Data Protection

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Wyniger Group
c/o Der Teufelhof Basel
Carmen Basler
Leonhardsgraben 47-49
CH-4051 Basel
+41 (0) 61 261 10 10
carmen.basler@wyniger.com

Confidentiality of Personal Data

All our employees who handle personal data in the course of their work are obliged to maintain confidentiality and to handle data processing systems properly.

Right of Access

You can exercise the following rights at any time using the contact details provided for our data protection officer:

Information about your data stored by us and its processing,
Correction of incorrect personal data,
Deletion of your data stored by us,
Restriction of data processing if we are not yet permitted to delete your data due to legal obligations,
Objection to the processing of your data by us and
Data portability, provided that you have consented to the data processing or have concluded a contract with us.

If you have given us your consent, you can revoke it at any time with effect for the future.
You can contact the supervisory authority responsible for you at any time with a complaint. Your competent supervisory authority depends on the federal state of your place of residence, your work or the alleged infringement. You can find a list of the supervisory authorities in Germany with their addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
We will be happy to assist you in evaluating the complaints office.

Purposes of data processing by the controller and third parties

We only process your personal data for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those stated. We only pass on your personal data to third parties if:

you have given your express consent to this,
the processing is necessary for the performance of a contract with you,
the processing is necessary to fulfil a legal obligation, the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

Deletion or blocking of data

We adhere to the principles of data avoidance and data minimisation. We therefore only store your personal data for as long as is necessary to fulfil the purposes stated here or for the various storage periods stipulated by law. Once the respective purpose no longer applies or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

Collection of general information when visiting our website

When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar. This is exclusively information that does not allow any conclusions to be drawn about your person.
This information is technically necessary in order to correctly deliver the website content you have requested and is mandatory when using the Internet. In particular, it is processed for the following purposes:

Ensuring a smooth connection to the website,
Ensuring the smooth use of our website,
analysing system security and stability and
for other administrative purposes.

The processing of your personal data is based on our legitimate interest from the aforementioned purposes for data collection. We do not use your data to draw conclusions about your person. Recipients of the data are only the controller and, if applicable, processors.
Anonymous information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.

Cookies

Like many other websites, we also use so-called ‘cookies’. Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system and your connection to the Internet.
Cookies cannot be used to start programmes or transfer viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable our web pages to be displayed correctly.
Under no circumstances will the data collected by us be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Registration on our website

When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data such as telephone number and email address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will also be happy to correct or delete this data at your request, provided there are no statutory retention obligations to the contrary. To contact us in this regard, please use the contact details provided at the end of this privacy policy.

Transmission to third parties / obligations of processors

We may transfer your personal data to processors and third parties who need to be involved in the provision of the services you have requested, all of whom have undertaken to comply with the applicable data protection standards. If compliance with European data protection standards is not possible - for example because standard contractual clauses, adequacy decisions or certifications are not guaranteed in the specific case - we will inform you in good time and also obtain the necessary consent from you.
In addition, your data (e-mail address) will be processed once via Revinate Inc. for the purpose of submitting an evaluation of your stay in one of our hotels. We treat your data confidentially in accordance with the applicable data protection regulations. You can object to this use of personal data at any time.
In this regard, we refer you to Revinate's privacy policy, in particular the information available at the following link: https://www.revinate.com/privacy/
Your personal data will not be passed on to uninvolved third parties unless there is a legal obligation to do so or you have given your prior consent.

Provision of chargeable services

For the provision of chargeable services, we request additional data, such as payment details, in order to be able to fulfil your order. We store this data in our systems until the statutory retention periods have expired.

SSL-encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

On the basis of your express consent, we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.
To receive the newsletter, it is sufficient to provide your e-mail address and your name. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).
We require a valid e-mail address for effective registration. We use the ‘double opt-in’ procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested reply. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also unsubscribe at any time using the contact details provided at the beginning of this privacy policy.

