Privacy Policy

Important legal information

Please read the following privacy policy carefully before continuing. Persons accessing the website www.balm.ch agree to the following conditions.
Hotel Balm, Balmstrasse 3, 6045 Meggen (hereinafter also referred to as "we") operates the website www.balm.ch (hereinafter referred to as the "technology"), and is therefore responsible for the collection, processing and use of your personal data.
Your trust is important to us, which is why we take data protection seriously and ensure appropriate security through organisational and technical measures. We also train our employees.

If we commission third parties to process personal data, the third party is carefully selected and must take appropriate security measures to guarantee the confidentiality and security of your personal data.

Responsible body for data protection:
Hotel Balm
Represented by Mr Beat Stofer
Balmstrasse 3, 6045 Meggen
info@balm.ch

General

All personal data collected as part of registration or generated during use and protected by the DSG or the GDPR will be used exclusively for the purpose of fulfilling the contract, unless, in particular in accordance with this privacy policy, you have expressly consented to any further use or applicable law permits this.
Our employees are obliged to treat personal data confidentially.

Scope and purpose of the collection, processing and use of personal data

Which personal data we collect

We may collect master data from you (if applicable company name, name, address, email, etc.), personal data about the services you have used, your payment details, your online preferences and your customer feedback. We use this personal data to communicate with you, to conclude and process transactions with you, to operate the technology, for billing, market research and marketing, for example to analyse our customer base or to contact you by post, email or text messages.
We may collect personal data about your creditworthiness in order to protect ourselves against payment defaults.
We also collect your browsing and usage data. This includes, for example, the IP address, the information on which device, browser and browser version you visited the technology with and when, which operating system you use, which website or app you used to access our technology via a link, and which elements of the technology you use and how. This personal data is stored together with the IP address of your access device. It is used to display and optimise our technology correctly, to protect against attacks or other legal violations and to personalise the technology for you.

When visiting www.balm.ch

When visiting our website, our servers temporarily store each access in a log file. The following user and device data as well as personal data are collected without any action on your part and stored by our hoster (ISP - Internet Service Provider):

• the IP address of the requesting computer
• the date and time of access
• the name and URL of the file accessed
• the website from which the access was made
• the operating system of your computer and the browser you use
• the country from which you accessed and the language settings in your browser

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability on an ongoing basis, enabling the optimisation of our Internet offering and for internal statistical purposes. This constitutes our legitimate interest in data processing. The IP address is used in particular to record the country of residence of the website visitor. Furthermore, the IP address is evaluated for statistical purposes in the event of attacks on the network infrastructure of www.balm.ch. In addition, when visiting our technology we use so-called pixels and cookies to display personalised advertising and to use web analytics services.

When using our contact forms

You have the option of using a contact form to get in touch with us. The following personal data must be entered:

• salutation
• first and last name
• address (street, house number, town, postcode)
• telephone number
• email address

We will mark the mandatory entries (*). If this information is not provided, this may hinder the provision of our services. The provision of personal data in other fields is voluntary. You may inform us at any time that you no longer wish this voluntarily provided personal data to be processed (see heading "Your rights"). The provision of other information is optional and has no influence on the use of our technology.
We use this data only so that we can answer your contact enquiry as well as possible and in a personalised manner. You may inform us at any time that you no longer wish this voluntarily provided personal data to be processed (see heading "Your rights").

Use of your data for advertising purposes

Creating pseudonymised usage profiles

To enable personalised marketing on social networks, we use so-called remarketing pixels on the technology. If you have an account with a social network included via this and are logged in there at the time of visiting the page, this pixel links the page visit with your account. You can make further advertising settings in the respective social networks in your user profile. We use retargeting technologies. Your user behaviour on our technology is analysed in order to subsequently offer you individually tailored advertising on partner websites as well. Your user behaviour is recorded pseudonymously. Most retargeting technologies work with cookies. You can prevent retargeting at any time by rejecting or disabling the relevant cookies in the menu bar of your web browser. In addition, you can request an opt-out for the aforementioned advertising and retargeting tools via the Digital Advertising Alliance website at optout.aboutads.info. The following remarketing pixels are used on our technology:

Facebook Pixel

To enable personalised marketing on social networks, we integrate so-called remarketing pixels from Facebook. If you have a Facebook account and are logged in there at the time of visiting the page, this pixel links the page visit with your account.

