Imprint / Privacy Policy

IMPRINT

Rhodania SA
Rue du Rhodania 7 / Case Postale 1055
CH-3963 Crans-Montana 2
Phone: +41 78 696 30 32
info@rhodaniahotel.ch


DATA PROTECTION DECLARATION

Data protection is a matter of trust and your trust is important to us. We respect your private sphere and privacy rights. The protection of your personal data that is collected, processed and used in compliance with the law, is therefore of great importance to us. In order to ensure that you feel comfortable when using our websites, we observe strict compliance with the statutory provisions when processing your personal data, and we should now like to inform you about the collection and use of your data here.

We are committed to compliance with the DS-GVO (Datenschutz Grundverordnung [General Data Protection Regulation - GDPR]) as well as the nationally valid data protection laws. For us the topic of data protection has an extremely high priority throughout our company and we work together exclusively with partners who can demonstrate an equally stringent data protection level in their processing procedures. We process your data only if you have given us your express permission to do so and it is necessary for the purposes of processing a contract or it relates to pre-contractual measures on a service-provision basis, or insofar as the relevant laws permit and/or require this respectively. The following data protection information contains both the current national legal framework that applies, as well as the provisions of the EU General Data Protection Regulation (GDPR) that came into force Europe wide on 25 May 2018. Reference to the legal principles of the GDPR are relevant from 25 May 2018. Under no circumstances will we sell your data or pass it on to unauthorised third parties. In the following we should like to inform you in detail about how we handle your data in our business units.

You can print or save this document by using the standard functionality of your browser. In the following Data Protection Declaration, you will find out which data we record on our website and how we process and use the different data.

I. Name and address of the person responsible

The person responsible within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:

Rhodania SA
Rue du Rhodania 7 / Case Postale 1055
CH-3963 Crans-Montana 2
Telefon: +41 (78) 696 30 32
E-Mail : info@rhodaniahotel.ch
Internet: www.rhodaniahotel.ch

Person responsible for web content:

Marc Lindner
Telefon: +41 (78) 696 30 32
E-Mail: marc.lindner@lindnerhotels.ch


II. Name and address of the data protection officer

The data protection officer for the person responsible is:

TÜV Informationstechnik GmbH
IT Security - Business Security & Privacy
Fachstelle für Datenschutz
Langemarckstraße 20
45141 Essen
Telefon: +49 201 8999-899
Telefax: +49 201 8999-666
E-Mail: privacyguard@tuvit.de


III. General information on data processing

1. Scope of the processing of personal data

Fundamentally we collect and use the personal data of our users only insofar as this is required for the provision of a fully functional website and for our contents and services. The collection and use of the personal data of our users is carried out on a regular basis but only following the consent of the user. An exception applies in cases where prior consent cannot be obtained for specific reasons and the processing of the data is permitted by statutory provisions.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the person affected for the processing of personal data, Art. 6 para. 1a of the EU General Data Protection Regulation (GDPR) serves as a legal basis for the processing of said personal data.

In the case of the processing of the personal data that is required for the fulfilment of a contract, the contracting party of which is the affected person, Art 6 para. 1b GDPR serves as the legal basis. This also applies for processing procedures that are required for the execution of pre-contractual measures.

Insofar as the processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, Art 6 para. 1c GDPR serves as the legal basis.

In the event that the vital interests of the affected person or another natural person make the processing of the personal data necessary, Art 6 para. 1d GDPR serves as the legal basis.

If processing is required in order to maintain a justified interest of our company or a third party and if the interests, basic rights and basic freedoms of the affected person do not take precedence over the aforementioned interest, Art 6 para. 1f GDPR serves as the legal basis for the processing.

3. Data deletion and duration of storage

The personal data of the person affected is deleted or blocked as soon as the reason for the data to be stored is no longer valid. However, they can continue to be stored if this is provided for in the European or national legislature, or in specific rules, directives or other provisions of European Union law to which the responsible person is subject. The blocking or deletion of the data is also carried out if the storage date prescribed by the aforementioned norms expires, unless there is a requirement for the data to continue to be stored for the conclusion or the performance of a contract.


IV. Availability of the website and creation of log files

1. Description and scope of data processing

Every time our internet site is accessed, our system automatically records data and information from the computer system of the calling PC.

The following data is collected in this case:

  • Information about the browser type and the version used
  • The operating system of the user
  • User’s customer journey within our website
  • Abbreviated IP addresses
  • Date, time and duration of visit
  • Websites from which the user’s system accesses our internet site

The data is also stored in the log files of our system. This data is not stored together with the other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and log files is Art. 6 para. 1f of GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is required in order to enable a delivery from the website to the user’s computer. Therefore, the user’s IP address must remain stored for the whole duration of the visit.

