PRIVACY STATEMENT

Hotel Eden Spiez AG

1. General
The protection and the security of personal data have top priority for Hotel Eden Spiez AG. We attach importance to handling such data in an open and transparent manner.  Through the present Privacy Statement you are thus being informed of the type, scope and purpose of the personal data processed by us as well as the rights you have. As a visitor and user of the website under www.eden-spiez.ch (hereinafter "website" or "online presence"), you will also be informed of the type, scope and purposes of the collection, processing and use of personal data on this website.
 
Personal data is information that relates to an identified or identifiable natural person (“data subject”). Data processing is defined as any process carried out in connection with personal data, such as the collection, recording, storage and modification, request, use, disclosure through transmission, dissemination or any other form of provision or deletion thereof either with or without the aid of automated processes.


2. Name and address of the person responsible (“data processor”)
The natural or legal person who decides on the purposes and means of processing personal data is considered to be the data processor.  

The following is responsible as the data processor:
Hotel Eden Spiez AG
Seestrasse 58
3700 Spiez
Switzerland

Phone:     +41 (0) 33 655 99 00

Website: welcome@eden-spiez.ch 
Email: www.eden-spiez.ch 
The data processor is also the website provider (hereinafter referred to as “provider” in this connection).



3. Name and address of the data protection officer
Any person affected by data processing may contact our data protection officer directly with any question or request relating to data protection. This person is:

Patrick Jäger
c/o Hotel Eden Spiez AG
Seestrasse 58
3700 Spiez
Switzerland
Email: datenschutz@eden-spiez.ch 



4. Categories of personal data
Hotel Eden Spiez AG may process the following categories of personal data. In this context, Hotel Eden Spiez AG does not process more personal data than necessary.
Hotel Eden Spiez AG processes customer data. Customer data is considered to be the following in particular:

    •    Master and inventory data (e.g. name, address, date of birth, telephone number, contract number and term of contract, credit card information, data on banking connection)
    •    Marketing data (e.g. needs, requests, preferences)
    •    Technical data (e.g. internal and external identifiers, business numbers, IP addresses, records of accesses or modifications, email addresses)


Hotel Eden Spiez AG processes supplier data. Supplier data is considered to be the following in particular:

    •    Master and inventory data (e.g. name, address, telephone number, contract number and term of contract, information on transactions executed, data on banking connections)
    •    Technical data (e.g. internal and external identifiers, business numbers, IP addresses, records of accesses or modifications, email addresses)


5. Reservations

The data that you enter on our website for the purpose of making a hotel or restaurant reservation or for reserving an SPA treatment is sent to us in encrypted form (via HTTPS). This data, the type and scope of which can be gathered from the respective input mask of the online booking engine we use, is collected, processed and used solely in order to create, implement and process the contractual relationship established through the reservation and for the purposes mentioned under No. 9.


6. Contact
When you contact us (particularly as the website operator, e.g. through the contact form or by email) your particulars will be stored for the purpose of processing your request and in the event that any follow-up questions arise.



7. Minors
Minors may not send us any personal data without the approval of their parents/guardians. We do not collect, process or use any personal data of minors that we knowingly received within the framework of our online presence.


8. Duration of storage

The duration of the storage of personal data is determined by statutory retention obligations (depending on the legal basis applicable, this amounts to five, ten or more years) or the purpose of data processing in each case.



9. Purpose of data processing
Hotel Eden Spiez AG may process the personal data described under No. 4 in order to provide its services and for its own or statutory purposes. These include in particular the implementation and processing of contracts, planning and product development, marketing, market research, comprehensive customer care, advice and information on our range of services, the preparation and provision of tailored services, compliance with statutory or regulatory obligations to provide information or report to courts and authorities and compliance with official requirements.


10. Legal basis of data processing
Data processing is lawful provided data processing is required in order to fulfil a contract to which the data subject is a contracting party or to carry out precontractual measures taken upon request by the data subject. This is the case in processing processes required in order to provide services, other performance or counterperformance. The same applies to processing processes required to carry out precontractual measures, such as in cases where we receive inquiries about our offers or services. Insofar as Hotel Eden Spiez AG processes personal data for the purposes named in this paragraph, it refers to these reasons as justification.
Furthermore, data processing is lawful if the data subject has given his consent to data processing or if processing is required to fulfil a legal obligation to which Hotel Eden Spiez AG is subject. Data processing is also lawful if it is necessary to protect the legitimate interests of Hotel Eden Spiez AG or a third party which, for instance, might be the case if the data subject is a customer of Hotel Eden Spiez AG. In addition, data processing is lawful if the vital interests of a natural person are to be protected or if processing is necessary for the performance of a task which is in the public interest.


