Version dated 13.08.2024
Thank you for your interest in our hotel. Data protection is important to us, and in this privacy policy, we explain how we collect and process personal data (i.e., data that relates to a specific or identifiable person, such as name, address, email address, or user behavior on websites). This privacy policy is based on the Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO).
In addition, we may inform you separately about the processing of your data, e.g., in declarations of consent or other forms, contractual terms, or additional privacy policies.
(1) Hotel Concordia obtains and processes personal data from you or from other individuals.
(2) For the data processing described in this privacy policy, the party responsible under data protection law is
Hotel Concordia, 7524 Zuoz, Switzerland
responsible, unless otherwise communicated in an individual case.
(3) You can reach us using the following contact details:
Email: hello@hotelconcordia.swiss
(1) We primarily limit the processing of personal data to data that we receive from our customers, hotel/restaurant guests, or other involved individuals and organizations in connection with our services and products, or that we collect from users on our websites or other applications.
Other individuals involved may include, in particular:
• Family members of customers
• Individuals authorized by customers
(2) In particular, we collect the following personal data from you on a case-by-case basis, depending on the purpose: first name, last name, address, email address, telephone number, IP address (only when using our website), and other necessary data.
(3) We require this data in particular for the following purposes:
• To identify you as a customer
• To correspond with you
• To fulfill our legal documentation or reporting obligations
• To conclude and process hotel bookings, restaurant reservations, or other services
• To process and fulfill the tasks of service and supply contracts (e.g., supply contracts, consulting agreements, etc.)
• To process and fulfill the tasks of collaborations with cooperation partners
• For invoicing
• To provide further services from our company or, if applicable, in cooperation with third parties
• To provide the best possible and customized services to you and to further develop our range of services and products
• To communicate with third parties
• To advertise and market our services and products (provided you have not objected to the use of your data for this purpose)
• To assert legal claims or defend our position in general
• To ensure, further develop, and improve our operations in general (e.g., IT, websites)
• To safeguard other security aspects
(4) We only process your personal data if we have a contractual (e.g., hotel booking) or legal basis, or if the data processing is necessary for the performance of a task carried out in the public interest. Furthermore, we only process your personal data if we have informed you and, where necessary, obtained your voluntary consent after providing appropriate information, and no revocation has been made, or if our legitimate interest in the data processing outweighs your interests. Consent can be revoked for the future at any time.
3.1. For our customers
(1) We only disclose your personal data to recipients or third parties within the scope of the purposes described above, as permitted and appropriate. These may include, in particular:
• Cooperation partners (e.g., restaurants, tourism businesses, etc.)
• Authorities and government institutions (e.g., municipality)
• Service providers (e.g., IT providers, payment service providers, reservation system providers, accounting and auditing firms, service providers we use in connection with our online services)
• Suppliers, retailers, subcontractors, or other cooperation partners
(2) Such data disclosure is based either on a legal obligation, the fulfillment of a contract, your consent, a public interest, or our legitimate interest in disclosing the data.
3.2. For visitors to our websites
(3) The recipients of your personal data may be located domestically or abroad. In particular, we draw your attention to the fact that we transfer personal data to countries where service providers we use are based (e.g., email and website hosting).
If a recipient is located in a country without adequate legal data protection, we contractually obligate them to comply with applicable data protection standards (for this, we use the revised Standard Contractual Clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), unless they are already subject to a legally recognized framework for ensuring data protection and we cannot rely on an exception. An exception may apply, in particular, in the case of legal proceedings abroad, but also in cases of overriding public interest, if contract performance requires such disclosure, if you have consented, or if the data has been made generally accessible by you and you have not objected to its processing.
In principle, we process (and store) your personal data only for as long as is necessary for the purposes for which it was collected in accordance with this privacy policy. However, there may be instances where we are legally obligated to store certain data for a longer period or where longer storage is technically necessary (e.g., as part of automatic security backups). In such cases, we ensure that your personal data is handled throughout the entire period in accordance with this privacy policy.
