Privacy policy

Seehotel Bönigen AG (we) is the operator of the website www.seehotel-boenigen.ch and is therefore responsible for the collection, processing and use of your personal data and the compliance of data processing with the applicable data protection legislation.

Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate security. It goes without saying that we comply with the legal provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).

So that you know what personal data we collect from you and for what purposes we use it, please take note of the following information.

This privacy policy applies exclusively to our website (www.seehotel-boenigen.ch) ("website") and subdomains in the format subdomain. seehotel-boenigen.ch. We accept no responsibility and disclaim all liability for links that lead from our website to third-party websites. Clicking on an external link is entirely your own responsibility.

Changes to this privacy policy apply from the time of their publication on our website. The processing of personal data collected under an older privacy policy is carried out in accordance with this privacy policy. We reserve the right to amend this privacy policy at any time and to inform customers, partners and users of the changes in an appropriate manner.

Information about the person responsible

If you have any questions or messages concerning your personal data, please do not hesitate to contact us. You can reach us as follows:

Seehotel Bönigen
Families Budd & Hohermuth
Seestrasse 22
CH-3806 Bönigen near Interlaken

Phone +41 (0)33 827 07 70
info@seehotel-boenigen.ch

Data processing

Calling up our website

When you visit our website, our servers temporarily store every access in a log file. As with every connection to a web server, the following technical data is recorded without any action on your part and stored by us until it is automatically deleted after 14 months at the latest:

  • All information that you explicitly provide in the context of a request (name, address, age, gender, contact details, etc.);
  • IP address and referrer URL (the previously visited page);
  • Browser version and browser type used;
  • Date & time of the visit or request; the password you created;
  • Operating system and provider;
  • any affiliation identity or link identity (with this we can determine that you have come to us from any partner platform).

Cookies that we use on our website can be found at the end of this privacy policy "Information on the use of cookies".

We do not engage in profiling on our website in the sense of automated processing of personal data, which consists of using this data to evaluate certain personal aspects of you (e.g. for analyses or predictions regarding work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location), and only collect or process particularly sensitive personal data (e.g. on religious, political or ideological views, state of health, etc.) in exceptional cases and in this case limited to contractual or legal obligations.

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability in the long term and enabling the optimization of our website as well as for internal statistical purposes. This is our legitimate interest in data processing.

Use of our contact form

You have the option of using a contact form to get in touch with us. We require the following information for this:

  • First and last name
  • E-mail address
  • Communication

We only use this data and a telephone number voluntarily provided by you to answer your contact request in the best possible and personalized way.

Subscribe to our newsletter

You have the option of subscribing to our newsletter on our website. Registration is required for this. The following data must be provided as part of the registration process:

  • Salutation
  • First and last name
  • E-mail address

The above data is required for data processing. In addition, you can voluntarily provide further data (date of birth and country). We process this data exclusively in order to personalize the information and offers sent to you and to better tailor them to your interests.

By registering, you give us your consent to process the data provided for the regular sending of the newsletter to the address you have provided and for the statistical evaluation of user behavior and the optimization of the newsletter. This consent constitutes our legal basis for the processing of your e-mail address within the meaning of Art. 6 para. 1 lit. a GDPR. We are entitled to commission third parties with the technical processing of advertising measures and are entitled to pass on your data for this purpose (see section 13 below).

At the end of each newsletter you will find a link that you can use to unsubscribe from the newsletter at any time. When unsubscribing, you can voluntarily inform us of the reason for unsubscribing. After unsubscribing, your personal data will be deleted. Further processing only takes place in anonymized form to optimize our newsletter.

Opening a customer account

To make bookings via our platform, you can order as a guest or open a customer account. When registering for a customer account, we collect the following mandatory data:

  • Salutation
  • First and last name
  • Postal address
  • Date of birth
  • Phone number
  • E-mail address
  • password

The collection of this data and other data voluntarily provided by you (e.g. company name) is carried out for the purpose of providing you with password-protected direct access to your basic data stored by us. You can view your previous and current bookings or manage or change your personal data.

