Source: https://shop.e-guma.ch/hotel-chesa-salis-bever/en/privacypolicy
Timestamp: 2019-04-23 17:01:18+00:00

Document:
Data is processed based on your request and is required for the purposes specified in Art. 6 Para. 1 (1) (b) GDPR for the fulfilment of the contract and pre-contractual measures.
If you would like to subscribe to the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No additional data will be collected. We use this data exclusively for the dispatch of the requested information and do not pass the data on to third parties. You can revoke your consent to the storage of data, your e-mail address and its use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter.
As far as this is legally permissible according to Art. 6 Para. 1 (1) (b) GDPR and is required for the processing of contractual relationships with you, your personal data will be passed on to third parties. The data passed on may be used by third parties exclusively for the specified purposes.
The personal data specified above is stored and processed by the software provider E-GUMA® (Idea Creation GmbH, Walchestrasse 15, CH-8006 Zurich) of our online shop within the scope of contract processing.
Your payment data will be processed by the following service provider in the context of payment processing: Datatrans AG, Kreuzbühlstrasse 26, CH-8008 Zurich.
Your personal data will also be passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods.
On the one hand, cookies are used to record the frequency of use, number of users and behaviour on our website as well as to increase the security of website use and to make the information we provide user-friendly.
In addition, we also use temporary cookies that are stored on your device for a specified period of time to optimise user-friendliness. If you visit our site again to use our services, it will automatically recognise that you have visited us before and what entries and settings you have made so that you do not have to enter them again.
Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping basket function), are stored on the basis of Art. 6 Para. 1 (f) GDPR.
You can configure your browser settings so that no cookies are stored on your computer. Completely disabling cookies can result in you not being able to use all the functions of our website.
Google Analytics cookies are stored on the basis of Art. 6 Para. 1 (f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimise both our offers and advertising.
To request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if the data has not been collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information of details (Art. 15 GDPR). In the event of disproportionately high costs, we reserve the right to require you to provide us with an identification card and to assume the actual costs in advance.
To immediately request the correction of incorrect or the completion of your personal data stored by us (Art. 16 GDPR).
To demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if processing is unlawful but you refuse to delete it and we no longer need the data, but if you need it to assert, exercise or defend legal claims, or if, pursuant to Art. 21 GDPR you have filed an objection to processing (Art. 18 GDPR).
To receive your personal data, which you have provided to us, in a structured, current and machine-readable format or to request the transmission to another responsible person (Art. 20 GDPR).
If your personal data is processed based on legitimate interests according to Art. 6 Para. 1 (1) (f) GDPR, you have the right, in accordance with Art. 21 GDPR to object to the processing of your personal data if there are reasons for this which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.
Your personal data will be transmitted from this website to us in SSL-encrypted form. We protect our website against unauthorised access by means of technical and organisational measures.
We will retain your personal information for as long as we deem necessary or appropriate to comply with applicable laws or as long as it is necessary for the purposes for which it was collected. We will delete your personal data as soon as it is no longer required and in any case after expiry of the legally prescribed maximum retention period of five or ten years. Data that is no longer required and for which there is no legal obligation to keep it will be destroyed once the purpose and reason for justification have ceased to exist.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 21