Data protection

With this Privacy Policy let's inform about the processing of personal data in connection with our Activities and tasks including ours Website under the domain name hotel-projects.ch. We inform, in particular, what personal data we process, how and where. We also inform about the rights of individuals whose data we process.

For individual or additional activities and tasks, we may publish further data protection statements or other information regarding data protection.

Contact addresses

The person responsible in the sense of data protection law is:

Kuchen Hotel Projects AG
Village Square 2C
6405 Immensee
Switzerland

In individual cases, third parties can be responsible for the processing of personal data, or there may be joint responsibility with third parties. We are happy to inform data subjects about the respective responsibility upon request.

2. Terms and Legal Basis

2.1 Terms

Affected person: Natural person whose personal data we process.

Personal Data All Information relating to an identified or identifiable natural person.

Especially protected personal data: Data concerning trade union, political, religious or philosophical beliefs and activities, data concerning health, private life or ethnic origin or race, genetic data, biometric data uniquely identifying a natural person, data concerning criminal and administrative sanctions or prosecutions, and data concerning social assistance measures.

Edit: Everyone Handling personal data, independent of the means and methods applied, for example the querying, matching, adapting, archiving, retention, retrieval, disclosure, obtaining, recording, collecting, deleting, revealing, ordering, organising, storing, altering, disseminating, linking, destroying and using of personal data.

2.2 Legal Basis

We process personal data in accordance with Swiss law, particularly the Federal Data Protection Act (Data Protection Act, DPA) and the Data Protection Regulation (General Data Protection Regulation, GDPR).

3. Scope and purpose of the processing of personal data

We process that personal data which required in order to be able to carry out our activities and operations permanently, humanely, safely and reliably. The personal data processed may include, in particular, the categories of browser and device data, content data, communication data, metadata, usage data, master data including inventory and contact data, location data, transaction data, contract data, and payment data. The personal data may also constitute particularly sensitive personal data.

We also process personal data that we receive from third parties, obtain from publicly accessible sources, or collect in the course of our business and activities, insofar as such processing is permissible.

We process personal data, as far as necessary, with the consent of the data subjects. We can process personal data in many cases without consent, for example to fulfil legal obligations or protect overriding interests. We may also request consent from data subjects if their consent is not required.

We process personal data for the Duration, which is necessary for the respective purpose. We anonymise or delete personal data in particular depending on statutory retention and limitation periods.

4. Automation and Artificial Intelligence (AI)

We can process personal data automatically or use artificial intelligence for the processing of personal data.

We can use profiling to automatically assess certain personal aspects relating to affected individuals. Profiling is used, for example, for the analysis or prediction of interests, behaviours, or personal preferences.

We will inform you on a case-by-case basis about decisions that are based solely on the automated processing of personal data and that have legal consequences for the persons concerned or significantly affect them (automated individual decisions).

5. Disclosure of personal data

We can personal data disclose to third parties, have processed by third parties or jointly processed with third parties. Such third parties may, for example, be specialised service providers whose services we use. Such third parties may in turn disclose personal data to third parties.

We may disclose personal data in the course of our activities and operations, in particular to banks and other financial service providers, authorities, educational and research institutions, consultants and lawyers, accounting and fiduciary service providers, debt collection agencies, interest groups, IT service providers, cooperation partners, credit and business information agencies, logistics and shipping companies, marketing and advertising agencies, media, parent, sister and subsidiary companies, organisations and associations, social institutions, telecommunications companies, insurance companies and payment service providers.

6. Communication

We process personal data in order to communicate with individuals, as well as with authorities, organisations and companies. In doing so, we process in particular data that a data subject transmits to us when making contact, for example by post or email. We may store such data in an address book or with comparable tools.

Third parties who transmit data about other individuals to us are legally obliged to ensure the data protection of these affected individuals independently. In particular, they must guarantee that they are permitted to transmit such data, but also ensure the accuracy of the transmitted data.

We use selected services from suitable providers to enable and improve communication with individuals and other communication partners. We can also manage and otherwise process the data of the data subjects with such services beyond direct communication, for example in connection with orders, services, projects, and resource planning.

7. Data Security

We are taking appropriate technical and organisational measures to ensure data security commensurate with the respective risk. With our measures, we ensure in particular the confidentiality, availability, traceability and integrity of the personal data processed, but without being able to guarantee absolute data security.

Access to our website and our other digital presence is via transport encryption (SSL / TLS, especially with the Hypertext Transfer Protocol Secure, abbreviated HTTPSMost browsers warn against visiting a website without transport encryption.

