Last updated on: 04.06.2024
We attach great importance to the transparent handling of personal data. This privacy policy provides information on what personal data we collect, for what purpose and to whom we pass it on. To ensure a high level of transparency, this privacy policy is regularly reviewed and updated.
1. which services we use
Google Analytics
Google Analytics Enhanced eCommerce
Google Call Conversion Tracking
Google Cloud Trace
Google Tag Manager
Google Tag Manager for WordPress
Adobe Fonts
Font Awesome
Google Fonts API
Booking.com
Booking.com widget
Google Charts
Google Maps
Trust index
YouTube
Google Site Kit
Microsoft 365
WordPress
Google reCaptcha
Google reCaptcha v2 for Contact Form 7
2. contact information
If you have any questions or concerns about the protection of your data by us, you can contact us at any time by e-mail at info@melchtal-resort.ch. Responsible for the data processing that takes place via this website is
Melchtal Resort AG
Chännel 1
6067 Melchtal OW
Switzerland
Person responsible for data protection:
Guido Gisler
info@melchtal-resort.ch
0041 41 211 22 22
3. general principles
3.1 What data we collect from you and from whom we receive this data
First and foremost, we process personal data that you transmit to us or that we collect when operating our website. We may also receive personal data about you from third parties. This may include the following categories:
Personal master data (name, address, date of birth, etc.);
Contact details (cell phone number, e-mail address, etc.);
Financial data (e.g. account details);
Online identifiers (e.g. cookie identifiers, IP addresses);
Location and traffic data;
Sound and image recordings;
particularly sensitive data (e.g. biometric data or information about your health).
3.2 Under what conditions do we process your data?
We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We pay attention to transparent and proportionate processing.
If, in exceptional cases, we are not in a position to comply with these principles, data processing may still be lawful because there is a justification. In particular, the following grounds for justification may apply:
Your consent;
the performance of a contract or pre-contractual measures;
our legitimate interests, unless your interests prevail.
3.3 How can you withdraw your consent?
If you have given us your consent to process your personal data for specific purposes, we will process your data within the scope of this consent, unless we have another justification.
You can withdraw your consent at any time by sending an e-mail to the address given in the legal notice. Data processing that has already taken place is not affected by this.
3.4 In which cases can we pass on your data to third parties?
a. Principle
We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). The categories of recipients are as follows:
Accounting, fiduciary and auditing company;
Consulting companies (legal advice, taxes, etc.);
IT service provider (web hosting, support, cloud services, website design, etc.);
Payment service provider;
Provider of tracking, conversion and advertising services.
We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially.
We may also be obliged to disclose your personal data to authorities.
b. Visiting our social media channels
We may have embedded links to our social media channels on our website. You can see this in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels.
In this case, the social media providers will learn that you have accessed their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the providers.
c. Transfer abroad
Under certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are obliged to protect data to the same extent as we are. The transfer may take place worldwide.
If the level of data protection does not correspond to that in Switzerland, we carry out a prior risk assessment and contractually ensure that the same level of protection is guaranteed as in Switzerland (e.g. by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). If our risk assessment is negative, we will take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de
3.5 How long do we store your data?
We only store personal data for as long as is necessary to fulfill the individual purposes for which the data was collected.
Data that we store when you visit our website is stored for twelve months. An exception applies to analysis and tracking data, which may be stored for longer.
We store contract data for longer, as we are obliged to do so by law. In particular, we must store business communications, concluded contracts and accounting documents for up to 10 years. If we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.
3.6 How do we protect your data?
We will keep your data secure and take all reasonable steps to protect your data from loss, access, misuse or alteration.
Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases it will be necessary for us to pass on your inquiries to companies associated with us. Your data will also be treated confidentially in these cases.
Within our website, we use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser.
3.7 What rights do you have?
a. Right to information
You can request information about the data we have stored about you at any time. Please send your request for information together with proof of identity to info@pcatwork.ch.
You also have the right to receive your data in a commonly used file format if we process your data automatically, and if:
you have given your consent to the processing of this data; or
you have disclosed data in connection with the conclusion or execution of a contract.
We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party.
