Status: May 2018

Wendelin and Silvia Julen, Riedstrasse 45, 3920 Zermatt, operate Hotel Capricorn AG and are the operators of the website www.capricorn-zermatt.ch. They are responsible for the collection, processing, and use of your personal data and for ensuring that data processing complies with applicable data protection laws.

Your trust is important to us, which is why we take data protection seriously and ensure appropriate security measures. Of course, we adhere to the legal requirements of the Federal Data Protection Act (DSG), the Ordinance to the Federal Data Protection Act (VDSG), the Telecommunications Act (FMG), and other applicable data protection regulations under Swiss or EU law, particularly the General Data Protection Regulation (GDPR).

To help you understand which personal data we collect from you and for what purposes we use it, please read the following information.

 

A. Data Processing in Connection with Our Website

1. Visiting Our Website

When you visit our website, our servers temporarily store each access in a log file. The following technical data is automatically collected and stored by us until it is deleted:

• The IP address of the requesting computer
• The name of the IP address owner (usually your Internet service provider)
• The date and time of access
• The website from which the access occurred (referrer URL), possibly with search term used
• The name and URL of the retrieved file
• The status code (e.g., error message)
• The operating system of your computer
• The browser you use (type, version, and language)
• The transmission protocol used (e.g., HTTP/1.1)
• Possibly your username from a registration/authentication.

The collection and processing of these data serve the purpose of enabling the use of our website (connection establishment), ensuring the system's security and stability, optimizing our online services, and conducting internal statistical purposes. This is our legitimate interest in data processing as per Art. 6 (1) f GDPR.

Additionally, the IP address is analyzed together with other data in the event of attacks on the network infrastructure or other unauthorized or abusive use of the website for investigation and defense purposes, and may be used in criminal proceedings for identifying and taking legal action against the respective users. This is our legitimate interest in data processing according to Art. 6 (1) f GDPR.

2. Using Our Contact Form

You can use a contact form to get in touch with us. For this, we require the following information:

• First and last name
• Email address
• Message

We use this data, as well as any voluntarily provided phone number, only to respond to your contact inquiry in the best possible and personalized way. Processing this data is necessary for performing pre-contractual measures under Art. 6 (1) b GDPR or is in our legitimate interest as per Art. 6 (1) f GDPR.

3. Subscribing to Our Newsletter

You have the option to subscribe to our newsletter on our website. Registration is required for this. During registration, the following data is required:

• Salutation
• First and last name
• Email address

These details are necessary for data processing. Additionally, you may voluntarily provide further information (e.g., birth date and country). We process this data solely to personalize the information and offers sent to you and better tailor them to your interests.

By registering, you consent to the processing of the provided data for sending the newsletter regularly to the email address you provided, as well as for the statistical evaluation of usage behavior and newsletter optimization. This consent is the legal basis for processing your email address under Art. 6 (1) a GDPR. We may commission third parties with the technical handling of promotional measures and are entitled to share your data with them for this purpose (see below section 13).

At the end of each newsletter, there is a link allowing you to unsubscribe at any time. During the unsubscription process, you may voluntarily provide the reason for unsubscribing. After unsubscribing, your personal data will be deleted. Further processing will only occur in anonymized form for newsletter optimization.

4. Creating a Customer Account

To make bookings on our website, you can either book as a guest or create a customer account. When registering for a customer account, we collect the following necessary data:

• Salutation
• First and last name
• Postal address
• Date of birth
• Phone number
• Email address
• Password

This data is collected to provide you with password-protected access to your stored basic data. You can view your previous and current bookings or manage and modify your personal data.

The legal basis for processing this data is your consent under Art. 6 (1) a GDPR.

5. Booking on the Website, via Correspondence, or by Phone

If you make a booking through our website, by email, or by phone, we require the following data to process the contract:

• Salutation
• First and last name
• Postal address
• Date of birth
• Phone number
• Language
• Email address

These data, along with any voluntarily provided information (e.g., expected arrival time, vehicle license plate, preferences, comments), will be used only to process the contract, unless otherwise stated in this privacy policy or if you separately consent to it. The data will be processed to properly register your booking, provide the booked services, contact you in case of uncertainties or problems, and ensure correct payment.

