Important legal information

Hotel Schweizerhof Luzern, Schweizerhofquai, 6002 Lucerne (hereinafter also referred to as "we") operates the website www.schweizerhof-luzern.ch (hereinafter referred to as "technology"), and is therefore responsible for the collection, processing, and use of your personal data.
Your trust is important to us, which is why we take data protection seriously and ensure appropriate security with organizational and technical measures. We also train our employees.

If we commission third parties to process personal data, the third party is carefully selected and must take appropriate security measures to guarantee the confidentiality and security of your personal data.

Data protection officer:
Hotel Schweizerhof Luzern
Represented by: Maurin Lustenberger
Schweizerhofquai
6002 Lucerne
info@schweizerhof-luzern.ch

General

All personal data collected during registration or generated during use and protected by the DPA or GDPR are exclusively used for the purpose of fulfilling the contract, unless your express consent to further use exists or applicable law permits it.

Our employees are obligated to treat personal data confidentially.

Scope and purpose of the collection, processing, and use of personal data

What personal data we collect
We may collect from you basic data (possibly company name, name, address, email, etc.), personal data regarding the services you use, your payment transaction data, your online preferences, and your customer feedback. We use this personal data for communication with you, for the conclusion and processing of transactions with you, for the operation of the technology, for billing, for market research and marketing, such as analyzing our customer base or to contact you by mail, email, or text message.
We may collect personal data about your creditworthiness to protect ourselves from payment defaults.
Your browsing and usage data are also collected. This includes, for example, the IP address, information about which device, browser and browser version you used to visit the technology, which operating system you are using, from which website or app you accessed our technology via a link, and how you use the elements of the technology. This personal data is stored together with the IP address of your access device. It serves to correctly display and optimize our technology, to protect against attacks or other legal violations, and to personalize the technology for you.

When visiting www.schweizerhof-luzern.ch
When visiting our website, our servers temporarily store every access in a log file. The following user and device data as well as personal data are collected without your intervention and stored by our host (ISP - Internet Service Provider):

• the IP address of the requesting computer
• the date and time of access
• the name and URL of the retrieved file
• the website from which access was made
• the operating system of your computer and the browser you used
• the country from which you accessed and the browser language settings

The collection and processing of this data are to enable the use of our website (establishing a connection), to permanently ensure system security and stability, and to enable the optimization of our internet offering as well as for internal statistical purposes. This is our legitimate interest in data processing. The IP address is used in particular to determine the country of the website visitor. Furthermore, the IP address is evaluated in case of attacks on the network infrastructure of www.schweizerhof-luzern.ch for statistical purposes. In addition, we use pixels and cookies when visiting our technology for displaying personalized advertising and for using web analysis services.

When using our contact forms
You have the option to use a contact form to get in touch with us. The input of the following personal data is mandatory:

• Title
• First and last name
• Address (street, house number, city, postal code)
• Phone number
• Email address

We will mark the mandatory entries (*). If this information is not provided, it may hinder the provision of our services. The provision of personal data in other fields is voluntary. You can inform us at any time that you no longer wish us to process this voluntarily provided personal data (see section "Your rights"). The provision of other information is optional and does not affect the use of our technology.
We use this data only to be able to answer your contact request in the best possible and personalized way. You can inform us at any time that you no longer wish us to process this voluntarily provided personal data (see section "Your rights").

When registering for our newsletter
You have the option to subscribe to our newsletter on our website. This requires registration. The following data must be provided during registration:

• Email address

The email address is mandatory for sending the newsletter. You can voluntarily provide us with your title and name so that we can address you personally with our offer.

By registering, you give us your consent to process the provided data for the regular sending of the newsletter to the address you have specified and for the statistical evaluation of user behavior and optimization of the newsletter. We are entitled to commission third parties with the technical handling of advertising measures and are entitled to pass on your data for this purpose. At the end of each newsletter, you will find a link to unsubscribe at any time. After unsubscribing, your personal data will be deleted. We explicitly point out the data analyses within the newsletter sending (see section below "Evaluation of Newsletter Use").

Use of your data for advertising purposes

Creating pseudonymized usage profiles
To enable personalized marketing in social networks, we use so-called remarketing pixels on the technology. If you have an account with a social network included here and are logged in at the time of the page visit, this pixel links the page visit with your account. Further settings for advertising can be made in the respective social networks in your user profile. We use retargeting technologies. Your user behavior on our technology is analyzed to subsequently offer you individually tailored advertising on partner websites. Your user behavior is recorded pseudonymously. Most retargeting technologies work with cookies. You can prevent retargeting at any time by rejecting or deactivating the relevant cookies in the menu bar of your web browser. You can also request an opt-out for the aforementioned additional advertising and retargeting tools via the website of the Digital Advertising Alliance at optout.aboutads.info. The following remarketing pixels are used on our technology:

Facebook Pixel
To enable personalized marketing in social networks, we integrate so-called remarketing pixels from Facebook. If you have a Facebook account and are logged in at the time of the page visit, this pixel links the page visit with your account.

