how Google processes your information, please see Google's privacy notices. You can also access the Data Protection Centre there to change the protection settings for your personal data.
Detailed instructions for managing your own data in connection with Google products can be found here.
Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).
Recipients:
When you visit the website, Google is informed that you have accessed the corresponding page of our website. This takes place regardless of whether you are logged into a Google account or not. If you are logged in to Google, your information will be directly associated with your account.
If you do not wish to be associated to your Google profile, you must first log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
For more information about the purpose and scope of data collection and the processing of data by the plugin provider, please refer to the provider's privacy policy. It will also give you more information about your rights in this regard and how to set privacy preferences (https://policies.google.com/privacy.)
Storage duration:
We do not collect any personal data through integrating Google Maps.
For more information about Google Maps, see Google's privacy policy (https://policies.google.com/privacy).
Transfer to third-party countries:
Google processes your data in the USA and has submitted to the EU–US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Revocation of consent:
f you don't want Google to collect, process or use, via our website, any data relating to you, you can disable JavaScript in your browser settings. However, in this case you will not be able to use our website, or only to a limited extent.
Prescribed or required provision of data:
The provision of your personal data is voluntary, solely on the basis of your consent. If you block access, this may result in limited functioning of the website.
Embedded YouTube videos
Nature and purpose of the processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"). When you visit a page with a YouTube plugin, a connection to YouTube servers will be established. This will inform YouTube of which pages you are visiting. When you are logged in to your YouTube account, YouTube can attribute your browsing habits to you personally. You can prevent this by logging out of your YouTube account beforehand.
As soon as a YouTube video starts, the provider uses cookies that collect information about user behaviour.
For more information about the purpose and scope of the collection and processing of your data by YouTube, please refer to the provider's privacy policy, where you can also find out more about your rights in this regard as well as set privacy preferences (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU–US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (art. 6 para. 1 (a) GDPR).
Recipients:
Launching YouTube will automatically trigger a connection to Google.
Duration of storage and revocation of consent:
If you have deactivated the storage of cookies for the Google Ad program, you do not have to deal with such cookies when viewing YouTube videos. However, YouTube also stores non-personal usage information in other cookies. You must configure your browser to block cookies if you wish to prevent this.
Further information on data protection at "YouTube" can be found in the provider's data protection policy at: https://www.google.de/intl/de/policies/privacy/
Transfer to third-party countries:
Google processes your data in the USA and has submitted to the EU–US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Prescribed or required provision of data:
The provision of your personal data is voluntary, solely on the basis of your consent. If you block access, this may result in limited functioning of the website.
Social plugins
Nature and purpose of the processing:
Social plugins from the providers listed below are used on our websites. You can recognize the plugins by the fact that they are marked with the corresponding logo.
These plugins may be used to send information to the service provider for its use, possibly including personal data. We use a 2-click solution to prevent the unintentional and unwanted collection and transmission of your data to these service providers. To activate a social plugin, users must first click on the corresponding button. Only when this button is activated will information be collected and transmitted to the corresponding service provider. We do not collect any personal data using the social plugins or about how they are used.
We have no influence on which data an activated plugin collects and how it is used by the provider. Currently, one must assume that direct connections are established to the services of the respective provider and your IP address and specific usage information will be recorded and used. Service providers may also try to save cookies on your computer. Please refer to the data protection notices of the service provider in question to find out which specific data is collected and how it is used. Please note: if you are logged in to Facebook when visiting a site, Facebook can identify you as a visitor to that particular site.
We have included social media buttons from the following companies on our site:
Google AdWords
Nature and purpose of the processing:
Our website uses Google Conversion Tracking. The operating company for these Google AdWords services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad placed by Google, Google Adwords places a cookie on your computer. The conversion tracking cookie is placed when a user clicks on an ad placed by Google.
If the user visits certain pages of our website when the cookie has not yet expired, we and Google can detect that the user clicked on the ad and was redirected to this website. Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an Adwords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted into conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not obtain any information which can be used to identify you personally.
Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (art. 6 para. 1 (a) GDPR).
Recipients:
Every time you visit our website, personal data, including your IP address, is transferred to Google in the United States. This personal data is stored by Google. Google may pass on this personal data collected via this technical process to third parties.
