The Hotel Vadian Garni treats your personal rights with the highest priority and we strive to protect your rights.

Please take a moment to review how Hotel Vadian Garni handles your personal information, what type of information we collect, how that information is used, how we use it, and how Hotel Vadian Garni protects your personal information from unauthorized persons from processing, loss, and destruction. Any personal data you provide to Hotel Vadian will only be stored for as long as the processing purpose and legally required retention periods or contract durations require.

The following privacy policy informs you about how Hotel Vadian Garni processes your personal information collected during your visit to our website, when you request a service, when you make an online booking, or when you contact us by e-mail or telephone.

PRIVACY POLICY 

Contact data
Verein zur Heimat 
Gallusstrasse 34-36
9000 St. Gallen
Switzerland
Tel: +41 (0)71 228 18 78
Email: info(at)hotel-vadian.com
Website: https://hotel-vadian.com

Authorized representatives
Donat Wick, Managing director Hotel Vadian/Herberge zur Heimat
Stephan Wenger, President Verein zur Heimat

Name of organisation: Verein zur Heimat

Person responsible for data protection:
Barbara Ras Wechsler
+41 (0)71 228 18 78
info@hotel-vadian.com

General information / Introduction
While you access our websites, we automatically collect data of a general nature. This data (server log files) includes, for example, the type of browser you are using, your operating system, the domain name of your Internet provider and other similar general data. These data are absolutely independent of persons and are used to display the web pages correctly to you and are retrieved each time you use the Internet. The absolutely anonymous data is statistically evaluated in order to improve our service for you.

Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the Swiss Confederation (Data Protection Act, DSG), every person has the right to protection of their privacy as well as protection against misuse of their personal data. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

In cooperation with our hosting providers, we strive to protect any databases from unauthorized access, loss, misuse or falsification as much as possible.

We point out that data transmission over the Internet (eg communication by e-mail) may have security gaps. A complete protection of the data against access by third parties is not possible.

By using this website, you consent to the collection, processing and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or names of files accessed, date and time are stored on the server for statistical purposes without this data being directly related to your person. As far as on our sides personal data (such as name, address or e-mail addresses) are collected, this is as far as possible on a voluntary basis. This data will not be passed on to third parties without your express consent..

Processing personal data
Personal data is any information relating to an identified or identifiable individual. A data subject is a person about whom personal data are processed. Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, erasure, retention, alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. If and to the extent that the EU GDPR is applicable, we also process personal data on the following legal bases in connection with Art. 6 (1) GDPR:

lit. a)

Processing of personal data with the consent of the data subject.

lit. b)

Processing of personal data for the performance of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.

lit. c)

Processing of personal data for compliance with a legal obligation to which we are subject under applicable EU law or under applicable law of a country where the GDPR applies in whole or in part.

lit. d)

Processing of personal data to protect the vital interests of the data subject or another natural person.

lit. f)

Processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject override these. The legitimate interests include, in particular, our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with Swiss law.

Cookies
This website uses cookies. These are small text files that allow specific information related to the user to be stored on the user's terminal device while the user is using the website. Cookies make it possible in particular to determine the frequency of use and the number of users of the pages, to analyze behavioral patterns of page use, but also to make our offer more customer-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved when you visit the site again. If you do not wish this, you should set your Internet browser to refuse the acceptance of cookies.

A general objection to the use of cookies for online marketing purposes can be declared for a large number of the services, especially tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. In addition, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.

Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request

Third party services
This website may use Google Maps to embed maps, Google Invisible reCAPTCHA to protect against bots and spam, and YouTube to embed videos.

These services of the American Google LLC use, among other things, cookies, whereby data is transferred to Google in the USA, whereby we assume that no personal tracking takes place in this context solely through the use of our website.

Google has committed to providing adequate data protection in accordance with the U.S.-European Privacy Shield and the U.S.-Swiss Privacy Shield.

For more information, see Google's privacy policy.

Contact forms
If you send us inquiries via any contact forms, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

Rights of the person concerned

Right to confirmation
Every data subject has the right to request confirmation from the website operator as to whether personal data concerning him or her are being processed. If you wish to exercise this right of confirmation, you may contact the data protection officer at any time.

Right to information
Any person affected by the processing of personal data has the right to obtain from the operator of this website, at any time and free of charge, information about the data stored about him or her and a copy of this information. In addition, information may be provided about the following, if applicable:

• processing purposes
• categories of personal data processed
• recipients to whom the personal data have been or will be disclosed If possible, the planned duration of the storage of the personal data or, if this is not possible, the criteria for determining this duration
• the existence of a right to obtain the rectification or erasure of personal data concerning them or to obtain the restriction of processing by the controller or a right to object to such processing
• the existence of a right of appeal to a supervisory authority if the personal data is not collected from the person affected
• all available information about the origin of the data.

If you wish to exercise this right to information, you can contact our data protection officer at any time.

Right to correction
Any person concerned by the processing of personal data has the right to obtain the immediate correction of inaccurate personal data concerning him or her. In addition, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.

If you wish to exercise this right of rectification, you may contact our data protection officer at any time.

