Privacy policy

A - Cross-channel notes

 

1. responsible person and content of this privacy policy

Restaurant Latino AG, Seegartenstrasse 14, 8008 Zurich, Switzerland, manages the Hotel Seegarten and is the operator of the website https://hotel-seegarten.ch/en and therefore responsible for the collection, processing and use of your personal data and the compatibility of the data processing with the applicable data protection law.

Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate security. It goes without saying that we comply with the legal provisions of the Federal Data Protection Act (FADP), the Ordinance to the Federal Data Protection Act (FADP), the Telecommunications Act (TCA) and any other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).

2. contact person for data protection

If you have any questions about data protection or would like to exercise your rights, please send us an e-mail to the following address: contact@hotel-seegarten.ch

3. your rights

Provided that the legal requirements are met, you have the following rights as a person affected by data processing:

Right to information:

You have the right to request at any time, free of charge, to inspect your personal data stored by us when we process it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with applicable data protection regulations.

Right of rectification:

You have the right to have incorrect or incomplete personal data corrected and to be informed about the correction. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.

Right of deletion:

You have the right to have your personal data deleted under certain circumstances. In individual cases, especially in the case of statutory retention obligations, the right to deletion may be excluded. In this case, the deletion may be replaced by a blocking of the data if the conditions are met.

Right to restrict processing:

You have the right to request that the processing of your personal data be restricted.

Right to data transmission:

You have the right to obtain from us, free of charge, the personal data that you have provided to us in a readable format.

Right to object:

You can object to data processing at any time, in particular for data processing in connection with direct advertising (e.g. advertising e-mails).

Right of withdrawal:

In principle, you have the right to revoke your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your revocation.

contact@hotel-seegarten.ch

Right of appeal:

You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way your personal data is processed.

4. data security

We use appropriate technical and organizational security measures to protect your personal data stored by us against loss and unlawful processing, namely unauthorized access by third parties. Our employees and the service companies commissioned by us are obligated by us to maintain confidentiality and data protection. Furthermore, these persons are only granted access to personal data to the extent necessary for the performance of their duties. Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks, and even we cannot provide an absolute guarantee for the security of information transmitted in this way.

5. Contact us

If you contact us via our contact addresses and channels (e.g. by e-mail, telephone), your personal data will be processed. The data you have provided us with, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request will be processed. In addition, the time of receipt of the request is documented. We process this data exclusively in order to implement your request (e.g. providing information about our hotel, support in the processing of contracts such as questions about your booking, inclusion of your feedback in the improvement of our service, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-DSGVO in the implementation of your request or, if your request is directed towards the conclusion or execution of a contract, the necessity for the implementation of the necessary measures within the meaning of Art. 6 para. 1 lit. b EU-DSGVO.

6. use of your data for marketing purposes

6.1 Central data storage and analysis in the CRM system

Insofar as a clear assignment to your person is possible, we will store and link the data described in this data protection declaration, i.e. in particular your personal details, your contact details, your contract data and your surfing behavior on our websites in a central database. This serves the efficient management of customer data and allows us to adequately respond to your requests, and enables the efficient provision of the services you have requested and processing of the associated contracts. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-DSGVO in the efficient management of user data.

We evaluate this data in order to further develop our offers in a needs-oriented manner and to display and suggest the most relevant information and offers to you. We also use methods that predict possible, interests and future orders based on your website usage. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-DSGVO in the implementation of marketing measures.

7. disclosure to third parties

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties insofar as this is necessary in the context of the use of the website and the processing of contracts (also outside the website), namely the processing of your bookings.

The legal basis for these disclosures is the necessity for the fulfillment of the contract within the meaning of Art. 6 para. 1 lit. b EU-DSGVO.

8. Transfer of personal data abroad 

We are also entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing mentioned in this data protection declaration (see esp. sections 12-15). In doing so, the legal requirements for the disclosure of personal data to third parties will, of course, be complied with. If the country in question does not have an adequate level of data protection, we ensure through contractual arrangements that your data is adequately protected at these companies.