Booking on the website, by correspondence or by phone call

If you make bookings either via our website (booking platform), by correspondence (email or letter post) or by telephone call, we require the following data in order to process the contract:

  • Salutation
  • First and last name
  • Postal address
  • Date of birth
  • Phone number
  • Language
  • Credit card information
  • E-mail address

We will only use this data and other information voluntarily provided by you (e.g. expected arrival time, motor vehicle license plate, preferences, comments) to process the contract, unless otherwise stated in this privacy policy or unless you have given your separate consent. We will process the data by name in order to record your booking as requested, to provide the booked services, to contact you in the event of ambiguities or problems and to ensure correct payment.

The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR.

Messages, notifications, updates

Communication for promotional purposes: We may send you marketing content about our website, services and products, as well as products we offer jointly with our partners and third party products and services, through various communication channels such as email, SMS, pop-ups, push notifications and messaging apps. You can unsubscribe from this advertising by following the instructions contained in the communications you receive from us. You can also opt out of receiving future advertising at any time by sending a message to info@seehotel-boenigen.ch.

Communication for information and other purposes: We will send you communications that are required or necessary for all customers, notifications that contain important information, and other communications that you request from us. You cannot unsubscribe from these communications. However, you may be able to customize the media and format through which you receive the notifications.

Data processing in connection with your stay

Data processing to fulfill legal reporting obligations

On arrival at our hotel, we may need the following information from you and your companions:

  • First and last name
  • Postal address and canton
  • Date of birth
  • Place of birth
  • Nationality
  • Official identification card and number
  • Arrival and departure day
  • Room number

We collect this information to fulfill legal reporting obligations, in particular those arising from hospitality or police law. Insofar as we are obliged to do so under the applicable regulations, we forward this information to the competent police authority.

Our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the fulfillment of legal requirements.

Recording of purchased services

If you purchase additional services during your stay (e.g. make use of the minibar or the pay TV offer), we will record the subject matter of the service and the time of purchase for billing purposes. The processing of this data is necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the execution of the contract with us.

Cookies

Cookies are small text files or pieces of information that are stored on your computer or mobile device (such as a smartphone or tablet) when you use our Services. A cookie usually contains the name of the website/application from which it originated, the duration of the cookie (i.e. how long the cookie will remain on your device), and a value, which is usually a randomly generated, unique number.

We use cookies to make our services more user-friendly and to tailor our services and products to your interests and needs. Cookies are able to do this because our services can read these files. This enables our services to recognize you and remember important information that makes your use of our services more user-friendly (e.g. by remembering preference settings). Cookies may also be used to help speed up your future activities and your future user experience with our services. We also use cookies to compile anonymous, aggregated statistics that allow us to understand how users use our services and help us to improve the structure and content of our digital media.

The maximum storage time of cookies after their initial placement on the user terminal is as required by applicable law.

Types of cookies

The types of cookies we use are session cookies, persistent cookies, first party cookies and third party cookies.

Resident cookies are used to store your login information and remember your preferences for future logins to our services. A resident cookie is a cookie that is stored as a file on your computer and remains there when you close your web browser. The cookie can be read by the services that created it when you visit those services again.

Session ID cookies are used to enable certain features on our Services, to better understand how you interact with our Services, and to monitor aggregate user data and web traffic routing. Unlike persistent cookies, session cookies are removed from your computer when you close your browser. Typically, session ID cookies store an anonymous session identifier on your computer that allows you to use a service without having to log in every time you click on it.

First party cookies are our own cookies that we use to improve your user experience. They are linked to a user's personal information. Third parties do not have access to the information we collect through our own cookies.

Third party cookies are cookies that are placed on our Services by third party companies to provide services, including advertising cookies. Third party companies place third party cookies on your device on our behalf when you visit our services to enable these third party companies to perform the services they provide. In addition to the information in this privacy policy, you can find more information about these third-party cookies in the privacy policies of these third-party companies.

Below you will find a list of the different types of cookies that we use in our services.

Essential Cookies

Essential cookies are cookies that are strictly necessary for our services to work and to use their features. Without such strictly necessary cookies, our services would not function as smoothly as you would like and we may not be able to provide the website or certain services or features that you request.