Our company does not receive any information from Google that could be used to identify the data subject.
Storage duration:
These cookies expire after 30 days and are not used to identify you personally.
Transfer to third-party countries:
Google processes your data in the USA and has submitted to the EU–US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Revocation of consent:
If you do not wish to participate in tracking, you can refuse to allow the required cookie to be set – for example using browser settings that disable all automatic placement of cookies, or by setting your browser to block cookies from the "googleleadservices.com" domain.
Please note that if you do not wish measurement data to be recorded, you must not delete opt-out cookies. If you have deleted all of the cookies in your browser, you must reset the relevant opt-out cookie.
Prescribed or required provision of data:
The provision of your personal data is voluntary, solely on the basis of your consent. If you block access, this may result in limited functioning of the website.
Use of Google Remarketing
Nature and purpose of the processing:
This website uses the Remarketing feature of Google Inc. The operating company for these Google Remarketing services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
The purpose of this feature is to display interest-based ads to website visitors within the Google advertising network. A "cookie" is stored in the visitor's browser, which makes it possible to recognise the visitor when he or she visits websites that belong to Google's advertising network. The visitor can be presented on these pages with advertisements related to content previously accessed by the user on sites using the Google Remarketing feature.
Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (art. 6 para. 1 (a) GDPR).
Recipients:
Every time you visit our website, personal data, including your IP address, is transferred to Google in the United States. This personal data is stored by Google. Google may pass on this personal data collected via this technical process to third parties.
Our company does not receive any information from Google that could be used to identify the data subject.
Revocation of consent:
Google states that it does not collect any personal data during this process. However, if you still do not wish to use Google's Remarketing feature, you can always disable it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can disable the use of cookies for interest-based advertising through the ad network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
Prescribed or required provision of data:
The provision of your personal data is voluntary, solely on the basis of your consent. If you block access, this may result in limited functioning of the website.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.
Changes to our PrivacyPolicies
We reserve the right to adjust this privacy policy so that it always meets the current legal requirements or to include changes to our services in the privacy policy, such as the introduction of new services (website function). Any subsequent visits will then be subject to the terms of the new privacy policy.
Questions to the data protection officer
If you have any questions about data protection, please send us an email or contact the person in our organisation responsible for data protection directly:
Perren Sämi
his privacy policy has been created using the privacy policy generator from active Mind AG (version 2018-06-12).
Data processing
Zermatt Tourismus and Bonfire AG.
Your bookings details are also processed as follows:
-
Your booking details are forwarded to Bonfire AG and Zermatt Tourism (either by us or via our electronic booking system).
-
Bonfire AG and/or Zermatt Tourism stores your booking details in a central database.
-
Zermatt Tourism uses this to calculate the visitor’s taxes payable and to collect the payment from service partners.
-
Zermatt Tourism also undertakes reporting to the Swiss Federal Statistical Office.
-
Bonfire AG and Zermatt Tourism grant the police access to the booking data database, so that the police can download the appropriate booking data in the event of missing persons, for example.
Zermatt Tourism uses the booking data to collect statistics (specifically regarding capacity, length of stay, number of arrivals, etc.).
The legal basis for this data processing lies in fulfilment of a legal obligation within the terms of Art. 6 (1) c GDPR (charging and collection of visitor’s tax/reporting to the Swiss Federal Statistical Office), or in preservation of a legitimate interest within the terms of Art. 6 (1) f GDPR (Grant of access to the police/Collation of statistics).
We will only use your booking details for direct marketing purposes (e.g. newsletter mailings) if you have given your consent.
"Hotel Jägerhof Zermatt AG is authorised to transfer the guest’s personal data to Zermatt Tourismus. This personal data is stored centrally by Zermatt Tourismus (and/or by data processors commissioned by Zermatt Tourismus). It is therefore possible that information and/or newsletters may be sent to the guest directly by Zermatt Tourismus and/or by Hotel Jägerhof Zermatt AG. It is also possible that this information may be sent in the name of Hotel Jägerhof Zermatt AG but it has actually been generated by Zermatt Tourismus (and/or data processors commissioned by Zermatt Tourismus). This information relates especially to «pre-stay» and «after-stay» emails."