9. Retention periods

We store personal data only for as long as is necessary to carry out the processing explained in this privacy policy within the scope of our legitimate interest. In the case of contractual data, storage is required by statutory retention obligations. Requirements that oblige us to retain data arise from the provisions on accounting and from tax law regulations. According to these regulations, business communication, concluded contracts and accounting vouchers must be stored for up to 10 years. As soon as we no longer need this data to perform services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfill the retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer any obligation to retain it and no longer any legitimate interest in retaining it.

B - Special instructions for our website

 

10. log file data

When you visit our website, the servers of our hosting provider store

Nine Internet Solutions AG, Badenerstrasse 47, 8004 Zurich, temporarily each access in a log file (so-called log file). The following data is collected without your intervention and stored until automated deletion by us:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the retrieved file,
• the website from which the access was made, if applicable with the search word used,
• the operating system of your computer and the browser you use (incl. type, version and language setting),
• Device type in case of access by cell phones,
• the city or region from where the access was made,
• the name of your Internet access provider.

This data is collected and processed for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis, as well as for error and performance analysis, and enables us to optimize our website (see also section 13 for the last points).

In the event of an attack on the network infrastructure of the website or suspicion of other unauthorized or abusive website use, the IP address and the other data will be evaluated for the purpose of clarification and defense and, if necessary, used in criminal proceedings to identify and take civil and criminal action against the users concerned.

Our legitimate interest in data processing within the meaning of Art. 6 (1) lit. f EU-DSGVO lies in the purposes described above.

 We use the Weglot translation tool on our website, provided by Weglot S.A., based in Paris, France. The tool allows us to automatically translate our website into different languages. In the process, personal data such as your IP address and information about your browser are also transmitted to Weglot. Weglot processes this data on our behalf to perform the translation of the website.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. Our legitimate interest results from the purpose of the multilingual presentation of our website. For more information on data processing by Weglot, please see Weglot's privacy policy at. https://weglot.com/privacy-policy/..

Finally, when you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. In this context, the data described here may also be processed. You will find more details on this in the other subsequent sections of this data protection declaration, in particular section 11.

11. cookies

Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.

Among other things, cookies help to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes that are necessary, i.e. "technically necessary", for your desired use of the website. For example, we use cookies to be able to identify you as a registered user after logging in, without you having to log in again each time when navigating the various sub-pages. The provision of the shopping cart and order function is also based on the use of cookies. Furthermore, cookies also perform other technical functions required for the operation of the website, such as so-called load balancing, i.e. the distribution of the site's performance load to different web servers in order to relieve the servers. Cookies are also used for security purposes, for example to prevent the unauthorized posting of content. Finally, we also use cookies as part of the design and programming of our website, for example to enable the uploading of scripts or codes.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-DSGVO in providing a user-friendly and up-to-date website.

Most internet browsers accept cookies automatically. However, when accessing our website, we ask for your consent to the cookies we use that are not technically necessary, especially when using third-party cookies for marketing purposes. You can use the corresponding buttons in the cookie banner to make your desired settings. Details on the services and data processing associated with the individual cookies can be found within the cookie banner as well as in the following sections of this privacy policy.

You may also be able to configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. The deactivation of cookies may mean that you cannot use all the functions of our website.

12. google sitesearch / google custom search engine 

This website uses the Google SiteSearch/Google Custom Search Engine of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This allows us to provide you with an efficient search function on our website.

When using our search fields, your browser may transmit the log file data listed in section 10 (incl. IP address) as well as the search term you entered to Google if you have installed Java script in your browser. If you wish to prevent the transmission of data, you can deactivate Java Script in the browser settings (usually in the "Privacy" menu). Please note that the search function and other functions of the website may be impaired in this case. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 (1) lit. f EU-DSGVO in providing an efficient website search function. For further processing of the data by Google, please note their privacy policy.

