Privacy policy

We take the protection of your personal data very seriously and treat your personal data confidentially. In dealing with all personal data collected on this website, we implement the Swiss Federal Law on Data Protection (DSG) as well as the EU's General Data Protection Regulation (GDPR).

We will be happy to answer all questions regarding the handling of your personal data personally. You can find the contact information in the imprint.

Hosting provider and access protocols

Description and scope of data processing

For the hosting of our website we rely on the reliability and data security of METANET AG, Josefstrasse 218, CH‑8005 Zurich. Hotel Arvenbüel A. Rüedi AG has concluded a data protection agreement with METANET for commissioned processing. In this agreement, METANET undertakes to protect the data of the users of this website from external access and not to pass it on to third parties without a legal obligation to do so. Further information about the provider can be found in the privacy policy of METANET.

All data of this website are stored on the servers of METANET.

Each time you visit our website, METANET automatically collects data and information from the calling computer. The following data is collected and stored in an access log (“log file”):

• Date and time of access
• URL of the accessed page
• Source from which you came to the page
• IP address
• browser used
• operating system used
• technical information about the transmission of the data (e.g. size of the transmitted data, protocol used, method used, status of the transmission)

This data is not stored together with other personal data of the user.

Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is the Swiss Data Protection Act DSG and Article 6 paragraph 1, lit. f GDPR.

Purpose of data processing

The temporary storage of the IP address by the system is technically necessary to enable the website to be displayed on the user's device. For this purpose, the user's IP address must remain stored for the duration of the browser session. The additional storage in log files is carried out automatically by the provider. The purpose of the data collection and processing is the internal system-related evaluation as well as ensuring technical security. The logged data may be helpful in defending against attempted attacks on the web server as well as for abuse control in case of suspicion and for clarifying suspicion of use relevant under criminal law. The IP address is only evaluated if there are concrete indications of illegal use of the website or the associated systems. An evaluation of the log files for marketing purposes does not take place.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of the IP address for the provision of the website, this is the case at the latest when the respective browser session is ended by the user. The log files are deleted completely at the end of the following month in each case (i.e. a maximum of two months after the visit to the website).

Possibility of objection and elimination

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

SSL encryption

This website uses SSL encryption for security reasons and to protect the transmission of personal or confidential data. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the green lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

In simple terms, a “Cookie” is a small text file that is stored by the website on the visitor's hard disk. Often, a cookie contains only a simple ID that enables the website to assign the visitor and, for example, to show him the desired search results or to recognize him during his visit to the website from one page call to the next (e.g. if the user is logged in). For many websites, these cookies are mandatory in order to display the desired information to the visitor.

The purely functional cookies described are unproblematic with regard to data protection. Tracking cookies behave differently. These can track and analyze the behavior of users on the website and may even remain active when the user has long since left the website. These tracking cookies are used, for example, by Facebook, Twitter, YouTube, Google AdWords and many other advertising providers to collect as much information as possible from various sources about a user and then present him with the most suitable and thus promising advertising. This tracking is done in secret, so that most users are not aware that they are being monitored.

On our website, we refrain as far as possible from using any non-anonymized tracking functions. All integrated services, such as Google Analytics, are configured in such a way that the tracking cookies either only store your behavior anonymously, or that the tracking only begins when you call up the corresponding content. Detailed information can be found in the following sections.

Forms

Description and scope of data processing

For the processing of hotel room bookings, we rely on the hotel software “Hotel-Spider” of the company Tourisoft Sàrl, Route de Champ-Colin 18, 1260 Nyon (Switzerland) and on the services of rebag data AG, Einsiedlerstrasse 533, 8810 Horgen (Switzerland). Tourisoft is a reputable provider of professional hotel management systems.

The form for online booking of hotel rooms including payment via credit card is provided to us by Tourisoft. When you fill out and submit the booking form, the data entered in the input mask is transmitted to Tourisoft in encrypted form via a connection secured with SSL. Which data is collected can be seen from the form.

By submitting the form, you give us your consent to transmit your data to Tourisoft, to store it on Tourisoft's servers and to process it. Access to your personal data is restricted to employees of the companies Hotel Arvenbüel A. Rüedi AG, Tourisoft Sàrl, rebag data AG as well as other external partners of Tourisoft, who may be involved in the processing of data in the course of secure payment processing.

The data will be used exclusively for the processing of your booking. Data will only be passed on to third parties not previously mentioned with your express consent.

Legal basis for data processing

We collect and process your personal data for the execution and processing of the contract with you. The legal basis for this is the Swiss Data Protection Act DSG and Article 6 paragraph 1, lit. b GDPR. The mandatory information can be seen in the form. Without this information, we can not carry out the booking. The legal basis for your voluntary information is the Swiss Data Protection Act DSG as well as Article 6 paragraph 1, lit. a GDPR.

Purpose of data processing

Your personal data will be stored and used exclusively for the purpose of processing your room reservation and the associated administration.

Duration of storage

The data you entered in the form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. if it can be inferred from the circumstances that the matter in question has been conclusively clarified).

In the event that a contract is concluded, all data from the contractual relationship will be stored until the expiry of statutory retention periods.