The data generated are transmitted to and processed by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.
This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected are anonymous to us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data are stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy. This allows Facebook to enable the placement of ads on pages of Facebook as well as outside of Facebook. This use of data cannot be influenced by us as the site operator.

In Facebook's privacy notices, you will find further information on protecting your privacy.

You can also deactivate the remarketing function "Custom Audiences" in the Ads Settings section. To do this, you must be logged in to Facebook.

Adwords and Doubleclick
We use Google AdWords Remarketing and Doubleclick by Google, services of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (Registration number: 368047), to place ads based on the use of previously visited websites. Google uses the so-called DoubleClick cookie, which allows your browser to be recognized when visiting other websites. The information generated by the cookie about your visit to this technology (including your IP address) is transmitted to and stored by Google on servers in the United States (for transfers of personal data to the USA, see "Transfer of personal data abroad" below for additional information). Google will use this information to evaluate your use of the technology in terms of the ads to be placed, to compile reports on website activity and ads for website operators, and to provide other services related to website and internetuse. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. However, Google will not associate your IP address with any other data held by Google.

Google Tag Manager
We also use the Google Tag Manager to manage services for usage-based advertising. The Tool Tag Manager itself is a cookie-less domain and does not collect personal data. The tool triggers other tags that may themselves collect data (see above). If you have made a deactivation at domain or cookie level, it will remain in effect for all tracking tags implemented with the Google Tag Manager.

Sojern
We use the services of Sojern, 255 California Street, Suite 1000, San Francisco, CA 94111 (USA), to track your activities on our website and to provide you with relevant ads from us and other advertisers on unrelated websites. This advertising service uses pixel tags (web beacons), cookies, and other tracking technologies to collect and store non-personal information about your visit to our website. If you visit our website with your mobile device, an advertising service may also capture the unique identifier or location of your device and try to synchronize the visit of a mobile website with other website visits.
If you are served a relevant ad on another website based on the data collected on our site, this is referred to as an "interest-based" ad and will have a blue "Adchoices" symbol in the top right corner. Clicking on this symbol will provide you with more information about the interest-based advertising service and your option to disable interest-based ads.
We do not have access to these advertising services and have no control over how cookies are used when placing interest-based ads. However, you can refuse the use of this information by clicking here: https://www.aboutads.info/choices
Please note that if you opt-out, you will still see ads, but they may not be tailored to your travel interests.

Transfer of data to third parties

We pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and Hotel Schweizerhof Lucerne (e.g., collection agencies, authorities, or lawyers). We pass on your data to third parties insofar as this is necessary within the framework of using the technology for the provision of the services you have requested (e.g., outsourcing partners; hosts; companies with which we offer the offers on our technology (e.g., for bookings, rentals, purchases, etc.); companies that advertise on our behalf) and the analysis of your user behavior.

We ensure that the transfer to third parties is accompanied by sufficient contractual guarantees that such a third party uses the personal data in accordance with legal requirements and exclusively in our interest.

If the technology contains links to third-party websites, Hotel Schweizerhof Lucerne no longer has any influence on the collection, processing, storage, or use of personal data by the third party after clicking on these links and assumes no responsibility for it.

Transfer of personal data abroad

Hotel Schweizerhof Lucerne is entitled to transfer your personal data to third companies (commissioned service providers) abroad if this is necessary for the data processing described in this privacy policy. These are obliged to data protection to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or Europe, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.
For the sake of completeness, for users residing or based in Switzerland, we would like to point out that in the USA there are surveillance measures by US authorities that generally allow the storage of all personal data of all persons whose data has been transmitted from Switzerland to the USA. This happens without differentiation, restriction, or exception based on the pursued goal and without an objective criterion that allows the access of US authorities to the data and their subsequent use to be limited to very specific, strictly limited purposes that justify the interference associated both with the access to these data as well as with their use. Furthermore, we point out that in the USA, there are no legal remedies available for the persons concerned from Switzerland that allow them to obtain access to the data concerning them and to have it corrected or deleted, or there is no effective judicial protection against general access rights of US authorities. We explicitly point out this legal and factual situation to the affected parties in order to make an informed decision about consenting to the use of their data. Users residing in a Member State of the EU are pointed out that, from theperspective of the European Union, the USA does not have an adequate level of data protection. To the extent we have explained in this privacy policy that recipients of data (such as Google, Facebook, or Twitter) are based in the USA, we will ensure through contractual arrangements with these companies that your data is protected at an appropriate level with our partners.

Data security

We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. You should always treat your information confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others. We also take internal data protection very seriously. Our employees and the service companies commissioned by us have been obliged by us to secrecy and to comply with data protection regulations.

Cookies

We use cookies in our technology. Cookies help in many ways to make your visit to our website simpler, more pleasant, and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our website.