Our digital communication is subject - as fundamentally Every digital communication – mass surveillance without cause or suspicion by security authorities in Switzerland, across Europe, in the United States of America (USA), and in other countries. We cannot directly influence the processing of personal data by intelligence agencies, police departments, and other security authorities. Nor can we rule out the possibility that an individual is being specifically monitored.

8. Personal data abroad

We process personal data fundamentally in Switzerland. However, we may also disclose or export personal data to other countries, particularly for processing there or having it processed there.

We can transfer personal data to any States on Earth and elsewhere in the Universe to announce, to the extent that the law there according to Resolution of the Swiss Federal Council ensures appropriate data protection.

We can disclose personal data to countries whose laws do not guarantee an adequate level of data protection, provided that other grounds ensure appropriate data protection, particularly on the basis of standard data protection clauses or with other appropriate safeguards. As an exception, we may export personal data to countries without adequate or appropriate data protection if the specific data protection requirements are met, such as the express consent of the data subjects or a direct connection with the conclusion or performance of a contract. We are happy to provide data subjects with information on any guarantees or supply a copy of guarantees upon request.

9. Rights of Data Subjects

9.1 Data Protection Rights

We grant data subjects all rights in accordance with applicable law. Data subjects have in particular the following rights:

  • Information Affected individuals can request information as to whether we process personal data concerning them, and if so, what personal data this involves. Affected individuals will also receive the information necessary to assert their data protection rights and ensure transparency. This includes the personal data processed as such, but also, among other things, details on the purpose of processing, the storage duration, any disclosure or export of data to other countries, and the origin of the personal data.
  • Correction and limitation: Affected individuals can correct inaccurate personal data, complete incomplete data, and restrict the processing of their data.
  • Opportunity for own point of view and human review: Affected individuals have the right to state their point of view and to request human intervention in decisions made solely on the basis of automated processing of personal data, provided that these decisions are legally binding on them or significantly affect them (automated individual decisions).
  • Deletion and objection Affected individuals can request the deletion of their personal data («right to be forgotten») and object to the processing of their data with effect for the future.
  • Data release and data transfer: Affected individuals can request the disclosure of personal data or the transfer of their data to another controller.

We may postpone, restrict or refuse the exercise of data subject rights within the legally permissible scope. We may inform data subjects of any prerequisites for exercising their data protection claims. For example, we may refuse to provide information wholly or in part by reference to confidentiality obligations, overriding interests, or the protection of other persons. For example, we may also refuse to delete personal data wholly or in part, particularly by reference to legal retention obligations.

We can for the exercise of rights exceptionally To make provision for costs. We will inform affected persons in advance of any potential costs.

We are obliged to identify data subjects who request information or assert other rights by taking appropriate measures. Data subjects are obliged to cooperate.

9.2 Legal Protection

Affected individuals have the right to enforce their data protection rights through legal channels or to file a complaint or report with a data protection supervisory authority.

Federal Data Protection and Information Commissioner (FDPIC) for private entities and federal bodies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

10. Website Usage

10.1 Cookies

We can use cookies. Cookies - both first-party cookies and third-party cookies from services we use - are data stored in the browser. Such stored data does not have to be limited to traditional text-based cookies.

Cookies can be stored temporarily in the browser as «session cookies» or for a defined period as permanent cookies. «Session cookies» are automatically deleted when the browser is closed. Permanent cookies have a specific expiry date. Cookies make it possible, in particular, to recognise a browser on the next visit to our website and, for example, to measure the reach of our website. However, permanent cookies can also be used for online marketing, for example.

Cookies can be deactivated, restricted or deleted, in whole or in part, at any time via the browser settings. Browser settings also often allow for the automated deletion and other management of cookies. Without cookies, our website may no longer be fully available at best. We actively request explicit consent for the use of cookies – at least insofar and to the extent required under applicable law.

For cookies used for performance and reach measurement or for advertising, a general objection («opt-out») is available for numerous services. AdChoices (Digital Advertising Alliance of Canada), the Network Advertising Initiative (National Association of Internet Service Providers), YourAdChoices (Digital Advertising Alliance) or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA) possible.

10.2 Logging

We can log at least the following details for every access to our website and our other digital presence, provided these are determined or transmitted to our digital infrastructure as standard during such accesses: Date and time, including time zone, IP address, Access status (HTTP status code), Operating system including user interface and version, browser including language and version, individual sub-page of our website accessed including amount of data transferred, Website last visited in the same browser window (Referer).