The processing of your application is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons or because we need more detailed information from you. You will be informed of the extension in good time, at least in text form.
b. Erasure and rectification
You have the option of requesting the deletion or correction of your data at any time. We may reject the request if statutory provisions oblige us to store the data for a longer period or to store it unchanged or if your request conflicts with a legal requirement.
Please note that exercising your rights may be in conflict with contractual agreements and may have corresponding effects on the performance of the contract (e.g. premature termination of the contract or cost consequences).
c. Legal process
If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch
3.8 Changes to the privacy policy
We may change this privacy policy at any time. The changes will be published on melchtal-resort.ch, you will not be informed separately.
4. individual data processing operations
4.1 Provision of the website and creation of log files
What information do we receive and how do we use it?
When you visit melchtal-resort.ch, certain data is automatically stored on our servers or on servers of services and products that we purchase and/or have installed for the purposes of system administration, for statistical or backup purposes or for tracking purposes. These are
the name of your Internet service provider;
Your IP address (under certain circumstances);
the version of your browser software;
the operating system of the computer used to access the URL;
the date and time of access;
the website from which you are visiting URL;
the search terms you used to find the URL.
Why are we allowed to process this data?
This data cannot be assigned to a specific person and is not merged with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.
How can you prevent data collection?
The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted at the end of each session. The storage of log files is absolutely necessary for the operation of the website; you therefore have no option to object to this.
4.2 Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics uses “cookies,” which are text files placed on your computer that enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services to the website operator related to website and internet usage.
The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.
You can prevent the storage of cookies by adjusting your browser software settings; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.
4.3 Google Analytics Enhanced eCommerce
We use the Enhanced eCommerce function of the Google Analytics service on our website. This service is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics Enhanced eCommerce enables detailed analysis of user purchasing behavior on our website and provides information about the purchasing process, such as which products were viewed or purchased most frequently and which marketing strategies are most effective.
Google Analytics uses “cookies,” which are text files stored on your computer, to enable an analysis of your use of the website. The information generated by the cookie about your use of this website is typically transferred to a Google server in the USA and stored there.
Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and the effectiveness of our e-commerce strategies, and to provide us with other services related to website activity and internet usage.
You can prevent the storage of cookies by adjusting your browser software settings. However, we would like to point out that in this case, you may not be able to fully use all functions of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.
4.4 Google Call Conversion Tracking
On our website, we use Google Call Conversion Tracking, an analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). This service allows us to measure the effectiveness of certain advertisements by tracking how many calls are generated by those ads.
If you reach our website through a Google ad and call us using the provided phone number, Google can recognize this and record it as a “conversion” for us. Your personal caller information, such as your phone number or name, will not be transmitted to us.
Google uses cookies and similar technologies to provide its service and track calls. These cookies are used to identify and track the advertisement that brought the user to the website, and the source of the call.
If you do not wish to participate in tracking, you can object to this use by deactivating the Google Conversion Tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.
4.5 Google Cloud Trace
For monitoring, analyzing, and optimizing the performance of our applications, we use Google Cloud Trace, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Cloud Trace enables us to collect detailed information about the latency and health of our applications to identify and resolve any bottlenecks or issues.
When using Google Cloud Trace, technical data and information about the execution of our applications, including your IP address and other relevant metrics, will be transmitted to Google and stored on Google servers. These servers may be located in the United States or other countries.
Google uses this information to provide us with detailed reports on the performance and behavior of our applications and to help us identify and resolve issues.
For more information about Google's data collection and privacy practices regarding Google Cloud Trace, please refer to Google's Privacy Policy at https://www.google.com/intl/en/policies/privacy/ and specific information on Google Cloud Trace at https://cloud.google.com/trace/docs.
4.6 Google Tag Manager
For managing website tags through an interface, we use Google Tag Manager, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Tag Manager itself (which implements the tags) is a cookie-less domain and does not process personal data. The service ensures the triggering of other tags, which may collect data themselves. Google Tag Manager does not access this data. If deactivation has occurred at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
By using Google Tag Manager, scripts (so-called tags) can be automatically activated on our website and data can be transmitted from your browser to Google. This data may include information about your IP address, the browser you are using, the subpages of our website you visit, and other interactions during your website visit.
