Source: http://dev.bellevue-gstaad.ch.server35.zrh1.bw-server.ch/privacy-policy/
Timestamp: 2019-04-22 14:44:36+00:00

Document:
Le Grand Bellevue SA, Untergstaadstrasse 11-21 runs the Hotel Le Grand Bellevue and is the operator of the website https://www.bellevue-gstaad.ch and thus responsible for the collection, processing and use of your personal data and the compatibility of data processing with the applicable data protection law.
Your trust is important to us, that is why we take the topic of data protection seriously and pay attention to appropriate security. Of course, we observe the legal provisions of the Federal Data Protection Act (DSG), the Federal Data Protection Act (VDSG), the Telecommunications Act (FMG) and other applicable data protection provisions under Swiss or EU law, in particular the Data Protection Act. Basic Protection Order (DSGVO).
In order for you to know which personal data we collect from you and for what purposes we use it, please note the information below.
The collection and processing of this data is for the purpose of facilitating the use of our website (connection establishment), to ensure the long-term security and stability of the system and to optimize our Internet offerings and for internal statistical purposes. This is our legitimate interest in the processing of data within the meaning of Art. 6 para. 1 lit. f DSGVO.
The IP address will also be evaluated together with the other data in case of attacks on the network infrastructure or other unauthorized or improper use of the website for the purposes of investigation and defense and, where appropriate, in the context of criminal proceedings for identification and civil and criminal proceedings against the users concerned used. This is our justified interest in the processing of data within the meaning of Art. 6 para. 1 lit. f DSGVO.
By registering, you give us your consent to the processing of the data provided for the regular sending of the newsletter to the address you have specified and for the statistical evaluation of the user behavior and the optimization of the newsletter. This consent constitutes, within the meaning of Art. 6 para. 1 lit. a DSGVO is our legal basis for the processing of your e-mail address. We are entitled to commission third parties with the technical processing of advertising measures and are entitled to pass on your data for this purpose (see section 13 below).
At the end of each newsletter there is a link that you can use to unsubscribe from the newsletter at any time. As part of the deregistration you can voluntarily inform us of the reason for the deregistration. After unsubscribing, your personal data will be deleted. Further processing is only done in an anonymous form to optimize our newsletter.
The collection of these and other data voluntarily provided by you (eg company name) is done for the purpose of providing you with a password-protected direct access to your basic data stored with us. You can view your past and current bookings or manage or change your personal data. The legal basis for the processing of the data for this purpose lies in the consent given by you pursuant to Art. 6 (1) lit. a GDPR.
We will only use this data and other information voluntarily provided by you (eg expected time of arrival, motor vehicle registration plate, preferences, comments) to process the contract, unless otherwise stated in this data protection declaration or you do not enter this separately. We will process the data by name in order to record your booking as requested, to provide the booked services, to contact you in case of any uncertainties or problems and to ensure the correct payment.
The legal basis of data processing for this purpose lies in the fulfillment of a contract pursuant to Art. 6 para. 1 lit. b DSGVO.
Cookies may also be used to identify you as a registered user after you have registered on the website, without having to log in again when accessing another website.
Disabling cookies may mean that you cannot use all features of our website.
The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purposes of market research and tailoring of this website. This information may also be transmitted to third parties if required by law or if third parties process this data in the order.
Provider of Google Analytics is Google Inc., a holding company of the Holding Company Alphabet Inc, based in the United States. Prior to the transmission of data to the provider, the IP address will be truncated by activating IP anonymisation (“anonymizeIP”) on this website within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The anonymized IP address provided by Google Analytics within the scope of Google Analytics will not be merged with other data provided by Google. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. In these cases, we provide contractual guarantees to ensure that Google Inc. complies with a sufficient level of data protection. According to Google Inc., under no circumstances will the IP address be associated with other data related to the user. For more information about the web analytics service used, visit the Google Analytics website. For instructions on how to prevent your data from being processed by the web analytics service, see https://tools.google.com/dlpage/gaoptout?hl=en.
