Privacy Policy | Casa Line B&B

1. Introduction

Below, we inform you, among other things, of the identity of the controller of your data, the data we collect in connection with your visit to our website and the use of our services, the purposes for which we process such data, and to whom we may forward it. Furthermore, we inform you about the duration of the processing of your data, the legal basis for processing (where required), and the rights you are entitled to exercise against us regarding the processing of your data. This data protection notice applies to all of your data currently in our possession or that will be in the future. Please note that this data protection notice may be amended from time to time. The current updated version published on our website shall apply.

Personal data means all information relating to an identified or identifiable person (hereinafter "personal data"). This includes, in particular, information such as name, address, telephone number, email address, and potentially also IP addresses and device identifiers. In this data protection notice, the generic term "data" encompasses personal data as well as non-personal and anonymized data. Processing means any handling of data, regardless of the procedures and means applied, in particular the collection, storage, use, modification, disclosure, archiving, or deletion of data (hereinafter "processing").

If you provide us with personal data of other individuals, please ensure that these individuals are aware of this data protection notice, and only disclose their data to us if you are authorized to do so under applicable data protection law.

2. Name and Address of the Data Controller

The data controller pursuant to this data protection notice is:

Lineysi Lopez Preval
Via Cantonale 51
6837 Bruzella
Switzerland

3. Categories of Processed Data

When you visit our website, use our services, and contact us, we collect certain data. As a rule, we collect this data directly from you. The personal data we process may include the following:

Data identified or communicated during your visit to our website or use of our services. This includes, among other things, IP and MAC addresses or the ID of the device used, cookies, pages you accessed and search terms entered, text field entries, evaluations, time and duration of visits, clicks, referring/exit URLs, information regarding the time of use, browser and device type, operating system and Internet service provider used, as well as the volume of data transmitted.
Data exchanged during or in connection with contacts with us, e.g., communication via letter, telephone, email, contact form, etc. (in particular name, contact details, gender, marital status, date of birth, professional title, photos, employees, language, payment information).
Data (in particular email address and name) communicated when subscribing to a newsletter or downloading data (e.g., software).
Data communicated within the scope of creating a customer account for online shopping and in connection with orders placed (in particular username, password, selected payment method, and delivery address).
Data relating to offers and concluded contracts (e.g., date, type, content, product, parties, duration, value, contract amendments, payment information, contact details, contact persons, billing and correspondence addresses, customer feedback, terminations, disputes, etc.).
Data communicated within the scope of the comments function (in particular email address, the username chosen by you unless you comment anonymously, as well as your IP address).
Data you communicate when participating in prize draws, surveys, and similar activities.

The aforementioned data do not always constitute personal data. As a rule, we are unable to assign data generated during the use of our services without registration (e.g., for a newsletter or in the online shop) to specific named individuals. In special cases, however, this may occur when combined with other data.

We draw your attention to the fact that information provided when using the contact form or the comments function may contain personal data requiring special protection (e.g., health data) that you provide to us voluntarily.

4. Purposes of Processing

The processing of personal data, to the extent permitted by applicable law, will be carried out in particular for the following purposes:

initiation, conclusion, performance, and execution of contracts;
provision, further development, and improvement of our offers, development of new services, management, maintenance, optimization, and security assurance of our services and infrastructure;
user management, administration of our services, identity checks, logins, and other authentications;
cultivation, administration, and development of our customer relationships, communication with customers and third parties, promotions, advertising, and marketing, provision of personalized services and relevant content;
quality control, compilation of statistics;
compliance with legal and regulatory obligations and internal rules, law enforcement, civil, administrative, and criminal proceedings, complaints, combatting abuse, investigations, and responding to inquiries from authorities and administrative departments.

5. Legal Basis

We use personal data for the aforementioned purposes based on the following legal grounds, to the extent required under applicable data protection law:

performance of a contract;
compliance with legal obligations;
consent granted to us or to third parties;
legitimate interests of ourselves and third parties, in particular:
provision and delivery of services;
advertising and marketing;
contact maintenance and communication with users;
user management, identity checks, logins;
compliance with legal and regulatory obligations, law enforcement, civil, administrative, and criminal proceedings, complaints, investigations, and responding to inquiries from authorities.

6. Publication and Transfer of Data

We may publish and transfer data as indicated below:

Data Processors

We may engage third parties to perform certain services (e.g., in the IT sector, application management, administration, shipping, etc.) and to process and store data (so-called "processors"). Processors may access personal data and process it on our behalf. In this regard, we oblige processors to comply with data protection law and to process data only in the manner that we process it ourselves. Processors who may receive personal data may be located in any country, in particular in Switzerland, Germany, Israel, and the United States.

