Data protection declaration

Back to home

A. Cross-channel information

1. Responsible party and content of this privacy policy
   
   We, Garden Park Zug AG, Industriestrasse 14 in 6302 Zug, Switzerland, are the operator of the hotels:
   - Park Hotel Zug
   - City Garden Hotel
   - Residence Zug
   
   the restaurants:
   - aigu Restaurant
   - Secret Garden Restaurant
   
   and the apartments:
   - City Apartments
   
   and the websites:
   - www.gardenpark.ch
   - www.parkhotel.ch
   - www.citygarden.ch
   - www.restaurant-aigu.ch
   - www.restaurant-secretgarden.ch
   - www.cityapartment.ch
   - www.residence-zug.ch
   - www.truthahntaxi.ch
   
   and, unless otherwise stated, are responsible for the data processing listed in this privacy policy.
   
   So that you know what personal data we collect from you and for what purposes we use it, please take note of the following information. In terms of data protection, we are primarily guided by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP), as well as the EU GDPR, the provisions of which may be applicable in individual cases.
   
   Please note that the following information is reviewed and amended from time to time. We therefore recommend that you consult this privacy policy regularly. Furthermore, other companies are responsible or jointly responsible with us under data protection law for individual data processing operations listed below, so that in these cases the information provided by these providers is also authoritative.
2. Contact person for data protection
   
   If you have any questions about data protection or wish to exercise your rights, please contact our data protection contact person by sending an e-mail to the following address:
   welcomegardenpark.ch
   
   You can reach our EU data protection representative at
   Garden Park Zug AG
   Industriestrasse 14
   CH-6302 Zug
   welcomegardenpark.ch
3. Your rights
   
   If the legal requirements are met, you have the following rights as a person affected by data processing:
   
   Right to information: You have the right to request access to your personal data stored by us at any time free of charge if we are processing it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.
   
   Right to rectification: You have the right to have incorrect or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.
   
   Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, particularly in the case of statutory retention obligations, the right to erasure may be excluded. In this case, the data may be blocked instead of erased if the conditions are met.
   
   Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.right to data portability: You have the right to receive the personal data that you have provided to us free of charge in a readable format.
   
   Right to object: You can object to data processing at any time, in particular for data processing in connection with direct advertising (e.g. advertising e-mails).
   
   Right of revocation: You have the right to revoke your consent at any time. However, processing activities based on your consent in the past are not rendered unlawful by your revocation.
   
   To exercise these rights, please send us an email to the following Adresse:
   welcomegardenpark.ch
   
   Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way in which your personal data is processed.
4. Data security
   
   We use suitable technical and organisational security measures to protect your personal data stored by us against loss and unlawful processing, in particular unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and to respect data protection. Furthermore, these persons are only granted access to personal data to the extent necessary to fulfil their tasks.
   
   Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always harbours certain security risks and we cannot provide an absolute guarantee for the security of information transmitted in this way.
5. Contacting us
   
   If you contact us via our contact addresses and channels (e.g. by e-mail, telephone or contact form), your personal data will be processed. The data that you have made available to us will be processed, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your enquiry. In addition, the time of receipt of the enquiry is documented. Mandatory information is marked with an asterisk (*) in contact forms.
   
   We use a software application from RTP GmbH, Josefstrasse 92, 8005 Zurich, Switzerland, to process contact requests via the contact form. Your data may therefore be stored in an RTP GmbH database, which may allow RTP GmbH to access your data if this is necessary for the provision of the software and for support in the use of the software. Information on the processing of data by third parties and any transfer abroad can be found in section 9 of this privacy policy.
   
   We process this data exclusively in order to fulfil your request (e.g. providing information about our hotel, support with contract processing such as questions about your booking, incorporating your feedback into the improvement of our service, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in the implementation of your request or, if your request is aimed at the conclusion or execution of a contract, the necessity for the implementation of the necessary measures within the meaning of Art. 6 para. 1 lit. b EU GDPR.
6. Use of your data for marketing purposes
   1. Centralised data storage and analysis in the CRM system
      
      If a clear assignment to your person is possible, we will store and link the data described in this privacy policy, i.e. in particular your personal details, your contacts, your contract data and your surfing behaviour on our websites, in a central database. This serves the efficient management of customer data and allows us to respond to your requests appropriately, and enables the efficient provision of the services you have requested and the processing of the associated contracts. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the efficient management of user data.
      
