Data protection

The responsible body within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
WYNIGER GROUP
c/o Der Teufelhof Basel AG
Carmen Basler
Leonhardsgraben 47-49
CH-4051 Basel
+41 (0) 61 261 10 10
carmen.basler@wyniger.com
www.wyniger.com

Confidentiality of personal data

All our employees who handle personal data in the course of their work are bound to secrecy and to the proper use of data processing systems.

Your data subject rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

Information about your data stored by us and how it is processed,
Correction of incorrect personal data,
deletion of your data stored by us,
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
objection to the processing of your data by us, and
Data portability, provided you have consented to the data processing or have concluded a contract with us.

If you have given us consent, you can revoke this at any time with effect for the future.
You can lodge a complaint with the supervisory authority responsible for you at any time. Your competent supervisory authority depends on the federal state of your residence, your work or the alleged violation. A list of the supervisory authorities in Germany with addresses can be found at: https://www.bfdi.bund.de/EN/Home/home_node.html.

We will be happy to assist you in evaluating the complaint body.

Purposes of data processing by the data controller and third parties

We process your personal data only for the purposes stated in this privacy policy. We do not transfer your personal data to third parties for purposes other than those stated. We will only disclose your personal data to third parties if:

you have given your express consent to this,
the processing is necessary for the performance of a contract with you,
the processing is necessary to comply with a legal obligation, the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

Deletion or blocking of data

We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided for by law. After the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

Collection of general information when visiting our website

When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and the like. This is exclusively information that does not allow any conclusions to be drawn about your person.
This information is technically necessary in order to correctly deliver the contents of web pages requested by you and is compulsory when using the Internet. In particular, it is processed for the following purposes:

Ensuring a smooth connection setup of the website,
ensuring the smooth use of our website,
evaluating system security and stability, and
for other administrative purposes.

The processing of your personal data is based on our legitimate interest from the aforementioned data collection purposes. We do not use your data to draw conclusions about your person. Recipients of the data are only the responsible body and, if applicable, order processors.
Anonymous information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.

Cookies

Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system and your connection to the Internet.
Cookies cannot be used to run programs or deliver viruses to a computer. The information contained in cookies allows us to facilitate your navigation and enable the correct display of our web pages.
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Registration on our website

When you register to use our personalised services, some personal data is collected, such as your name, address, contact and communication details such as telephone number and email address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time, if necessary. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will also be happy to correct or delete this data at your request, provided there are no legal obligations to retain data. To contact us in this context, please use the contact details provided at the end of this data protection declaration.

Transfer to third parties / obligations of processors

We may transfer your personal data to processors as well as to third parties who need to be involved in the provision of the services you have requested, all of whom have committed to us to comply with the applicable data protection standards. If compliance with European data protection standards is not possible - for example, because standard contractual clauses, adequacy decisions or certifications are not guaranteed in the specific case - we will inform you in good time and also obtain the necessary consents from you.
Furthermore, your data (e-mail address) will be processed once via Revinate Inc. for the purpose of submitting an evaluation of your stay in one of our hotels. We will treat your details confidentially in accordance with the applicable data protection regulations. You can object to this use of personal data at any time.
In this regard, we refer you to the data protection declarations of Revinate, in particular the information available under the following link: https://www.revinate.com/privacy/.
Your personal data will not be passed on to uninvolved third parties unless there is a legal obligation to do so or you have given your prior consent.

Provision of chargeable services

For the provision of chargeable services, we request additional data, such as payment details, in order to be able to execute your order. We store this data in our systems until the statutory retention periods have expired.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

On the basis of your expressly given consent, we will send you our newsletter or comparable information regularly by e-mail to your specified e-mail address.
To receive the newsletter, it is sufficient to enter your e-mail address and your name. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail of circumstances relevant to the service or registration (for example, changes to the newsletter service or technical circumstances).
For an effective registration, we require a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double-opt-in" procedure. For this purpose, we log the order for the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
You can revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time. You will find a link to this effect in every newsletter. You can also unsubscribe at any time via the contact options provided at the beginning of this privacy policy.

Facebook & Twitter Plug-Ins

We use Facebook social plug-ins from the social network Facebook, operated by the companies Facebook Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland, and Facebook Inc, 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons that Facebook uses to measure who is visiting our website. If the visitor is also registered as a user with Facebook and logged in, additional information is also stored by Facebook. Facebook receives your IP address for technical reasons. We have no influence on the use of this data by Facebook. In this regard, we refer you to the data protection declarations of Facebook, in particular the information available under the following link: https://www.facebook.com/help/568137493302217.

You will also find information there on how to block Facebook social plug-ins with your browser.
The "Like" or "Like" plugin from Facebook is not used on our website.
We have integrated the plug-ins into our website in such a way that no automatic connection to the Facebook servers is established. You can recognise the Facebook button by the white "f" on a blue background. If you want to use the social plugins, click on the respective button. Only then will a connection to Facebook be activated.

We use plugins of the social network twitter.com on our website. This is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. A list of the current plugins can be found at http://twitter.com/about/resources/logos.
We have integrated the Twitter plugins into our website in such a way that no automatic connection to the Twitter servers is established. You can recognise the Twitter button by the "flying white bird" on a blue background. If you want to use the social plugins, click on the respective button. Only then will a connection to Twitter be activated.
As soon as you activate the button by clicking on it, a connection to the Twitter servers is established. This tells Twitter that you have visited our site. In addition to your IP address, data about the web browser used may also be collected. If you are logged in as a member of Twitter and visit our website, Twitter will assign the above information to your account.
If you would like to prevent Twitter from assigning this information to your account, you must log out of Twitter before visiting our website. We would like to point out that we, as the provider of the pages, do not have precise knowledge of the content of the transmitted data or its use by Twitter. You can find more information on this in Twitter's privacy policy at http://twitter.com/privacy.

Contact form

If you contact us by e-mail or contact form regarding questions of any kind, you give us your voluntary consent for the purpose of contacting you. In order to do so, you must provide a valid e-mail address. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. Personal data will be automatically deleted after your enquiry has been dealt with.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc (hereafter: Google). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The purpose of the data processing is to evaluate the use of the website and to compile reports on activities on the website. Further associated services are then to be provided on the basis of the use of the website and the internet. The processing is based on the legitimate interest of the website operator.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link: Browser Add On to deactivate Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

Use of script libraries (Google Web Fonts)

In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries such as Google Webfonts (https://www.google.com/webfonts/) on this website. Google Web Fonts are transferred to your browser's cache to avoid multiple loading. If the browser does not support Google Web Fonts or prevents access, content is displayed in a standard font.
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - although it is currently unclear whether and, if so, for what purposes - that the operators of such libraries collect data.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Use of Google Maps

This website uses Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about visitors' use of the map functions. You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Centre.
Detailed instructions on how to manage your own data in connection with Google products can be found here.

Embedded YouTube videos

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells Youtube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your Youtube account first.
If a Youtube video is started, the provider uses cookies that collect information about user behaviour.
If you have deactivated the saving of cookies for the Google Ad programme, you will not have to expect any such cookies when watching Youtube videos. However, Youtube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at "Youtube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/.

Google AdWords

Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in the tracking, you can reject the setting of a cookie required for this - for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by setting your browser in such a way that cookies from the domain "googleleadservices.com" are blocked.
Please note that you may not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. The function is used to present website visitors with interest-based advertisements within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.
According to its own information, Google does not collect any personal data during this process. However, if you do not wish to use Google's remarketing function, you can deactivate it in principle by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Changes to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.
Questions to the data protection officer
If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organisation directly:
Raphael Wyniger