Please read the following data protection declaration carefully before continuing. Persons who log on to the website www.hotelcastell.ch signify their agreement to the following conditions. Hotel Castell, 7524 Zuoz, (hereinafter also referred to as “we”) is the operator of the website www.hotelcastell.ch (hereinafter referred to as “technology”) and thus responsible for the collection, processing, and use of your personal data.
Your trust is important to us, which is why we take data protection seriously and use organizational and technical measures to ensure appropriate security. We also train our employees. If we commission third parties to process personal data, the third party is carefully selected and must take appropriate security measures to guarantee the confidentiality and security of your personal data.



Data protection officer:
Hotel Castell 7524 Zuoz
info@hotelcastell.ch

The entire content of the website www.hotelcastell.ch is subject to copyright with all rights held by Hotel Castell or third parties. The elements contained on the website www.hotelcastell.ch are freely accessible for browsing purposes only. Duplication of this material, or parts thereof, in any written or electronic form is permitted only with a specific mention of www.hotelcastell.ch. Reproduction, transfer, amendment, linking or use of the website www.hotelcastell.ch for public or commercial purposes is prohibited without the prior written consent of our company. Please contact info@hotelcastell.ch. The various names and logos appearing on the www.hotelcastell.ch website are generally registered and protected trademarks. No part of the www.hotelcastell.ch is designed in such a way as to grant a license or right to utilize a image, registered mark or logo. Downloading or copying the website www.hotelcastell.ch or parts thereof, confers no rights whatsoever in respect of the software or elements of the website www.hotelcastell.ch. We reserve all rights in respect of all elements of the website www.hotelcastell.ch, with the exception of rights belonging to third parties.

Although we have taken every care to ensure the reliability of the information contained on the www.hotelcastell.ch website at the time of publication, neither we nor our contractual partners can make any explicit or implicit assurance or guarantee (including to third parties) regarding the accuracy, reliability or completeness of the information on www.hotelcastell.ch. Opinions and other information contained on the www.hotelcastell.ch website may be changed at any time without prior notice. We do not accept any responsibility and provide no guarantee that the functions on the www.hotelcastell.ch website will not be interrupted or that the website or the relevant server is free from viruses or other harmful components.

If a contractual relationship exists between us and the user of the website www.hotelcastell.ch or any of our other services, we shall only be liable for damages caused by gross negligence or willful misconduct. We exclude all liability for damages caused by an auxiliary person. We are not liable for lost profits, data loss or other direct, indirect or consequential damages that result from accessing elements of the www.hotelcastell.ch website or their use or the inability to access or use them or from links to other websites or technical faults.

The website www.hotelcastell.ch contains links to websites operated by third parties that might be of interest for you. When activating these links you may leave the www.hotelcastell.ch website or summaries of third-party websites may be displayed within the context of the www.hotelcastell.ch website. Hotel Castell has not carried out any checks whatsoever on the third-party websites linked to the www.hotelcastell.ch website and is in no way responsible for their content or effective operation. This applies regardless of whether when activating the link you leave the www.hotelcastell.ch website or the display appears within the environment of the website, as well as if in the latter case the information provider of an external website is not readily apparent. Establishing this connection or consulting third-party websites is done exclusively at the risk and peril of the user.

All personal data collected during registration or arising during use and protected by the DSG or DSGVO will be used exclusively for the purpose of fulfilling the contract, unless, in particular in accordance with this data protection declaration, your express consent to any further use has been obtained or such use is permitted by applicable law.

Our employees are obliged to treat personal data confidentially.

We may collect master data (company name, name, address, e-mail, etc.), personal data about the services you have purchased, your payment transaction data, your online preferences and your customer feedback. We use this personal data to communicate with you, to conclude and process transactions with you, to operate the technology, for billing purposes, for market research and for marketing, for example to analyze our customer base or to contact you by post, email or text message. We may collect personal data about your creditworthiness to protect ourselves against payment defaults. Your surfing and usage data is also collected. This includes, for example, the IP address, the information about which device, browser and which browser version you used to visit the technology, when you did so, which operating system you use, from which website or app you accessed our technology via a link, and which elements of the technology you use and how. This personal data is stored together with the IP address of your access device. It is used to display our technology correctly and to optimize it, to protect it against attacks or other legal violations and to personalize the technology for you.

When you visit our website, our servers temporarily store each access in a log file. The following user and device data, as well as personal data, is collected without your intervention and stored by our host (ISP - Internet Service Provider):

• the IP address of the requesting computer

• the date and time of access

• the name and URL of the retrieved file

• the website from which access was made

• the operating system of your computer and the browser you are using

• the country from which you accessed the site and the language settings in your browser

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring long-term system security and stability, optimizing our internet services and for internal statistical purposes. This is our legitimate interest in the data processing. In particular, the IP address is used to determine the country of residence of the website visitor. Furthermore, the IP address is evaluated for statistical purposes in the event of attacks on the network infrastructure of www.hotelcastell.ch. In addition, we use so-called pixels and cookies when visiting our technology to display personalized advertising and to use web analysis services.

