Source: https://www.agauche.ch/en/legal-disclaimer.html
Timestamp: 2019-04-26 12:11:59+00:00

Document:
and therefore responsible for the collection, processing and use of your personal data and ensuring compliance of data processing with applicable data privacy regulations.
Your trust is important to us, and for that reason we take the issue of data protection seriously and ensure we have the appropriate security in place. Of course, we comply with the statutory provisions of the Federal Data Protection Act (DSG), the Regulation on the Federal Data Protection Act (VDSG), the Telecommunications Act (FMG) and other applicable data protection provisions under Swiss or EU law, in particular the General Data Protection Regulation (GDPR).
So that you are aware of what personal data we collect from you and what we use these data for, please note the information below.
if applicable, your username from any registration / authentication.
After 30 days we automatically anonymise the IP addresses collected, so that no conclusions can be drawn regarding individual users.
These data are collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring long-term system security and stability and to help us optimise our Internet offering, and for internal statistical purposes. This is our legitimate interest in the processing of data within the meaning of Art. 6 para. 1 lit. f GDPR.
The IP address is also evaluated together with the other data for the purpose of gathering information and initiating defence in the event of attacks on the network infrastructure or other unauthorised or improper use of the website, and if necessary will be used in criminal proceedings for identification and in civil and criminal proceedings against the users concerned. This is our legitimate interest in the processing of data within the meaning of Art. 6 para. 1 lit. f GDPR.
We use these data, and any telephone number which you voluntarily provide, only to give you the most effective and as personalised a response as possible to your query. The processing of these data is therefore necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the implementation of pre-contractual measures, or is in our legitimate interests under Art. 6 para. 1 lit. f GDPR.
The above data are required for data processing. You can also choose to provide additional details (first name, surname, address). We process these data solely for the purpose of telling you about our products and services, and to personalise the information and offers we send you and better match them to your interests.
By registering, you consent to our processing of the data you provide to enable us to regularly send the newsletter to the address specified by you, and for the statistical evaluation of user behaviour and to optimise our newsletter. Within the meaning of Art. 6 para. 1 lit. a GDPR, this consent constitutes our legal basis for the processing of your email address. We are entitled to commission third parties to handle the technical aspects of advertising measures and are entitled to pass on your data for this purpose (see 22 below).
At the end of each newsletter you will find a link where you can unsubscribe at any time. When unsubscribing, you may choose to tell us the reason why you are unsubscribing. Once you have unsubscribed, your personal data will be deleted. Any further processing of these data will be solely in anonymised form for the optimisation of our newsletter.
The legal basis for the processing of data for this purpose is the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR.
On our website, there is the option of booking a room online, or contacting the reservations department via Live Chat. The software for the Chat function, and the booking platform software, are provided by selected third-party providers. Different data will be collected depending on the service you choose (see 4 and 6).
Disabling cookies may mean that you cannot use all the features of our website.
The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services associated with website and internet usage for the purpose of market research and tailoring the design of this website to suit our needs and those of users. This information may also be shared with third parties if required by law or if third parties are processing these data on our behalf.
In order to provide you with personalised services and information on our website (on-site targeting), we use and analyse the data that we collect about you when you visit the website. So-called cookies may also be used when processing these data. The analysis of your user behaviour may result in the creation of a so-called user profile. Your usage data will only ever be consolidated using pseudonyms; we never do this with non-pseudonymised personal data.
We use re-targeting technologies on our website. Your user behaviour on our website is analysed to enable partner websites to offer you advertising that is individually tailored to your preferences. Your user behaviour will be recorded under a pseudonym.
This website uses Google AdWords Remarketing, services provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’), to display ads based on your use of previously visited websites. For this purpose, Google uses the so-called double-click cookie, which allows your browser to be recognised when you visit other websites. The information generated by the cookie about your visit to this website (including your IP address) is transmitted to a Google server in the United States and stored there.
Google will use this information for the purpose of evaluating your use of the website in terms of the advertisements to be displayed, to compile reports for the website operator on website activities and ads, and to perform other services associated with website and internet usage. Google may also share this information with third parties if required by law or if third parties are processing these data on Google’s behalf. However, Google will never associate your IP address with other Google data.
and opt out of receiving the further advertising and re-targeting tools referred to.
The Google Analytics service is provided by Google Inc., an undertaking of the holding company Alphabet Inc, based in the United States. The IP address communicated by your browser within the scope of Google Analytics will be anonymized and will not be associated with any other data held by Google. According to Google Inc., under no circumstances will the IP address be associated with other data relating to the user.
For further information about the web analysis service used, visit the Google Analytics website. For instructions on how to prevent your data being processed by the web analysis service, see http://tools.google.com/dlpage/gaoptout?hl=de.
Based on Art. 957 et seq. of the Swiss Code of Obligations (OR), all business correspondence sent by email is archived for 10 years in encrypted form. The archived emails are automatically deleted after 10 years. The email data are stored in Switzerland.
We collect this information in order to comply with legal reporting obligations, which arise in particular from legislation relating to the hospitality industry and police. Insofar as we are required to do so under the applicable provisions, we will pass on this information to the relevant police authority.
Complying with the legal requirements is in our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR.
If you purchase additional services during your stay (e.g. restaurant visits, using the mini-bar or the pay TV offer, etc.), we will keep a record of the purchased item or service and the time of purchase, for billing purposes. The processing of these data is necessary within the meaning of Art. 6(1)(b) GDPR for the performance of our contract with you.
