Privacy policy

Important legal information

Please read the following privacy policy carefully before proceeding. Persons who log on to the www.balm.ch website signify their agreement to the following conditions.Hotel Balm, Balmstrasse 3, 6045 Meggen (hereinafter also referred to as "we"), is the operator of the www.balm.ch website (hereinafter also referred to as "Technology") and is therefore responsible for the collection, processing and use of your personal data.Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate security with organizational and technical measures. We also train our employees.If we commission third parties to process personal data, the third party is carefully selected and must take appropriate security measures to guarantee the confidentiality and security of your personal data.

Responsible for data protection:

Hotel Balm
Represented by Mr. Beat Stofer

Balmstrasse 3, 6045 Meggen
info@balm.ch

General

All personal data collected in the course of registration or created during use and protected by the DSG or DSGVO will be used exclusively for the purpose of fulfilling the contract, unless, in particular in accordance with this privacy policy, your express consent to a use beyond this or the applicable law allows it.

Our employees are obliged to treat personal data confidentially.

Scope and purpose of the collection, processing and use of personal data

What personal data we collect

We may collect from you master data (if applicable, company name, name, address, e-mail, etc.), personal data about the services you have purchased, your payment transaction data, your online preferences and your customer feedback. We use this Personal Data to communicate with you, to enter into and conduct business with you, to operate technology, for billing, market research and marketing, such as to analyze our customer base or to contact you by mail, email or text messages.

We may collect personal information about your creditworthiness to protect us from non-payment.

Next, your browsing and usage data is collected. This is, for example, the IP address, the information with which device, browser and browser version you have visited the technology and when, which operating system you are using, from which website or app. you have accessed our technology via a link, and which elements of the technology you use and how. This personal data is stored together with the IP address of your access device. They are used to display and optimize our technology correctly, to protect against attacks or other infringements, and to personalize the technology for you.

When visiting www.balm.ch

When you visit our website, our servers temporarily store every access in a log file. The following user and device data as well as personal data are collected without your intervention and stored by our hoster (ISP - Internet Service Provider):

- the IP address of the requesting computer

- the date and time of access

- the name and URL of the file accessed

- the website from which the access was made

- the operating system of your computer and the browser you are using

- the country from which you accessed the site and the language settings of your browser.

The collection and processing of this data is done for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis and to enable the optimization of our Internet offering, as well as for internal statistical purposes. This is our legitimate interest in data processing. The IP address is used in particular to record the country of residence of the website visitor. Furthermore, the IP address is evaluated for statistical purposes in the event of attacks on the network infrastructure of www.balm.ch. In addition, when visiting our technology, we use so-called pixels and cookies to display personalized advertising and to use web analysis services.

When using our contact forms

You have the option of using a contact form to get in touch with us. The entry of the following personal data is mandatory:

- Salutation

- First and last name

- Address (street, house number, city, postal code)

- Telephone number

- E-mail address

We will mark (*) the mandatory entries. Failure to provide this information may hinder the provision of our services. The provision of personal data in other fields is voluntary. You can inform us at any time that you no longer wish these voluntarily provided personal data to be processed (see heading "Your rights"). Providing other information is optional and does not affect the use of our technology.

We use this data only to be able to answer your contact request in the best possible and personalized way. You can inform us at any time that you no longer wish to have this voluntarily provided personal data processed (see heading "Your rights").

Use of your data for advertising purposes

Creation of pseudonymized usage profiles

In order to enable personalized marketing in social networks, we use so-called remarketing pixels on the technology. If you have an account with a social network included via this and are logged in there at the time of the page visit, this pixel links the page visit to your account. You can make further settings for advertising in the respective social networks in your user profile. We use re-targeting technologies. This involves analyzing your user behavior on our technology in order to subsequently offer you advertising tailored to your individual needs on partner websites as well. Your user behavior is recorded pseudonymously. Most re-targeting technologies work with cookies. You can prevent re-targeting at any time by rejecting or switching off the relevant cookies in the menu bar of your web browser. In addition, you can request an opt-out for the aforementioned additional advertising and re-targeting tools via the Digital Advertising Alliance website at optout.aboutads.info. The following remarketing pixels are used on our technology:

Facebook Pixel

To enable personalized marketing in social networks, we integrate so-called remarketing pixels from Facebook. If you have a Facebook account and are logged in at the time of the page visit, this pixel links the page visit with your account.

