Privacy Policy

NOTICE ON THE PROCESSING OF PERSONAL DATA CARRIED OUT BY HOTEL WALTER AU LAC SA, LUGANO

With this data protection notice, the company Hotel Walter au Lac SA, Lugano, which manages the homonymous hotel and the website www.walteraulac.ch, explains to its (potential) customers and users of its website, how it processes their personal data, in accordance with the principles prescribed by the regulations applicable in the individual case, in particular with the Federal Data Protection Act of 25.09.2020 (DPA), in force as of 1.09.2023, and the European Regulation No. 2016/679 (General Data Protection Regulation or GDPR). 

Please read this Policy carefully before using the website or other services offered by Hotel Walter au Lac SA and providing personal data to it.

Hotel Walter au Lac SA may occasionally update this Policy and, therefore, we recommend that you visit this page regularly to learn about any changes.

In this Notice, personal data means any information that identifies or can reasonably be used to identify a natural person concerned; processing means any operation involving personal data, namely the collection, recording, storage, use, modification, communication, communication, archiving, deletion, or destruction of data.

If you provide personal data of other people (such as family members, colleagues, etc.), please ensure that the respective people are aware of this Policy and only provide their personal data if you have been authorized to do so.

WHO WE ARE - DATA CONTROLLER

The Data Controller of your personal data is the Company Hotel Walter au Lac SA (CHE-102,901,788), Piazza Riziero Rezzonico 7, CH - 6900 Lugano, tel. +41 091 922 74 25, hotel@walteraulac.ch (hereinafter, the Data Controller or the Company or Hotel Walter), to which you may address any questions about the processing of your personal data or any other matter relating to the protection of your personal data. 

The updated list of Data Processors, i.e., those who process personal data on behalf of the Data Controller, is kept at the Company's registered office. 

OBJECT AND PURPOSE OF DATA PROCESSING 

In order to be able to provide and bill for its services, the Company needs to have certain personal data of the users of this website and hotel customers. In particular, the personal data that the Company processes include:

  • Your first and last name and contact information (e.g., address, phone number, e-mail address, and the like), ev. information regarding the company you are employed from, information regarding family ties between you and other customers, as well as other basic information;
  • other identifying and background information voluntarily provided or collected as part of the customer registration process, e.g. preferences, any dietary intolerances or need for special/extra services;
  • financial information, such as the details of the credit/debit card used for the reservation or payment of your stay;
  • Information provided for the purpose of participation in meetings, seminars, or events;

The Company collects and records such information when interacting with its (potential) customers, such as with the contact form on the website, when registering at the hotel, during telephone/email and similar contacts between the Company's employees and (potential) customers, and when attending a meeting, seminar or other events.

The processing of personal data is not subject to the consent of the data subject insofar as it is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual measures taken at the request of the data subject or to fulfil a legal obligation to which the data controller is subject (e.g., announcement arrivals/departures to city police authorities).

WEBSITE

When you visit this website, the Company automatically collects and stores log data and device-specific information for a limited period, including information on website usage, IP address, dates and times of access, information on hardware and software used for access, and other similar information. The Company processes such data to the extent necessary for the operation, maintenance, and improvement of the website.

This website uses Google Analytics, a service of Google LLC, USA, which monitors and records how the website is used. Google Analytics works by placing small text files, so-called cookies, on the device with which you navigate. Cookies records information about the number of visitors to the site, the frequency of visits to the Internet site about their duration. This information is processed in aggregate and anonymous form. Google Analytics integration is in principle done by anonymizing IP addresses. Google is subject to both the Swiss-US Privacy Shield and the EU-US Privacy Shield.

You can refuse the use of cookies by selecting the appropriate setting on your internet browser, as well as through the appropriate banner that appears on your screen when you access the website. Please note, however, that this may affect the functionality of the website.

To obtain further information about the purposes and methods of use of cookies installed by this website, please see below under "Cookie Declaration".

TO WHOM THE DATA ARE TRANSMITTED (DATA PROCESSORS) 

In order to ensure the provision of its services, in some circumstances the Company may transmit your personal data to trusted third parties, who contractually commit to the Company to ensure the same security standards observed by the Company. Such parties may be suppliers to whom the Company has outsourced certain support services such as, for example, IT, marketing, event organization, etc. 

Any data transmissions occur only to the extent of express consent or in order to comply with legal and regulatory requirements.

DATA RETENTION TIME 

The Company retains personal data for as long as necessary to achieve the purpose for which it was collected and as long as there is a legitimate private or public interest in retaining it, such as for contract performance, in order to enforce its rights in court, or for archiving and information security purposes. The Company also retains its customers' personal data if and as long as required by legal obligation, but no longer than 10 years after termination of the contractual relationship. 

RIGHTS OF THE PERSON CONCERNED 

In relation to their personal data, customers have the right to obtain confirmation from the Company that processing is taking place or not.

In connection with the processing of personal data, insofar as this is provided for by the concretely applicable regulations, customers have the following rights:

  • Right of access to their personal data, including information about the purposes pursued by the processing, the categories of data collected, and the persons responsible for processing them;
  • Right to update, rectify and supplement processed personal data;
  • Right to restrict the company's personal data processing activities, as well as deletion of such data in the event of opposition to processing, withdrawal of consent, unlawful processing, or if the data are no longer necessary for the purposes for which they were collected and there is no obligation to retain them;
  • right to file a petition, in accordance with applicable regulations, to the competent supervisory authority (in Switzerland the Federal Data Protection and Information Commissioner);
  • Right to the release of certain personal data for the purpose of transfer to another entity;

If the Client decides to revoke his/her consent, the Company may still process the personal data collected up to that point, to the extent required or permitted by law.

HOW PERSONAL DATA ARE STORED (SECURITY MEASURES)

Customers' personal data are processed by suitable and proportionate technical and organizational means in paper, electronic and/or telematic form, in such a way as to ensure their confidentiality. Specific security measures are observed to prevent loss, unlawful, unauthorized or incorrect use of processed personal data. 

LINKS TO OTHER WEBSITES

This website may contain links or references to other sites. Please be aware that the Company does not control the content of such websites and the processing of personal data carried out by them.


Cookie Declaration

If you have any questions or comments about our disclaimer or about data protection, please contact us.