      We analyse this data in order to further develop our offers in line with your needs and to display and suggest the most relevant information and offers to you. We also use methods that predict potential, interests and future orders based on your website usage. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the implementation of marketing measures.
   2. E-mail marketing and newsletter
      
      If you register for our e-mail newsletter (e.g. when opening or within your customer account), the following data will be collected. Mandatory information is marked with an asterisk (*) in the registration form:
      - E-mail address- Salutation
      - First name and surname
      
      To avoid misuse and to ensure that the owner of an e-mail address has actually given their consent, we use the so-called double opt-in for registration. After sending the registration form, you will receive an e-mail from us containing a confirmation link. To definitely register for the newsletter, you must click on this link. If you do not click on the confirmation link within the specified period, your data will be deleted and our newsletter will not be sent to this address.
      
      By registering, you consent to the processing of this data in order to receive news from us about our hotel and related information on products and services. This may also include requests to take part in competitions or to rate one of the aforementioned products and services. The collection of the salutation and name allows us to verify the assignment of the registration to any existing customer account and to personalise the content of the emails. The link to a customer account helps us to make the offers and content contained in the newsletter more relevant to you and better customise it to your potential needs.
      
      We will continue to use your data to send you emails until you withdraw your consent. You can withdraw your consent at any time, in particular via the unsubscribe link in all our marketing emails.
      
      Our marketing emails may contain a so-called web beacon or 1x1 pixel (tracking pixel) or similar technical aids. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information about which addresses have not yet received the email, to which addresses it was sent and which addresses failed to receive it. We also see which addresses have opened the email, for how long and which links they have clicked on. Finally, we also receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimise the advertising emails in terms of frequency, timing, structure and content of the emails. This enables us to better tailor the information and offers in our emails to the individual interests of the recipients.
      
      The web beacon is deleted when you delete the email. To prevent the use of the web beacon in our marketing e-mails, please set the parameters of your e-mail programme so that HTML is not displayed in messages, if this is not already the case by default. You can find information on how to configure this setting in the help sections of your email software, e.g. here for Microsoft Outlook.
      
      By subscribing to the newsletter, you also consent to the statistical analysis of user behaviour for the purpose of optimising and adapting the newsletter. This consent constitutes our legal basis for the processing of data within the meaning of Art. 6 para. 1 lit. a EU GDPR.
      
      We use the email marketing software Creatsend.com from Campaign Monitor Marigold for marketing emails. Your data is therefore stored in a Campaign Monitor database, which allows Campaign Monitor to access your data if this is necessary for the provision of the software and for support in the use of the software. The legal basis for this processing is our legitimate interest within the meaning of Article 6(1)(f) GDPR in the use of third-party services.
7. Disclosure to third parties and access by third parties
   
   Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such disclosure takes place in particular if this is necessary for the fulfilment of the contract you have requested, i.e. e.g. to restaurants or other third-party providers for which you have made a reservation. The legal basis for these transfers is the necessity for the fulfilment of the contract within the meaning of Art. 6 para. 1 lit. b EU GDPR.
   
   Data is also passed on to selected service providers and only to the extent necessary for the provision of the service. Various third-party service providers are also already explicitly mentioned in this privacy policy, e.g. in the sections on marketing. These are, for example, IT service providers (such as providers of software solutions), advertising agencies and consulting firms. The legal basis for this data transfer is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in obtaining third-party services.
   
