Important legal information
Responsible for data protection:
Represented by Mr. Beat Stofer
Balmstrasse 3, 6045 Meggen
Our employees are obliged to treat personal data confidentially.
Scope and purpose of the collection, processing and use of personal data
What personal data we collect
We may collect from you master data (if applicable, company name, name, address, e-mail, etc.), personal data about the services you have purchased, your payment transaction data, your online preferences and your customer feedback. We use this Personal Data to communicate with you, to enter into and conduct business with you, to operate technology, for billing, market research and marketing, such as to analyze our customer base or to contact you by mail, email or text messages.
We may collect personal information about your creditworthiness to protect us from non-payment.
Next, your browsing and usage data is collected. This is, for example, the IP address, the information with which device, browser and browser version you have visited the technology and when, which operating system you are using, from which website or app. you have accessed our technology via a link, and which elements of the technology you use and how. This personal data is stored together with the IP address of your access device. They are used to display and optimize our technology correctly, to protect against attacks or other infringements, and to personalize the technology for you.
When visiting www.balm.ch
When you visit our website, our servers temporarily store every access in a log file. The following user and device data as well as personal data are collected without your intervention and stored by our hoster (ISP - Internet Service Provider):
- the IP address of the requesting computer
- the date and time of access
- the name and URL of the file accessed
- the website from which the access was made
- the operating system of your computer and the browser you are using
- the country from which you accessed the site and the language settings of your browser.
The collection and processing of this data is done for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis and to enable the optimization of our Internet offering, as well as for internal statistical purposes. This is our legitimate interest in data processing. The IP address is used in particular to record the country of residence of the website visitor. Furthermore, the IP address is evaluated for statistical purposes in the event of attacks on the network infrastructure of www.balm.ch. In addition, when visiting our technology, we use so-called pixels and cookies to display personalized advertising and to use web analysis services.
When using our contact forms
You have the option of using a contact form to get in touch with us. The entry of the following personal data is mandatory:
- First and last name
- Address (street, house number, city, postal code)
- Telephone number
- E-mail address
We will mark (*) the mandatory entries. Failure to provide this information may hinder the provision of our services. The provision of personal data in other fields is voluntary. You can inform us at any time that you no longer wish these voluntarily provided personal data to be processed (see heading "Your rights"). Providing other information is optional and does not affect the use of our technology.
We use this data only to be able to answer your contact request in the best possible and personalized way. You can inform us at any time that you no longer wish to have this voluntarily provided personal data processed (see heading "Your rights").
Use of your data for advertising purposes
Creation of pseudonymized usage profiles
In order to enable personalized marketing in social networks, we use so-called remarketing pixels on the technology. If you have an account with a social network included via this and are logged in there at the time of the page visit, this pixel links the page visit to your account. You can make further settings for advertising in the respective social networks in your user profile. We use re-targeting technologies. This involves analyzing your user behavior on our technology in order to subsequently offer you advertising tailored to your individual needs on partner websites as well. Your user behavior is recorded pseudonymously. Most re-targeting technologies work with cookies. You can prevent re-targeting at any time by rejecting or switching off the relevant cookies in the menu bar of your web browser. In addition, you can request an opt-out for the aforementioned additional advertising and re-targeting tools via the Digital Advertising Alliance website at optout.aboutads.info. The following remarketing pixels are used on our technology:
To enable personalized marketing in social networks, we integrate so-called remarketing pixels from Facebook. If you have a Facebook account and are logged in at the time of the page visit, this pixel links the page visit with your account.
The data generated in the process is transferred to Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA and processed there.
This allows the behavior of page visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.
You can find more information about protecting your privacy in Facebook's privacy notices.
You can also disable the Custom Audiences remarketing feature in the Ads Settings section. To do this, you must be logged in to Facebook.
Adwords and Doubleclick
We use Google AdWords Remarketing and Doubleclick by Google, services of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047), to serve ads based on the use of previously visited websites. Google uses the so-called DoubleClick cookie for this purpose, which enables your browser to be recognized when you visit other websites. The information generated by the cookie about your visit to this technology (including your IP address) will be transmitted to and stored by Google on servers in the United States (for more information about transfers of personal data to the United States, see "Transfer of personal data abroad" below). Google will use this information for the purpose of evaluating your use of the technology in relation to the advertisements to be displayed, compiling reports on website activity and advertisements for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. However, Google will not associate your IP address with any other data held by Google.