We log such information, which can also constitute personal data, in log files. This information is necessary to be able to provide our digital presence permanently, in a user-friendly manner, and reliably. Furthermore, this information is required to ensure data security – also by or with the help of third parties.

10.3 Tracking pixels

We can integrate tracking pixels into our digital presence. Tracking pixels are also referred to as web beacons. Tracking pixels – including those from third parties whose services we use – are usually small, invisible images or scripts written in JavaScript that are automatically retrieved when accessing our digital presence. Tracking pixels can collect at least the same data as is logged in log files.

11. Third-party services

We use services from specialist third parties to enable us to carry out our activities and operations permanently, humanely, safely, and reliably. With such services, we can embed functions and content into our website, among other things. When such embedding takes place, the services used will, for technical reasons, record at least temporarily the IP addresses users.

For necessary security-related, statistical, and technical purposes, third parties whose services we use may process data aggregated, anonymised, or pseudonymised in connection with our activities and operations. This includes, for example, performance or usage data, in order to be able to offer the respective service.

We use in particular:

11.1 Digital Infrastructure

We use services from specialised third parties to be able to use the digital infrastructure required in connection with our activities and operations. This includes, for example, hosting and storage services from selected providers.

We use in particular:

11.2 Schedule Planning

We use services from specialised third parties to arrange appointments online, for example for meetings. In addition to this privacy policy, the terms of the services used, such as terms of use or privacy statements, also apply where applicable and are directly visible.

11.3 Audio and Video Conferencing

We use specialised audio and video conferencing services to communicate online. For example, we can hold virtual meetings or conduct online lessons and webinars. In addition, the legal texts of the individual services, such as data protection declarations and terms of use, apply to participation in audio and video conferences.

We recommend that, depending on your personal circumstances, you mute your microphone by default when participating in audio or video conferences, and either blur your background or use a virtual background.

11.4 Online Collaboration

We use third-party services to enable online collaboration. In addition to this privacy policy, the terms and conditions of the services used, such as terms of use or privacy statements, shall also apply where they are directly apparent.

We use in particular:

11.5 Digital Content

We use services from specialised third parties to embed digital content into our website. Digital content includes, in particular, image and video material, music, and podcasts.

We use in particular:

11.6 Fonts

We use third-party services to embed selected fonts as well as icons, logos and symbols on our website.

We use in particular:

11.7 Advertising

We are taking the opportunity to specifically Advertising with third parties such as social media platforms and search engines to display our activities and tasks.

We particularly want to reach people with such advertising who are already interested in our activities and work, or who could be interested in them.Remarketing and TargetingWe can therefore transmit corresponding - possibly personal - data to third parties who enable such advertising. We can also determine whether our advertising is successful, which means in particular whether it leads to visits to our website (Conversion Tracking).

Third parties, with whom we advertise and with whom you are logged in as a user, can at best assign your use of our website to your profile there.

We use in particular:

12. Website Extensions

We use extensions for our website to enable additional functions. We can use selected services from suitable providers or use such extensions on our own digital infrastructure.

We use in particular:

  • CleanTalk: Protection of websites against unwanted advertising by bots, particularly on the basis of lists of suspicious email addresses or IP addresses; Provider: CleanTalk Inc. (USA); Data protection information: Privacy Policy.
  • ShortPixel: Image hosting and optimisation; Provider: ID SCOUT SRL (Romania); Data protection information: Privacy Policy, «Legal & Privacy.

13. Success and Reach Measurement

We are trying to measure the success and reach of our activities and actions. Within this framework, we can also measure the impact of third-party notices or check how different parts or versions of our digital presence are used («A/B testing» method). Based on the results of the success and reach measurement, we can, in particular, fix errors, strengthen popular content, or make improvements.

For measuring success and reach, in most cases the IP addresses collected by individual users. IP addresses in this case fundamentally shortened («IP masking») in order to follow the principle of data minimization through appropriate pseudonymisation.

When measuring success and reach, cookies may be used to create user profiles. Any user profiles created include, for example, the individual pages visited or content viewed on our digital presence, information on screen or browser window size, and the approximate location. Fundamentally Any user profiles will be created exclusively pseudonymously and not used for the identification of individual users. Individual third-party services where users are logged in may potentially attribute the use of our online offering to the user account or user profile with the respective service.

We use in particular:

14. Final notes on the data protection declaration

We have this privacy policy with the Data Protection Generator from Data protection partner created.

We can update this privacy policy at any time. We will inform you about updates in an appropriate manner, especially by publishing the current privacy policy on our website.