Data Protection Declaration
The following data protection declaration will apply to use of the www.alpenrose-zermatt.ch website (hereinafter the “Website”). Any collection and processing of personal data will be done in compliance with the applicable data protection legislation, in particular the Swiss Federal Act on Data Protection (FADP) and the European Union General Data Protection Regulation (GDPR).
The controller for the collection, processing and use of your personal data, as defined in Art. 4(7) of the GDPR is
3920 Zermatt – Switzerland
If you wish to object to the collection, processing or use of your data by us in accordance with these data protection provisions completely, or in respect of individual measures, you may send your objection to the controller. You may save and print this data protection declaration at any time.
2. General purpose of the processing
We use personal data to operate the website (incl. sending out newsletters).
3. Which data we use and why
The hosting services we call upon are used to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use to operate the website.
As part of these services, we, or our hosting providers, process inventory data, contact details, content data, contractual data, usage data, metadata and communication data of clients, potential clients and visitors to this website on the basis of our legitimate interest in efficiently and securely providing our website.
3.2 Access data
We collect information about you when you use this website. We automatically record information about your usage behaviour and your interaction with us, and we save information about your computer or mobile device. We gather, save and use data about any access to our website (so-called server log files). Access data will include:
– Name and URL of the file accessed
– Date and time of the access
– Data volume transmitted
– Successful access report (HTTP response code)
– Browser type and browser version
– Operating system
– Referrer URL (i.e. the page visited beforehand)
– Websites accessed by the user’s system via our website
– The user’s internet service provider
– IP address and the requesting provider
We use this log data without linking it to your identity or creating any other profile for statistical analyses to operate, improve the security of and optimise our website, but also for anonymously recording the number of visitors to our website (traffic) and the scope and nature of the use of our website and services, and for billing purposes, to measure the number of clicks received by our collaboration partners. Based on this information, we are able to provide personalised and location-specific content and analyse data traffic, locate and rectify errors and improve our services. We reserve the right to review the log data at a later date in the case of reasonable grounds to suspect unlawful use based on specific evidence. We store IP addresses in the log files for a specific period of time where this is necessary for security purposes, or is necessary to provide a service or bill for a service, e.g. when you make use of one of our offers. Following cancellation of the order process, or after receipt of payment, we will delete your IP address if it is no longer necessary for security purposes. We will also save IP addresses if there are specific grounds for suspecting a criminal offence in connection with the use of our website. We will also save the date of your last visit (e.g. upon registration, login, clicking of links, etc.) as part of your account.
We use so-called session cookies to optimise our website. A session cookie is a small text file that is sent by the respective servers upon visiting an internet site and is temporarily stored on your hard disk. The file itself contains a so-called session ID which allows various requests from your browser to be allocated to the same session. This means that your computer will be recognised when you return to our website. These cookies will be deleted after you close your browser. Among other things, they are used to enable you to use the shopping basket function over multiple sessions. We also use permanent cookies to a lesser extent (also small text files that are stored on your end device) which stay on your end device and enable us to recognise you again the next time you visit the site. These cookies will be stored on your hard drive and are deleted automatically after the specified period. Their lifetime will range from 1 month to 10 years. In this way, we are able to present our site in a more user friendly, effective and secure manner and, for example, show you information on the site that is specifically tailored to your interests. Our legitimate interest in using cookies lies in making our website more user friendly, effective and secure.
The following data and information will be stored in the cookies for example:
– Login information
– Language settings
– Search terms entered
– Information about the number of visits to our website and the use of individual features of our site.
When the cookies are enabled, they are given an identification number. This identification number is not linked to your personal data. Your name, IP address or similar data, which would enable the cookies to be linked to you, will not be stored in the cookie. Based on the cookie technology, we only receive pseudonymised information, for example about which pages of our shop were visited, which products were viewed, etc. You can configure your browser to notify you before cookies are placed and so you can decide, in each individual case, whether or not to accept cookies in general or only for specific cases, or so that cookies are blocked completely. This may limit the website’s functionality however.
The data requested in the subscription process is required for subscription to the newsletter. The newsletter subscription will be recorded. After signing up, you will receive a message sent to the specified email address in which you will be asked to confirm the registration (“double opt-in”). This is necessary so third parties cannot subscribe using your email address. You may revoke your consent to receiving the newsletter at any time, thereby unsubscribing from the newsletter. We will save this registration data for as long as necessary for sending out the newsletter. We will save the registration and address records for as long as there is an interest in proving the consent originally granted, this will normally be the limitation period for claims under civil law. The legal basis for sending out the newsletter will be your consent.
You may cancel the subscription at any time without incurring any costs in this respect other than the usual transmission costs at the basic rates. A message sent in text form to the contact details given in 1 (e.g. email, post) will suffice for this. You will of course also find an Unsubscribe link in every newsletter.