The data generated in this way is transmitted to Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA and processed there.
This makes it possible to track the behaviour of page visitors after they have been redirected to the provider's website by clicking on a Facebook advertisement. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook's data usage policy. This can enable Facebook to place advertisements on Facebook pages and outside Facebook. This use of the data cannot be influenced by us as the website operator.

You can find further information on protecting your privacy in Facebook's privacy notices.

You can also deactivate the remarketing function “Custom Audiences” in the advertising settings section. You must be logged in to Facebook to do this.

Adwords and Doubleclick

We use Google AdWords Remarketing and Doubleclick by Google, services of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047), to serve advertisements based on the use of websites previously visited. Google uses the so-called DoubleClick cookie for this purpose, which enables your browser to be recognised when visiting other websites. The information generated by the cookie about the visit to this technology (including your IP address) is transmitted to a Google server in the USA and stored there (for transfers of personal data to the USA, see further below "Transfer of personal data abroad" for additional information). Google will use this information to evaluate your use of the technology with regard to the advertisements to be displayed, to compile reports on website activity and advertisements for website operators and to provide other services related to website and internet use. Google will also transfer this information to third parties where required by law or where third parties process this data on Google's behalf. However, Google will never associate your IP address with other data held by Google.

Google Tag Manager

To manage services for usage-based advertising, we also use Google Tag Manager. The Tool Tag Manager itself is a cookie-free domain and does not collect any personal data. Rather, the tool triggers other tags, which in turn may collect data (see above). If you have deactivated cookies at domain or cookie level, this deactivation remains in place for all tracking tags implemented with Google Tag Manager.

Disclosure of data to third parties

We disclose your personal data if you have expressly consented, if there is a legal obligation to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and Hotel Balm Meggen (e.g. debt collection agencies, authorities or lawyers). We pass on your data to third parties insofar as this is necessary in the context of using the technology to provide the services you have requested (e.g. outsourcing partners; hosters; companies with which we offer the services on our technology (e.g. for bookings, rentals, purchases, etc.); companies that advertise on our behalf) and for analysing your user behaviour.

When passing data on to third parties, we ensure sufficient contractual guarantees that such third party will use the personal data in accordance with legal requirements and solely in our interest.

If the technology contains links to third-party websites, Hotel Balm has no further influence on the collection, processing, storage or use of personal data by the third party after clicking on these links and assumes no responsibility for this.

Transfer of personal data abroad

Hotel Balm is also entitled to transfer your personal data to third-party companies (commissioned service providers) abroad, insofar as this is necessary for the data processing described in this privacy policy. These are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to the Swiss or European level, we ensure contractually that the protection of your personal data is always equivalent to that in Switzerland or the EU.
For the sake of completeness, we would like to point out to users resident or domiciled in Switzerland that in the USA there are surveillance measures by US authorities which generally permit the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without differentiation, restriction or exception according to the pursued purpose and without an objective criterion that would allow the access of the US authorities to the data and its later use to be restricted to very specific, strictly limited purposes that could justify the interference associated with both access to and use of these data. We also point out that in the USA there are no legal remedies available to affected persons from Switzerland that would allow them to obtain access to the data concerning them and to have it corrected or deleted, nor is there any effective legal protection against general access rights of US authorities. We expressly point out this legal and factual situation to the data subject in order to enable an appropriately informed decision on consenting to the use of their data. We would like to point out to users resident in an EU member state that, from the European Union's point of view - among other things due to the issues mentioned in this section - the USA does not have an adequate level of data protection. Insofar as we have explained in this privacy policy that recipients of data (such as Google, Facebook or Twitter) are based in the USA, we will ensure through contractual arrangements with these companies that your data is protected at an appropriate level by our partners.

Data security

We use appropriate technical and organisational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. You should always treat your information confidentially and close the browser window when you have finished communicating with us, especially if you use the computer together with others. We also take internal company data protection very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and comply with data protection regulations.

Cookies

We use cookies on our technology. Cookies help to make your visit to our website simpler, more pleasant and more useful in many respects. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.

