Privacy Policy

Introduction

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation (GDPR) and the revised Swiss Data Protection Act (revDSG). Whether and to what extent these laws are applicable depends on the individual case.

1) General Information and Mandatory Notices

Privacy

We, the Hasler Dobratz family, as the operators of this website, take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Responsible Party

The responsible party for data processing on this website is:

Gunter Dobratz
Loch 40
9488 Schellenberg
Liechtenstein
Phone: +423 373 33 10
Email: gunter@hoi.country

Data Protection Officer

The data protection officer of the responsible party is:

Gunter Dobratz
Loch 40
9488 Schellenberg
Liechtenstein
Phone: +423 373 33 10
Email: gunter@hoi.country
Website: albergo.li

If you have any data protection concerns or wish to request information as part of our legal obligations, please contact this address.

Definitions

What is Personal Data?

Personal data includes all information that relates to an identified or identifiable natural person. This includes, for example, name, address, date of birth, email address, or phone number. Data about personal preferences such as hobbies or memberships also count as personal data.

What is Particularly Sensitive Personal Data?

Data about religious, ideological, political, or trade union views or activities; data about health and possibly information on administrative or criminal prosecutions and sanctions; and data about social assistance measures are considered particularly sensitive personal data. Where necessary and appropriate, we may request and process particularly sensitive personal data. In this case, their processing is subject to stricter confidentiality.

What is Processing of Personal Data?

Processing refers to any handling of personal data, regardless of the means and procedures used, particularly the acquisition, storage, retention, use, alteration, disclosure, archiving, deletion, or destruction of data.

What is Disclosure of Personal Data?

This is the transmission or making available of personal data, e.g., publication or disclosure to a third party.

Rights

Your rights are governed by the statutory provisions of the GDPR and the revDSG.

Right of Access

You have the right to obtain information about your stored personal data, their origin and recipients, and the purpose of the data processing free of charge at any time within the framework of the applicable legal provisions. For this, please contact the responsible party (see "Responsible Party"). We may restrict or refuse the release of data if it conflicts with our legal obligations, legitimate own or public interests, or the interests of a third party.

Right to Deletion and Correction

You have the right to request the deletion or correction of your data at any time. To do so, please contact the responsible party (see "Responsible Party").

We may refuse the request if legal provisions require us to retain the data for a longer or unchanged period or if an authorization basis conflicts with your request.

Please note that exercising your rights may conflict with contractual agreements and have corresponding effects on contract execution (e.g., early contract termination or cost consequences).

Right to Data Portability

You have the right to receive data that we process based on your consent (Art. 6(1)(a) GDPR) or in the performance of a contract (Art. 6(1)(b) GDPR) in a commonly used, machine-readable format or to have them transferred to another responsible party. If you request the direct transfer of the data to another responsible party, this will only be done if technically feasible.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. The right to restriction of processing applies in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.

  • If we no longer need your personal data, but you need them to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

  • If you have lodged an objection under Art. 21(1) GDPR, a balance must be struck between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may – apart from being stored – only be processed with your consent or to assert, exercise, or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state (EU or EEA).

Withdrawal of Your Consent to Data Processing

If your consent is required for data processing, we will obtain it from you before data processing. You can revoke an already given consent at any time. A simple email notification to us is sufficient. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Complain to the Competent Supervisory Authority

In case of violations of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or place of the alleged infringement. The right to complain exists irrespective of other administrative or judicial remedies.

If you are affected by the processing of personal data according to revDSG, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

Duration of Data Storage

We store personal data only as long as necessary to fulfill the specific purposes for which the data were collected.

Data that we store during your visit to our website are retained for twelve months. An exception applies to analysis and tracking data, which may be kept longer.

We store contract data for longer periods because we are legally obligated to do so. We must retain business communication, concluded contracts, and booking receipts for up to 10 years. As long as we no longer need such data from you for service provision, the data will be blocked and used only for billing and tax purposes.

2) Data Collection on Our Website

Cookies

Our website uses so-called cookies and similar technologies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. They are small files or short texts downloaded to a device when a visitor accesses a website or app. You can find information about the cookies placed on your device under About the Cookies used by Squarespace.

You can set your browser to notify you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If all cookies ("functional cookies") are rejected, visiting our website may be restricted or unavailable.

Assistance for cookie management in common browsers can be found here:

Cookies required for the electronic communication process or the provision of certain functions you desire are stored based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.

SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the address line of the browser switching from "http://" to "https://" and by the lock icon in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Third-Party Services

This website may use Google Maps for embedding maps, Google Invisible reCAPTCHA for protection against bots and spam, and YouTube for embedding videos.

These services of the American Google LLC use cookies, among other things, whereby data are transferred to Google in the USA. We assume that no personal tracking occurs in this context solely through the use of our website. Google has committed to ensuring adequate data protection according to the US-European and US-Swiss Privacy Shield.

For more information, see Google's privacy policy.

Server Log Files

When you visit albergo.li.com, certain data are automatically stored on our servers for technical reasons for system administration, statistical, or backup purposes or for tracking purposes. These data include:

  • Browser type and version;

  • Operating system used;

  • Accessed URL;

  • The website from which you visit the URL (referrer URL);

  • Hostname of the accessing computer;

  • Name of your internet service provider;

  • Date and time of the server request;

  • Your IP address;

  • The search terms you used.

We share this information with Squarespace, our website analytics provider, to learn more about traffic and activity on this website.

These data cannot be assigned to specific persons, and they are not merged with other data sources. The collection of these data is based on Art. 6(1)(f) GDPR. The storage of log files is necessary to guarantee the functionality of the website and ensure the security of our information technology systems. This constitutes our legitimate interest.

The data are stored only as long as necessary to achieve the purpose of their collection and are deleted at the latest after twelve months. The storage of log files is essential for the operation of the website; therefore, you have no possibility to object to this.

3) Data Security

We will keep your data secure and take all reasonable measures to protect your data from loss, access, misuse, or alterations.

Our contractors and employees who have access to your data are obligated to comply with data protection regulations. In some cases, it may be necessary for us to forward your requests to affiliated companies. Even in these cases, your data will be treated confidentially.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the address line of the browser changing from "http://" to "https://" and by the lock icon in your browser line.

When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Please note that – subject to explicit agreements and configurations – emails sent to us are unencrypted. If you wish to transmit confidential or sensitive information via email, please contact us in advance to arrange a secure method of data transmission.

4) External Partners

We Work with External Partners

In connection with providing, operating, and maintaining our website, we work with external processors. Our processors and recipients of the data are contractually bound under Art. 28 GDPR.

Some recipients of your data may also be companies and manufacturers outside the EU/EEA. We only cooperate with such companies if there is an adequate level of data protection in that country. The European Commission has recognized the adequate level of protection in Switzerland (Art. 45(3) GDPR).

If a transfer to third countries not covered by the previous regulation is necessary, the cooperation is based on the EU Standard Contractual Clauses (Art. 46 GDPR).

Last updated on July 17, 2024