Possibility of objection and cancellation

You have the possibility to revoke your consent to the processing of personal data at any time. For this purpose, an informal communication by e-mail to us is sufficient. In such a case, the conversation cannot be continued. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

In the case of ordering products or services, the collection of your data is mandatory for the processing of the contract. Consequently, there is no possibility for the user to object.

Further information on Tourisoft

For further information about the processing of your data at Tourisoft and rebag data, please use the following links.

• Hotel-Spider von Tourisoft Sàrl
• Hotel-Spider Booking Engine
• Hotel-Spider privacy policy
• rebag data AG

Google Analytics

Description and scope of data processing

This website uses Google Analytics, a service provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. With the help of Google Analytics, certain data is collected each time this website is called up, which provides information about the use of the website. Google has committed itself under the Privacy Shield Agreement between the EU and the USA to comply with the established guidelines regarding the collection, use and storage of personal data from the member states of the EU. In addition, Hotel Arvenbüel A. Rüedi AG has concluded a contract with Google for commissioned data processing.

The information about your use of this website is anonymized in Switzerland, in a member state of the European Union or in a contracting state of the Agreement on the European Economic Area, if the website is accessed from one of these countries. During anonymization, the unique IP address is shortened to such an extent that it is no longer possible to assign it to you personally. Only after this shortening is the data transferred to a Google server in the USA, where it is stored and processed. Only in exceptional cases can the full IP address be transferred to a Google server in the USA and only anonymized there.

The data that Google Analytics collects on our behalf can be used, for example, to track how often individual subpages of the website are accessed, how long visitors stay on the pages, from which countries the accesses occur and which links are clicked. To collect this data, Google Analytics uses cookies. These text files are stored on your computer and can be read by Google Analytics to record your use of this website as described.

Google uses the collected information, among other things, to evaluate the use of the website, compile reports on website activity and provide other services related to the use of the website for us as the operator of the website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Legal basis for data processing

The legal basis for the temporary storage of data with Google Analytics is the Swiss Data Protection Act DSG and Article 6 paragraph 1, lit. f GDPR.

Purpose of data processing

The findings from the statistical analysis of the collected data help us to better understand the wishes of visitors and to further optimize the website.

Duration of storage

The data is deleted completely after 14 months in each case. This makes it possible to compare the statistical figures of the previous month with the same month in the previous year.

Possibility of objection and elimination

You have the option to generally object to the collection of your data by Google Analytics and to prevent the analysis by installing the browser add-on to deactivate Google Analytics, which is provided free of charge by Google Inc. This small add-on tells Google Analytics via JavaScript that generally no data and information may be transmitted to Google Analytics.

Alternatively, you can prevent the collection of your data by Google Analytics on this website by clicking on the following link. After the click, an opt-out cookie will be set that prevents the collection of your data during future visits to this website: Deactivate Google Analytics now. Please note that the deactivation of Google Analytics is only valid until you delete the opt-out cookie.

In addition, your browser offers the option in the browser settings to generally prevent the storage of cookies. However, you may no longer be able to use this and other websites to their full extent, as cookies are mandatory for the provision of certain functions. All cookies that have already been set (regardless of whether they originate from Google Analytics or not) can be manually deleted in the browser at any time.

Further information from Google

• Privacy policy of Google
• Terms of use for Google Analytics
• Information about Google Analytics

Google Maps

This website uses Google Maps to display maps and provide directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. In Google's privacy policy and in the terms of use for Google Maps, you will find information about what data is collected and for what purpose.

Hotel Arvenbüel A. Rüedi AG will not store or use the data entered in Google Maps under any circumstances. The integration of Google Maps into the website serves the sole purpose of providing visitors to the website with a simple tool to simplify the journey to visit our location.

Rights of the data subject

The applicable data protection law grants you comprehensive rights with regard to the processing of your personal data:

• Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Article 15 of the GDPR.
• Correction: You have the right to request the correction of inaccurate personal data concerning you without undue delay. The requirements for this can be found in Article 16 GDPR.
• Deletion: You have the right to request the immediate deletion of personal data concerning you. However, this right does not exist if the processing is necessary, for example, for compliance with a legal obligation or for the assertion or exercise of legal claims. You can find more information on this in Article 17 GDPR.
• Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Article 18 GDPR.
• Data portability: you have the right to obtain the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible. The requirements for this can be found in Article 20 GDPR.
• Withdrawal of consent: You have the right to revoke your given consent at any time with effect for the future if the processing is based on Article 6 paragraph 1 lit. a or Article 9 paragraph 2 lit. a GDPR. The data processing remains lawful until the revocation. The requirements for this can be found in Article 7, paragraph  3GDPR.
• Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The requirements for this can be found in Article 77 GDPR.
• Right of objection: Insofar as we process personal data as explained above for the purpose of safeguarding our legitimate interests that prevail in the context of a balancing of interests pursuant to Article 6 paragraph 1 lit e or f GDPR, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you will only have the right to object if there are grounds arising from your particular situation. The conditions for exercising your right to object can be found in Article 21 of the GDPR.
  After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defense of legal claims. This does not apply if the processing is for direct marketing purposes. In this case, we will not further process your personal data for this purpose.

Please contact us if you wish to exercise your right regarding your personal data. You can find the contact information in the imprint.