Storage in log files is carried out in order to guarantee the functionality of the website. In addition, the data helps us to optimise the website and to guarantee the security of our information technology systems. No evaluation of the data for marketing purposes is carried out in connection with this.

For these purposes our justified interests in data processing are in accordance with Art. 6 para. 1f GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer required for the purposes for which it was collected. In the case of collecting the data in order to make the website accessible to the visitor, they are deleted once the visit has ended.

In the case of storing the data in log files, this is the case after seven days at the latest. Further storage is possible. In this case the user’s IP addresses are either deleted or anonymised, so that it is no longer possible to allocate them to the visiting client.

5. Opportunity to contest data or have it eliminated

The collection of data in order to make the website available and the storage of said data in log files is required for the proper functioning of the website. Therefore, the user does not have a right to contest the data in this case.


V. Use of cookies

1. Description and scope of the data processing

Our website uses cookies. Cookies are text files that are filed in the internet browser and/or by the internet browser respectively of the user’s computer system. If a user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a unique character string that facilitates the clear identification of the browser if the website is visited again.

We use cookies in order to make our websites more user friendly. Some elements of our website require that the calling browser can be identified even after changing websites.

The following data is stored and transmitted in the cookies:

  • Language settings

2. How can you prevent cookies from being stored?

Depending on the browser you use, you can set the settings in such a way that the storing of cookies is accepted only if you have agreed to this. If you want to accept exclusively our cookies, but not those of our service providers and partners, you can select the setting "Block cookies from third parties" in your browser. As a rule, using the Help function in the menu bar in your web browser you can see how to refuse new cookies and to switch off those you have already received. You can find detailed information on how you can customise the settings in your browser via the following link. If you are using shared computers that are set to accept cookies and flash cookies, we recommend that you should always make sure that you have completely logged out after you have finished your session.

3. Legal basis for data processing

The legal basis for the processing of personal data with the use of cookies is Art. 6 para. 1f GDPR.

4. Purpose of the data processing

The purpose of technically required cookies is to simplify the use of the website for the user. Some of the functions of our internet site could not be offered without the use of cookies. For these it is necessary that the browser is identified even after changing website.

We need cookies for the following applications:

  • Acceptance of language settings
  • Bookmarking of websites visited

The user data collected by the technically required cookies are not used to create user profiles.

The reason for the use of the analysis cookies is in order to improve the quality of our websites and their contents. By using the analysis cookies, we can see how the website is being used and so we are able to continually optimise our offers.

For these purposes our justified interests in the processing of personal data are in accordance with Art. 6 para. 1f GDPR.

6. Duration of storage, option to contest and remove information

Cookies are stored on the user’s computer and transmitted to our website from here. Therefore, as a user you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be carried out automatically. If the cookies for our website are deactivated, it is possible that some of the functions of the website may no longer be fully available.

The transmission of flash cookies cannot be prevented using the browser settings but by changing the settings for Flash Player.


VI. Contact form and email contact

1. Description and scope of the data processing

A contact form is available on our internet site which can be used to contact us electronically. If a user wishes to take advantage of this option, the data entered in the input screen is transmitted to us and stored. This data is:

  • Form of address
  • First name
  • Last name
  • Country
  • Telephone
  • Email address
  • Re.
  • Details about your enquiry

The following data is also stored when the message is sent:

  • Date and time contact was made

Your consent for the processing of your data is obtained during the send process and reference is made to this Data Protection Declaration.

Alternatively, it is possible to make contact using the email address provided. In this case the personal details of the user that are transmitted in the email are stored.

This data is not passed on to third parties in this connection. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data following receipt of the user’s consent, is Art. 6 para. 1a GDPR.

The legal basis for the processing of the data that is transmitted by email, is Art. 6 para. 1f GDPR. If the email contact should result in the conclusion of a contract, the additional legal basis for the processing of the data is Art. 6 para. 1b GDPR.

3. Purpose of the data processing

The processing of personal data from the input screen is used by us exclusively for the purpose of processing the contact. In the case of contact by email, this also includes the necessary justified interest in the processing of the data.

The other personal data processed during the send process are used to prevent any misuse of the contact form and to guarantee the security of our IT systems.

4. Duration of storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected. With regard to personal data from the input screen for the contact form and that sent by email, this is the case once the relevant conversation with the user has ended. This conversation is ended, once it is clear from the circumstances that the relevant matter has been definitively clarified.

