Source: https://www.hotelmyway.ch/privacy-policy/?lang=en
Timestamp: 2019-10-15 19:36:04
Document Index: 197446676

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy | HOTEL MYWAY
Reloc AG, Neue Winterthurerstrasse 26, 8304 Wallisellen manages the Hotel MyWay and operates the website www.hotelmyway.ch and is therefore responsible for the collection, processing, and use of your personal data and the conformity of the data processing with applicable data protection law.
Your trust is important to us, which is why we take the topic of data protection serious-ly and ensure appropriate security. We naturally comply with the legal provisions of the Federal Data Protection Act (FDPA), the Ordinance to the Federal Data Protection Act (OFDPA), the Telecommunications Act (TCA), and other data protection provisions that may apply under Swiss or EU law, especially the General Data Protection Regula-tion (GDPR).
A. Data processing in connection with our
– Name of the owner of the IP address range (typically your Internet ac-cess provider),
– Website from which access originated (referrer URL), with search term used if applicable,
– Name and URL of accessed file,
– Status code (e.g. error message),
– Your computer’s operating system,
– The browser you used (type, version, and language),
– The transmission protocol used (e.g. HTTP/1.1), and
– If applicable, your user name from registration/authentication.
This data is collected and processed to allow the use of our website (establishing a connection), to permanently ensure system security and stability, and to optimise our Internet offer as well as for internal statistical purposes. We rely on our legitimate in-terests within the meaning of Art. 6 (1) f) GDPR for these processing purposes.
We only use this data you may voluntarily provide to answer your contact query in the best possible and personalised way. Processing of this data is therefore required in order to take steps prior to entering into a contract within the meaning of Art. 6 (1) b) GDPR or falls within our legitimate interests pursuant to Art. 6 (1) f) GDPR, respectively.
3. Opening of a customer account
You can carry out bookings on our website as a guest or you can open a custom-er account. We collect the following data when you register for a customer ac-count:
4. Booking on the website, by correspondence, or by telephone
If you carry out bookings either via our website, by correspondence (email or post), or by telephone, we require the following data for the execution of the con-tract:
Cookies help in many ways to make your visit to our website easier, more pleasant, and more useful. Cookies are information files your web browser automatically stores on your computer’s hard drive when you visit our Internet page.
Most Internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a notice always appears before you receive a new cookie. On the following pages, you will find expla-nations as to how to configure the processing of cookies in the most common brows-ers:
We use the web analysis service Google Analytics for needs-based design and continu-ous optimisation of our website. Pseudonymised use profiles are generated and small text files that are stored on your computer (“cookies”) are used in this context. The information about your use of this website generated by the cookie is sent to the serv-ers of the provider of these services and stored and processed for us there. In addition to the data listed under Section 1, we receive the following information in some cir-cumstances:
– Navigation path a user takes through the site,
– Time spent on the webpage or a sub-page,
– The sub-page from which the webpage was left,
– The country, region, or city from which access originates,
– End device (type, version, colour depth, resolution, width, and height of browser window), and
– Returning or new user.
The information is used to analyse the use of the website, to compile reports about website activities, and to perform other services related to website use and Internet use for purposes of market research and needs-based design of this webpage. This in-formation may also be sent to third parties if required by law or if third parties are pro-cessing this data on a contract basis.
The provider of Google Analytics is Google Inc., an undertaking of the holding compa-ny Alphabet Inc., with registered office in the USA. Before the data is transmitted to the provider, the IP address is abbreviated inside the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area by activating IP anonymisation (“anonymizeIP”) on this website. The anonymised IP address transmitted by your browser within the framework of Google Analytics will not be linked to other Google data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. In this case, we use contractual guarantees to ensure that Google Inc. maintains an adequate level of data protection. According to Google Inc., under no circumstances is the IP address linked to other data about the user.
7. Data processing for the fulfilment of legal reporting obligations
– Government ID card and number
– Day of arrival and departure
We collect this information for the fulfilment of legal reporting obligations, which result in particular from hospitality industry or police regulations. If we are obliged to do so under the applicable regulations, we will forward this information to the rele-vant police authority.
8. Recording of services purchased
If you purchase additional services during your stay (e.g. laundry service, baby cot etc.), we will record the service and the time of purchase of the service for billing purposes. The processing of this data is necessary for the performance of a contract within the meaning of Art. 6 (1) b) GDPR.
9. Booking platforms
If you carry out bookings through a third-party platform, we receive various per-sonal information from each platform operator. As a rule, these are the data listed in Section 5 of this data privacy policy. In addition, we may receive questions re-garding your booking. We will in particular process this data to record your book-ing as requested and to provide the booked services. The legal basis for pro-cessing the data for this purpose is the performance of a contract pursuant to Art. 6 (1) b) GDPR.
