This data privacy policy applies exclusively to the use of this website. The processing of the personal data of a data subject always takes place in line with the General Data Protection Regulation (GDPR) and in accordance with the applicable Swiss data protection provisions.

Name and address of the controller (officer responsible for processing)

The controller, within the meaning of the General Data Protection Regulation (GDPR), is:

Rebstock Luzern AG
St. Leodegarstrasse 3
CH-6006 Lucerne
+41 41 417 18 19
hotel@rebstock-luzern.ch

Recording of general data and information

This website records general data and information every time it is accessed and stores it in the server's log files:

• IP address of the contacting device
• Date and time
• URL of the site accessed
• Referrer URL
• Browser and other device information

When using this general data and information, no conclusions shall be drawn about the data subject.

Recording of personal data and information

The personal data transmitted to the controller can be seen in the relevant input masks. The personal data entered by the data subject is collected and stored exclusively for internal use by the officer responsible for processing (controller) and for our own purposes. The controller can initiate transmission of the data to one or more processors, for example, a parcel service, which also uses the personal data exclusively for internal purposes.

The controller will inform any data subject who asks for information in good time of the personal data stored about the particular data subject. Furthermore, the controller corrects or erases personal data at the request of or notice from the data subject providing this would not contravene statutory retention obligations. The erasing of data may mean that, in some circumstances, not all functions and services will be fully usable.

Cookies

The websites use cookies. Cookies are text files that are placed and stored on a computer system via an Internet browser. Through the use of cookies, the users of this website can be provided with user-friendly services that would otherwise not be possible without the placing of cookies.

The data subject can prevent cookies from being placed by our website at any time via the relevant settings on the Internet browser in use, thus permanently preventing the placing of cookies. Furthermore, cookies that have already been placed can be deleted at any time via an internet browser or other software programs. This is possible in all current Internet browsers. If the data subject deactivates the placing of cookies in the Internet browser in use, in some circumstances, not all functions of our website will be fully usable.

Disclosing data to third parties

If it is necessary for the performance of transactions and complies with the legal framework, personal data will be disclosed to third parties.

Web analysis service from Google (Google Analytics)

The purpose of Google Analytics components is to analyse the flow of visitors to our website. Google uses the data and information obtained to evaluate the use of our website in order to draw up online reports for us presenting the activities on our webpages and to provide further services associated with the use of our website.

You can find further information and Google’s applicable data protection provisions at https://policies.google.com/pr[...] and at https://marketingplatform.go[...].

Rights of the data subject

• Right to confirmation
  You have the right to obtain confirmation as to whether or not personal data concerning you is being processed.
• Right of access
  You have the right to be informed free of charge about personal data stored about you.
• Right to rectification
  You have the right to have personal data stored about you corrected.
• Right to erasure
  You have the right to obtain the erasure of personal data concerning you without undue delay.
• Right to restriction of processing
  You have the right to ask the controller to restrict processing.
• Right to data portability
  You have the right to receive personal data about you in a structured, commonly used and machine-readable format.
• Right to object
  You have the right to object at any time to the processing of personal data concerning you.
• Right to withdraw consent under data protection law
  You have the right to withdraw your consent to the processing of personal data at any time.

Data security

We have implemented numerous technical and organisational measures in order to ensure the most comprehensive protection of the personal data processed via this website. Nevertheless, as a basic rule, there may be gaps in security when transferring data on the Internet, which means that absolute protection cannot be guaranteed. For this reason, each data subject is free also to send us personal data via alternative methods, such as over the phone.

Your personal data is always transmitted in encrypted form (from and to this website). An SSL/TLS certificate from Let's Encrypt (https://letsencrypt.org) is used for this purpose.

Duration of data storage

The criterion for the duration of the storage of personal data is the respective statutory retention period. Once the retention period has expired, the relevant data will be deleted providing it is no longer necessary for the fulfilment of the contract or contract negotiations.

Publication

The data privacy policy can be modified and adapted at any time.

Published: 03. September 2019