The additional personal data that is collected during the send process is deleted after a period of seven days at the latest.

5. Opportunity to contest data or have it eliminated

The user has the option of revoking their consent to the processing of personal data at any time. If the user gets in touch with us by email, they can contest the storage of personal data at any time. In such a case it is impossible for the conversation to be continued. It is possible to have a profile deleted by emailing info@rhodaniahotel.ch. All the personal data that was stored during the contact process is deleted in this case. In addition, any enquiries over an interval of one month are completely deleted from our system.


VII. Rights of the affected person

Pursuant to Art.15 GDPR in conjunction with § 34 BDSG (Bundesdatenschutzgesetz [Federal Data Protection Act]) you have the unrestricted right to information, which is free of charge, on the personal data that we hold on file on you as well as pursuant to § 35 BDSG the right to the deletion or blocking of inadmissible data and/or the right to the correction of any erroneous data respectively.

Upon application, we will be happy to provide you in writing with details on whether and what personal data we have filed on you. As far as possible, we shall take appropriate measures to update and or correct any data that we hold on you in the shortest time possible. Please send all information requests, enquiries regarding information or complaints about data processing, by email, stating your full postal address, directly to our data protection officer.

If your personal data is being processed, you are an affected person within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

1. Right of information

You can request a confirmation from the person responsible whether personal data that affects you is being processed by us.

If such processing is indeed being carried out, you can request the following information from the person responsible:

  • the purposes for which your data is being processed;
  • the categories of personal data that is being processed;
  • the recipients and/or categories of recipients to whom the personal data that affects you is being disclosed or will be disclosed in the future;
  • the planned storage period for the personal data that affects you or, if it is not possible to give any specific information in this regard, the criteria for determining the storage period;
  • the existence of a right to rectification or deletion of the personal data that affects you, a right to the restriction of processing by the person responsible and a right to object to this processing;
  • the existence of a right to appeal to a supervisory authority;
  • all available information on the origin of the data, if the personal data was not collected from the person affected;
  • the existence of an automated decision-making process including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved as well as the scope and the envisaged impact of such processing for the affected person.

You have the right to request information whether the personal data that affects you is being transmitted to a third country or to an international organisation. In this connection you can request to be informed about the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

2. Right to rectification

You have a right to rectification and/or completion vis-à-vis the person responsible, insofar as the personal data that affects you being processed is wrong or incomplete. The person responsible must carry out the rectification as quickly as possible.

3. Right to a restriction in the processing

Subject to the following conditions you can request a restriction in the processing of the personal data that affects you:

  • if you are contesting the correctness of the personal data that affects you for a period of time that allows the person responsible to check the correctness of the personal data;
  • if the processing is unlawful and you refuse to have the personal data deleted but instead request a limitation in the use of the personal data;
  • the person responsible no longer requires the personal data for the purposes of processing, but you require them for enforcement or execution purposes or for the defence of legal claims, or
  • if you have submitted a complaint concerning the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether the justified reasons of the person responsible take precedence over your reasons.

If the processing of the personal data that affects you is restricted, this data – apart from its storage – may only be processed with your consent or in order to enforce, execute or defend legal claims or for the protection of the rights of another natural person or legal entity or for reasons of an important public interest on the part of the European Union or another member state.

If the limitation in the processing pursuant to the aforementioned conditions is restricted, you will be informed by the person responsible before said restrictions are lifted.

4. Right to deletion

a. Duty to delete

You can request from the person responsible that the personal data that affects you should be deleted with immediate effect, and the person responsible is obliged to delete this data immediately, if one of the following reasons applies:

  • the personal data that affects you is no longer required for the purposes for which they were collected or for which they were processed in another manner.
  • You revoke your consent on which the processing is based pursuant to Art. 6 para. 1a or Art. 9 para. 2a GDPR and there is no other legal basis for the processing.
  • Pursuant to Art. 21 para. 1 GDPR you have submitted a complaint regarding the processing and there are no overriding reasons that justify the processing, or you have submitted a complaint regarding the processing pursuant to Art. 21 para. 2 GDPR.
  • The personal data that affects you was unlawfully processed.
  • The deletion of the personal data that affects you is required for the fulfilment of a legal duty according to the law of the European Union or the law of a member state to which the person responsible is subject.
  • The personal data that affects you was collected in connection with services offered by the information society pursuant to Art. 8 para. 1 GDPR.