   In addition, your data may be passed on, in particular to authorities, legal advisors or debt collection companies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from the relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carry out a due diligence review or to complete the transaction. The legal basis for this data transfer is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the protection of our rights and fulfilment of our obligations or the sale of our company.
8. Transfer of personal data abroad
   
   We are authorised to transfer your personal data to third parties abroad if this is necessary to carry out the data processing specified in this privacy policy (see in particular sections 14-17). It goes without saying that the statutory provisions on the disclosure of personal data to third parties will be complied with. If the country in question does not have an adequate level of data protection, we ensure through contractual arrangements that your data is adequately protected by these companies.
9. Retention periods
   
   We only store personal data for as long as is necessary to carry out the processing described in this privacy policy within the scope of our legitimate interest. In the case of contractual data, storage is prescribed by statutory retention obligations. Requirements that oblige us to retain data result from accounting and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary for the fulfilment of retention obligations or for the defence and enforcement of our legal interests. The data will be deleted as soon as there is no longer an obligation to retain it and there is no longer a legitimate interest in retaining it.
   
   
   B. Special notes for our website
10. Log file data
    
    When you visit our website, the servers of our hosting provider RTP GmbH, Josefstrassse 92, 8005 Zurich, Switzerland, temporarily store every access in a log file. The following data is recorded without any action on your part and stored by us until it is automatically deleted
    - The IP address of the requesting computer,
    - the date and time of access
    - the name and URL of the retrieved file
    - the website from which the access was made, if applicable with the search term used,
    - the operating system of your computer and the browser you are using (incl. type,
       version and language setting),
    - Device type in the case of access via mobile phones.
    
    This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability in the long term, analysing errors and performance and enabling us to optimise our website (see also section 15 for the last points).
    
    In the event of an attack on the network infrastructure of the website or in the event of suspicion of other unauthorised or abusive website use, the IP address and other data are evaluated for clarification and defence purposes and, if necessary, used in the context of criminal proceedings for identification and for civil and criminal proceedings against the users concerned. The purposes described above constitute our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f EU GDPR.
    
    Finally, when you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. The data described here may also be processed in this context. You will find more detailed information on this in the following sections of this privacy policy, in particular section 13.
11. Cookies
    
    Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.
    
    Among other things, cookies help to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes that are required for your desired use of the websites, i.e. are ‘technically necessary’. For example, we use cookies to be able to identify you as a registered user after you have logged in without you having to log in again each time you navigate the various subpages. The provision of the shopping basket and order function is also based on the use of cookies. Cookies also perform other technical functions required for the operation of the website, such as load balancing, i.e. the distribution of the performance load of the site to different web servers in order to reduce the load on the servers. Cookies are also used for security purposes, for example to prevent the unauthorised posting of content. Finally, we also use cookies as part of the design and programming of our website, e.g. to enable the uploading of scripts or codes.
    
    The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in providing a user-friendly and up-to-date website.
    
    Most Internet browsers accept cookies automatically. However, when you access our website, we ask for your consent to the cookies we use that are not technically necessary, especially when using third-party cookies for marketing purposes. You can make your desired settings using the corresponding buttons in the cookie banner. Details on the services and data processing associated with the individual cookies can be found within the cookie banner and in the following sections of this privacy policy.
    
    You may also be able to configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in selected browsers.
    - Google Chrome
    - Apple Safari
    
    If you deactivate cookies, you may not be able to use all the functions of our website.
12. Google SiteSearch / Google Custom Search Engine
    
    This website uses the Google SiteSearch/Google Custom Search Engine of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This enables us to provide you with an efficient search function on our website.
    
    When using our search fields, your browser may transmit the log file data listed in section 12 (incl. IP address) and the search term you entered to Google if you have installed JavaScript in your browser. If you wish to prevent the transmission of data, you can deactivate JavaScript in your browser settings (usually in the ‘Data protection’ menu). Please note that the search function and other functions of the website may be impaired in this case.
    
    The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR in the provision of an efficient website search function. 
    