We provide this information for the fulfillment of legal reporting obligations, which arise in particular from the hospitality or police law. Insofar as we are required to do so under the applicable regulations, we will forward this information to the relevant police authority.
In fulfilling the legal requirements, our legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If you receive additional services during your stay (for example, make use of the minibar or the pay-TV service), we will collect the service and the date of receipt of the service for billing purposes. The processing of this data is within the meaning of Art. 6 para. 1 lit. b DSGVO required for the execution of the contract with us.
We store the data specified in paragraphs 2-5 and 8-10 in a centralized electronic data processing system. The data relating to you are systematically recorded and linked to the processing of your bookings and the processing of the contractual services. For this we use a software of [company name, address, country]. The processing of this data as part of the software is based on our legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO on customer-friendly and efficient customer data management.
We only store personal information for as long as is necessary to use the above tracking services as well as any further processing within the scope of our legitimate interest. Contract data will be kept longer by us, as this is prescribed by statutory storage requirements. Retention requirements, which oblige us to store data, result from provisions on the right to report, the accounting and the tax law. According to these regulations, business communication, closed contracts and accounting documents must be kept for up to 10 years. As far as we no longer need this data to carry out the services for you, the data will be blocked. This means that the data may then only be used for accounting purposes and for tax purposes.
We only pass on your personal data if you have expressly consented, if there is a legal obligation to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties, as far as this is necessary in the context of the use of the website and the order processing (also outside the website), namely the processing of your bookings.
A service provider to whom the personal data collected via the website is passed on or who has access to it is our web host Byteworks GmbH, Baarerstrasse 112, CH-6300 Zug. The website is hosted on servers in Switzerland and Germany. The transfer of data is for the purpose of providing and maintaining the functionality of our website. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
For the purpose of the data processing described in this data protection declaration, we are also entitled to transfer your personal data to third parties (contracted service providers) abroad. These are obligated to the same extent as we ourselves for data protection. If the level of data protection in one country does not correspond to the Swiss or the European one, we contractually ensure that the protection of your personal data at all times corresponds to those in Switzerland or in the EU.
You have the right to receive information about the personal data that we store about you on request. In addition, you have the right to correct inaccurate data and the right to delete your personal data, as far as there is no legal obligation to retain or a permit that allows us to process the data.
You also have the right to reclaim from us the data you have given us (right to data portability). On request, we also pass the data on to a third party of your choice. You have the right to receive the data in a common file format.
You can reach us for the above mentioned purposes via the email address info@bellevue-gstaad.ch. We may, at our sole discretion, require proof of identity to process your requests.
We use appropriate technical and organizational security measures to protect your personal data stored against us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share your computer with others.
We also take corporate privacy very seriously. We have obligated our employees and the service companies commissioned by us to secrecy and to compliance with data protection regulations.
For the sake of completeness, we would like to point out to users domiciled or domiciled in Switzerland that there are surveillance measures by US authorities in the USA which generally entail the storage of all personal data of all persons whose data were transmitted from Switzerland to the USA. This is done without any distinction, restriction or exclusion on the basis of the objective pursued and without an objective criterion that would limit the US authorities’ access to the data and its subsequent use to very specific, strictly limited purposes be able to justify the intervention entailed both in accessing and using this data. Furthermore, we would like to point out that in the USA there are no legal remedies available for the persons concerned from Switzerland which allow them to obtain access to the data concerning them and to obtain their rectification or deletion, or no effective judicial protection against general legal protection Access rights of US authorities. We explicitly inform the data subject of this legal and factual situation in order to make a correspondingly informed decision to consent to the use of his data.
For users residing in EU Member States, please note that, from the point of view of the European Union, the US does not have sufficient data protection levels due, inter alia, to the issues mentioned in this section. To the extent we have explained in this privacy statement that recipients of data (such as Google) are located in the United States, we will either be governed by contractual arrangements with these companies or by ensuring that these companies are certified under the EU – or Swiss-US-Privacy Shield to ensure that your data is protected at an appropriate level by our partners.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6