4.7 Google Tag Manager for WordPress
On our website, we use the “Google Tag Manager for WordPress” plugin, which allows for the integration of Google Tag Manager, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), into our WordPress-based website. This plugin enables us to manage and embed various scripts and codes through a central interface.
The Google Tag Manager itself (which implements the tags) is a cookie-less domain and does not process personal data. The service ensures the triggering of other tags, which may collect data. Google Tag Manager does not access this data. If a deactivation has been carried out at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
By using the “Google Tag Manager for WordPress” plugin, scripts (called tags) can be automatically activated on our website and data can be sent from your browser to Google. This data may include information about your IP address, the browser you are using, the subpages of our website you visit, and other interactions during your website visit.
4.8 Adobe Fonts
Adobe Fonts is a service of Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA. Adobe Fonts is an online service that allows users to embed high-quality fonts on their websites.
We use Adobe Fonts to integrate specific fonts on our website. This allows us to ensure a consistent and appealing design, which contributes to an improved user experience.
To provide fonts, Adobe Fonts may use cookies or other tracking technologies to collect information such as the visitor's IP address, browser type and version, and other information about the website visit.
4.9 Font Awesome
Font Awesome is powered by Fonticons, Inc., located at 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA. Font Awesome is a collection of scalable vector icons that allows website developers to integrate various icons and social logos into their websites.
We use Font Awesome to integrate visual icons on our website. This can include icons for user interfaces, social media links, or other graphical representations that enhance our website's design and user experience.
Font Awesome can load web fonts from Fonticons, Inc.'s servers when a user visits our website. In doing so, the user's IP address is sent to Fonticons, Inc. This is necessary so that the user's web browser can correctly display the Font Awesome icons.
Fonticons, Inc. only stores user IP addresses for a short period solely for the purpose of providing Font Awesome icons. No further storage or analysis takes place.
4.10 Google Fonts API
We use the Google Fonts API on our website, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), to embed fonts. By embedding these fonts, your browser will connect to Google's servers when you visit our website to download and display the fonts correctly.
Through this connection, data, particularly your IP address and information about the browser you are using, can be transmitted to Google and stored on Google's servers. These servers may be located in the United States or other countries.
If you want to prevent the transmission of data within the scope of the Google Fonts API, you can block access to the domain fonts.googleapis.com in your browser settings. Please note that in this case, our website may not be displayed correctly.
4.11 Booking.com
Our website integrates services from Booking.com, a platform for booking accommodations and other travel-related services, provided by Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, Netherlands.
When you access or use offers from Booking.com through our website, various data may be collected, including, but not limited to, your name, address, phone number, email address, travel dates, and other information required for the booking. Additionally, technical data such as your IP address, browser type, and other information about your device may be collected.
4.12 Booking.com widget
Our website integrates a widget from Booking.com, a service of Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, The Netherlands. This widget allows you to search for accommodations directly from our website and display relevant information about these accommodations without having to visit the Booking.com website.
By integrating the widget, data such as your search queries (e.g., travel dates, number of people), your IP address, browser type, operating system, and other technical information about your device may be transmitted to Booking.com. This is done to provide you with relevant search results and information and to ensure the functionality of the widget.
For more information on data protection in connection with the Booking.com Widget, please refer to Booking.com's privacy policy: https://www.booking.com/content/privacy.en.html. If you have questions about the data collected through the widget or wish to exercise your rights concerning this data, you should contact Booking.com B.V. directly.
4.13 Google Charts
On our website, we use Google Charts, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Charts allows us to embed interactive charts and graphs directly into the website to visually represent data.
When using Google Charts, information about your use of the web graphics (including your IP address) may be transmitted to Google servers and stored there. These servers may be located in the US or other countries. Google will use the information collected through Charts to track and evaluate your use of the web graphics in connection with other Google services.
If you wish to prevent data transfer to Google when using Google Charts, you can do so by disabling JavaScript in your browser. However, please note that in this case, you may not be able to fully utilize all features of our website.