The data generated in the process is transferred to Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA and processed there.

This allows the behavior of page visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

You can find more information about protecting your privacy in Facebook's privacy notices.

You can also disable the Custom Audiences remarketing feature in the Ads Settings section. To do this, you must be logged in to Facebook.

Adwords and Doubleclick

We use Google AdWords Remarketing and Doubleclick by Google, services of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047), to serve ads based on the use of previously visited websites. Google uses the so-called DoubleClick cookie for this purpose, which enables your browser to be recognized when you visit other websites. The information generated by the cookie about your visit to this technology (including your IP address) will be transmitted to and stored by Google on servers in the United States (for more information about transfers of personal data to the United States, see "Transfer of personal data abroad" below). Google will use this information for the purpose of evaluating your use of the technology in relation to the advertisements to be displayed, compiling reports on website activity and advertisements for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. However, Google will not associate your IP address with any other data held by Google.

Google Tag Manager

To manage the services for usage-based advertising, we also use the Google Tag Manager. The Tool Tag Manager itself is a cookie-less domain and does not collect any personal data. Rather, the tool triggers other tags, which in turn may collect data (for this, see above). If you have made a deactivation on domain or cookie level, this remains for all tracking tags that are implemented with the Google Tag Manager.

Disclosure of data to third parties

We pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and Hotel Balm Meggen (e.g. collection agencies, authorities or lawyers). We share your data with third parties to the extent necessary in the context of using the technology to provide the services you request (e.g. outsourcing partners; hosters; companies with whom we offer the offers on our technology (e.g. for bookings, rent, purchase, etc.); companies that advertise on our behalf) and to analyze your user behavior.

We provide sufficient contractual guarantees in the case of transfer to third parties that such a third party will use the personal data in accordance with the law and exclusively in our interest.

Where the Technology contains links to third party websites, Hotel Balm has no control over the collection, processing, storage or use of personal data by the third party once you have clicked on these links and accepts no responsibility for this.

Transfer of personal data abroad

Hotel Balm is entitled to transfer your personal data also to third companies (contracted service providers) abroad, if this is necessary for the data processing described in this privacy policy. These are obligated to data protection to the same extent as we ourselves. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we will ensure by contract that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

For the sake of completeness, we would like to point out for users who are resident or domiciled in Switzerland that there are monitoring measures in place in the USA by US authorities, which generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, limitation or exception based on the objective pursued and without any objective criterion that would make it possible to limit the access of the US authorities to the data and their subsequent use to very specific, strictly limited purposes that are capable of justifying the intrusion associated both with the access to this data and with its use.

In addition, we would like to point out that in the USA there are no legal remedies available to data subjects from Switzerland that allow them to obtain access to the data relating to them and to have it corrected or deleted, or that there is no effective judicial legal protection against general access rights of US authorities. We explicitly draw the attention of the data subject to this legal and factual situation so that he or she can make an appropriately informed decision to consent to the use of his or her data. We would like to point out to users residing in a member state of the EU that, from the perspective of the European Union, the USA does not have a sufficient level of data protection - among other things, due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google, Facebook or Twitter ) are based in the USA, we will ensure through contractual arrangements with these companies that your data is protected with our partners with an appropriate level.

Data security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. You should always keep your information confidential and close the browser window when you have finished communicating with us, especially if you share a computer with others. We also take internal company data protection very seriously. Our employees and the service companies we commission have been obligated by us to maintain confidentiality and to comply with the provisions of data protection law.

Cookies

We use cookies in our technology. Cookies help in many aspects to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.

Session cookies are used to uniquely assign information stored on the server side during a specific access to our website (e.g. in the online store) to you or your Internet browser each time you access it (e.g. so that the contents of your shopping cart are not lost). Session cookies are deleted after closing your internet browser. Permanent cookies are used to save your preferences (e.g. preferred language) over several independent accesses to our website, i.e. even after closing your Internet browser, or to enable an automatic login. Permanent cookies are deleted according to the settings of your Internet browser (e.g. one month after your last visit). By using our website, but also the corresponding functions (e.g. language selection or autologin), you consent to the use of permanent cookies.
Cookies do not damage your computer's hard drive, nor do they transmit users' personal data to us. We use cookies, for example, to better tailor the information, offers and advertising displayed to you to your individual interests. Their use does not result in us obtaining any new personal data about you as an online visitor. Most Internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. Deactivating cookies may mean that you cannot use all the functions of our website.