We also use technical cookies that allow our services to remember choices you make (such as your username, language or the region you are in) for customization and personalization purposes. These cookies do not collect information about you that is used for advertising purposes, nor do they remember which websites you have visited.

  • The following first party cookies are set by us (all persistent cookies):
  • Device identifier cookie: We install cookies on your computer that recognize you and tell the website or service that you are logged in.
  • User Local Cookie: We install cookies that are used to remember certain local choices you have made, such as language selection.
  • Privacy Visibility Cookies: We install cookies on your computer that indicate whether you have been informed by a banner message about the use of cookies and the handling and your rights in connection with your data, and then whether you have given your consent to the use of cookies, so that the banner does not reappear each time you visit a page.

These cookies are necessary for the operation of our services and therefore you cannot object to the use of these cookies.

Functional cookies

Functional cookies are cookies that enable the use of certain functions in our services that may be useful to you, but are not absolutely necessary for our services to work and to use their functions. You may refuse the installation of these cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our services.

Google Maps (Session Third Party Cookies)

We use Google Maps to display interactive maps and to create directions. Google Maps is a map service from Google.

By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA.

When you access a web page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data:

  • Date and time of the visit to the website in question,
  • Internet address or URL of the website accessed,
  • IP address,
  • (Start) address entered during route planning.

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.

The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information: https://policies.google.com/privacy?hl=de.

By using our website, you consent to the processing of data about you by Google Maps Route Planner in the manner and for the purposes set out above.

Google reCAPTCHA

The purpose of reCAPTCHA is to check whether data is entered on our websites (e.g. in a contact form) by a human or by an automated program. In this way, we curb abusive website requests from automated tools and spam, among other things. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. By blocking reCAPTCHA, it is possible that you will no longer be able to fully use the services of our website, especially with regard to forms.

Analytical cookies and cookies for marketing, profiling and retargeting

Control of Google tools via the Tag Manager

Google Tag Manager is used on our website. Google Tag Manager is a cookie-free domain that does not collect any personal data. The Google Tag Manager triggers other tags, which in turn may collect data. We hereby point this out separately. The Google Tag Manager does not access this data. If deactivation has been carried out by the user at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

Google Analytics (resident third party cookies)

The Google Analytics service is used to analyze the usage behavior of our website. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Usage and user-related information that is collected includes, for example, IP address, location, time or frequency of visits to our website. We have resorted to IP anonymization for the use of Google tools. This addition shortens the last digits of your IP address before it is definitively stored on the Google servers. As a result, the technical and analytical Google services can still be used reasonably, but you are no longer fully traceable and thus have a higher degree of anonymity with regard to your surfing behaviour than without IP anonymization.

We also use the remarketing function as part of the Google Analytics usage spectrum. This allows us to show you personalized advertising on suitable advertising spaces on other websites based on the interests you have shown on our website. This option is limited to a maximum of 18 months. Retargeting enables us to place advertisements that are as relevant as possible for you and to measure the efficiency and reach of the advertising media, but also to check the invoices of our advertising partners for campaigns placed.

The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

Google states that it will not associate your IP address with any other data. Google also provides further data protection information for you at https://www.google.com/intl/de/policies/privacy/partners, for example on the options for preventing the use of data.

Google also offers a so-called deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=de along with further information on this. This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. Of course, you can also find out whether and which other web analysis services we use in this privacy policy.

Google will not associate your IP address with any other data held by Google. You can prevent the installation of cookies. To do this, you must select "Do not accept cookies" in your browser settings. Please note that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Hotjar

We use the web analysis service Hotjar from Hotjar Ltd ("Hotjar") for our website. Hotjar is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta). This tool can be used to track movements on our website (so-called heat maps). For example, it is possible to see how far users scroll and which buttons users click and how often. The tool can also be used to obtain feedback directly from website users. [A3] In this way, we obtain valuable information to make our website even faster and more customer-friendly.

We pay particular attention to the protection of your personal data when using this tool. For example, we can only track which buttons are clicked, the path of the mouse, how far you scroll, the screen size of the device, device type and browser information, location (country only) and preferred language in order to display our website.