Session cookies are used to clearly assign information stored on the server during a specific access to our website (e.g. in the online shop) to you or your internet browser each time you access it (e.g. so that the contents of your shopping basket are not lost). Session cookies are deleted when you close your internet browser. Permanent cookies are used to store your preferences (e.g. preferred language) over several independent accesses to our website, i.e. even after you have closed your internet browser, or to enable automatic login. Permanent cookies are deleted in accordance with the settings of your internet browser (e.g. one month after your last visit). By using our website, but also the corresponding functions (e.g. language selection or auto login), you consent to the use of permanent cookies.
Cookies do not damage your computer's hard drive, nor do these cookies transmit users' personal data to us. We use cookies, for example, to better tailor the information, offers and advertising displayed to you to your individual interests. The use does not result in us receiving new personal data about you as an online visitor. Most internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that you are always notified when you receive a new cookie. Disabling cookies may mean that you cannot use all the functions of our website.

Tracking tools

We use so-called tracking tools on our website. These tracking tools monitor your browsing behaviour on our website. This monitoring is carried out for the purpose of designing our website to meet requirements and continuously optimising it. In this context, pseudonymised usage profiles are created and small text files stored on your computer (“cookies”) are used.
Third-party contractors may also use permanent cookies, pixel tags or similar technologies. The third-party contractor receives no personal data from us, but can track your use of our website, combine this information with data from other websites you have visited and that are also tracked by the third-party contractor, and use these insights for its own purposes (e.g. control of advertising). The processing of your personal data by the third-party contractor is then carried out under the responsibility of the service provider in accordance with its data protection regulations.

The following tracking tools are used:

Google Analytics

Google Analytics is a service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047). We use Google Analytics on our website in order to create anonymised evaluations of website usage. For this purpose, a cookie is set and the session log data is sent to Google.

Social Media Plug-Ins

The following Social Media Plugins are used on the website as described below. The plugins are deactivated by default on our website wherever possible and therefore do not send any data. You can activate the plugins by clicking on the relevant Social Media button. When these plugins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you access one of our websites. The content of the plugin is transmitted directly from the social network to your browser and integrated by it into the website. The plugins can be deactivated again with a click.

TrustYou

On our website, we use the Social Media plugin from TrustYou Munich Center of Technology, Agnes-Pockels-Bogen 1, 80992 Munich. Trust You is a service that collects hotel reviews and prepares them into reports. We use data from Trust You to be able to offer our visitors an independent assessment of the service.

TripAdvisor

On our website, we use the Social Media plugin from TripAdvisor Inc., 400 1st Avenue, Needham, MA 02494 USA. TripAdvisor is an online travel company that collects users' reviews of tourist offers and combines them with booking recommendations. We use the Tripadvisor widget so that customer opinions about us can be displayed neutrally. TripAdvisor will place a cookie on your computer as soon as you visit a page with the widget. TripAdvisor privacy policy

Google Maps

On certain pages you will find maps embedded from Google Maps. Google Maps is a product of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047). The maps are displayed using an i-frame. This means that a third-party website is accessed in that area of the website. The data processing in this i-frame is beyond our control. Google will assign the access to your Google account. Google Maps will write a cookie as soon as the page is loaded. If you wish to prevent this behaviour, you can disable the activation of Google cookies for your browser using the links provided under "Option to opt-out/opt-in".

Automated decision-making / profiling

We (or the third parties commissioned by us) generally do not make automated decisions that affect your personal data or have legal effects on you or affect you in a similarly significant way.

Legal bases for processing

The legal bases for our processing of personal data are usually Article 13 paragraph 2 letter a DSG (processing in direct connection with the conclusion or performance of a contract; corresponds to Article 6 paragraph 1 letter b GDPR) and Article 13 paragraph 1 DSG (consent of the data subject or obligation to process by law; corresponds to Article 6 paragraph 1 letter a GDPR). In cases where, due to misuse, default in payment or similar legitimate reasons, we wish in future to refuse to conclude contracts with data subjects, we reserve the right, based on Article 13 paragraph 1 DSG (corresponds to Article 6 paragraph 1 letter f GDPR), to retain the surname, first name, address and email address of a data subject as well as the personal data concerning the circumstances of the relevant case in our own interest. Processing of your personal data by other group companies also takes place on the basis of Art. 13 para. 1 DSG (corresponds to Article 6 paragraph 1 letter f GDPR).