Right to erasure (right to be forgotten)
Any person concerned by the processing of personal data has the right to obtain from the controller of this website the erasure without delay of personal data concerning him or her, where one of the following reasons applies and the processing is no longer necessary:

• The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
• The person affected revokes the consent on which the processing was based and there is no other legal basis for the processing
• The affected person objects to the processing on grounds relating to his or her particular situation and there are no overriding legitimate grounds for the processing, or the affected person objects to the processing in case of direct marketing and related profiling
• The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject
• The personal data have been collected in relation to information offered directly to a child

Right to restriction of processing
Any person concerned by the processing of personal data has the right to obtain from the controller of this website the restriction of processing if one of the following conditions is met:

• The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data
• The processing is unlawful, if the affected person objects to the erasure of the personal data and requests instead the restriction of the use of the personal data
• e data controller no longer needs the personal data for the purposes of processing, but the affected person needs them for the assertion, The affected person has objected to the processing on grounds relating to his or her particular situation, and it is not yet clear whether the legitimate interests of the controller outweigh those of the affected person.

Right to data transferability
Any person concerned by the processing of personal data has the right to obtain the personal data relating to him or her in a structured, commonly used and machine-readable format. In addition, the data subject shall have the right to obtain the direct transfer of personal data from one controller to another controller where technically feasible and where this does not adversely affect the rights and freedoms of other persons.

To exercise the right to data transferability, you can contact the data protection officer designated by the operator of this website at any time.

Right of objection
Any person concerned by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.

The operator of this website will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.

To exercise your right to object, you can contact the data protection officer of this website directly.

Right to revoke consent under data protection law
Every person affected by the processing of personal data has the right to revoke a given consent to the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.

Email marketing objection
The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Paid services
For the provision of paid services, we request further data, such as payment data, in order to be able to execute your order. We store this data in our systems until the statutory retention periods have expired.

Copyrights
The copyright and all other rights to the content, images, photos or other files on the website belong exclusively to the operator of this website or the named copyright holders. The prior written consent of the copyright holders must be obtained for the reproduction of any files. Anyone who commits a copyright infringement without the consent of the respective copyright holder may be liable to prosecution and, under certain circumstances, to claims for damages.

Liability disclaimer
All information on our website has been carefully checked. We make every effort to ensure that the information we provide is up-to-date, correct and complete. Nevertheless, the occurrence of errors can not be completely excluded, so we can not guarantee the completeness, accuracy and timeliness of the information, including journalistic-editorial nature. Liability claims regarding damage caused by the use of any information provided, including any kind of information which is incomplete or incorrect, will therefore be rejected.

The publisher may change or delete texts at its own discretion and without prior notice and is not obliged to update the contents of this website. The use of this website or access to it is at the visitor's own risk. The publisher, its customers or partners are not responsible for any damages, such as direct, indirect, incidental or consequential damages, allegedly caused by visiting this website and consequently assume no liability for such damages.

The publisher also assumes no responsibility or liability for the content and availability of third-party websites that can be accessed via external links from this website. The operators of the linked sites are solely responsible for their content. The publisher therefore expressly distances itself from all third-party content that may be relevant under criminal or liability law or that may offend common decency.

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller of the data processing on this website is located outside the European Economic Area or Switzerland, the data processing of Google Analytics is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google".

The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which takes place via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under "My data", "Personal data".

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. We would like to point out that on this website Google Analytics has been extended by the code "_anonymizeIp();" to ensure anonymized collection of IP addresses. This means that IP addresses are processed in shortened form so that they cannot be associated with a specific person. If the data collected about you can be assigned to a person, this is immediately ruled out and the personal data is deleted immediately.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Disable Google Analytics.

In addition, you can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This will save a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that when you delete all cookies on your terminal device, these opt-out cookies will also be deleted, i.e. you must set the opt-out cookies again if you wish to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.

Messaging- WhatsApp
We send booking-related messages containing personal data via the instant messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc. with registered office at 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as "WhatsApp". Partial processing of user data takes place on WhatsApp servers in the USA.

However, by being certified under the EU-US Privacy Shield, WhatsApp guarantees that EU data protection requirements are also met when processing data in the USA. In addition, WhatsApp offers further information on data protection.

To receive messages via WhatsApp, you need a WhatsApp user account. You can find out which data WhatsApp collects during registration in the aforementioned WhatsApp data protection information.

If you log in via WhatsApp, the cell phone number you provided during registration will be processed by WhatsApp. In addition, your IP address and the date and time of your registration will be stored. In the course of the further registration process, your consent to receive the newsletter will be obtained, the content will be specifically described and reference will be made to this privacy policy.

You can block the receipt of messages via WhatsApp by a setting in the WhatsApp software on your end device

Data transfer to the USA
Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence agencies) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing operations.

Modifications and amendments
We may change this privacy policy at any time without prior notice. The current version published on our website will apply. Insofar as the privacy policy is part of an agreement with you, we will inform you of the change in the event of an update by e-mail or other suitable means.

Source: BrainBox Solutions

Translations: DeepL SE