Contractors

We may transmit data to contractors (e.g., sales partners, service providers, financial companies, etc.). This is done, for example, to fulfil contractual obligations, to offer certain services, for collection and marketing purposes, for the analysis of usage and management of our services, our systems, and our infrastructure, and for the execution of payments. Possible recipients may also be buyers or parties interested in purchasing business units, companies, or parts thereof. Contractors may obtain access to personal data and process it for their own purposes (for example, for the fulfillment of the contract or their own legal obligations). In this regard, they are required to comply with applicable data protection laws. Contractors who may receive personal data may be located in any country, particularly in Switzerland, EU and EEA countries, and the United States.

Transmission to authorities

In certain situations, we may disclose data to authorities, departments, and other third parties. We do so in cases where it is requested of us in an official capacity or by authorities, or where, in our opinion, we are required to do so.

7. Duration of retention

We store personal data for as long as necessary for the purposes for which we collected it. Furthermore, certain personal data is subject to legally binding retention obligations of ten or more years, which we comply with. We may also store personal data at least for the duration of the applicable limitation periods, which in several cases amounts to five or ten years. Personal data generated within the scope of using our services (e.g., protocols, logs, analyses, etc.) and which are not subject to such retention or limitation periods are, as a rule, deleted earlier, as soon as the interest in their processing no longer applies. Data may also be retained for longer in anonymized form. Unless expressly agreed by contract, we are not obliged to you to retain data for a specific duration.

8. Data security

We adopt appropriate technical and organizational security measures to protect your data from accidental or intentional manipulation, partial or total loss, destruction, or unauthorized access by third parties. Our security measures are constantly improved in line with technological evolution.

9. Your rights (rights of the data subject)

Every data subject has a right of information regarding the personal data concerning them. Furthermore, the data subject has the right to require us to rectify, delete, and restrict the data concerning them, as well as to object to such processing of personal data. The exercise of such rights usually presupposes that the data subject can unequivocally prove their identity. In the event that the processing of personal data is based on consent, the latter can be revoked at any time by the data subject. In certain cases, the data subject has the right to receive the data generated during the use of online services in a structured, commonly used, and machine-readable format that allows further use and transmission. Requests related to these rights must be sent to the aforementioned address. We reserve the right to limit the rights of the data subject within the limits of currently applicable legislation and, for example, not to release complete information or not to delete the data. Furthermore, we draw your attention to the fact that with the deletion of your personal data, part or all of the services might no longer be usable or available.

Every data subject has the right to lodge a complaint with the competent data protection authority. In the case of a data controller in Switzerland, this will be the Federal Data Protection and Information Commissioner (FDPIC). In the case of a data controller in the Principality of Liechtenstein, it will be the Liechtenstein Data Protection Office.

10. Cookies, web analysis and tracking tools

We use various common technologies to record, store, and analyze data whenever you visit our website and use our services.

These technologies include, in particular, cookies by which your browser or your terminal device can be identified. A cookie is a small file that is sent to your computer or automatically stored by the browser used on your computer or mobile device. If you recall a service again, said service will be able to recognize your browser or your terminal device thanks to the cookie. Cookies can store user settings and other information. We use session cookies. These cookies are necessary to execute the basic functions of the services and are automatically deleted again after a use of our services. In addition to this, we also use temporary and permanent cookies that remain stored longer on your computer or mobile device. The information collected through cookies allows us to improve our website and our services in accordance with the customer's wishes and to offer you personalized offers.

You can block the use of cookies or delete them in your browser settings. Please note that, in case of non-consent to cookies, there is a possibility that not all functions of a service can be fully utilized and that in case of cookie deletion, any opt-out cookies you may have set will also be deleted. Such opt-out cookies would then have to be reactivated upon a new visit to the relevant service. Otherwise, you will be recognized as a new user and it will be necessary to collect your data again.

In addition to cookies, we employ web analysis and tracking tools to evaluate and analyze the use of our website and our services, to personalize the services, and to show you personalized offers and advertising messages. For the processing of data through such tools, which are mostly made available by third parties, the conditions relating to the use and data protection of the latter apply.

11. Integration of third-party offers

On our websites, we integrate services and content from third parties that may allow you to interact with third parties (e.g., YouTube videos or online payment via a payment service provider). In this regard, any data indicated is transmitted to such third parties for processing and execution of the relevant service provision or is processed directly by such third parties.

Please note that for the processing of data by such third parties, their provisions relating to use and data protection apply.

Version 1.0.0