    For further data processing by Google, please refer to Google's privacy policy:  www.google.com/intl/de_de/policies/privacy.
13. Tracking and web analysis tools
    1. General information on tracking
       
       We use the web analysis services listed below for the purpose of designing and continuously optimising our websites in line with requirements. In this context, pseudonymised user profiles are created and cookies are used (please also refer to section 13). The information generated by the cookie about your use of this website is usually transferred to a server of the service provider together with the log file data listed in section 12, where it is stored and processed. This may also involve a transfer to servers abroad, e.g. in the USA (see section 10, in particular on the guarantees provided).
       
       By processing the data, we receive the following information, among other things
       - Navigation path taken by a visitor on the site (incl. content viewed and products selected or purchased or services booked),
       - Time spent on the website or subpage,
       - the subpage on which the website is left,
       - the country, region or city from which the website is accessed
       - end device (type, version, colour depth, resolution, width and height of the browser window) and
       - Returning or new visitor.
       
       The provider will use this information on our behalf to analyse the use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. For these processing operations, we and the providers can be regarded as joint controllers under data protection law up to a certain extent.
       
       The legal basis for this data processing with the following tools is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent or refuse processing at any time by rejecting or switching off the relevant cookies in the settings of your web browser (see section 13) or by making use of the service-specific options described below.
       
       For further processing of the data by the respective provider as the (sole) controller under data protection law, in particular any disclosure of this information to third parties such as authorities due to national legal regulations, please refer to the respective data protection information of the provider.
14. Google Analytics
    
    We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (‘Google’).
    
    The data described about the use of the website may be transmitted to the servers of Google LLC. in the USA for the processing purposes explained (see section 15.1). The IP address is shortened by activating IP anonymisation (‘anonymizeIP’) on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
    
    Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. users can prevent Google from collecting the data generated by the cookie and relating to the use of the website by the user concerned (including the IP address) and from processing this data by Google by downloading and installing the browser plug-in at the following link:
    - http://tools.google.com/dlpage/gaoptout?hl=de. 
    
    Further information on data protection at Google can be found here.
15. Social Media
    1. Social Media Profiles
       
       On our websites, we have included links to our profiles in the social networks of the following providers:- Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA;
       - Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA;
       - Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
       - Linkedin Unlimited Company, Wilton Place, Dublin 2, Ireland.
       
       If you click on the social network icons, you will be automatically redirected to our profile in the respective network. This establishes a direct connection between your browser and the server of the respective social network. As a result, the network receives the information that you have visited our website with your IP address and clicked on the link.
       
       If you click on a link to a network while you are logged into your user account with the network in question, the content of our website can be linked to your profile so that the network can assign your visit to our website directly to your account. If you wish to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account will always take place if you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Please therefore refer to the information on the network's website.
       
       The legal basis for any data processing attributed to us is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in the use and advertising of our social media profiles.
    2. Social Media Plugins
       
       You can use social plugins from the providers listed below on our website:
       - Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA, Datenschutzhinweise;
       - Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Datenschutzhinweise;
       - Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, Datenschutzhinweise;
       - Linkedin Unlimited Company, Wilton Place, Dublin 2, Irland, Datenschutzhinweise.
       
       We use social plugins to make it easier for you to share content from our websites. The social plugins help us to increase the visibility of our content in social networks and thus contribute to better marketing.
       
       The plugins are deactivated on our websites by default and therefore do not send any data to the social networks when you simply visit our website. To increase data protection, we have integrated the plugins in such a way that a connection is not automatically established with the servers of the networks. Your browser only establishes a direct connection to the servers of the respective social network when you activate the plugins and thus give your consent to data transmission and further processing by the social network providers.
       
       The content of the plugin is transmitted by the social network directly to your browser, which integrates it into the website. As a result, the respective provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in to it. This information (including your IP address) is transmitted directly from your browser to a server of the provider (usually in the USA) and stored there. We have no influence on the scope of the data that the provider collects with the plugin, although we can be considered jointly responsible with the providers to a certain extent from a data protection perspective.
       