Tracking tools

On our website we use so-called tracking tools. These tracking tools are used to monitor your surfing behavior on our website. This observation is carried out for the purpose of demand-oriented design and continuous optimization of our website. In this context, pseudonymized usage profiles are created and small text files stored on your computer ("cookies") are used.

Third-party contractors may also use permanent cookies, pixel tags or similar technologies for this purpose. The third party contractor does not receive any personal data from us, but may track your use of our website, combine this information with data from other websites you have visited that are also tracked by the third party contractor, and use this knowledge for its own purposes (e.g., controlling advertising). The processing of your personal data by the third-party contractor will then be the responsibility of the service provider in accordance with its privacy policy.

The following tracking tools are used:

Google Analytics

Google Analytics is a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047). We use Google Analytics on our website in order to be able to create anonymized evaluations of website usage. For this purpose, a cookie is set and the log data of the session is sent to Google.

Social media plug-ins

The social media plug-ins described below are used on the website. The plug-ins are deactivated by default on our website whenever possible and therefore do not send any data. You can activate the plugins by clicking on the corresponding social media button. If these plugins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you call up one of our websites. The content of the plugin is transmitted by the social network directly to your browser, which then integrates it into the website. The plugins can be deactivated again with one click.

TrustYou

On our website we use the social media plugin from TrustYou Munich Center of Technology, Agnes-Pockels-Bogen 1, 80992 Munich. Trust You is a service that collects reviews of hotels and processes them into reports. We use data from Trust You to offer our visitors an independent judgment of the service.

TripAdvisor

On our website we use the social media plugin of TripAdvisor Inc, 400 1st Avenue, Needham, MA 02494 USA. TripAdvisor is an online company in the travel industry that collects reviews from its users about tourist offers, and combines them with booking recommendations. We use Tripadvisor's widget to neutrally display customer opinions about us. TripAdvisor will place a cookie on your computer when you visit a page with the widget. TripAdvisor privacy policy

Google Maps

On certain pages you will find maps embedded from Google Maps. Google Maps is a product of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (registration number: 368047). The maps are displayed by means of I-frame. This means that a third-party website is accessed in that area of the website. The data processing in this I-frame is beyond our control. Google will associate the access with your Google account. Google Maps will write a cookie as soon as the page is loaded. If you wish to prevent this behavior, you can disable the activation of Google cookies for your browser using the links given under "Possibility to Opt-Out/Opt-In".

Automated decision making / profiling

As a matter of principle, we (or third parties commissioned by us) do not make any automated decisions that affect your personal data or have legal effects on you or significantly affect you in a similar way.

Legal basis for processing

The legal bases for processing of personal data by us are generally Article 13(2)(a) DSG (processing directly related to the conclusion or performance of a contract; corresponds to Article 6(1)(b) EU GDPR) and Article 13(1) DSG (consent of the data subject or obligation to process by law; corresponds to Article 6(1)(a) EU GDPR). In cases where we wish to refuse to enter into contracts with data subjects in the future due to misuse, non-payment or similar legitimate reasons, we reserve the right, based on Article 13(1) DSG (corresponds to Article 6(1)(f) EU GDPR), to retain the surname, first name, address and e-mail address of a data subject as well as the personal data relating to the circumstances of the case in question for our own interest. Processing of your personal data by other group companies is also based on Article 13 (1) DSG (corresponds to Article 6 (1) letter f EU DSGVO).

Your rights

Upon request, we will provide any data subject with information as to whether and, if so, what personal data about him or her is being processed (right to confirmation, right to information). Upon your request

- we will partially or completely refrain from processing personal data (right to withdraw your consent to the processing of personal data that is not absolutely necessary; right to be forgotten). We will also notify third parties to whom we have previously disclosed your personal data of your request to be forgotten.

- we correct the relevant personal data (right to rectification)

- we restrict the processing of the relevant personal data (right to restriction of processing; in this case we will only store your personal data or use it to protect our legal rights or the rights of another person).

- you will receive the personal data in question in a structured, common and machine-readable format (right to data portability).

To make such a request to exercise a right described in this section, for example, if you no longer wish to receive email newsletters from us or wish to delete your account, use the appropriate feature on our website or contact our Privacy Officer or a staff member as indicated at the beginning of this Privacy Policy. If we do not honor a request, we will inform you of the reasons why. For example, we may legally refuse to delete your personal data if it is still needed for the original purposes (for example, if you still receive a service from us), if the processing is based on a compelling legal basis (for example, legal accounting requirements), or if we have an overriding interest of our own (such as in the case of litigation against the data subject). If we assert an overriding interest against you in the processing of personal data, you have the right to object to the processing nevertheless, provided that a different balance of interests results from your particular situation compared to other data subjects (right to object). This could be the case, for example, if you are a public interest person or the processing creates a risk that you will be harmed by third parties. If you are not satisfied with our response to your request, you have the right to lodge a complaint with a competent supervisory authority, for example in your country of residence or at the registered office of Hotel Balm (right to lodge a complaint).

Retention of data

We process personal data only as long as necessary for the respective purpose or as required by law. If you have set up an account with us, we will retain the master data provided for an unlimited period. However, you can request the deletion of the account at any time (see heading "Your rights"). We will delete the master data unless we are required by law to retain it. In the case of an order without an account, your master data will be deleted after the expiry of the warranty period or the end of the service to the extent that we are not obliged by law to retain it. This deletion can take place immediately or as part of periodic deletion runs.

Contractual data, which may also include personal data, will be retained by us until expiry of the statutory retention obligation of 10 years. Obligations to retain data result, among other things, from accounting and tax law regulations as well as the obligation to retain electronic communication. If we no longer need this data to perform services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes..
If we wish to refuse further business contact with a data subject due to abuse, non-payment or other legitimate reasons, we will retain the relevant personal data for five years, or ten years in the event of a repeat offence.

Possibility to opt-out/opt-in

If you do not agree that we evaluate your usage data, you can switch this off. You can switch off tracking by placing a so-called "opt-out cookie" on your system. If you delete all your cookies, please note that the opt-out cookie will also be lost and may need to be renewed.

Please note that the list below is a list of opt-out options, which sometimes also includes trackers used by our partners that are not necessarily used on the website:

- Browser Add on to disable Google Analytics.

- Disable the DoubleClick cookie

- Switch off Quandcast targeting

- Switch off AddThis targeting

- Opt-out for IntelliAd targeting

- Opt-Out for Bookatable

A good way to configure a large number of cookies can be found at youronlinechoices.com or at optout.aboutads.info

or install the browser extension Ghostery, which is available for every common browser.

Applicable law and place of jurisdiction

This Privacy Policy and the contracts concluded on the basis of or in connection with this Privacy Policy are governed by Swiss law, unless the law of another country is mandatorily applicable. The place of jurisdiction is at the registered office of Hotel Balm, unless another place of jurisdiction is mandatorily specified.

Final provisions

Should individual parts of this data protection declaration be invalid, this shall not affect the validity of the rest of the data protection declaration. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration is published on our website.

This page was last modified on 31.08.2023. If you have any questions or comments about our legal notices or data protection, please contact us at info@balm.ch.

Data processing in connection with your stay

Data processing for the fulfillment of legal registration obligations

Upon arrival at our accommodations, we may require the following information from you and your companions:

- First and last name

- postal address

- Date of birth

- Place of birth

- Nationality

- Official identity card

- Arrival and departure dates, number of nights

- Name of accommodation, average price per night

- Number of adults and children

We collect this information in order to fulfill legal reporting obligations, which arise in particular from the hospitality industry or police law. As far as we are obliged to do so according to the applicable regulations, we forward this information to the responsible police authority.

Our legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO lies in the fulfillment of the legal requirements.

Recording of services received

If you purchase additional services during your stay, we will record the subject of the service and the time of the service purchase for billing purposes. The processing of this data is necessary in the sense of Art. 6 para. 1 lit. b DSGVO for the processing of the contract with us.