The legal basis for data processing for this purpose is the fulfillment of a contract under Art. 6 (1) b GDPR.

Cookies

Cookies help make your visit to our website simpler, more enjoyable, and meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.

We use cookies, for example, to temporarily store your selected services and inputs when filling out a form on the website, so that you don't have to repeat the input when visiting another page. Cookies may also be used to identify you as a registered user after registration on the website, so you don't have to log in again when visiting another page.

Most internet browsers automatically accept cookies. However, you can configure your browser not to store cookies or to alert you when you receive a new cookie. On the following pages, you can find explanations on how to configure cookie processing for common browsers:

• Microsoft Windows Internet Explorer
• Microsoft Windows Internet Explorer Mobile
• Mozilla Firefox
• Google Chrome for Desktop
• Google Chrome for Mobile
• Apple Safari for Desktop
• Apple Safari for Mobile

Disabling cookies may prevent you from using all features of our website.

6. Tracking Tools

a. General

For the purpose of designing and continuously optimizing our website based on user needs, we use the web analytics service Google Analytics. In this context, pseudonymized usage profiles are created, and small text files (cookies) stored on your computer are used. The information generated by the cookie about your use of the website is transferred to the servers of the service providers, stored there, and processed for us. In addition to the data listed in section 1, we may also receive the following information:

• Navigation path taken by a visitor on the site
• Duration of stay on the website or subpage
• The subpage from which the site is exited
• The country, region, or city of access
• Device used (type, version, color depth, resolution, width, and height of browser window)
• Whether the visitor is a returning or new visitor

This information is used to evaluate the use of the website, compile reports on website activity, and provide additional services related to website and internet usage for market research and tailored website design. These data may also be passed on to third parties if required by law or if third parties process the data on our behalf.

b. Google Analytics

The provider of Google Analytics is Google Inc., a company of the parent company Alphabet Inc., based in the USA. Before transferring the data to the provider, the IP address is shortened by activating IP anonymization ("anonymizeIP") on this website within the EU member states or other countries that are part of the European Economic Area agreement. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these cases, we ensure by contractual guarantees that Google Inc. maintains an adequate level of data protection. According to Google Inc., under no circumstances will the IP address be associated with other data related to the user.

For more information on the web analytics service used, please visit the Google Analytics website. Instructions on how to prevent the processing of your data by the web analytics service can be found at http://tools.google.com/dlpage/gaoptout?hl=en.

B. Data Processing in Connection with Your Stay

7. Data Processing to Fulfill Legal Reporting Obligations

Upon arrival at our hotel, we may require the following information from you and your companions:

• First and last name
• Postal address and canton
• Date of birth
• Place of birth
• Nationality
• Official identification and number
• Arrival and departure date
• Room number

This information is collected to fulfill legal reporting obligations, especially under hospitality or police law. If required by applicable regulations, we will forward this information to the relevant police authorities.

Our legitimate interest in processing this data is in compliance with legal requirements under Art. 6 (1) f GDPR.

8. Recording of Additional Services

If you use additional services during your stay (e.g., using the minibar or pay-TV), we will record the service item and the time it was used for billing purposes. The processing of this data is necessary to fulfill the contract under Art. 6 (1) b GDPR.

C. Data Storage and Sharing with Third Parties

9. Booking Platforms

If you make a booking through a third-party platform, we will receive various personal details from the respective platform provider. These typically include the data listed in section 5. Additionally, booking inquiries may be forwarded to us. We process these data to properly record your booking and provide the booked services. The legal basis for processing this data is the fulfillment of a contract under Art. 6 (1) b GDPR.

Lastly, we may be informed of disputes related to bookings by platform operators. This may include booking transaction data, such as a copy of the booking confirmation. We process this data to protect and enforce our claims. Our legitimate interest in processing this data is according to Art. 6 (1) f GDPR.