       If you are logged in to the social network, it can assign your visit to our website directly to your user account. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g. that you like a product or service from us) may also be published on the social network and possibly displayed to other users of the social network. The provider of the social network may use this information for the purpose of displaying advertising and customising the respective offer. For this purpose, usage, interest and relationship profiles may be created, e.g. to analyse your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website and to provide other services associated with the use of the social network. The purpose and scope of the data collection and the further processing and use of the data by the providers of the social networks as well as your rights in this regard and setting options to protect your privacy can be found directly in the data protection information of the respective provider.
       
       If you do not want the provider of the social network to assign the data collected via our website to your user account, you must log out of the social network before activating the plugins. Your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR forms the legal basis for the data processing described. You can revoke your consent at any time by declaring your revocation to the provider of the plugin in accordance with the information in their data protection information.
16. Online advertising and targeting
    1. In general
       
       We use the services of various companies to provide you with interesting offers online. This involves analysing your user behaviour on our websites and websites of other providers in order to be able to display online advertising tailored to your individual needs.
       
       Most technologies for tracking your user behaviour (‘tracking’) and for the targeted display of advertising (‘targeting’) work with cookies (see also section 13), with which your browser can be recognised via various websites. Depending on the service provider, it may also be possible for you to be recognised online even when using different end devices (e.g. laptop and smartphone). This may be the case, for example, if you have registered with a service that you use on several devices.
       
       In addition to the data already mentioned, which is collected when websites are accessed (‘log file data’, see section 12) and when cookies are used (section 13) and which may be passed on to the companies involved in the advertising networks, the following data in particular is used to select the advertising that is potentially most relevant to you:
       - Information about you that you have provided when registering or using a service of advertising partners (e.g. your gender, your age group);
       - User behaviour (e.g. search queries, interactions with advertising, types of websites visited, products or services viewed and purchased, newsletters subscribed to).
       
       We and our service providers use this data to recognise whether you belong to the target group we are addressing and take this into account when selecting advertisements. For example, after you have visited our site, you may be shown adverts for the products or services you have consulted when you visit other sites (‘re-targeting’). Depending on the scope of the data, a user profile may also be created, which is automatically evaluated, and the ads are selected according to the information stored in the profile, such as membership of certain demographic segments or potential interests or behaviours. Such adverts may be presented to you on various channels, including our website or app (as part of on-site and in-app marketing) as well as adverts placed via the online advertising networks we use, such as Google.
       
       The data may then be analysed for the purpose of billing the service provider and to assess the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include the information that the performance of an action (e.g. visiting certain sections of our websites or sending information) is attributable to a specific advertisement. We also receive aggregated reports from the service providers on advertising activities and information on how users interact with our website and our adverts.
       
       The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by rejecting or switching off the relevant cookies in the settings of your web browser (see section 13). Further options for blocking advertising can also be found in the information provided by the respective service provider, e.g. Google.
17. Google Ads
    
    This website uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’) for online advertising. Google uses cookies for this purpose, such as the so-called DoubleClick cookie, which enable your browser to be recognised when you visit other websites. The information generated by the cookies about your visit to these websites (including your IP address) is transmitted to a Google server in the USA and stored there (please also refer to section 10). Further information on data protection at Google can be found here. here.
    
    The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by rejecting or switching off the relevant cookies in the settings of your web browser (see section 13). Further options for blocking advertising can be found  here.
18. Use of our chat function
    
    If you contact us via chat, your personal data will be processed. The data that you have provided to us will be processed, e.g. the name of your company, your name, your function, your e-mail address and your enquiry. In addition, the time of receipt of the enquiry is documented. Mandatory information is marked with an asterisk (*).
    
    We process this data exclusively in order to fulfil your request (e.g. providing information about our hotel, support with contract processing such as questions about your booking, incorporating your feedback into the improvement of our service, etc.). To provide the chat function, we use a tool from WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Therefore, your data is stored in a database of WhatsApp Ireland Limited, which may allow WhatsApp Ireland Limited to access your data if this is necessary for the provision of the software and for support in the use of the software.
    