11. Security of data
By taking technical and organisational security measures, the personal data that you provide to us will be protected so that it cannot be accessed by unauthorised third parties. We continually adapt and improve these security measures in line with technological and organisational developments. However, you must always bear in mind that sending information via the Internet and other electronic means entails certain security risks and Hotel Eden Spiez AG cannot assume any guarantee for the security of information transmitted in this manner.


12. Disclosure of personal data
Hotel Eden Spiez AG will not sell, forward or otherwise transmit your personal data to third parties except in the manner described in this Privacy Statement.
Your personal data may also be forwarded to third parties who act on our behalf or in our name so that this data is further processed according to the purpose/the purposes for which the data was originally collected or for other legally permitted purposes. These third parties have entered into a contractual undertaking vis-à-vis us to use personal data only for the agreed purposes and not sell such data to other parties or disclose it to other parties, unless this is required by law, permitted by us or described in this Privacy Statement.
Personal data may also be disclosed to third parties if we are obliged to do so by law, by a court order or official regulations or this is necessary to support criminal or judicial investigations or other legal investigations or proceedings at home or abroad.


13. Rights of the data subject
You may request information from Hotel Eden Spiez AG on whether it processes your personal data. If this is the case, we will inform you of the personal data existing in our data collections including the particulars available on the origin of the data, the purpose and if applicable, the legal basis of processing as well as the categories of personal data processed, the parties involved in collection and the data recipients. You also have a right to correction, a right to the deletion of personal data (right to be forgotten, unless barred by other retention obligations or where any other legal basis for processing is lacking), a right to the restriction of processing, a right to data portability and the right to the revocation of any consent given in line with data protection regulations.
Please send any complaints, questions, requests for information or further concerns concerning the collection, processing or use of your personal data to our data protection officer (cf. No. 3).


14. Data logging when visiting this website
When you visit this website, our web server automatically records log files that cannot be allocated to any particular person. This data includes, e.g. the browser type and version, the operating system used, referrer URL (the website visited previously), IP address of the calling computer, date and time of access, server request and the client’s file request (file name and URL). This data is collected only for the purpose of statistical evaluation. No data is forwarded to third parties for commercial or non-commercial purposes. 


15. Email newsletter
Through our email newsletter we keep you up-to-date on Hotel Eden Spiez and its offers and services.
If you wish to receive the newsletter we require a valid email address from you as well as information that allows us to verify that the email address stated actually belongs to you or its owner agrees to the receipt of the newsletter. No further data is collected. This data is used only in order to dispatch the newsletter and is not forwarded to third parties. Your particulars may be stored and used by Hotel Eden Spiez AG for market research and advertising purposes.
A subscriber to the email newsletter can revoke his consent at any time to the storage of the data named above and to the use thereof for the dispatch of the newsletter.  His consent can be revoked by clicking on the link in the newsletters themselves or by sending an email stating “Unsubscribe” in the subject line to marketing@eden-spiez.ch

We will then delete your data in connection with the dispatch of the newsletter without delay.


16. Cookies
We use what are referred to as “session cookies” on our website in order to facilitate your use of our webpages. These are small text files that are stored on your fixed disk only during the period in which you visit our website and which, depending on the setting of your browser programme, are deleted again when the browser session is ended. These cookies do not retrieve any information stored on you on your fixed disk and do not harm your PC or your files.

What are cookies? Cookies are text information that a website transfers to the calling computer via the browser programme. A cookie allows the webserver and browser programme to recognise each other again when the website is accessed at a later stage. Personal settings and special services are thus repeatedly made immediately available.

Necessary cookies: These cookies make a significant contribution to improving your movement and shopping experience in the web shops. Basic functionalities and applications such as shopping baskets or electronic billing procedures are optimised thereby and handling them made simpler. These cookies do not collect any information on you that can be used for marketing activities or statistical analyses.

Performance cookies: Performance cookies are used to collect anonymous statistical data on how websites are used and in what areas errors occur. They are supplemented by anonymised general data, such as information on visitor demographics or the reach of the website. These cookies make a significant contribution to keeping websites as performance-oriented as possible and enable possible errors and weak points to be detected. 