3.5 Contact form
When you contact us (e.g. using the contact form or by email), we will process your details in order to deal with our request and if there are follow-up questions.
We will only process additional personal data if you consent to the same or where we have a legitimate interest in the processing of your data. A legitimate interest would be, for example, responding to your email.
4. Services from third-party providers
4.1 Google Analytics
We use Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are saved on your computer and enable analysis of your use of the website. The information generated by the cookie about the user’s use of this website will usually be transmitted to a Google server in the USA and stored there. Google is subject to and certified under the Privacy Shield Agreement concluded between the European Union and the USA. As a result, Google undertakes to comply with the standards and stipulations of European data protection legislation. For more information, see the link below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. We have enabled IP anonymisation on this website (anonymizeIp). This means that your IP address will be truncated by Google within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activities and to provide us with other services relating to website activity and internet usage. The IP address communicated by your browser as part of Google Analytics is not put together with other Google data. You can prevent cookies from being saved with an appropriate setting in your browser software. We hereby point out however that in such cases, you may not be able to make full use of all the features of this website.
Furthermore, you can prevent the transmission of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following Download and install browser plug-in link: https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser plug-in, or in browsers on mobile devices, you can click the following link to place an opt-out cookie which prevents any recording by Google Analytics on this website in future (this opt-out cookie will only work in this browser and for this domain. If you delete the cookies in your browser, you will need to click this link again): [Disable Google Analytics]
4.2 Google Maps
4.3 Google Font
4.4 Social Media Plug-ins
We have incorporated social media buttons for the following companies on our website. You will recognise the plug-ins as they are marked with the appropriate logo. Facebook Inc. (1601 S. California Ave – Palo Alto – CA 94304 – USA) TripAdvisor Inc. (400 1st Avenue, Needham, MA 02494 USA) TrustYou (Agnes-Pockels-Bogen 1, 80992 Munich, Germany) Seekda GmbH (Neubaugasse 10/15, A-1070 Vienna, Austria)
We use a widget from Seekda (dynamic shop). The operator of the widget is Seekda GmbH, Neubaugasse 10/15, 1070 Vienna, Austria. Personal data will only be collected, processed and used by Seekda where this is expressly permitted within the framework of the relevant data protection legislation or with the data subject’s valid consent. Personal data will only be collected, processed and used by Seekda when you have provided this voluntarily, e.g. as part of a registration or survey or in order to fulfil a contract, and where this is done with your express consent. When the contractual relationship in question comes to an end, your personal data will be erased. This will not be the case for personal data which must be kept due to its statutory retention period. Such personal data will be blocked by Seekda. Find out more in Seekda’s data privacy statement at https://seekda.com/de/datenschutzerklarung/.
4.8 Facebook pixel, custom audiences and Facebook conversion
5. Online presences in social media
We maintain online presences on social networks and platforms to communicate there with active customers, potential customers and users and to provide information there about our services. When accessing the respective networks and platforms, the terms and conditions of business and data processing guidelines of the operator in question will apply.
Unless otherwise specified in our data protection declaration, we will process users’ data when this is provided to us within the social networks and platforms, e.g. by contributing posts to our profiles or sending us messages.
6. Storage period
In the absence of any specific indication, we will only store personal data for the period necessary to achieve the purpose behind its collection.
In some cases, legislation stipulates the retention of personal data. In these cases, the data will only be stored by us for this statutory purpose, but will not be processed otherwise and will be erased upon expiry of the statutory retention period.
7. Your rights as data subject
Pursuant to the applicable legislation, you have various rights concerning your personal data. If you wish to assert these rights, please send your request by email or by post, clearly indicating your identity, to the address provided in 1.
8. Data security
We are committed to keeping your data secure within the framework of the applicable data protection legislation and our technical capabilities. Your personal data will be transmitted to us in encrypted form. This applies to your orders and your customer login details. We use the SSL (Secure Socket Layer) coding system but be aware that data transmissions on the internet (e.g. in email communications) can have security vulnerabilities. Absolute protection of the data against third-party access cannot be guaranteed. We maintain technical and organisational security measures to secure your data in accordance with Art. 32 of the GDPR, which we continually adapt in line with state-of-the-art technology. We also offer no guarantee that our site will be available at specific times. Faults, interruptions or failures cannot be ruled out. The servers we use are regularly backed up carefully.
9. Disclosure of data to third parties
We only ever use your personal data within our company. If and insofar as we call upon third parties to fulfil contracts (for example, logistics service providers), said third parties will only receive this personal data where strictly necessary for the service in question. Where we outsource certain parts of the data processing (“contract processing”), we will contractually oblige the processor to only use the personal data in accordance with the data protection legislation requirements and to ensure protection of the data subject’s rights.
Last updated: 24 May 2018