Your rights

Upon request, we will provide any data subject with information about whether and, if so, which personal data are being processed about them (right to confirmation, right of access). At your request:

• we will partly or wholly refrain from processing personal data (right to withdraw your consent to the processing of non-essential personal data; right to be forgotten). We will also notify third parties to whom we previously passed on your personal data of your request to be forgotten.
• we will correct the relevant personal data (right to rectification)
• we will restrict the processing of the relevant personal data (right to restriction of processing; in this case we will only store your personal data or use them to protect our legal claims or to protect the rights of another person.)
• you will receive the personal data concerned in a structured, commonly used and machine-readable format (right to data portability).

To make such a request to exercise one of the rights described in this section, for example if you no longer wish to receive email newsletters from us or want to delete your account, please use the relevant function on our website or contact our data protection officer or a member of staff in accordance with the details at the beginning of this privacy policy. If we do not comply with a request, we will inform you of the reasons. For example, we may lawfully refuse deletion if your personal data are still required for the original purposes (for example, if you are still receiving a service from us), if the processing is based on a mandatory legal basis (for example, statutory accounting requirements), or if we have a predominant own interest (such as in the event of legal proceedings against the data subject). If we assert a predominant interest in the processing of personal data against you, you still have the right to object to the processing, provided that your particular situation compared with other data subjects gives rise to a different balancing of interests (right to object). This could be the case, for example, if you are a person of public interest or if the processing creates a risk that you will be harmed by third parties. If you are not satisfied with our response to your request, you have the right to lodge a complaint with the competent supervisory authority, for example in your country of residence or at the registered office of Hotel Balm (right to complain).

Retention of data

We process personal data only for as long as this is necessary for the respective purpose or required by law. If you have opened an account with us, we will retain the master data provided in this context indefinitely. However, you may request deletion of the account at any time (see heading "Your rights"). We will delete the master data unless we are legally obliged to retain it. In the case of an order without an account, your master data will be deleted after the guarantee period has expired or the service has ended, insofar as we are not legally obliged to retain it. This deletion may take place immediately or as part of periodic deletion runs.
Contract data, which may also include personal data, will be retained by us until the expiry of the statutory retention obligation of 10 years. Retention obligations for data arise, among other things, from accounting regulations and tax law regulations as well as the obligation to retain electronic communication. Insofar as we no longer require this data to provide the services to you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.
If we wish to refuse further business contact with a data subject due to misuse, payment default or other legitimate reasons, we will retain the relevant personal data for five years, or for ten years in the event of recurrence.

Option to opt-out/opt-in

If you do not agree to us evaluating your usage data, you can switch this off. Tracking is switched off by placing a so-called "opt-out cookie" on your system. If you delete all your cookies at some point, please note that the opt-out cookie will also be lost and may need to be renewed.
Please note that the list below is a list of opt-out options, which sometimes also includes trackers used by our partners that are not necessarily used on the website:

• Browser add-on for disabling Google Analytics
• Disable the DoubleClick cookie
• Disable Quandcast targeting
• Disable AddThis targeting
• Opt-out for IntelliAd targeting
• Opt-out for Bookatable

A good way to configure a large number of cookies can be found at youronlinechoices.com or at optout.aboutads.info
or install the browser extension Ghostery.

Applicable law and place of jurisdiction

This privacy policy and the contracts concluded on the basis of or in connection with this privacy policy are subject to Swiss law, unless the law of another state is mandatorily applicable. The place of jurisdiction is the registered office of Hotel Balm, unless another place of jurisdiction is mandatorily specified.

Final provisions

Should individual parts of this privacy policy be invalid, this shall not affect the validity of the remaining privacy policy. The further development of our website and offers or changes in legal or official requirements may make it necessary to amend this privacy policy. The current privacy policy is published on our website.

This page was last changed on 31.08.2023. If you have any questions or comments about our legal information or data protection, please contact us at info@balm.ch.

Data processing in connection with your stay

 

Data processing for the fulfilment of legal reporting obligations
Upon arrival at our accommodation, we may require the following details from you and your companions:
- first and last name
- postal address
- date of birth
- place of birth
- nationality
- official identification document
- arrival and departure date, number of nights
- name of the accommodation, average price per night
- number of adults and children
We collect this information in order to fulfil legal reporting obligations, which arise in particular from hospitality or police law. Insofar as we are obliged to do so under the applicable regulations, we pass this information on to the competent police authority.
Our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in complying with the legal requirements.

Recording of services used
If you use additional services during your stay, the service provided and the time at which it was used are recorded by us for billing purposes. The processing of this data is necessary for the performance of the contract with us within the meaning of Art. 6 para. 1 lit. b GDPR.