Advertising cookies: These cookies enable advertisements to be supported, the contents of which are of relevance to interests. They are usually used by marketing networks with the consent of the operator and recognise visitors on various websites of the participating organisations. These cookies are also used for the services of third parties and provide data. We use targeted or advertising cookies, for example, to connect up with Facebook in order to measure the effectiveness of our online and offline advertising.

Re-targeting cookies: In the process, our webpages use what are referred to as re-targeting technologies. We use these technologies to design the website so that it is more interesting for you. This technology enables Internet users who are already interested in our shop and our products to show them advertising on the websites of our partners. We are convinced that displaying personalised, interest-related advertising is usually more interesting for an Internet user than advertising that is not personalised. Displaying this advertising on the websites of our partners is based on a cookie technology and an analysis of the user’s previous user behaviour. This type of advertising is carried out completely pseudonymously. No user profiles are combined with your personal data. Through your use of our website, you consent to the use of what are known as cookies and thus that user data on you is collected, stored and used. Furthermore, your data are stored in cookies after the end of the browser session and for example, can be accessed again the next time you visit our website. You can revoke your consent at any time with effect for the future by refusing to accept cookies in your browser settings (http://www.criteo.com/de/privacy/).
You can set your browser so that cookies are stored only if you have given your consent to this. If you only wish to accept Hotel Eden cookies but not cookies of our partners, please select “Block cookies of third providers” in your browser. In the menu bar of your web browser the help function will show you how to reject new cookies and deactivate those already received. On shared computers, we recommend that you accept cookies and so-called flash cookies and always completely log off after ending the session.



17. Information on Google Analytics / Web tracking
This website also uses Google Analytics, a web analysis service of Google Inc. with its headquarters in Mountain View, USA ("Google"). Google Analytics uses what are referred to as “cookies” which are text files that are stored on your computer and allow your use of the website to be analysed. The information generated by the cookie on your use of this website is usually transferred to a Google server in the USA and stored there.
As the IP anonymisation (IP masking) provided by Google is activated on this website (through the expansion of Google Analytics to include the code “gat._anonymizeIp();“), your IP address is abbreviated and thus anonymised by Google within the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there.
On behalf of the operator of this website, Google will use the information collected through Google Analytics to evaluate your use of the website, to compile reports on website activities and to provide further services related to the use of both the website and the Internet to the website operator. The IP address sent by your browser for the purpose of Google Analytics will not be combined with other Google data.
You can prevent the storage of cookies by Google Analytics by entering a setting to this effect in your browser software; however, we point out that in that case you might not be able to fully use all the functions of this website. You can also prevent the collection of the data generated by the cookie related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: (http://tools.google.com/dlpage/gaoptout?hl=de).

Furthermore, you can prevent Google Analytics from recording your use of the website by activating what is known as an opt-out cookie which will prevent the collection of your data in the future when you visit this website. The opt-out cookie will be activated if you click on the following link Please click here to complete your objection.
The operator of this website also uses Google Analytics to evaluate data generated by AdWords and the double-click cookie for statistical purposes. If you do not wish this, you can deactivate this via the ads preferences manager (http://www.google.com/settings/ads?hl=de).
Further information on the terms of use and data protection by Google Analytics is provided under http://www.google.com/analytics/terms/de.html and under  https://www.google.de/intl/de/policies/



18. Integration of services and contents of third providers (e.g. YouTube and Google Maps)
The contents of third parties, e.g. videos of YouTube and map material of Google Maps (hereinafter referred to as “third providers”), are integrated into the website. For technical purposes the IP address of the user must be transmitted to the respective third provider for the use of such contents because without the IP address the third providers would not be able to send the contents integrated into the website to the browser of the respective user. We have no influence on whether a third provider stores or uses the IP address, e.g. for statistical or other purposes.