You have the option of using a contact form to get in touch with us. The following personal data must be entered:

• Title

• First name, last name

• Address (street, house number, city, postcode)

• Telephone number

• E-mail address

We will indicate the mandatory entries (*). If this information is not provided, it may hinder the provision of our services. The provision of personal data in other fields is voluntary. You can inform us at any time that you no longer wish us to process this voluntarily provided personal data (see heading “Your Rights”). The provision of other information is optional and has no influence on the use of our technology. We use this data only to answer your contact request in the best possible and personalized way. You can inform us at any time that you no longer wish for this voluntarily provided personal data to be processed (see heading “Your rights”).

You have the option of subscribing to our newsletter on our website. Registration is required for this. The following data must be provided during registration:

• E-mail address

• First name, last name

The e-mail address is required for sending the newsletter. The information on title and name is used so that we can address you personally with our offer.

By registering, you give us your consent to process the data provided for the regular sending of the newsletter to the address you have provided and for the statistical evaluation of user behavior and the optimization of the newsletter. We are entitled to commission third parties with the technical execution of advertising measures and are entitled to pass on your data for this purpose. At the end of each newsletter, you will find a link that you can use to unsubscribe from the newsletter at any time. After unsubscribing, your personal data will be deleted. We expressly draw your attention to the data analyses carried out in connection with sending the newsletter (see the section below “Evaluation of newsletter use”).

We use so-called remarketing pixels on the technology to enable personalized marketing in social networks. If you have an account with a social network that is included in this and are logged in at the time of the page visit, this pixel links the page visit to your account. You can make further settings for advertising in the respective social networks in your user profile. We use re-targeting technologies. This involves analyzing your user behavior on our technology so that we can then offer you individually tailored advertising on partner websites as well. Your user behavior is recorded under a pseudonym. Most re-targeting technologies work with cookies. You can prevent re-targeting at any time by rejecting or disabling the relevant cookies in your web browser's menu bar. You can also request an opt-out for the other advertising and re-targeting tools mentioned above by visiting the Digital Advertising Alliance website at optout.aboutads.info. The following remarketing pixels are used on our technology:

Facebook Pixel

To enable personalized marketing in social networks, we integrate so-called Facebook remarketing pixels. If you have a Facebook account and are logged in when you visit the page, this pixel links your visit to the page with your account.

The data generated in the process is transmitted to and processed by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This allows the behavior of site visitors to be tracked after they are redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising efforts to be optimized.

The data collected is anonymous to us as the operator of this website, and we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage guidelines. This may enable Facebook to serve ads on and off Facebook. This use of the data cannot be influenced by us as the site operator.

Please refer to Facebook's privacy policy for more information about how to protect your privacy.

You can also disable the remarketing Custom Audiences feature in the Ads Settings section. To do this, you must be logged into Facebook.

Adwords and Doubleclick

We use Google AdWords Remarketing and Doubleclick by Google, services provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047), to serve ads based on your use of previously visited websites. Google uses the so-called DoubleClick cookie for this purpose, which enables your browser to be recognized when you visit other websites. The information generated by the cookie about your visit to this technology (including your IP address) is transmitted to a Google server in the USA and stored there (for transfers of personal data to the USA, see “Transfer of personal data abroad” below for additional information). Google will use this information to evaluate your use of the technology with regard to the ads to be displayed, to compile reports on website activity and ads for website operators, and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. However, Google will never associate your IP address with other Google data.

We will pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and Hotel Castell (e.g. collection agencies, authorities or lawyers). We share your data with third parties to the extent that this is necessary in the context of the use of the technology for the provision of the services requested by you (e.g. outsourcing partners; hosting companies; companies with which we offer the services on our technology (e.g. for bookings, rental, purchase, etc.); companies that advertise on our behalf) and to analyze your user behavior.

When disclosing personal data to third parties, we ensure that sufficient contractual guarantees are in place to ensure that such third parties use the personal data in accordance with the law and solely in our interest.

Insofar as the technology contains links to third-party websites, Hotel Castell no longer has any influence on the collection, processing, storage or use of personal data by third parties after clicking on these links and assumes no responsibility for this.