Google Tag Manager
To manage the services for usage-based advertising, we also use the Google Tag Manager. The Tool Tag Manager itself is a cookie-less domain and does not collect any personal data. Rather, the tool triggers other tags, which in turn may collect data (for this, see above). If you have made a deactivation on domain or cookie level, this remains for all tracking tags that are implemented with the Google Tag Manager.
Disclosure of data to third parties
We pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and Hotel Balm Meggen (e.g. collection agencies, authorities or lawyers). We share your data with third parties to the extent necessary in the context of using the technology to provide the services you request (e.g. outsourcing partners; hosters; companies with whom we offer the offers on our technology (e.g. for bookings, rent, purchase, etc.); companies that advertise on our behalf) and to analyze your user behavior.
We provide sufficient contractual guarantees in the case of transfer to third parties that such a third party will use the personal data in accordance with the law and exclusively in our interest.
Where the Technology contains links to third party websites, Hotel Balm has no control over the collection, processing, storage or use of personal data by the third party once you have clicked on these links and accepts no responsibility for this.
Transfer of personal data abroad
For the sake of completeness, we would like to point out for users who are resident or domiciled in Switzerland that there are monitoring measures in place in the USA by US authorities, which generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, limitation or exception based on the objective pursued and without any objective criterion that would make it possible to limit the access of the US authorities to the data and their subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated both with the access to this data and with its use.
We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. You should always keep your information confidential and close the browser window when you have finished communicating with us, especially if you share a computer with others. We also take internal company data protection very seriously. Our employees and the service companies we commission have been obligated by us to maintain confidentiality and to comply with the provisions of data protection law.
Session cookies are used to uniquely assign information stored on the server side during a specific access to our website (e.g. in the online store) to you or your Internet browser each time you access it (e.g. so that the contents of your shopping cart are not lost). Session cookies are deleted after closing your internet browser. Permanent cookies are used to save your preferences (e.g. preferred language) over several independent accesses to our website, i.e. even after closing your Internet browser, or to enable an automatic login. Permanent cookies are deleted according to the settings of your Internet browser (e.g. one month after your last visit). By using our website, but also the corresponding functions (e.g. language selection or autologin), you consent to the use of permanent cookies.
On our website we use so-called tracking tools. These tracking tools are used to monitor your surfing behavior on our website. This observation is carried out for the purpose of demand-oriented design and continuous optimization of our website. In this context, pseudonymized usage profiles are created and small text files stored on your computer ("cookies") are used.
The following tracking tools are used:
Google Analytics is a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047). We use Google Analytics on our website in order to be able to create anonymized evaluations of website usage. For this purpose, a cookie is set and the log data of the session is sent to Google.
Social media plug-ins
The social media plug-ins described below are used on the website. The plug-ins are deactivated by default on our website whenever possible and therefore do not send any data. You can activate the plugins by clicking on the corresponding social media button. If these plugins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you call up one of our websites. The content of the plugin is transmitted by the social network directly to your browser, which then integrates it into the website. The plugins can be deactivated again with one click.
On our website we use the social media plugin from TrustYou Munich Center of Technology, Agnes-Pockels-Bogen 1, 80992 Munich. Trust You is a service that collects reviews of hotels and processes them into reports. We use data from Trust You to offer our visitors an independent judgment of the service.
On certain pages you will find maps embedded from Google Maps. Google Maps is a product of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047). The maps are displayed by means of I-frame. This means that a third-party website is accessed in that area of the website. The data processing in this I-frame is beyond our control. Google will associate the access with your Google account. Google Maps will write a cookie as soon as the page is loaded. If you wish to prevent this behavior, you can disable the activation of Google cookies for your browser using the links given under "Possibility to Opt-Out/Opt-In".
Automated decision making / profiling
As a matter of principle, we (or third parties commissioned by us) do not make any automated decisions that affect your personal data or have legal effects on you or significantly affect you in a similar way.