Also, please refer to the data protection guidelines of the respective providers.

10. Central Storage and Linking of Data

We store the data specified in sections 2-5 and 8-10 in a central electronic data processing system. The data related to you is systematically captured and linked for processing your bookings and contract-related services. We use software from Hotel Capricorn AG, Riedstrasse 45, 3920 Zermatt, for this purpose. Our legitimate interest in processing this data is to maintain a customer-friendly and efficient customer data management system according to Art. 6 (1) f GDPR.

11. Data Retention Period

We store personal data only as long as necessary to use the tracking services mentioned above and other processing within our legitimate interest. Contract data will be retained longer as required by legal retention obligations. Retention obligations requiring us to store data arise from laws on reporting, accounting, and tax regulations. According to these regulations, business communications, contracts, and booking documents must be kept for up to 10 years. If we no longer need this data to perform services for you, the data will be locked. This means the data can only be used for accounting and tax purposes.

12. Sharing Data with Third Parties

We only share your personal data with third parties if this is necessary for the purpose of processing your contract, if you have consented to the data processing or sharing, or if we are legally required to share such data.

We may share your data with the following third parties:

• Payment processors for the purpose of processing payments
• Service providers assisting with the operation of our website and bookings (e.g., web hosting companies, software providers)
• Law enforcement or regulatory authorities if required by law or to prevent fraud.

13. Transfer of Personal Data to Third Countries

We may transfer your personal data to third-party service providers outside of Switzerland and the European Economic Area (EEA). If we do so, we ensure that the transfer is in compliance with applicable data protection regulations, particularly by concluding data processing agreements and using standard contractual clauses approved by the European Commission, which ensure an adequate level of data protection.

14. Security of Your Personal Data

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, misuse, or alteration. These measures include the use of encryption technology, firewalls, and secure data storage protocols.

Please be aware that while we take reasonable steps to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. As a result, we cannot guarantee the absolute security of your data.

15. Your Rights

You have the following rights in relation to your personal data:

• Right to Access: You have the right to request information about the personal data we hold about you.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete data.
• Right to Erasure: You can request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing: You can request the restriction of the processing of your personal data in certain cases.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer it to another data controller.
• Right to Object: You can object to the processing of your personal data for marketing or legitimate interest purposes.
• Right to Withdraw Consent: If you have given consent to data processing, you can withdraw it at any time.

To exercise these rights, please contact us using the contact details below.

16. Modifications to the Privacy Policy

We reserve the right to modify this privacy policy at any time to reflect changes in our services, data processing activities, or changes in the law. We will notify you of any significant changes to this policy by posting a prominent notice on our website or by other means of communication.

17. Contact Details

If you have any questions about this privacy policy or want to exercise your rights regarding your personal data, please contact us at:

Hotel Capricorn AG
Riedstrasse 45
3920 Zermatt, Switzerland
Email: info@capricorn-zermatt.ch
Phone: +41 27 966 66 66

As of June 27, 2018

etracker
The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. We do not use cookies for web analysis by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used to enable a statistical range analysis of this website, a measurement of the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offer or its components. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.

The data generated by etracker on behalf of the provider of this website is processed and stored by etracker solely in Germany by commission of the provider of this website and is thus subject tothe strict German and European data protection laws and standards. In this regard, etracker was independently checked, certified and awarded with theePrivacyseal data protection seal of approval.

The data processing is based on Art. 6 Section 1 lit f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest is the optimisation of our online offer and our website. As the privacy of our visitors is very important to us, the data that may possibly allow a reference to an individual person, such as IP address, registration or device IDs, will be anonymised or pseudonymised as soon as possible. etracker does not use the data for any other purpose, combine it with other data or pass it on to third parties.

You can object to the outlined data processing at any time. Your objection has no disadvantageous consequences.

My visit data is used for web analysis.
Further information on data protection with etracker can be found here.