(1) You have the right to request information from us at any time regarding the personal data we have stored about you, as well as its origin, the recipients or categories of recipients to whom this personal data is disclosed, and the purpose of the storage.
(2) Furthermore, you have the right to request the correction, deletion, or restriction of the processing of your personal data from us at any time. You also have the right to data portability.
(3) You also have the right to object to the processing of your personal data by us at any time.
(4) If you have provided us with consent to use personal data, you may revoke it at any time without providing a reason.
(5) Please note that prerequisites, exceptions, or restrictions apply to these rights in accordance with applicable law (e.g., for the protection of third parties or trade secrets). We will inform you accordingly if necessary.
(6) If you would like to exercise the aforementioned rights, please contact the address specified in Section 1 (Controller).
We maintain up-to-date technical and organizational measures to ensure data security, in particular to protect your personal data against risks during data transmission and against unauthorized access by third parties. These measures are adjusted in accordance with the current state of the art.
This privacy policy is not part of any contract with you and may be amended by us at any time. We will continuously update our privacy policy in line with the technical development of our services and the legal framework. Changes to the privacy policy will be published on our websites. Subject to applicable law, all changes to the privacy policy take effect as soon as the updated privacy policy is published. If we have already collected data about you, we will ask for your consent if required by law.
In addition to the above, we inform you about the use of cookies or other technologies on our website as follows:
(1) When using the websites for informational purposes only (i.e., if you do not log in, register, or otherwise transmit information to us), we do not collect any personal data, with the exception of the data transmitted by your browser.
(2) Our website, as well as various online services, uses so-called cookies. These are small text files that are placed on your device via your browser.
Cookies may be used to ensure the functionality of our websites, to optimize them, to better tailor them to your needs, or for marketing purposes. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.
(3) Hosting
We host our website with Sitrox AG in Zurich, which processes data on our behalf.
(4) Privacy Policy for Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This data is collected for the purpose of web hosting. It includes:
• IP address
• Browser type and version
• Operating system used
• Referrer URL (the previous page visited, from which you arrived at the current page)
• Hostname of the accessing computer
• Time of the server request
This data cannot be attributed to specific individuals. This data is not merged with other data sources. We reserve the right to check this data subsequently if we become aware of concrete indications of unlawful use.
9.1 Hotel Spider (Hotel Room Booking)
On our website, we use the service provided by Hotel Spider, Route de Champ-Colin 18, 1260 Nyon, Switzerland (website: https://www.hotel-spider.com/).
We use Hotel Spider to enable online hotel room bookings. When booking an appointment, we require your title, first name, last name, street, house number, postal code, city, region/canton, country, telephone number, mobile number, fax number, email address, company name, IP address, and credit card details. The information sent to Hotel Spider remains with us. Furthermore, any processing of your data by Hotel Spider is contractually regulated by us.
9.2 aleno (Restaurant Reservation)
We use the service of Aleno AG, Aegertenstrasse 6, 8003 Zurich, Switzerland (website: https://www.aleno.me/), on our website.
We use aleno to enable online table reservations for our restaurant. When making a reservation, your first name, last name, email address, and telephone number are collected. The information sent to aleno remains with us. In addition, any processing of your data by aleno AG is contractually regulated with us.
Further information about aleno and their data protection efforts can be found at https://www.aleno.me/en/ppa.
9.4 Google Maps
We use the online map service Google Maps from Google Inc. on our website. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for all Google services. With Google Maps, we can show you locations more effectively and thus tailor our service to your needs. By using Google Maps, data is transmitted to Google and stored on Google servers.
For Google Maps to provide its service in full, the company must collect and store your data. This includes, among other things, the search terms entered, your IP address, and latitude and longitude coordinates. If you use the route planner function, the starting address entered is also stored. However, this data storage takes place on the Google Maps websites. We can only inform you about this, but have no influence over it. Since we have integrated Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google primarily uses this data to optimize its own services and to provide you with individualized, personalized advertising.
Further information on Google's data processing can be found in the company's privacy policy at https://policies.google.com/privacy?hl=en.
9.5 SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
.webp)