Legal basis for processing
The legal bases for processing of personal data by us are generally Article 13(2)(a) DSG (processing directly related to the conclusion or performance of a contract; corresponds to Article 6(1)(b) EU GDPR) and Article 13(1) DSG (consent of the data subject or obligation to process by law; corresponds to Article 6(1)(a) EU GDPR). In cases where we wish to refuse to enter into contracts with data subjects in the future due to misuse, non-payment or similar legitimate reasons, we reserve the right, based on Article 13(1) DSG (corresponds to Article 6(1)(f) EU GDPR), to retain the surname, first name, address and e-mail address of a data subject as well as the personal data relating to the circumstances of the case in question for our own interest. Processing of your personal data by other group companies is also based on Article 13 (1) DSG (corresponds to Article 6 (1) letter f EU DSGVO).
Upon request, we will provide any data subject with information as to whether and, if so, what personal data about him or her is being processed (right to confirmation, right to information). Upon your request
- we will partially or completely refrain from processing personal data (right to withdraw your consent to the processing of personal data that is not absolutely necessary; right to be forgotten). We will also notify third parties to whom we have previously disclosed your personal data of your request to be forgotten.
- we correct the relevant personal data (right to rectification)
- we restrict the processing of the relevant personal data (right to restriction of processing; in this case we will only store your personal data or use it to protect our legal rights or the rights of another person).
- you will receive the personal data in question in a structured, common and machine-readable format (right to data portability).
Retention of data
We process personal data only as long as necessary for the respective purpose or as required by law. If you have set up an account with us, we will retain the master data provided for an unlimited period. However, you can request the deletion of the account at any time (see heading "Your rights"). We will delete the master data unless we are required by law to retain it. In the case of an order without an account, your master data will be deleted after the expiry of the warranty period or the end of the service to the extent that we are not obliged by law to retain it. This deletion can take place immediately or as part of periodic deletion runs.
Contractual data, which may also include personal data, will be retained by us until expiry of the statutory retention obligation of 10 years. Obligations to retain data result, among other things, from accounting and tax law regulations as well as the obligation to retain electronic communication. If we no longer need this data to perform services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes..
If we wish to refuse further business contact with a data subject due to abuse, non-payment or other legitimate reasons, we will retain the relevant personal data for five years, or ten years in the event of a repeat offence.
Possibility to opt-out/opt-in
If you do not agree that we evaluate your usage data, you can switch this off. You can switch off tracking by placing a so-called "opt-out cookie" on your system. If you delete all your cookies, please note that the opt-out cookie will also be lost and may need to be renewed.
Please note that the list below is a list of opt-out options, which sometimes also includes trackers used by our partners that are not necessarily used on the website:
- Browser Add on to disable Google Analytics.
- Disable the DoubleClick cookie
- Switch off Quandcast targeting
- Switch off AddThis targeting
- Opt-out for IntelliAd targeting
- Opt-Out for Bookatable
A good way to configure a large number of cookies can be found at youronlinechoices.com or at optout.aboutads.info
or install the browser extension Ghostery, which is available for every common browser.
Applicable law and place of jurisdiction
Should individual parts of this data protection declaration be invalid, this shall not affect the validity of the rest of the data protection declaration. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration is published on our website.
This page was last modified on 31.08.2023. If you have any questions or comments about our legal notices or data protection, please contact us at email@example.com.
Data processing in connection with your stay
Data processing for the fulfillment of legal registration obligations
Upon arrival at our accommodations, we may require the following information from you and your companions:
- First and last name
- postal address
- Date of birth
- Place of birth
- Official identity card
- Arrival and departure dates, number of nights
- Name of accommodation, average price per night
- Number of adults and children
We collect this information in order to fulfill legal reporting obligations, which arise in particular from the hospitality industry or police law. As far as we are obliged to do so according to the applicable regulations, we forward this information to the responsible police authority.
Our legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO lies in the fulfillment of the legal requirements.
Recording of services received
If you purchase additional services during your stay, we will record the subject of the service and the time of the service purchase for billing purposes. The processing of this data is necessary in the sense of Art. 6 para. 1 lit. b DSGVO for the processing of the contract with us.