Hotjar offers every user the option of using a "Do Not Track header" to prevent the use of the tool so that no data about the visit to the respective website is recorded. Detailed instructions with information about your browser can be found at https://www.hotjar.com/opt-out.

Storage and exchange of data with third parties

Booking platforms

If you make bookings via a third-party platform, we receive various personal data from the respective platform operator. This is generally the data listed in section 5 of this privacy policy. In addition, we may receive inquiries about your booking. We will process this data by name in order to record your booking as requested and provide the booked services. The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR.

Finally, we may be informed by the platform operators about disputes in connection with a booking. We may also receive data on the booking process, which may include a copy of the booking confirmation as proof of the actual completion of the booking. We process this data to safeguard and enforce our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Please also note the data protection information of the respective provider.

Central storage and linking of data

We store the data specified in sections 2-5 and 8-10 in a central electronic data processing system. The data relating to you is systematically recorded and linked in order to process your bookings and handle the contractual services. We base the processing of this data as part of the software on our legitimate interest in customer-friendly and efficient customer data management within the meaning of Art. 6 para. 1 lit. f GDPR.

Storage period

We only store personal data for as long as is necessary to use the above-mentioned tracking services and for further processing within the scope of our legitimate interest. We store contractual data for longer, as this is required by statutory retention obligations. Retention obligations that oblige us to retain data result from regulations on reporting law, accounting and tax law. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

Disclosure of data to third parties

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties insofar as this is necessary for the use of the website and the processing of contracts (including outside the website), in particular the processing of your bookings.

A service provider to whom the personal data collected via the website is passed on or who has or may have access to it is our web host DV Bern AG, Bern. The website is hosted on servers in Switzerland. The data is passed on for the purpose of providing and maintaining the functionalities of our website. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Finally, we forward your credit card information to your credit card issuer and the credit card acquirer when you pay by credit card on the website. If you decide to pay by credit card, you will be asked to enter all mandatory information. The legal basis for passing on the data is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR. With regard to the processing of your credit card information by these third parties, we ask you to also read the General Terms and Conditions and the privacy policy of your credit card issuer.

Please also note the information in sections 7-8 and 10-11 regarding the transfer of data to third parties.

Transfer of personal data abroad

We are also entitled to transfer your personal data to third-party companies (contracted service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

Data security

We use suitable technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.

We also take data protection within the company very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and to comply with data protection regulations.

Note on data transfers to the USA

For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that there are surveillance measures in place in the USA by US authorities that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without differentiation, restriction or exception based on the objective pursued and without an objective criterion that makes it possible to restrict the US authorities' access to the data and its subsequent use to very specific, strictly limited purposes that justify the interference associated with both access to this data and its use. We would also like to point out that there are no legal remedies available in the USA for data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective legal protection against general access rights of US authorities. We explicitly draw the attention of data subjects to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.

We would like to point out to users residing in a member state of the EU that the USA does not have an adequate level of data protection from the perspective of the European Union - partly due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google) are based in the USA, we will ensure that your data is protected at an appropriate level by our partners either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU or Swiss-US Privacy Shield.

Your rights

Right of access, rectification, erasure and restriction of processing; right to data portability

You have the right to request information about the personal data that we store about you. In addition, you have the right to have incorrect data corrected and the right to have your personal data deleted, insofar as this does not conflict with any legal obligation to retain data or a permission that allows us to process the data.

You also have the right to request that we return the data that you have provided to us (right to data portability). On request, we will also forward the data to a third party of your choice. You have the right to receive the data in a commonly used file format.

You can contact us for the aforementioned purposes via the e-mail address info@seehotel-boenigen.ch. We may, at our discretion, request proof of identity in order to process your requests.

Complaint to a supervisory authority

With the entry into force of the revised DPA, you have the right to lodge a complaint with the competent supervisory authority at the registered office of the controller if you are of the opinion that we have violated a provision of the DPA.

The Federal Data Protection and Information Commissioner (www.edoeb.admin.ch) is responsible for complaints from data subjects.

Status: November 2023