    The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in the use of modern communication technologies or, if your enquiry is aimed at the conclusion or execution of a contract, in the implementation of the necessary measures within the meaning of Art. 6 para. 1 lit. b EU GDPR.
19. Registration for a customer account
    
    If you open a customer account on our website, we collect the following data, whereby mandatory information is marked with an asterisk (*) in the corresponding form:
    
    Personal details:
    - Salutation
    - Surname
    - First name
    - Billing and, if applicable, delivery address
    - Date of birth
    - Company, company address and UID no. for corporate customers
    
    Login data:
    - E-mail address
    - password
    
    Further details:
    - Languages
    - Gender
    
    We use the personal details to establish your identity and to check the requirements for registration. The e-mail address and password together serve as login data and thus ensure that the correct person is using the website under your details. We also need your e-mail address to verify and confirm the opening of your account and for future communication with you required for contract fulfilment. In addition, this data is stored in the customer account for future bookings or contract conclusions. For this purpose, we also allow you to store further details in the account (e.g. your preferred means of payment).
    
    We also use the data to provide an overview of the products ordered and bookings made (see section 19 in particular) and a simple way to manage your personal data, to administer our website and the contractual relationships, i.e. to establish, organise the content of, process and amend the contracts concluded with you via your customer account (e.g. in connection with your booking with us).
    
    We process the information on language and gender in order to display offer suggestions on the website that are best tailored to your profile or your personal needs, for statistical recording and evaluation of the selected offers and thus to optimise our suggestions and offers.
    
    The legal basis for processing your data for the aforementioned purpose is your consent in accordance with Art. 6 para. 1 lit. a EU GDPR. You can revoke your consent at any time by removing the data from your customer account or deleting your customer account or having it deleted by notifying us.
    
    To prevent misuse, you must always treat your login data confidentially and should close the browser window when you have finished communicating with us, especially if you share the computer with others.
20. Order via our online shop
    
    On our website truthahntaxi.ch you have the possibility to order a turkey delivery. We collect the following data for this purpose, whereby mandatory information is marked with an asterisk (*) in the corresponding form:
    - Salutation
    - First name
    - Surname
    - Company name
    - Street and house number
    - Additional address
    - POSTCODE
    - City
    - Country
    - Telephone number
    - E-mail address
    - Payment method
    - Yes, I would like to subscribe to your newsletter.
    - I confirm that the information I have provided is correct and that I have read and accept the terms and conditions and the privacy polic
    
    We will only use this data and any other data you provide voluntarily to fulfil your order in accordance with your wishes. The processing of this data is therefore carried out in accordance with Art. 6 para. 1 lit. b EU GDPR for the implementation of pre-contractual measures and for the execution of a contract.
21. Booking on the website, by correspondence or by telephone call
    
    When you make bookings or order vouchers either via our website, by correspondence (e-mail or post) or by telephone call, we collect the following data, whereby mandatory information is marked with an asterisk (*) in the corresponding form:
    - Salutation
    - First name
    - Surname
    - Street and no.
    - POSTCODE
    - City
    - Country
    - Date of birth
    - E-mail address
    - Telephone number
    - Language
    - Credit card information
    
    We will only use this data and other information voluntarily provided by you (e.g. expected arrival time, motor vehicle licence plate, preferences, comments) to process the contract, unless otherwise stated in this privacy policy or unless you have given your separate consent. We will process the data by name in order to record your booking as requested, to provide the booked services, to contact you in the event of ambiguities or problems and to ensure correct payment. Your credit card details will be automatically deleted after your departure.
    