13. tracking and web analysis tools

13.1 General information on tracking

For the purpose of demand-oriented design and continuous optimization of our website, we use the web analysis services listed below. In this context, pseudonymized usage profiles are created and cookies are used (please also refer to section 11). The information generated by the cookie about your use of this website is usually transferred together with the log file data listed in Section 10 to a server of the service provider, where it is stored and processed. this may also involve transfer to servers abroad, e.g. the USA (see also, in particular, the guarantees taken, Section 8).

By processing the data, we obtain the following information, among others:

• Navigation path followed by a visitor on the site (incl. content viewed and products selected or purchased or services booked),
• Dwell time on the website or subpage,
• the subpage on which the website is left,
• the country, region or city from where access is made,
• End device (type, version, color depth, resolution, width and height of the browser window) and returning or new visitor.

On our behalf, the provider will use this information for the purpose of evaluating the use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage for the purposes of market research and demand-oriented design of these internet pages. For these processing operations, we and the providers may be considered joint data controllers up to a certain extent.

The legal basis for this data processing with the following tools is your consent within the meaning of Art. 6 (1) lit. a EU-DSGVO. You can revoke your consent or refuse the processing at any time by rejecting or switching off the relevant cookies in your web browser settings (see section 11) or by making use of the service-specific options described below.

For the further processing of the data by the respective provider as the (sole) responsible party under data protection law, in particular also any forwarding of this information to third parties such as authorities on the basis of national statutory provisions, please refer to the respective data protection information of the provider.

13.2 Google Analytics

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").

In the process, the described data about the use of the website may be transmitted to the servers of Google LLC. in the USA for the explained processing purposes (see section 13.1). The IP address is shortened by activating the IP anonymization ("anonymizeIP") on this website before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Users can prevent the collection of the data generated by the cookie and related to the website usage by the respective user (including the IP address) to Google as well as the processing of this data by Google by installing a browser plugin.

14. social media

On our website we have included links to our profiles in the social networks of the following providers:

• Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA;
• Instagram Inc. 1601 Willow Road, Menlo Park, CA 94025, USA;

If you click on the icons of the social networks, you will automatically be redirected to our profile in the respective network. This establishes a direct connection between your browser and the server of the respective social network. This provides the network with the information that you have visited our website with your IP address and clicked on the link.

If you click on a link to a network while you are logged into your user account with the network in question, the content of our website may be linked to your profile so that the network can assign your visit to our website directly to your account. If you want to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account takes place in any case if you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Therefore, please refer to the information on the website of the network. The legal basis for any data processing attributed to us is our legitimate interest within the meaning of Art. 6 (1) lit. f EU-DSGVO in the use and promotion of our social media profiles.

15. online advertising and targeting

15.1 In general

We use services of various companies to provide you with interesting offers online. In the process, your user behavior on our website and websites of other providers is analyzed in order to subsequently display online advertising tailored to your individual needs.

Most technologies for tracking your user behavior and for the targeted display of advertising work with cookies (see also Section 11), which can be used to recognize your browser across different websites. Depending on the service provider, it may also be possible for you to be recognized online even when using different end devices (e.g. laptop and smartphone). This may be the case, for example, if you have registered for a service that you use with multiple devices.

In addition to the data already mentioned, which is generated when websites are called up ("log file data", see section 10) and when cookies are used (section 11) and which may reach the companies involved in the advertising networks, the following data in particular is included in the selection of the advertising that is potentially most relevant to you:

• Information about you that you provided when registering or using a service from advertising partners (e.g. your gender, age group);
• User behavior (e.g., search queries, interactions with advertisements, types of websites visited, products or services viewed and purchased, newsletters subscribed to).

We and our service providers use this data to identify whether you belong to the target group we address and take this into account when selecting advertisements. For example, after you have visited our site, you may be presented with ads of the products or services you consulted when you visit other sites ("re-targeting"). Depending on the scope of the data, a user's profile may also be created, which is evaluated automatically, and ads are selected according to the information stored in the profile, such as membership in certain demographic segments or potential interests or behaviors. Such ads may be presented to you on various channels, which, in addition to our website or app (as part of onsite and in-app marketing), also include ads served through the online advertising networks we use, such as Google.