19. Use of Facebook social plugins
The website uses social plugins (hereinafter referred to as “plugins”) of the facebook.com social network operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook"). The plugins can be recognised by one of the Facebook logos (white "f" on a blue square or a "thumbs up" sign) or are marked with the addition "Facebook social plugin". The list and the appearance of the Facebook social plugins can be seen here: https://developers.facebook.com/docs/plugins/.
If a user accesses a page of this website that contains such a plugin, his browser sets up a direct connection to Facebook servers. Facebook transmits the content of the plugin to the user’s browser directly and integrates it into the website. The provider thus has no influence on the scope of data that Facebook collects with the aid of this plugin. According to the information currently available to the provider, Facebook proceeds as follows:

By integrating the plugin, Facebook is informed that a user has accessed the respective page of the provider’s website. If the user is logged into Facebook, Facebook can allocate the visit to his Facebook account. If users interact with the plugins, e.g. click on the Like button or leave a comment, this information is transmitted directly to Facebook by the user’s browser and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out and store his IP address. Facebook has declared that only an anonymised IP address is stored in Switzerland.
Please see the privacy statement of Facebook for the purpose and scope of data collection and the further processing and use of the data by Facebook and the related rights and setting options to protect the private sphere of users https://www.facebook.com/about/privacy/.
If a user is a member of Facebook and does not wish Facebook to collect data on him via the provider’s website and link it to his membership data stored with Facebook, he must logout before visiting Facebook’s website.

Facebook social plugins can also be blocked with add-ons for the user’s browser, e.g. with the "Facebook-Blocker".



20. +1 button von Google+
The website uses the "+1" button of the Google Plus social network operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). The button can be recognised by the symbol "+1" on a white or coloured background.

When a user accesses a page containing such a button on this website, his browser will set up a direct connection to Google servers. Google will transmit the content of the "+1" button to his browser directly and integrate it into the website. The provider thus has no influence on the scope of data that Google collects with the button. Google has declared that no personal data will be collected without clicking on the "+1" button first; Google will only collect and process personal data such as the IP address if members are logged into Google+.
The users can obtain information on the purpose and scope of data collection and the further processing and use of the data by Google as well as on setting options in order to protect their private sphere in Google’s data information on the "+1" button under www.google.com/policies/privacy/partners and in the FAQs under www.google.com/button/.



21. Twitter
The website uses Twitter buttons. These buttons are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (hereinafter referred to as "Twitter"). They can be recognised by terms such as "Twitter" or "Follow" in conjunction with a stylised blue bird. With the aid of the Twitter buttons, it is possible to share a contribution or a page of this website on Twitter or follow the provider on Twitter.
When a user accesses a page containing such a Twitter button on this website, his browser will set up a direct connection to Twitter servers. Twitter will transmit the content of the Twitter button to the user’s browser directly. The provider thus has no influence on the scope of data that Twitter collects with the aid of this plugin. Twitter has declared that only the user’s IP address and the URL of the respective website is transmitted when subscribing to the Twitter button; this data is used only to present the Twitter button.

Further information on the Twitter service and Twitter buttons is provided in the privacy statement of Twitter under  http://twitter.com/privacy. 



22. Use of Instagram social plugins

Instagram plugins are used on the website operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example, in the form of an “Instagram camera“.
When you access a page containing such a plugin on this website, your browser will set up a direct connection to Instagram servers. Instagram will transmit the content of the plugin to your browser directly and integrate it into the website. By integrating the plugin, Instagram is informed that your browser has accessed the respective page of our website, even if you do not own an Instagram profile or are not logged into Instagram at that moment. Your browser transmits this information (including your IP address) directly to an Instagram server in the USA where it is stored.
If you are logged into Instagram, Instagram can allocate your visit on our website to your Instagram account directly. If you interact with the plugins, for example, by clicking on the “Instagram” button, this information will also be transmitted directly to an Instagram server and stored there. The information will also be published on your Instagram account and displayed to your contacts there.
The purpose and scope of data collection and further processing and use of the data by Instagram as well as your rights as a user and setting options in order to protect your private sphere are provided in the privacy statement of Instagram https://help.instagram.com/155833707900388/

If you do not wish Instagram to allocate the data collected on our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent Instagram plugins being loaded by means of add-ons for your browser, e.g. by using the script blocker “NoScript” (http://noscript.net/).



23. Exemption of liability
The contents of the website contain no assurances or guarantees. Hotel Eden Spiez AG accepts no liability under any circumstances, including liability for negligence and liability vis-à-vis third persons, for any direct, indirect or consequential damage arising as a result of the use of information and material from the website or through access via links to other websites. 



24. Update and amendment of the Privacy Statement
We can amend or update parts of the Privacy Statement without our notifying you thereof beforehand. Please check our Privacy Statement before you use our website to ensure that you are up-to-date on amendments or updates.



Last revised: May 2018