Session cookies are used to associate server-side stored information uniquely with you or your web browser during a particular access to our website (e.g., so that the contents of a shopping cart are not lost). Session cookies are deleted after closing your internet browser. Permanent cookies are used to store your preferences (e.g., preferred language) across several independent accesses to our website, i.e., even after closing your internet browser, or to enable automatic login. Permanent cookies are deleted according to the settings of your internet browser (e.g., one month after the last visit). By using our website, but also the corresponding functions (e.g., language selection or auto-login), you consent to the use of permanent cookies.

Cookies do not damage your computer's hard drive nor do these cookies transmit personal data of the user to us. We use cookies, for example, to better tailor the information, offers, and advertising displayed to you to your individual interests. The use does not mean that we receive new personal data about you as an online visitor. Most internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears when you receive a new cookie. Disabling cookies may mean that you cannot use all the functions of our website.

Tracking tools

We use so-called tracking tools on our website. These tracking tools monitor your browsing behavior on our website. This observation is for the purpose of the demand-oriented design and continuous optimization of our website. In this context, pseudonymized user profiles are created and small text files that are stored on your computer ("cookies") are used.
Third-party companies may also use permanent cookies, pixel tags, or similar technologies. The third-party company does not receive any personal data from us, but can track your use of our website, combine this information with data from other websites you have visited and which are also tracked by the third-party company, and use these findings for its own purposes (e.g., control of advertisements). The processing of your personal data by the third-party company is then the responsibility of the service provider according to its privacy policy.

The following tracking tools are used:

Google Analytics
Google Analytics is a service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (Registration number: 368047). We use Google Analytics on our website to create anonymized evaluations of website usage. For this purpose, a cookie is set and the session log data is sent to Google.

Social Media Plug-Ins

The following described social plugins are used on the website. The plugins on our website are standardly deactivated whenever possible and therefore do not send any data. By clicking on the corresponding social media button, you can activate the plugins. Once these plugins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you access one of our web pages. The content of the plugin is transmitted directly to your browser by the social network and integrated into the website by it. The plugins can be deactivated with a click.

Cloudinary
Cloudinary is a service operated by Cloudinary Inc., 111 W Evelyn Ave, Suite 206, Sunnyvale, CA 94086, USA. We use this service to optimize photos from our social media channels for our website. When you access pages where this service is needed, Cloudinary will set a cookie and query the IP as well as the User Agent (browser).

Vimeo
On certain pages, you will find films that are embedded from Vimeo. Vimeo is a product of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. The films are displayed using an I-frame. This means that in that area of the website where the film is displayed, access is made to a foreign website. The data processing in this I-frame is beyond our control.

TrustYou
We use the social media plugin of TrustYou Munich Center of Technology, Agnes-Pockels-Bogen 1, 80992 Munich on our website. Trust You is a service that collects hotel reviews and compiles them into reports. We use data from Trust You to offer our visitors an independent judgment about the service.

TripAdvisor
We use the social media plugin of TripAdvisor Inc., 400 1st Avenue, Needham, MA 02494 USA on our website. TripAdvisor is an online travel company that collects user reviews of tourist offerings and combines them with booking recommendations. We use the TripAdvisor widget to neutrally present customer opinions about us. TripAdvisor will place a cookie on your computer as soon as you access a page with the widget. TripAdvisor's privacy policy

Google Maps
On certain pages, you will find maps that are embedded from Google Maps. Google Maps is a product of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland (Registration number: 368047). The maps are displayed using an I-frame. This means that in that area of the website, access is made to a foreign website. The data processing in this I-frame is beyond our control. Google will associate the access with your Google account. Google Maps will write a cookie as soon as the page is loaded. If you want to prevent this behavior, you can turn off the activation of Google cookies for your browser using the links provided under "Opt-Out/Opt-In Options".

Evaluation of Newsletter Use

For sending our newsletter, we use email marketing services of third parties. Therefore, our newsletter may contain a so-called web beacon (tracking pixel) or similar technical means. A web beacon is a 1x1 pixel, invisible graphic, associated with the user ID of the respective newsletter subscriber. This pixel is activated when you display the images of the newsletter. The use of corresponding services enables the evaluation of whether the emails containing our newsletter have been opened. In addition, the click behavior of the newsletter recipients can also be recorded and evaluated. We use this data for statistical purposes and to optimize the newsletter in terms of content and structure. This allows us to better align the information and offers in our newsletter with the interests of our readers. The tracking pixel is deleted when you delete the newsletter. To prevent tracking pixels in our newsletter, please set your mail program so that no HTML is displayed in messages.

Automated decision-making / profiling

We (or third parties commissioned by us) do not make any automated decisions that concern your personal data or have legal effects on you or similarly significantly affect you.

Legal basis for processing

The legal bases for processing personal data by us are usually found in Article 13 paragraph 2 letter a DPA (processing in direct connection with the conclusion or processing of a contract; corresponds to Article 6 paragraph 1 letter b EU GDPR) as well as in Article 13 paragraph 1 DPA (consent of the person concerned or obligation to process by law; corresponds to Article 6 paragraph 1 letter a EU GDPR). In cases where we want to refuse the