    The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 Para. 1 lit. b EU GDPR or your consent in accordance with Art. 6 Para. 1 lit. a EU GDPR. You can revoke your consent at any time with effect for the future.
22. Online payment processing
    
    If you make chargeable bookings or purchase products on our website, depending on the product or service and the desired payment method - in addition to the information specified in section 18 or section 19 - you may be required to provide further data, such as your credit card details or the login for your payment service provider. This information and the fact that you have purchased a service from us at the relevant amount and time will be forwarded to the respective payment service providers (e.g. providers of payment solutions, credit card issuers and credit card acquirers). Please always refer to the information provided by the respective company, in particular the privacy policy and general terms and conditions. The legal basis for this transfer is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b EU GDPR.
23. Book a table
    
    On our websites you have the possibility to reserve a table in one of the restaurants mentioned on our websites. We collect the following data for this purpose, whereby mandatory information is marked with an asterisk (*) in the corresponding form:
    - First name
    - Surname
    - Number of guests
    - e-mail address
    - Telephone number
    - Comment
    - Date and time of reservation
    - I accept the terms and conditions
    
    We collect and process the data only to process the reservation, in particular to compile your reservation request according to your wishes, to make the reservation and to contact you in case of ambiguities or problems.
    
    We use a tool from Gastronovi, Buschhöhe 2, DE-28357 Bremen to process reservations. Therefore, your data will be stored in a Gastronovi database, which may allow Gastronovi to access your data if this is necessary for the provision of the software and for support in the use of the software. Information on the transfer and processing of data by third parties can be found in section 9 of this privacy policy.
    
    The legal basis for the processing of your data for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b EU GDPR.
24. Bookings via booking platforms
    
    If you make bookings via a third-party platform (i.e. via booking.com, Hotel, Escapio, Expedia, Holidaycheck, Hotel Tonight, HRS, Kayak, Mr & Mrs Smith, Splendia, Tablet Hotels, Tripadvisor, Trivago, Weekend4Two), we receive various personal information from the respective platform operator in connection with the booking made. This is generally the data listed in section 21 of this privacy policy. In addition, we may receive enquiries about your booking. We will process this data by name in order to record your booking as requested and provide the booked services. The legal basis for data processing for this purpose is the implementation of pre-contractual measures and the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b EU GDPR.
    
    Finally, we may be informed by the platform operators about disputes in connection with a booking. We may also receive data on the booking process, which may include a copy of the booking confirmation as proof of the actual completion of the booking. We process this data to safeguard and enforce our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR.
    
    Please also note the data protection information of the respective booking platform.
25. Submitting reviews
    
    In order to help other users with their purchasing decisions and to support our quality management (in particular the processing of negative feedback), you have the opportunity to rate your stay with us on our website. The data that you have made available to us will be processed and published on the website, i.e. in addition to your rating and the time of your rating, possibly also a comment that you have added to your rating or the name you have given.
    
    The legal basis for data processing is your consent within the meaning of Art. 6 para. 1 lit a EU GDPR.
    
    We reserve the right to delete unlawful reviews and to contact you in the event of suspicion and ask you to comment. The legal basis for this processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR in the provision of the comment and rating function and the prevention of abuse when using it.
26. Applying for an open position
    
    You have the opportunity to apply to us spontaneously or via a corresponding e-mail address for a specific vacancy. We collect the following data for this purpose, whereby mandatory information is marked with an asterisk (*) in the relevant form:
    - First name
    - Surname
    - e-mail address
    - Application documents (e.g. CV, letter of motivation, certificates, etc.)
    
    We use this and other data you provide voluntarily to review your application. Application documents of unsuccessful applicants will be deleted at the end of the application process, unless you explicitly consent to a longer retention period or we are legally obliged to retain them for a longer period.
    
    The legal basis for processing your data for this purpose is therefore the performance of a contract (pre-contractual phase) in accordance with Art. 6 para. 1 lit. b EU GDPR.
    
    
    C. Data processing in connection with your stay
27. Data processing to fulfil legal reporting obligations
    
    Upon arrival at our hotels & flats, we may require the following information from you and your accompanying persons (mandatory *):
    - First and last name
    - Postal address and canton
    - Date of birth
    - Nationality
    - Official identification card and number
    - Arrival and departure date
    
    We collect this information to fulfil legal reporting obligations, which arise in particular from hospitality or police law. Insofar as we are obliged to do so under the applicable regulations, we forward this information to the competent police authority.
    
