Data Privacy Statement
Sporthotel Victoria Gstaad

Scope and purpose
Based on Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation (Data Protection Act, DPA), every person has a right to protection of his or her privacy and to protection against misuse of his or her personal data. We observe the legal provisions of the Federal Act on Data Protection (FADP), Ordinance to the Federal Act on Data Protection (DPO), the Telecommunications Act (TCA) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).Personal data will be treated strictly confidential and will not be sold or passed on to third parties. In close cooperation with our hosting providers, we make every effort to protect the databases as well as possible against unauthorized access, loss, misuse or forgery. These third party companies, in particular Google Ireland Limited (hereinafter referred to as «Google»), may also be located abroad.

Contact with us
If you get in contact with us by e-mail, we save your details to process the query. This data is not passed on to third parties without your consent.

Operation and hosting of this website (Cmsbox)
This website uses the content management system Cmsbox. The responsibility for the technical operation and hosting of this system lies with Cmsbox GmbH, Terrassenweg 18, 3012 Berne, Switzerland. To ensure Cmsbox GmbH is able to provide, verify and improve its services, it collects personal-related data. This comprises the following data:

Server logs
Each time the website is accessed, the server infrastructure collects a range of general details about the access, which is saved in so-called log files. The name of the website accessed, the URL, the date and time of the access, the transferred quantity of data, a report about the successful access, the browser type and version, the user's operating system, the referral URL (the site previously visited) as well as the IP address of the user are collected. This data is required to check and ensure the functionality and security of the Cmsbo system.

Matamo
Cmsbox uses the tracking system Matamo (formerly PiWiK) to evaluate visitor numbers. This collection of data helps Cmsbox GmbH to operate and improve the technical infrastructure, although it can be deactivated upon explicit request. The data is collected pseudonymised, meaning that any link to a user is no longer possible. The underlying logs are also deleted after 180 days.

reCaptcha
The forms on our website are protected against unauthorised automated sending by Google reCaptcha v3. It is essential from a technical perspective for a large amount of personal data to be transferred to Google. Google is obliged to ensure a suitable level of data protection.

Cookies
Our website uses cookies. Cookies are non-dangerous text files which your browser automatically saves on your device when you visit our website. They allow a visitor to be identified within a predefined period of time. These cookies are deployed to ensure you are able to use the technical functions, such as the contact form. In addition, they are a technical tool for the collection of data by third parties and Google Analytics mentioned in the section «Operation and hosting of this website». Most internet browsers automatically accept cookies. However, you can set up your browser at any time so that cookies are not saved. In general, this website can also be used without accepting cookies. If cookies are deactivated, however, the functioning of this website may be restricted.

Web fonts
This website uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to ensure the content is shown uniformly and in an appealing manner. When accessing a website, your browser loads the required web fonts in your browser cache, to show texts and fonts correctly. For this purpose, the browser you use must create a connection to Google's servers. This means that Google obtains information, for example, that your IP address accessed our website. Further information about Google web fonts can be found at  developers.google.com/fonts and in Google's data privacy policy: policies.google.com/privacy.

Google Maps
We use the map service of Google Maps from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website to show our company headquarters at Promenade 72, 3780 Gstaad. To use this map function, your web browser must generate a connection to a server of Google. Google thereby receives your IP address and information that you have visited the respective page with the map on our website. If you access the Google map services on our website while you are logged into your Google profile, Google can link this information to your Google profile. If you do not want this information to be allocated to your Google profile, you need to log out of Google before visiting our website. You can view the data privacy policy of Google here: www.google.com/policies/privacy.

Google Analytics
To evaluate the use of our website, we use the Google Analytics service, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For this purpose, cookies are used which allow an analysis of the use of the website by its users. The information generated is transferred to a server of the service provider and saved there. Before that, the access data is anonymised by shortening its IP address. This makes it impossible to link the data to a user. Google will evaluate visitor behaviour to compile reports about website activities and to perform further services for the website operator associated with the use of the website and the internet. The underlying records of Google about your visit to our website are deleted automatically after max. 180 days. You can prevent this data being recorded, by installing a browser add-on on the following website and thereby rejecting the future processing of this data: tools.google.com. You can find more information about the data privacy policy of Google Analytics at https://policies.google.com/privacy

Booking platforms
If you make bookings via a third-party platform, we receive various personal information from the respective platform operator. As a rule, this is the data listed in section 5 of this data protection declaration. In addition, we may be forwarded inquiries regarding your booking. We will process these data by name in order to record your booking as requested and to provide the services you have booked. The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR. Finally, we may be informed by the platform operators about disputes in connection with a booking. In doing so, we may also receive data relating to the booking process, which may include a copy of the booking confirmation as proof of the actual booking. We process this data to protect and enforce our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Please also note the data protection information of the respective provider.