Our website integrates Facebook plug-ins. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You’ll recognise these plug-ins by the Facebook logo or the ‘Like’ button on our website. You’ll find a summary of the Facebook plug-ins at https://developers.facebook.com/docs/plugins/.
When you visit our website, the plug-in establishes a direct connection between your browser and the Facebook server. This link lets Facebook know that you have visited our website from your IP address. If you click on the Facebook ‘Like’ button while logged in to your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to link the visit to our website to your user account. H. Kracht's Erben AG has no knowledge of the content of the transmitted data or how Facebook uses those data.
Our website integrates Instagram plug-ins. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged in to your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to link the visit to our website to your user account. H. Kracht's Erben AG has no knowledge of the content of the transmitted data or how Instagram uses those data.
Our website integrates YouTube plug-ins. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube plug-in establishes a connection to the YouTube servers. This tells the YouTube server which of our pages you have visited.
If you are logged in to your YouTube account, YouTube can link your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube user account.
Finally, we may be notified by the platform operators of any disputes in relation to a booking. This may sometimes involve data on the booking process, which could also include a copy of the booking confirmation as proof of the actual booking being made. We process these data for the purpose of safeguarding and asserting our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
We store the data indicated in paragraphs 2-5 and 9-10 in a central electronic data processing system. The data relating to you are systematically recorded and linked for the processing of your bookings and performance of the contractual services. For this we use a software package provided by the firm ‘protel hotelsoftware gmbh’ based in Dortmund, DE 44269. Personal data collected within the scope of a CRM programme are processed using software provided by the firm ‘Toedt, Dr. Selk & Coll. GmbH’ based in Munich, DE 80333. The processing of these data in the context of the software is based on our legitimate interest, within the meaning of Art. 6 para. 1 lit. f GDPR, in a customer-friendly and efficient management of customer data.
We store personal data only for as long as is necessary to use the tracking services referred to above and for any further processing within the scope of our legitimate interest. We retain contract information for a longer period, as this is required by statutory retention requirements. Retention requirements which obligate us to store data arise out of regulations covering legislation on reporting, financial accounting and taxation. Pursuant to those regulations, business communications, accounting records and any contracts concluded must be kept for up to 10 years. Unless we still need these data in order to provide the services for you, the data will be made inaccessible. This means that the data may then be used only for accounting and tax purposes.
We only pass on your personal data if you have expressly consented to our doing so, there is a legal requirement for us to do so, or this is necessary to enable us to assert our rights, particularly for the assertion of claims arising from the contractual relationship. In addition, we pass on your data to third parties if this is necessary within the context of using the website and performing the contract (including outside the website), especially for processing your booking.
One service provider to whom the personal data collected via the website are disclosed, or who has or may have access to those data, is our webhoster, aspectra AG, Weberstrasse 4, CH-8004 Zürich. The website is hosted on servers in Switzerland. The transfer of the data is for the purpose of providing and maintaining the functionalities of our website. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Personal data for room bookings on the website are collected and processed by SABRE, a sub-contractor of ‘The Leading Hotels of the World’.
Our guests have the opportunity to give us feedback on our services and their experience with us. This serves to further develop and improve the service we provide to our guests. For this purpose, email addresses are transmitted to the firm ‘Medallia Ltd.’ in Palo Alto, California, USA.
Regarding the forwarding of data to third parties, please also note the information in paragraphs 7, 9 and 13-14.
Personal data for restaurant reservations on the website are collected and processed by ‘book-a-table’.
Personal data for [purchasing event tickets and gift vouchers] on the website are collected and processed using ‘E-Guma’.
If credit card information is collected and processed when making bookings via this website, this is done by the company ‘Datatrans’.
You have the right to receive, on request, information about the personal data which we hold on you. In addition, you have the right to rectify incorrect data and the right to erasure of your personal data, provided this is not preluded by any statutory retention requirement or a legal permission authorising us to process the data.
You also have the right to reclaim from us any data you have given us (right to data portability). You have the right to receive the data in a common file format.
Requests to exercise the rights of data subjects are accepted via the websites (data privacy contact). To process your requests, we require a proof of identify of the person making the request.
We use appropriate technical and organisational security measures to safeguard your personal data held by us against tampering, partial or complete loss and against unauthorised access by third parties. Our security measures are subject to continuous improvement in line with advances in technology.
You should always treat your access data as confidential and close the browser window once you have finished communicating with us, particularly if you are using a shared computer.
We also take data privacy within our own company very seriously. Our employees and the service companies contracted by us have been obligated by us to maintain secrecy and to comply with data privacy regulations.
In the interests of completeness, we would point out to users residing in or having their registered office in Switzerland that in the United States surveillance measures by the US authorities are in place which generally allow the storage of all personal data of any individual whose data are sent from Switzerland to the US. This is done without differentiation, restriction or exception on the basis of the objective pursued and without any objective criteria that would restrict access to the data and its subsequent use by the US authorities to very specific and limited purposes that would justify the intervention associated with access to and use of these data. We also wish to point out that no legal remedies are available in the United States for data subjects from Switzerland allowing them to access their data or request that it be rectified or erased, and that no effective legal protection against the general access rights of the US authorities exists. We are explicitly bringing this legal and factual situation to the attention of data subjects, to enable them to make a properly informed decision on giving their consent to the use of their data.
You have the right at any time to lodge an objection with a data protection supervisory authority.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 957
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6