Facebook & Twitter Plug-Ins

We use Facebook social plug-ins from the social network Facebook, operated by the companies Facebook Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland, and Facebook Inc, 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons that Facebook uses to measure who visits our website. If the visitor is also registered with Facebook as a user and logged in, further information is also stored by Facebook. Facebook receives your IP address for technical reasons. We have no influence on the use of this data by Facebook. In this regard, we refer you to Facebook's privacy policy, in particular the information available at the following link: https://www.facebook.com/help/568137493302217.

You will also find information on how to block Facebook social plug-ins with your browser. The Facebook ‘Like’ plugin is not used on our website.
We have integrated the plugins into our website in such a way that no automatic connection to the Facebook servers is established. You can recognise the Facebook button by the white ‘f’ on a blue background. If you want to use the social plugins, click on the respective button. Only then will a connection to Facebook be activated:.

We use plugins from the social network twitter.com on our website. This is operated by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. A list of the current plugins can be found at http://twitter.com/about/resources/logos.
We have integrated the Twitter plugins into our website in such a way that no automatic connection to the Twitter servers is established. You can recognise the Twitter button by the ‘flying white bird’ on a blue background. If you want to use the social plugins, click on the respective button. Only then will a connection to Twitter be activated.
As soon as you activate the button by clicking on it, a connection to the Twitter servers is established. This tells Twitter that you have visited our site. In addition to your IP address, data about the web browser used may also be collected. If you are logged in as a member of Twitter and visit our website, Twitter will assign the above information to your account.
If you want to prevent Twitter from assigning this information to your account, you must log out of Twitter before visiting our website. We would like to point out that, as the provider of the pages, we have no precise knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter's privacy policy at http://twitter.com/privacy

Contact form

If you contact us with questions of any kind by e-mail or contact form, you give us your voluntary consent for the purpose of contacting you. This requires you to provide a valid e-mail address. This is used to allocate the enquiry and subsequently answer it. The provision of further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. After your enquiry has been dealt with, your personal data will be automatically deleted.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc (hereinafter: Google). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The purpose of the data processing is to analyse the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services are then to be provided. The processing is based on the legitimate interest of the website operator.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On for deaktivation of Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future as long as the cookie remains installed in your browser.

Use of script libraries (Google Webfonts)

We use script libraries and font libraries such as Google Web Fonts on this website in order to display our content correctly and graphically appealing across all browsers (https://www.google.com/webfonts/). Google web fonts are transferred to the cache of your browser to avoid multiple loading. If the browser does not support Google web fonts or prevents access, content is displayed in a standard font.
Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible - although it is currently unclear whether and for what purposes - that operators of such libraries collect data.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Use of Google Maps

This website uses Google Maps API to visualise geographical information. When Google Maps is used, Google also collects, processes and utilises data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google data protection information. You can also change your personal data protection settings there in the data protection centre.
You can find detailed instructions on managing your own data in connection with Google products here.

Enbedded YouTube-Videos

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behaviour.
If you have deactivated the storage of cookies for the Google Ad programme, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personalised usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at ‘Youtube’ can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/

Google AdWords

Our website uses Google Conversion Tracking. If you have reached our website via an advert placed by Google, Google Adwords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advert placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this - for example, by changing your browser settings to generally deactivate the automatic setting of cookies or by setting your browser to block cookies from the domain „googleleadservices.com“.
Bitte beachten Sie, dass Sie die Opt-out-Cookies nicht löschen dürfen, solange Sie keine Aufzeichnung von Messdaten wünschen. Haben Sie alle Ihre Cookies im Browser gelöscht, müssen Sie das jeweilige Opt-out Cookie erneut setzen.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. This function is used to present interest-based adverts to website visitors within the Google advertising network. A so-called ‘cookie’ is stored in the website visitor's browser, which makes it possible to recognise the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor can be presented with adverts that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.
According to its own information, Google does not collect any personal data during this process. However, if you do not wish to use Google's remarketing function, you can deactivate it by making the appropriate settings at http://www.google.com/settings/ads .

Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp .

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the data protection officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organisation directly.
Raphael Wyniger