b. Information to third parties

If the person responsible has made the personal data that affects you publicly and if they are obliged to delete it pursuant to Art. 17 para. 1 GDPR, they shall implement appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the officers involved in the data processing who are processing the personal data that, as the affected person, you have requested that they should delete all the links to this personal data as well as any copies or replicas thereof.

c. Exceptions

There is no right to deletion if the processing is necessary

  • for the enforcement of the right to free speech and information;
  • for the fulfilment of a legal duty that requires the processing pursuant to the law of the European Union or of a member state that is subject to said responsibility, or in order to fulfil a task that is in the public interest or is a result of the exercise of public authority with which the person responsible has been entrusted;
  • for reasons of the public interest within the area of public health pursuant to Art. 9 para. 2h and i as well as Art. 9 para. 3 GDPR;
  • for the purposes of archiving that are in the public interest, or for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, if the law mentioned in Section a) will probably make the realisation of the aims of this processing impossible or will seriously impede it, or
  • for the enforcement, execution and defence of legal claims.

5. Right to information

If you have exercised your right for correction, deletion or restriction in processing vis-à-vis the person responsible, the latter is obliged to inform all the recipients of the personal data that affects you of this correction or deletion of the data or the restriction in processing, unless this should prove to be impossible or it entails a disproportionate amount of time and effort.

You have the right to be informed of these recipients by the person responsible.

6. Right to data transferability

You have the right to receive the personal data that affects you and that you have made available to the person responsible, in a structured, current and machine-processable format. In addition, you have the right to transfer this data to another person responsible without any obstacle being placed in the way by the person responsible for whom the personal data was prepared, insofar as

(1)          the processing is based on a consent pursuant to Art. 6 para. 1a GDPR or Art. 9 para. 2a GDPR or on a contract pursuant to Art. 6 para. 1b GDPR and

(2)          the processing is carried out with the aid of an automated procedure.

In exercising this right, you also have the right to insist that the personal data that affects you is transferred directly from the one person responsible to the other, insofar as this is technically possible. The rights and freedoms of others must not be restricted by this.

The right of data transferability does not apply for the processing of personal data that are required for the execution of a task that is in the public interest or is a result of the exercise of public authority with which the person responsible has been entrusted.

7. Right to object

You have the right to object at any time to the processing based on Art. 6 para. 1e or f GDPR of the personal data that affects you, for reasons that are pertinent to your particular situation; this also applies for any profiling based on these provisions.

The person responsible shall no longer process the personal data that affects you unless they are able to provide irrefutable reasons sustaining the worthiness of the protection of the processing that supersede your own interests, rights and freedoms, or the processing is for the purpose of the enforcement, execution or defence of legal claims.

If the personal data that affects you is processed for direct marketing purposes, you have the right at any time to object to the use of the personal data that affects you for the purpose of such advertising; this also applies for any profiling, insofar as it is carried out in connection with such direct advertising.

If you object to the processing for the purpose of direct advertising, the personal data that affects you will no longer be processed for these purposes.

You have the option, in connection with the use of services of the information society – irrespective of Directive 2002/58/EC – to exercise your right to object by means of an automated procedure in which technical specifications are used.

8. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. The legality of the processing up until the point of the revocation of your consent is not affected by this.

9. Automatic decision in an individual case including profiling

You have the right not to be bound by a decision that is based exclusively on automated processing – including profiling – that restricts you vis-à-vis any legal effect or that considerably restricts you in any other way. This does not apply if the decision

  • for the conclusion or the completion of a contract between you and the person responsible is required,
  • based on the legal provisions of the European Union or of the member states to which the person responsible is subject, is admissible and these legal provisions contain appropriate measures for the maintenance of your rights and freedoms as well as your justified interests or
  • is carried out with your express consent.

However, these decisions may not be based on specific categories of personal data pursuant to Art. 9 para. 1 GDPR, if Art. 9 para. 2a or g applies and appropriate measures for the protection of your rights and freedoms as well as your justified interests were met.

With regard to the cases mentioned in (1) and (3) the person responsible shall take appropriate measures to maintain your rights and freedoms as well as your justified interests, whereby the right to intercede on behalf of a person by the person responsible, to the presentation of a personal point of view and to challenge the decision is included at least.

10. Right to lodge a complaint with a supervisory authority

Irrespective of any other legislative or regulatory judicial remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place where the alleged violation took place, if you are of the opinion that the processing of the personal data that affects you has violated the GDPR.

The supervisory authority to whom the complaint is submitted shall inform the complainant about the status and the results of the complaint, including the possibility of any judicial remedy pursuant to Art. 78 GDPR.

 

Date of our Data Protection Declaration: September 2019