Finally, the platform operator may notify us of disputes in connection with a book-ing. In some circumstances, we may receive data about the booking process, which may include a copy of the booking confirmation as a receipt of the actual booking transaction. We process this data to protect and enforce our claims. This constitutes our legitimate interest within the meaning of Art. 6 (1) f) GDPR.
10. Central storage and linking of data
We store the data specified in Sections 2-5 and 8-10 in a central electronic data pro-cessing system. The data relating to you is recorded and linked in the system to process your bookings and to provide contractual services. To do this, we use a software of Re-bag Data AG, Einsiedlerstrasse 533, 8810 Horgen, Switzerland. For the processing of this data in the framework of the software we rely on our legitimate interest within the meaning of Art. 6 (1) f) GDPR in customer-friendly and efficient customer data management.
We only store personal data as long as it is necessary to use the abovementioned tracking services and to carry out the further processing activities in the frame-work of our legitimate interests. We retain contractual data for a longer period of time, as this is prescribed by legal retention obligations. Retention obligations that require us to retain data arise from regulations relating to reporting law, account-ing, and tax law. According to these regulations, business communication, con-cluded contracts, and accounting records must be kept for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for billing and tax purposes.
12. Disclosure of data to third parties
We only disclose your personal data if you have given your express consent, if there is a legal obligation to do so, or if this is necessary to enforce our rights, especially to enforce claims arising from the contractual relationship. In addition, we disclose your data to third parties as far as this is necessary in the context of use of our website and contract processing (including outside the website), name-ly to process your bookings.
A service provider to whom personal data collected through the website is dis-closed to or who has or can have access to is our web host: paan solution sys-tems, Sternweg 17, 9122 St. Kanzian am Klopeinersee, Austria. The data is dis-closed for the purpose of providing and maintaining the functionalities of our web-site. This constitutes our legitimate interest within the meaning of Art. 6 (1) f) GDPR.
Finally, if you make a credit card payment on the website, we disclose your credit card information to your credit card issuer and to the credit card acquirer. If you decide to pay by credit card, you will in each case be asked to enter all required information. The legal basis for disclosing the data is the performance of a con-tract pursuant to Art. 6 (1) b) GDPR. In regard to the processing of your credit card information by these third parties, we ask that you also read the general terms and conditions and the data privacy policy of your credit card issuer.
13. Transmission of personal data abroad
We have the right to transmit your personal data to third parties (contracted service providers) located abroad for the purpose of the data processing described in this data privacy policy. These are obliged to ensure data protection to the same extent as we are. If the level of data protection in a country does not correspond to the Swiss or Eu-ropean level, we shall ensure by contract that the protection of your personal data corresponds at all times to that in Switzerland or the EU.
14. Right to access, correction, deletion, and restriction of processing; right to data portability
You have the right to know about the personal data that we store about you on re-quest. In addition, you have the right to the correction of incorrect data and the right to the deletion of your personal data, insofar as this does not conflict with any legal obligation to retain data or a legal basis that allows us to process the data.
You can contact us at the email address info@hotelmyway.ch for the aforesaid purpos-es. We may, at our discretion, require proof of identity to process your requests.
We take appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, full or partial loss or destruction, and unauthorised access by third parties. Our security measures are continuously im-proved in line with technological developments.
You should always treat your access data confidentially and close the browser window when you have ended communication with us, especially if you used a shared comput-er.
16. Notice regarding data transfers to the US
For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that monitoring measures are in place in the US by US authorities, which generally allow the storage of all personal data of all persons whose data is transmitted from Switzerland to the US. This is done without distinction, restriction, or exception by reference to the goal and without an objective criterion that allows ac-cess by US authorities to the data and later use thereof to be restricted to very specific, strictly limited purposes that could justify the intervention associated with access to and use of this data. In addition, we would like to point out that there are no legal remedies in the US for data subjects from Switzerland that would allow them to obtain access to the data relating to them and to obtain the correction or deletion thereof, and that there is no effective court protection against general access rights of US au-thorities. We explicitly point out this legal and factual situation to the data subject so that he or she can make an informed decision about consenting to the use of his or her data.
Users residing in an EU Member State are advised that the US does not have an ade-quate level of data protection from the perspective of the European Union – partly because of the issues mentioned in this section. Insofar as we have stated in this data privacy policy that recipients of data (such as Google) have their headquarters in the US, we will ensure that your data is protected at an adequate level by our partners, either through contractual agreements with these companies or by ensuring that these companies are certified under the EU- or Swiss-US Privacy Shield.
17. Right to file a complaint with a data protection supervisory authority
You have the right to file a complaint with a data protection supervisory authority at any time. The following authority is responsible for Reloc AG: