Privacy Policy

Achesa Management AG (hereinafter also referred to as “we,” “us”) collects and processes personal data relating to you or other persons (so-called “third parties”). We use the term ‘data’ here as synonymous with “personal data” or “personally identifiable information.” In this privacy policy, we describe what we do with your data when you use our websites, one of our project or event websites, or other websites belonging to us (each including all sub-sites) (hereinafter collectively referred to as “websites”), purchase or use our services or products, communicate with us in the context of contract processing, or otherwise have dealings with us. In addition, we may inform you separately about the processing of your data (e.g., in forms, contract terms, or additional privacy policies). If you provide us with data about other persons (e.g., family members, work colleagues), we assume that you are authorized to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this privacy policy.
Your trust is important to us, which is why we take data protection seriously and ensure appropriate security. We naturally comply with the legal provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (FADP), the Telecommunications Act (TCA), and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).
To ensure that you are aware of what personal data we collect from you and for what purposes we use it, please take note of the following information:

1. Data processing in connection with our website:

1.1 Accessing our websites:

achesa Management AG operates the following businesses and websites:

www.achesahomes.ch/en

www.welcomehotels.ch/allegra-lodge/en/

www.hotel-welcomeinn.ch/en/

www.tschadun.ch/en

www.restaurant-mercato.ch/en

www.pizzeria-giardino.ch/en

www.achesaliving.ch

and is therefore responsible for the collection, processing, and use of your personal data and for ensuring that data processing complies with applicable data protection law.

When you visit one of our websites, our servers temporarily store each access in a log file. As is the case with every connection to a web server, the following technical data is collected without your intervention and stored by us until it is automatically deleted after 24 months at the latest:

• the IP address of the requesting computer
• the name of the owner of the IP address range (usually your Internet access provider)
• the date and time of access
• the website from which access was made (referrer URL), if applicable, with the search term used
• search term
• the name and URL of the file accessed
• the status code (e.g., error message)
• the operating system of your computer
• the browser you are using (type, version, and language)
• the transmission protocol used (e.g., HTTP/1.1) and
• your user name from a registration/authentication.

This data is collected and processed for the purpose of enabling the use of our website (connection establishment), ensuring long-term system security and stability, enabling the optimization of our website, and for internal statistical purposes. This constitutes our legitimate interest in data processing within the meaning of Art. 6 (1) lit. f GDPR and DSG.

The IP address is also evaluated together with the other data in the event of attacks on the network infrastructure or other unauthorized or abusive website use for the purpose of investigation and defense and, if necessary, used in criminal proceedings for identification and civil and criminal proceedings against the users concerned. This constitutes our legitimate interest in data processing within the meaning of Art. 6 (1) lit. f GDPR and DSG.

The content of our website has been carefully created and checked several times, but we assume no liability for the topicality, correctness, and completeness of the information provided. Claims for damages due to the use or non-use of the information or due to the use of incorrect or incomplete information are excluded. All offers are subject to change and non-binding. We reserve the right to change, supplement, or delete the offer or parts thereof without prior notice, or to temporarily or permanently discontinue publication of the website.

The content and programming of our website are protected by copyright and ancillary copyright. Any reproduction—even in part—and public reproduction, in particular the copying of texts, graphics, and photos, is prohibited without our prior written consent.

1.2 Use of our contact form:

You have the option of using a contact form to get in touch with us. To do so, we require the following information (*mandatory):

• First and last name*
• Email address*
• Message including subject*

We use this data and any data you voluntarily provide solely to respond to your contact request in the best possible and personalized manner. The processing of this data is therefore necessary within the meaning of Art. 6 (1) lit. b GDPR for the implementation of pre-contractual measures or is in our legitimate interest pursuant to Art. 6 (1) lit. f GDPR and DSG.

1.3 Use of the DialogShift chat application on our websites:

Our website uses the chat application from DialogShift GmbH, Rheinsberger Str. 76/77, 10115 Berlin. This application processes and stores data for the purpose of web analysis, operating the chat application, and responding to inquiries. To operate the chat function, the chat texts are stored and a cookie with a unique ID is set – this is used to recognize you as a customer. A cookie is a small text file that is stored locally in the cache on your device. With the help of this cookie, our application recognizes the device and can retrieve past chat logs. This cookie is stored for 90 days since last use. You can disable the storage of cookies in your browser settings. However, the chat function cannot be used without cookies. The possible disclosure of, for example, your name, email address, or telephone number is voluntary and with your consent to temporarily use and store this data for the purpose of contacting you until the end of the contact. This personal data is deleted after 90 days. The legal basis for data processing is Art. 6 (1) lit. F GDPR and DSG based on our legitimate interest in effective customer service, statistical analysis of usage behavior, and optimization of our offers.

DialogShift provides further information on the collection and use of data, as well as your rights and options for protecting your privacy, at https://www.dialogshift.com/de/dsvgo.

1.4 Subscription to our newsletter:

You have the option of subscribing to our newsletter on our website. Registration is required for this. The following data must be provided during registration (*mandatory):

• Title*
• First and last name*
• Email address*

The above data is necessary for data processing. We process this data exclusively to personalize the information and offers sent to you and to better tailor them to your interests. By registering, you give us your consent to process the data provided for the regular dispatch of the newsletter to the address you have provided and for the statistical evaluation of usage behavior and the optimization of the newsletter. This consent constitutes our legal basis for processing your email address within the meaning of Art. 6 (1) lit. a GDPR and DSG. We are entitled to commission third parties with the technical handling of advertising measures and are entitled to pass on your data for this purpose.

At the end of each newsletter, there is a link that you can use to unsubscribe from the newsletter at any time. After unsubscribing, your personal data will be deleted. Further processing will only take place in anonymized form for the purpose of optimizing our newsletter.

1.5 Room booking on one of our websites, by correspondence, or by telephone call:

If you make bookings either via one of our websites, by correspondence (email, chat, or letter), or by telephone call, we require the following data (*mandatory) to process the contract:

• Title*
• First and last name*
• Credit card information*
• Email address*
• Phone number*

We will only use this data and other information you voluntarily provide (e.g., language, postal address, expected arrival time, motor vehicle license plate number, preferences, comments) to process the contract, unless otherwise stated in this privacy policy or you have given your separate consent. We will process the data by name in order to record your booking as requested, provide the booked services, contact you in case of ambiguities or problems, and ensure correct payment. The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 (1) lit. b GDPR and DSG.

We use the services of Mews System B.V., headquartered in Amsterdam, to process online bookings. Further information on how Mews processes personal data can be found here (https://app.mews.com/Platform/Document/PrivacyPolicy?language=de).

We also use the services of Revinate Solutions, based in Amsterdam. Further information on how Revinate Solutions processes personal data can be found here

https://www.revinate.com/privacy/

In fulfilling the legal requirements, our legitimate interest lies within the meaning of Art. 6 (1) (f) GDPR and DSG.

If you book a room as part of a company agreement, you agree that your data may be passed on to this company for statistical purposes. This includes the number of nights and prices and is done anonymously.

1.6 Registration for our newsletter in connection with a booking:

In connection with a booking, you have the option of subscribing to our newsletter separately. By registering in connection with a booking, you give us your consent to process the above-mentioned data for the regular sending of the newsletter to the address you have provided and for the statistical evaluation of usage behavior and the optimization of the newsletter.

We process this data exclusively in order to personalize the information and offers sent to you and to better tailor them to your interests. This consent constitutes our legal basis for processing your email address within the meaning of Art. 6 (1) (a) GDPR and DSG. We are entitled to commission third parties with the technical implementation of advertising measures and are entitled to pass on your data for this purpose (see section 1.4). At the end of each newsletter, there is a link that you can use to unsubscribe from the newsletter at any time. When unsubscribing, you can voluntarily tell us the reason for unsubscribing. After unsubscribing, your personal data will be deleted. Further processing will only take place in anonymized form for the purpose of optimizing our newsletter.

1.7 Contact via email:

On our website, you have the option of contacting us and sending us an email. For this purpose, we must collect your email address. We use your email address and other data you voluntarily provide (e.g., first and last name) only to respond to your contact request in the best possible and personalized manner.

The processing of this data is therefore necessary within the meaning of Art. 6 (1) lit. b GDPR and DSG for the implementation of (pre-)contractual measures or is in our legitimate interest pursuant to Art. 6 (1) lit. f GDPR and DSG. The use of email is insecure and we assume that you are aware of this and agree to it.

1.8 Contact by telephone:

On our website, you have the option of contacting us by telephone. We use your telephone number and other data you voluntarily provide (e.g., first and last name, email address) only to respond to your contact request in the best possible and personalized manner. The processing of this data is therefore necessary within the meaning of Art. 6 (1) (b) GDPR and DSG for the implementation of (pre-)contractual measures or is in our legitimate interest in accordance with Art. 6 (1) (f) GDPR and DSG.

1.9 Ordering and purchasing event tickets and vouchers:

On our website, you have the option of placing orders for certain services or vouchers online. In this context, the following data is collected (* mandatory):

• Title*
• First and last name of the purchaser*
• First and last name of the beneficiary*
• Credit card information*
• Email address*

We will only use this data and other information you voluntarily provide (e.g., postal address, telephone number, personal dedication, video greeting, etc.) for the purpose of processing the contract, unless otherwise stated in this privacy policy or you have not given your separate consent. By making a purchase, the buyer confirms that they have consented to the use of the third party’s data and is responsible for its accuracy. We will process the data by name in order to record your purchase as requested, provide the services, contact you in case of any uncertainties or problems, and ensure correct payment. The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 (1) (b) GDPR and DSG.

We use the services of incert eTourismus, headquartered in Linz, to process online purchases. Further information on how incert eTourismus processes personal data can be found here https://www.incert.at/en/data-protection/.

Purchaser data is anonymized after 14 days. The retention period for purchase or invoice data is 10 years.

1.10 Restaurant reservations:

Table reservations received by us by telephone, in person, or in writing are entered into a reservation book (analog or digital). You also have the option of reserving a table online on our website. In this context, the following data is collected (* mandatory):

• First name and last name*
• Email
• Phone number*

We use the services of TheFork Swiss SA, Rue Muzy 8, 1207 Geneva, Switzerland, to process table reservations. Further information on how TheFork Swiss SA processes personal data can be found here

https://www.thefork.ch/de/legal#datenschutzerklarung-und-cookie-richtlinien.

This data is collected and processed for the purpose of reserving a table for a specific number of people. The legal basis for data processing for this purpose is the implementation of pre-contractual measures and the fulfillment of a contract in accordance with Art. 6 (1) (b) GDPR and DSG.

If you make a reservation by phone, we will enter the same data into TheFork reservation system for you so that you can receive a confirmation by text message or email. If you do not agree to this, please let us know when making your reservation when we ask you for your consent again.

1.11 Applying for a job vacancy:

You can apply for a job vacancy on our website or send us a spontaneous application by email. To do so, you must submit a complete application. The following data must be provided in the application (* mandatory):

• Title*
• First and last name*
• Postal address*
• Work permit* (if necessary)
• Marital status*
• Date of birth*
• Email address*
• Phone number*
• Cover letter, complete resume*
• Work references*

This data is used to process the application and any subsequent employment. Unless you explicitly consent to further processing, the data will be stored in Outlook for 6 months after completion of the application process and then deleted, unless you have been hired.

The legal basis for data processing is therefore the implementation of pre-contractual measures and our legitimate interest in accordance with Art. 6 (1) (b) and (f) GDPR and DSG. For further data processing, the legal basis is the consent you have given in accordance with Art. 6 (1) (a) GDPR and DSG.

1.12 Cookies:

Cookies help in many ways to make your visit to our website easier, more enjoyable, and more meaningful. Cookies are information files that your web browser automatically stores on your computer’s hard drive when you visit our website. We use cookies, for example, to temporarily store your selected services and entries when filling out a form on the website so that you do not have to repeat the entry when calling up another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website, so that you do not have to log in again when calling up another subpage. Most Internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. The following pages explain how you can configure the processing of cookies in the most common browsers:

• Microsoft Windows Internet Explorer
• Microsoft Windows Internet Explorer Mobile
• Mozilla Firefox
• Google Chrome for desktop
• Google Chrome for mobile
• Apple Safari for desktop
• Apple Safari for mobile

Disabling cookies may mean that you cannot use all the features of our website.

1.13 IP anonymization:

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. We would like to point out that on this website, Google Analytics has been extended by the code “_anonymizeIp();” to ensure anonymous collection of IP addresses. This means that IP addresses are truncated before being processed, thereby ruling out any possibility of personal references. If the data collected about you contains any personal references, these will be immediately excluded and the personal data will be deleted immediately.

1.14 Recipient:

The recipient of the data is:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the data processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities may access the data stored by Google.

1.15 Borlabs Cookie:

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent. Borlabs Cookie does not process any personal data. The borlabs-cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

1.16 Tracking tools and plug-ins:

1. General information:

We use the web analysis service Google Analytics for the purpose of designing our website in line with user needs and continuously optimizing it. In this context, pseudonymized usage profiles are created and small text files stored on your computer (“cookies”) are used. The information generated by the cookie about your use of this website is transmitted to the servers of the providers of these services, stored there, and processed for us. In addition to the data listed in section 1, we may also receive the following information:

• Navigation path taken by a visitor on the site
• Length of stay on the website or subpage
• The subpage from which the website is exited
• The country, region, or city from which access is made
• End device (type, version, color depth, resolution, width, and height of the browser window) and returning or new visitor.

The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purposes of market research and the design of this website in line with user needs. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of the website operator.

1. Google Analytics and Re-Marketing:

This website uses Google Analytics and Google Re-Marketing. These are services provided by Google Inc. (“Google”). Google uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The info generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. The IP address is then truncated by Google by the last three digits, so that a clear assignment of the IP address is no longer possible. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Third-party vendors, including Google, place ads on websites on the Internet. Third-party vendors, including Google, use stored cookies to place ads based on a user’s previous visits to this website. Google will never associate your IP address with other data from Google. You may object to the collection and storage of data at any time with future effect. You can disable the use of cookies by Google by visiting the Google advertising opt-out page.

Alternatively, users can disable the use of cookies by third-party providers by visiting the Network Advertising Initiative opt-out page. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can object to the collection and storage of data at any time with future effect. Further information on Google’s terms and conditions can be found here.

1. YouTube:

Our website uses plugins from the Google-operated site YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR and DSG. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy .

1. Google Maps:

This website uses Google Maps to display maps and create route maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing, and use of automatically collected data and data entered by you by Google, one of its representatives, or third-party providers. The terms of use for Google Maps can be found in the Google Maps Terms of Service.

1. Social networks:

We may operate pages and other online presences (“fan pages,” “channels,” “profiles,” etc.) on social networks and other platforms operated by third parties and process the data about you described in section 1 and below. We receive this data from you and the platforms when you contact us via our online presence (e.g., when you communicate with us, comment on our content, or visit our presence). At the same time, the platform providers may analyze your use of our online presences (e.g., how you interact with us, how you use our online presences, what you view, comment on, or “like”) and process this data together with other data they have about you (e.g., information about your age and gender and other demographic information). In this way, they create profiles about you and statistics about the use of our online presences. They use this data and these profiles to display our or other advertising and other personalized content on the platform and to control behavior on the platform, but also for market and user research and to provide us and other parties with information about you and the use of our online presence. Insofar as we are jointly responsible with the provider for certain types of processing, we will conclude a corresponding contract with the provider. You can obtain information about the essential content of this contract from the provider. They also process this data for their own purposes, in particular for marketing and market research purposes (e.g., to personalize advertising) and to manage their platforms (e.g., to decide what content to show you), and act as separate controllers for this purpose.

We are entitled, but not obliged, to check content before or after its publication on our online presences, to delete content without notice and, if necessary, to report it to the provider of the platform concerned. In the event of violations of rules of decency and conduct, we may also inform the provider of the platform on which the user account in question is located to block or delete it. For further information on processing by the platform operators, please refer to the privacy policies of the respective platforms. There you can also find out in which countries your data is processed, what rights you have to information and deletion, and how you can exercise these rights or obtain further information. We currently use the following platforms:

• • Facebook:
  • https://www.facebook.com/achesagroup
  • https://www.facebook.com/achesagastro/
  • https://www.facebook.com/hotelallegralodge/
  • https://www.facebook.com/achesahomes/
  • https://www.facebook.com/hotelwelcomeinn/
  • https://www.facebook.com/GiardinoPizza/
  • Privacy policy: https://www.facebook.com/privacy/policy
  • Instagram:
  • https://www.instagram.com/achesa.group/
  • https://www.instagram.com/achesa.gastro/
  • https://www.instagram.com/achesa.hotels/
  • https://www.instagram.com/achesa.living/
  • https://www.instagram.com/pizzeriagiardinokloten/
  • Privacy policy: https://privacycenter.instagram.com/policy
  • YouTube:
  • https://www.youtube.com/@achesahotelsschweiz
  • Privacy policy: https://policies.google.com/privacy?hl=de
  • Twitter / X:
  • https://twitter.com/achesagroupCH
  • Privacy policy: https://twitter.com/de/privacy
  • LinkedIn:
  • https://www.linkedin.com/company/1441202 or
  • https://www.linkedin.com/company/achesa-hotels/
  • Privacy policy: https://de.linkedin.com/legal/privacy-policy

2.0 Storage and exchange of data with third parties

2.1 Booking platforms

If you make bookings via a third-party platform, we receive various personal information from the respective platform operator. This is usually the data listed in section 5 of this privacy policy. In addition, inquiries regarding your booking may be forwarded to us. We will process this data by name in order to record your booking as requested and to provide the booked services. The legal basis for data processing for this purpose is the fulfillment of a contract in accordance with Art. 6 para. 1 lit. b GDPR and DSG.

Finally, we may be informed by the platform operators about disputes in connection with a booking. In doing so, we may also receive data relating to the booking process, which may include a copy of the booking confirmation as proof of the actual booking. We process this data to protect and enforce our claims. This constitutes our legitimate interest within the meaning of Art. 6 (1) (f) GDPR and DSG. Please also note the data protection information provided by the respective provider.

2.2 Retention period

We only store personal data for as long as is necessary to use the above-mentioned tracking services and for further processing within the scope of our legitimate interest. We store contract data for longer, as this is required by statutory retention obligations. Retention obligations that require us to store data arise from regulations on reporting rights, accounting, and tax law.

According to these regulations, business communications, concluded contracts, and booking documents must be retained for up to 10 years. If we no longer need this data to perform services for you, the data will be deleted.

2.3 Transfer of data to third parties:

We may transfer your personal data within the group, taking into account the permissible purposes of use, to processors (e.g., for our electronic advertising in the form of newsletters) and to third parties who must be involved in providing the services you have requested, all of whom have committed themselves to us to comply with the applicable data protection standards. In the event of debt collection and the enforcement of outstanding claims, personal data will also be passed on to processors (debt collection).

We will only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship.

In addition, we pass on your data to third parties to the extent that this is necessary in the context of using the website and processing contracts (including outside the website), namely the processing of your bookings.

Finally, when you pay by credit card on the website, we pass on your credit card information to your credit card issuer and the credit card acquirer. If you choose to pay by credit card, you will be asked to enter all the necessary information. The legal basis for the transfer of data is the fulfillment of a contract in accordance with Art. 6 (1) (b) GDPR and DSG. With regard to the processing of your credit card information by these third parties, we ask you to also read the general terms and conditions and the privacy policy of your credit card issuer.

2.4 Transfer of personal data abroad

We are also entitled to transfer your personal data to third-party companies (contracted service providers) abroad for the purposes of data processing as described in this privacy policy. These companies are subject to the same data protection obligations as we are. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we will ensure contractually that the protection of your personal data corresponds to that in Switzerland or the EU at all times. We would like to point out that our data is mainly processed in Switzerland and the EU.

3. Data processing in connection with your stay

3.1 Data processing to fulfill legal reporting requirements:

Upon arrival at our hotels or serviced apartments, we require the following information from you and your companions (*mandatory):

• First and last name*
• Mailing address and state*
• Date of birth*
• Place of birth*
• Nationality*
• Official identification document and number*
• Arrival and departure date

We collect this information to comply with legal reporting requirements, which arise in particular from hospitality or police law. Insofar as we are obliged to do so under the applicable regulations, we forward this information to the relevant police authority.

3.2 Recording of services used:

If you use additional services during your stay (e.g., visits to the restaurant, hotel bar, private spa, etc.), we will record the service and the time of use for billing purposes. The processing of this data is necessary for the performance of the contract with us within the meaning of Art. 6 (1) (b) GDPR and DSG.

3.3 Security of personal data:

During their stay at one of our hotels or restaurants, each guest is responsible for the security of their own personal data. Personal data such as passports, ID cards, or medication should not be left lying around in plain sight and should ideally be locked away to ensure security.

3.4 Video surveillance:

Video cameras are installed in the public areas of our hotels, restaurants, and serviced apartments in the interest of protecting people and property, and these are marked accordingly. As a rule, the data is deleted from our internal local server after 72 hours at the latest, provided that no significant events have been detected within this period. If events affecting the safety or property of a person occur, the recording will be stored and used for evidence purposes. It may be passed on to authorities for the enforcement of rights or for criminal prosecution purposes.

4. Further information

4.1 Right to information, correction, deletion, and restriction of processing; right to data portability:

You may object to data processing at any time, especially data processing in connection with direct marketing (e.g., advertising emails). You also have the following rights:

Right to information:

You have the right to request access to your personal data stored by us at any time if we process it. This allows you to check which personal data we process about you and that we use it in accordance with the applicable data protection regulations. A fee of up to CHF 500.00 may be charged for access if the search is particularly extensive. You will receive a response to your request within 30 days.

Right to rectification:

You have the right to have inaccurate or incomplete personal data corrected and to be informed of the correction. In this case, we will inform the recipients of the data concerned of the changes made, unless this is impossible or involves a disproportionate effort.

Right to erasure:

You have the right to have your personal data erased under certain circumstances. In individual cases, the right to erasure may be excluded, e.g., in the case of statutory retention periods.

Right to restriction of processing:

Under certain conditions, you have the right to request that the processing of your sensitive personal data be restricted.

Right to data portability:

Users outside Switzerland have the right, under certain circumstances, to receive from us the personal data you have provided to us in a readable format. A fee of up to CHF 500.00 may be charged for this.

Right to lodge a complaint:

You have the right to lodge a complaint with a competent supervisory authority about the way in which your personal data is processed. If you disagree with our handling of your rights or data protection, please let us or our data protection officer (section 4.4) know. In particular, if you are located in the EEA, the United Kingdom, or Switzerland, you also have the right to complain to the data protection supervisory authority in your country. A list of authorities in the EEA can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

You can contact the UK supervisory authority here: https://ico.org.uk/global/contact-us/. You can also contact the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch/en/.

Right of withdrawal:

You have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal. We have the right to refuse further contact with you if we are not allowed to use your data.

4.2 Data security:

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

You should always treat your access data as confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others. We also take internal company data protection very seriously. Our employees and the service providers we commission are bound by us to maintain confidentiality and comply with data protection regulations. We will inform you immediately in the event of data leaks or data security breaches.

4.3 Note on data transfers to the USA:

In the event that a transfer to the USA takes place without our knowledge, we provide the following information:

For the sake of completeness, we would like to point out to users residing or based in Switzerland that US authorities have surveillance measures in place that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without differentiation, restriction, or exception based on the objective pursued and without an objective criterion that would allow the US authorities’ access to the data and its subsequent use to be limited to very specific, strictly limited purposes that would justify the interference associated with both access to and use of this data. We also point out that there are no legal remedies in the US for data subjects from Switzerland that would allow them to obtain access to data concerning them and to have it corrected or deleted, nor is there any effective judicial protection against general access rights of US authorities.

We explicitly point out this legal and factual situation to the data subjects so that they can make an informed decision about consenting to the use of their data.

We would like to point out to users residing in an EU member state that, from the perspective of the European Union, the US does not have an adequate level of data protection, among other things due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google) are based in the US, we will either ensure through contractual arrangements with these companies that your data is protected at an appropriate level by our partners.

4.4 Contact:

Unless otherwise communicated in individual cases, Achesa Management AG is responsible for the data processing described in this privacy policy in accordance with data protection law.

Our address is:

Achesa Management AG

Hamelirainstrasse 5

CH-8152 Kloten

For all questions, information, and complaints, please contact us by email: datenschutz@a-chesa.ch

4.5 Changes to the privacy policy:

This privacy policy is not part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.

This page was last amended on November 20, 2023. If you have any questions or comments about our legal notices or data protection, please contact us at datenschutz@a-chesa.ch.

Kloten, November 2023