The data may then be analyzed for the purpose of billing the service provider and assessing the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the performance of an action (e.g., visiting certain sections of our websites or sending information) is due to a certain advertising ad. We also receive aggregated reports from service providers of ad activity and information about how users interact with our website and ads.

The legal basis for this data processing is your consent within the meaning of Art. 6 (1) a EU-DSGVO. You can revoke your consent at any time by rejecting or switching off the relevant cookies in your web browser settings (see section 11). You can also find further options for blocking advertising in the information provided by the respective service provider.

15.2 Google Ads

This website uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for online advertising. Google uses cookies for this purpose, such as the so-called DoubleClick cookie, which allow your browser to be recognized when you visit other websites. The information generated by the cookies about your visit to these websites (including your IP address) will be transmitted to and stored by Google on servers in the United States (please also refer to section 8). For more information, please refer to the respective provider's privacy policy.

The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU-DSGVO. You can revoke your consent at any time by rejecting or switching off the relevant cookies in the settings of your web browser.

16. registration for a customer account

If you open a customer account on our website, we collect the following data, where mandatory data are marked with an asterisk (*) in the corresponding form:

• Personnel:
• Salutation
• Name
• First name
• Billing and, if applicable, delivery address
• Phone number
• Login data:
• E-mail address
• Password

We use the personal data to establish your identity and to verify the requirements for registration. The e-mail address and password together serve as login data and thus to ensure that the correct person under your information uses the website. We also need your e-mail address for verification and confirmation of the account opening and for future communication with you necessary for the execution of the contract. In addition, this data is stored in the customer account for future bookings or contract conclusions. For this purpose, we also enable you to store further details in the account (e.g. your preferred means of payment).

We also use the data to provide an overview of the products ordered and bookings made (see in particular sections 17 and 18) and a simple way to manage your personal data, to administer our website and the contractual relationships, i.e. to establish, define the content of, process and amend the contracts concluded with you via your customer account (e.g. in connection with your booking with us).

The legal basis for the processing of your data for the preceding purpose lies in your consent pursuant to Art. 6 para. 1 lit. a EU-DSGVO. You can revoke your consent at any time by removing the information from the customer account again or deleting your customer account or, by notifying us, have it deleted.

To avoid misuse, you must always keep your login information confidential and should close the browser window when you have finished communicating with us, especially if you share the computer with others.

17. booking on the website, by correspondence or by phone call.

When you make bookings either through our website, by correspondence (e-mail or letter post) or by telephone call, we collect the following data, where mandatory data are marked with an asterisk (*) in the corresponding form:

• Salutation
• First name
• Last name
• Street and no.
• ZIP CODE
• Location
• Country
• E-mail address
• Phone number
• Language
• Credit card information
• Comments
• Confirmation of the correctness of the information provided and the knowledge and agreement regarding the terms and conditions and privacy policy. Terms and Conditions and Privacy Policy.

We will only use this data and other information voluntarily provided by you (e.g. expected arrival time, motor vehicle registration plate, preferences, remarks) to process the contract, unless otherwise stated in this privacy policy or you have separately consented to this. We will process the data by name in order to record your booking as requested, to provide the booked services, to contact you in case of any uncertainties or problems and to ensure correct payment. Your credit card data will be automatically deleted after your departure with us. The legal basis of data processing for this purpose is the fulfillment of a contract according to Art. 6 para. 1 lit. b EU-DSGVO or your consent according to Art. 6 para. 1 lit. a EU-DSGVO. You can revoke your consent at any time with effect for the future.