    The processing of this data is based on a legal obligation within the meaning of Art. 6 para. 1 lit. c EU GDPR.
28. Recording of Received Services
    
    If you receive additional services during your stay (e.g., restaurant, bar, room service), the nature of the service and the time of its receipt will be recorded by us for billing purposes. The processing of this data is necessary for the fulfilment of the contract with us in accordance with Article 6(1)(b) of the EU General Data Protection Regulation (GDPR).
29. Guest Feedback
    
    If you provided us with your email address in connection with your booking, you will receive an electronic form after your departure. For this purpose, we collect the following data, with mandatory fields marked with an asterisk (*) in the respective form:
    - First and last name
    - Age
    - Nationality
    - Duration of stay
    
    The information provided is voluntary and helps us continuously improve our services and offerings to better meet your needs. The information you provide will be used solely for statistical purposes unless otherwise stated in this privacy policy or unless you have given separate consent. We will process the data by name in order to contact you in case of any uncertainties.
    
    The legal basis for the aforementioned purposes is our legitimate interest in accordance with Article 6(1)(f) of the EU General Data Protection Regulation (GDPR).
30. Video Surveillance
    
    To prevent misuse and to take action against unlawful behaviour (particularly theft and vandalism), the entrance areas and, in part, the publicly accessible areas of our hotels are monitored by cameras. The video data is only reviewed if there is a suspicion of unlawful behaviour. Otherwise, the footage is automatically deleted after 72 hours.
    
    We employ a service provider to supply the video surveillance system, who may have access to the data if necessary for the provision of the system. Should the suspicion of unlawful behaviour be substantiated, the data may be passed on to consulting firms (particularly our law firm) and authorities to the extent necessary to enforce claims or file charges.
    
    The legal basis is our legitimate interest in accordance with Article 6(1)(f) of the EU General Data Protection Regulation (GDPR) in protecting our property and upholding and enforcing our rights.
31. Use of our Wi-Fi Network
    
    In our restaurants, hotels, and apartments, you have the option to use the Wi-Fi network operated by Bithawk AG, Allee 1A, CH-6210 Sursee, free of charge. To prevent misuse and to take action against unlawful behaviour, prior registration is required. During this process, you provide the following data to Bithawk AG:
    - Mobile phone number
    - MAC address of the end device (automatically)
    
    In addition to the above data, each time the Wi-Fi network is used, data regarding the visited location, including the time, date, and end device, is collected. The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the EU General Data Protection Regulation (GDPR). The customer can withdraw their registration at any time by notifying us.
    
    Bithawk AG is required to comply with the legal obligations of the Federal Act on the Surveillance of Postal and Telecommunications Traffic (BÜPF) and its associated regulations. If the legal requirements are met, the Wi-Fi operator must, at the request of the competent authority, monitor internet usage or data traffic. The Wi-Fi operator may also be required to disclose the customer's contact, usage, and metadata to the authorised authorities. The contact, usage, and metadata are stored in a personalised manner for 6 months and then deleted.
    
    The legal basis for this processing is our legitimate interest in accordance with Article 6(1)(f) of the EU GDPR in providing a Wi-Fi network in compliance with applicable legal regulations.
32. Payment Processing
    
    When you purchase products or services or pay for your stay in our hotels and restaurants using electronic payment methods, the processing of personal data is required. By using the payment terminals, the information stored in your payment method, such as the cardholder's name and the card number, is transmitted to the involved payment service providers (e.g., payment solution providers, credit card issuers, and credit card acquirers). These providers also receive information that the payment method was used at our hotel, the amount, and the time of the transaction. Conversely, we only receive the credited amount of the payment at the corresponding time, which we can assign to the relevant receipt number, or a notification that the transaction was not possible or was cancelled. Please always refer to the information provided by the respective company, particularly their privacy policy and terms and conditions.
    
    The legal basis for this transmission is the fulfilment of the contract with you in accordance with Article 6(1)(b) of the EU General Data Protection Regulation (GDPR).
    
    Back to home