Hotel Castell is also entitled to transfer your personal data to third-party companies (commissioned service providers) abroad if this is necessary for the data processing described in this data protection declaration. These are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or Europe, we will ensure by contract that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

For the sake of completeness, we would like to point out to users with residence or registered office in Switzerland that surveillance measures are in place in the US that allow the US authorities to store all personal data of any person whose data has been transmitted from Switzerland to the US. This is done without distinction, restriction or exception on the basis of the objective pursued and without an objective criterion that would make it possible to limit the US authorities' access to the data and its subsequent use to very specific, strictly limited purposes that could justify both access to and use of the data. Furthermore, we would like to point out that there are no legal remedies available in the USA for data subjects from Switzerland that would allow them to gain access to the data concerning them and to have it corrected or deleted, and that there is no effective judicial protection against the general access rights of US authorities. We explicitly draw the data subject's attention to this legal and factual situation so that they can make an informed decision about whether to consent to the use of their data. We would like to point out to users residing in an EU member state that, from the perspective of the European Union, the USA does not have an adequate level of data protection, among other things due to the issues mentioned in this section. Insofar as we have explained in this data protection declaration that recipients of data (such as Google, Facebook or Twitter) are based in the USA, we will ensure that your data is protected at an appropriate level by our partners through contractual arrangements with these companies.

We use appropriate technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. You should always treat your information as confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others. We also take internal data protection very seriously. Our employees and the service providers we commission are bound by us to maintain confidentiality and comply with data protection regulations.

We use cookies in our technology. Cookies help in many ways to make your visit to our website easier, more convenient and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.

Session cookies are used to assign information stored on the server side during each access to our website (e.g. in the online shop) to you or your internet browser (e.g. so that the contents of the shopping cart are not lost). Session cookies are deleted when you close your internet browser. Permanent cookies are used to store your preferences (e.g. preferred language) over several independent accesses to our website, i.e. even after you have closed your internet browser, or to enable automatic login. Permanent cookies are deleted according to the settings of your internet browser (e.g. one month after the last visit). By using our website and the corresponding functions (e.g. language selection or auto-login), you consent to the use of permanent cookies.

Cookies do not damage the hard disk of your computer, nor are personal data of the user transmitted to us by these cookies. We use cookies, for example, to better align the information, offers and advertising displayed to you with your individual interests. Their use does not result in our obtaining new personal data about you as an online visitor. Most Internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. Disabling cookies may mean that you are unable to use all the features of our website.

We use tracking tools on our website. These tracking tools are used to monitor your surfing behavior on our website. This monitoring is done for the purpose of designing and continuously optimizing our website to meet your needs. In this context, pseudonymized user profiles are created and small text files that are stored on your computer (“cookies”) are used.

Third-party companies may also use permanent cookies, pixel tags or similar technologies for this purpose. The third-party contractor does not receive any personal data from us, but it can track your use of our website, combine this information with data from other websites that you have visited and are also tracked by the third-party contractor, and use these findings for its own purposes (e.g. to control advertising). The processing of your personal data by the third-party contractor is then carried out under the responsibility of the service provider in accordance with its data protection provisions.

The following tracking tools are used:

Google Analytics

Google Analytics is a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047). We use Google Analytics on our website to create anonymized evaluations of website usage. To do this, a cookie is set and the session log data is sent to Google.

The social plugins described below are used on the website. These plugins are disabled by default on our website whenever possible and therefore do not send any data. You can activate the plugins by clicking on the corresponding social media button. When these plugins are activated, your browser will establish a direct connection with the servers of the respective social network as soon as you access one of our websites. The content of the plugin is transmitted directly from the social network to your browser, which integrates it into the website. The plugins can be deactivated again with a single click.

Protel

Offers can be booked on our site using the Web Booking Engine (WBE) from Protel Hotelsoftware GmbH, Europaplatz 8, 44269 Dortmund, Germany. Protel will not be activated as long as you do not access the booking engine. Although the WBE can be accessed from a subpage of the www.hotelcastell.ch domain, it is a separate system operated by Protel. You will therefore have to accept a separate privacy policy for this part of the site. For more information about the WBE, please refer to the privacy policy linked there.

We use third-party email marketing services to send our newsletter. Our newsletter may therefore contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1x1 pixel-sized, invisible graphic that is associated with the user ID of the respective newsletter subscriber. This pixel is only activated when you display the images in the newsletter. The use of corresponding services makes it possible to evaluate whether the e-mails with our newsletter have been opened. In addition, the click behavior of newsletter recipients can also be recorded and evaluated. We use this data for statistical purposes and to optimize the newsletter in terms of content and structure. This enables us to better align the information and offers in our newsletter with the interests of our readers. The tracking pixel is deleted when you delete the newsletter. To prevent tracking pixels in our newsletter, please set your mail program so that no HTML is displayed in messages.

We (or the third parties commissioned by us) do not make any automated decisions that affect your personal data or have legal effects on you or similarly significantly affect you.