18. payment processing online

If you make chargeable bookings or purchase products on our website, depending on the product or service and the desired payment method - in addition to the information mentioned in section 17 or section 18 - the provision of further data is required, such as your credit card information or the login to your payment service provider. This information, as well as the fact that you have purchased a service from us for the amount and at the time in question, will be forwarded to the respective payment service providers (e.g. payment solution providers, credit card issuers and credit card acquirers). In this regard, please always also note the information of the respective company, in particular the data protection declaration and the general terms and conditions. The legal basis for this transfer is the fulfillment of a contract according to Art. 6 para.1 lit. b EU-DSGVO.

19. bookings via booking platforms

If you make bookings via a third-party platform (e.g. via booking.com, Expedia, Agoda, HRS, Tripadvisor, Trivago, etc.), we receive various personal information from the respective platform operator in connection with the booking made. As a rule, this is the data listed in item 18 of these data protection declarations. In addition, inquiries about your booking may be forwarded to us. We will process this data by name in order to record your booking as requested and to provide the booked services. The legal basis of data processing for this purpose is the implementation of pre-contractual measures and the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b EU-DSGVO.

Finally, we may be informed by the platform operators about disputes in connection with a booking. In the process, we may also receive data about the booking process, which may include a copy of the booking confirmation as proof of the actual booking completion. We process this data to protect and enforce our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-DSGVO. Please also note the privacy policy of the respective booking platform.

20. submission of evaluations

In order to help other users with their purchase decision and to support our quality management (esp. the processing of negative feedback), you have the opportunity to rate your stay with us on the websites of various third-party providers. Please note the privacy policy of the provider.

The legal basis for this processing is our legitimate interest within the meaning of Art. 6 (1) lit. f EU-DSGVO in providing the comment and rating function and preventing misuse when using it.

21. data processing for the fulfillment of legal reporting obligations

Upon arrival at our hotel, we may require the following information from you and your companions (mandatory *):

• First and last name
• Postal address and canton
• Date of birth
• Nationality
• Official identification card and number
• Arrival and departure day

We collect this information in order to fulfill legal reporting obligations, which arise in particular from the hospitality industry or police law. Insofar as we are obliged to do so under the applicable regulations, we forward this information to the competent police authority. The processing of this data is based on a legal obligation within the meaning of Art. 6 para. 1 lit. c EU-DSGVO.

22. recognition of purchased services

If you purchase additional services during your stay (e.g. wellness, restaurant, activities, special requests), we will record the subject of the service and the time of the service purchase for billing purposes. The processing of this data is necessary in the sense of Art. 6 para. 1 lit. b EU-DSGVO for the processing of the contract with us.

23. guest feedback

Provided that you have given us your e-mail address in connection with your booking, you will receive an electronic form after departure. For this purpose, we collect the following data, whereby mandatory data in the corresponding form are marked with an asterisk (*):

• First and last name
• Language
• Length of stay

The information is voluntary and serves us to continuously improve our offer and our services and to adapt them to your needs. We will use the information provided to us for statistical purposes, unless otherwise stated in this privacy policy or you have separately consented to this. We will process the data by name in order to contact you in the event of any uncertainties. For the aforementioned purposes, the legal basis of the processing is our legitimate interest within the meaning of Art. 6 (1) lit. f EU-DSGVO.

24. payment processing

When you purchase products or services or pay for your stay in our hotel using electronic means of payment, the processing of personal data is required. By using the payment terminals, you transmit the information stored in your means of payment, such as the name of the cardholder and the card number, to the payment service providers involved (e.g. providers of payment solutions, credit card issuers and credit card acquirers). They also receive the information that the payment method was used in our hotel, the amount as well as the time of the transaction. Conversely, we only receive the credit for the amount of the payment made at the relevant time, which we can assign to the relevant voucher number, or information that the transaction was not possible or was cancelled. In this regard, please always also note the information provided by the respective company, in particular the data protection declaration and the general terms and conditions. The legal basis of this transmission is the fulfillment of the contract with you according to Art. 6 para.1 lit. b EU-DSGVO.

 

August 2023