4.14 Google Maps
On our website, we use Google Maps, a map service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Maps allows us to embed interactive maps directly into the website and enables you to conveniently use the map function, for example, for location searches or route planning.
By visiting the website, Google receives the information that you have accessed a specific sub-page of our website. In addition, further data, particularly your IP address, will be transmitted to Google and stored on Google's servers. These servers may be located in the USA or other countries. This happens regardless of whether Google provides a user account through which you are logged in, or whether no user account exists.
Google stores your data as usage profiles and uses them for advertising, market research, and/or customizing its website. Such analysis is carried out, in particular (even for users who are not logged in), to provide usage-based advertising.
You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
4.15 Trustindex
Trustindex is a product of Trustindex.io Ltd., a company that offers tools for displaying and managing customer reviews for businesses. With Trustindex, businesses can display reviews from various platforms on their website, thereby strengthening customer trust. Trustindex.io Ltd. is located at Rákóczi út 70, 1074 Budapest, Hungary.
On our website, we use Trustindex to display customer reviews from various review platforms in a central widget. This allows visitors to our website to see the experiences and opinions of other customers, and gives us the opportunity to respond to feedback and continuously improve our service.
Trustindex uses cookies and other tracking technologies to monitor user interactions with review widgets and to provide detailed analysis of widget usage. Data such as IP addresses and browser information may also be collected to optimize the overall user experience and provide relevant content.
4.16 YouTube
Our website embeds videos from YouTube, a platform operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you view the videos or click the play button, data, including your IP address and information about the browser you are using, is transmitted to Google's servers and stored there. This data is used to provide the video, monitor performance, and improve the user experience.
When you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
4.17 Google Site Kit
We use the “Google Site Kit” plugin for the management and analysis of our website, which is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Site Kit allows us to integrate and centrally manage various Google services, such as Google Analytics, Google Search Console, Google AdSense, and others, directly into our WordPress website.
By using Google Site Kit, various data, including your IP address, information about the browser you are using, the subpages of our website you visit, and other interactions during your website visit, are transmitted to Google and stored on Google's servers. These servers may be located in the USA or other countries.
Google uses this information to provide us with detailed reports and analyses on website traffic, our website's performance, visitor interactions, and other relevant metrics.
4.18 Microsoft 365
For various office and communication tasks, we use Microsoft 365, a service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft 365 offers a suite of productivity tools, including email (Outlook), document storage (OneDrive), collaboration tools (Teams), and Office applications like Word, Excel, and PowerPoint. When you contact us, for example via email, or when we share documents, these interactions are processed and stored through Microsoft 365.
Microsoft uses servers in various countries to provide Microsoft 365 services. This means your data may be stored in data centers outside of Switzerland. However, Microsoft has implemented various security and privacy measures to protect customer data.
WordPress 4.19
Our website is based on the WordPress platform, a content management system developed by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage, and publish content.
When using our website, which is based on WordPress, various data, including your IP address, date and time of access, and information about the browser you are using, may be collected and stored. This data is primarily used for administrative purposes and to ensure the uninterrupted operation of the website.
Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.
4.20 Google reCaptcha
To protect against unwanted requests via the contact form on our website, we use the reCAPTCHA service from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The query is used to distinguish whether the input is made by a human or abusively by automated, machine processing. As part of the query, information such as your IP address or your behavior while filling out the form may be transmitted to Google.
For this purpose, your input will be transmitted to Google and processed there. By using reCAPTCHA, you agree that the recognition you provide will be used for the digitization of old works. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCAPTCHA will not be merged with other data from Google.
4.21 Google reCaptcha v2 for Contact Form 7
To protect your inquiries submitted via the contact form on our website, we use the reCAPTCHA v2 service from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). This query is used to distinguish whether the input is made by a human or is being misused by automated, machine processing. The query includes sending your IP address and any other data Google requires for the reCAPTCHA service to Google.
For this purpose, your input will be transmitted to Google and used there. By using reCAPTCHA, you agree that the recognition performed by you flows into the digitization of old works. In the event that IP anonymization is activated on this website, your IP address will however be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCAPTCHA will not be merged with other data from Google.
Source: BrainBox Solutions