The legal basis for the processing of personal data by us is generally found in Article 13, paragraph 2, letter a of the FADP (processing directly related to the conclusion or performance of a contract; corresponds to Article 6, paragraph 1, letter b of the EU GDPR) and in Article 13, paragraph 1 of the FADP (consent of the data subject or legal obligation to process; corresponds to Article 6, paragraph 1, letter a of the EU GDPR). In cases in which we wish to refuse to enter into contracts with data subjects in the future due to abuse, non-payment or similar legitimate reasons, we reserve the right, based on Article 13 paragraph 1 FADP (corresponds to Article 6 paragraph 1 letter f EU GDPR), to store the surname, first name, address and e-mail address of a data subject, as well as personal data relating to the circumstances of the relevant case, in our own interest. Any processing of your personal data by other group companies is also based on Art. 13 para. 1 FADP (corresponds to Article 6 para. 1 letter f EU GDPR).

Upon request, we will provide any data subject with information about whether and, if applicable, which personal data about them is being processed (right of confirmation, right of access). At your request:

• we will partially or completely refrain from processing personal data (right to revoke your consent to the processing of personal data that is not absolutely necessary; right to be forgotten).

• We will also communicate your request to be forgotten to third parties to whom we have previously forwarded your personal data.

• we will rectify the corresponding personal data (right to rectification)

• we will restrict the processing of the corresponding personal data (right to restriction of processing; in this case, we will only store your personal data or use it to protect our legal claims or to protect the rights of another person).

• you will receive the relevant personal data in a structured, common and machine-readable format (right to data portability).

To make a request to exercise a right described in this section, for example if you no longer wish to receive e-mail newsletters from us or wish to delete your account, use the corresponding function on our website or contact our data protection officer or an employee as set out at the beginning of this data protection declaration. If we do not comply with a request, we will inform you of the reasons for doing so. For example, we may legally refuse to delete your personal data if it is still needed for the original purposes (for example, if you are still receiving a service from us), if the processing is based on a mandatory legal basis (such as statutory accounting requirements), or if we have an overriding interest of our own (such as in the case of a legal dispute against the data subject). If we assert an overriding interest in the processing of personal data against you, you nevertheless have the right to object to the processing if your particular situation compared to other data subjects gives rise to a different balance of interests (right to object). This could be the case, for example, if you are a person of public interest or if the processing gives rise to the risk of you being harmed by third parties. If you are not satisfied with our response to your request, you have the right to lodge a complaint with a competent supervisory authority, for example in your country of residence or at the registered office of Hotel Castell (right to complain).

We process personal data only for as long as is necessary for the respective purpose or as required by law. If you have set up an account with us, we will store the master data provided for an unlimited period. However, you can request the deletion of the account at any time (see “Your Rights”). We will delete the master data unless we are required by law to store it. When you place an order without an account, your master data will be deleted after the expiry of the warranty period or the end of the service, insofar as we are not obliged by law to store it. This deletion can take place immediately or as part of periodic deletion processes.

We store contract data, which may also include personal data, for up to 10 years, the statutory retention period. The legal obligation to retain data arises, among other things, from accounting and tax regulations, as well as from the obligation to store electronic communications. If we no longer need this data to provide our services to you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

If we wish to refuse further business contacts with a data subject due to misuse, payment defaults or other legitimate reasons, we will store the corresponding personal data for five years, or for ten years in the event of a repeat offense.

If you do not agree to our analysis of your usage data, you can disable this. You can disable tracking by placing an opt-out cookie on your system. If you ever delete all your cookies, please note that the opt-out cookie will also be lost and may need to be reactivated. Please note that the list below is a compilation of opt-out options that sometimes also includes trackers used by our partners that are not necessarily used on the website:

• Browser add-on to disable Google Analytics

• Disable the DoubleClick cookie

• Disable Quantcast targeting

• Disable AddThis targeting

• Opt out of IntelliAd targeting

• Opt out of Bookatable

A good way to configure a large number of cookies can be found at youronlinechoices.com or optout.aboutads.info. Alternatively, you can install the Ghostery browser extension, which is available for all common browsers.

This data protection declaration and the contracts that are concluded based on or in connection with this data protection declaration are subject to Swiss law, provided that the law of another country is not mandatory. The place of jurisdiction is at the registered office of Hotel Castell, provided that another place of jurisdiction is not mandatory.

Should individual parts of this data protection declaration be invalid, this shall not affect the validity of the rest of the data protection declaration. It may become necessary to amend this data protection declaration due to the further development of our website and offers or due to changes in legal or official requirements. The current data protection declaration is published on our website.

This page was last changed on Nov 18 2024. If you have any questions or comments about our legal notices or data protection, please contact us at info@hotelcastell.ch.