Scope of this policy
This privacy policy describes how Hotel Rössli Zuz GmbH, based at Ausserdorfstrasse 2B, 9524 Zuzwil, and its associated businesses (hereinafter referred to as "we" or "Hotel Rössli") collect, use, access, or otherwise process personal data.

This privacy policy applies worldwide, but certain provisions of this privacy policy may not apply to you, depending on your place of residence.
For the purposes of EU data protection law, we may act as the sole data controller, depending on the type of personal data processing described in this privacy policy. As the sole data controller, Hotel Rössli determines the means and purposes of processing your personal data. This means that you can assert your rights against Hotel Rössli as the sole data controller by contacting the company.
In some of the situations described in this Privacy Policy, Hotel Rössli, where you have booked and/or stayed, also processes your data as a controller. Hotel Rössli is solely responsible for the processing activities for which it acts as the sole data controller. Hotel Rössli Zuz GmbH is a registered company based in Switzerland and subject to Swiss law. We are committed to protecting the privacy of our users and customers.
This privacy policy is intended to inform you about how we collect, determine, and use personal data. Please take the time to read this privacy policy carefully. Please note that if you intend to provide us with personal data of third parties, e.g., when making a booking on their behalf, you may only do so with their consent and after informing them about how we will use their data, including the purposes mentioned in this privacy policy. This policy contains a description of your privacy rights, including a right to object to some of our processing activities.
EU data protection law requires us to specify our reasons and legal basis for using your personal data. Accordingly, for the purposes of EU data protection law, the following information describes the types of data, the source of your data, the basis for processing, and the partners to whom we may share your data. With the exception of the sections on "Categories of Data Processed" listed in the information below, nothing binds us with respect to our non-EU users.

1 Booking process

1.1 Booking process
As part of the booking process—whether online on our website, through an online booking channel, through a travel advisor, or directly at the property—your personal data is processed for the purpose of (i) enabling you to make a room reservation at a property; (ii) checking the availability of the property and managing the booking; (iii) to send you a booking confirmation; and (iv) to send you non-commercial pre-arrival emails. You can unsubscribe from pre-arrival emails at any time before arrival by clicking on the unsubscribe link in the emails sent to you.

1.2 Categories of processed data
Address, arrival and departure dates, email address, first name/last name, first name/last name of accompanying adult, payment card type, number, and expiration date, phone number, title

1.3 Data source
Depending on the booking mechanism used:
_Directly from you via the online booking form
_Via the online booking channel you used to make your booking _From your travel advisor

1.4 Basis for processing
Processing is necessary to take steps to conclude and fulfill a contract.
Recipients of data:
_Operations of Hotel Rössli
_IT service providers involved in the (online) booking process
_IT service providers
_Email communication service providers

2. Satisfaction surveys
We may send you guest surveys via email during or after your stay so that we can measure the performance of our establishments. You can unsubscribe from our customer satisfaction survey emails at any time by clicking on the unsubscribe link in the emails sent to you.

2.1 Categories of processed data
Country of residence, arrival and departure dates, email address, first name/last name, nationality, details of stay

2.2 Data source
Depending on the booking mechanism used:
_Directly from you via the booking form
_Via the online booking channel you used to make your booking
_From your travel advisor

2.3 Basis for processing
Processing is necessary to ensure and monitor the proper performance of the contract concluded with us.

2.4 Recipients of data
_Betriebe von Hotel Rössli
_Providers of customer satisfaction surveys

3. Service email analytics
In connection with service emails, which include customer satisfaction survey emails and non-commercial emails related to your booking, we may process and collect your personal data for analytical purposes, and in particular, if you have opened and processed a service email, to measure the click-through rate and improve the content of our service emails. You can unsubscribe from our service emails at any time by clicking on the unsubscribe link in the service emails sent to you. The following information describes the types of data we process for this purpose, the source of your data, the basis for processing, and the partners to whom we may share your data.

3.1 Categories of processed data
Email address, email click behavior, email opening behavior, first name/last name

3.2 Data source
From our email analysis service provider

3.3 Basis for processing
It is in the legitimate interest of Hotel Rössli to understand the email click behavior of its guests in order to determine whether improvements are necessary. In this context, the business interests of Hotel Rössli take precedence over your interests.

3.4 Recipients of data
_IT service providers
_Email analysis service providers

4. Hotel/motel guests

4.1 Check-in and check-out
When you stay at one of our establishments, we will collect and process your personal data in order to (i) register your arrival and departure at Hotel Rössli; (ii) assign you a key card for your room; (iii) obtain a credit card guarantee or deposit to ensure payment for your stay; (iv) manage (and archive) your registration card; (v) create and update your profile in our management system; (vi) verify your eligibility for a room upgrade and manage it if applicable; (vii) manage payment for your stay; (viii) create, print, or send an invoice for your stay; and (ix) pay a commission to your travel advisor (if applicable). If you have booked a room at one of our establishments but do not show up on the day of arrival without canceling, we will process your personal data for the purpose of (i) canceling your stay and any other reservations you have made; and (ii) managing, processing, and settling any outstanding payments.

4.2 Categories of processed data
Address, bookings (hotel, restaurant, events, theater, etc.), arrival and departure dates, email address, first name/last name, first name/last name of accompanying adults, payment card type, number, and expiration date, telephone number, title

4.3 Data source
Depending on the booking mechanism used: _Directly from you via the booking form _Via the online booking channel you used to make your booking _From your travel advisor _From Hotel Rössli _Directly from you via the hotel registration card

4.4 Basis for processing
Processing is necessary to perform the contract you have with us.

4.5 Recipients of data
_Hotel Rössli
_IT service provider
_Your travel advisor, if applicable

5. Stay
When you stay at one of our establishments, we strive to make your stay as pleasant as possible. This requires the processing of your personal data for the provision of specific services during your stay. These services include (i) housekeeping and maintenance; (ii) returning lost or forgotten items to you; and/or (iii) managing your preferences and those of your companions, such as dietary requirements, in order to provide you with better service during your stay with us.

5.1 Categories of processed data
Address, consumption habits, arrival and departure dates, dietary requirements, email address, first name/last name, first name/last name of adult roommates, other preferences, phone number

5.2 Data source
Depending on the booking mechanism used:
_Directly from you via the booking form
_Via the online booking channel you used to make your booking _From your travel advisor
_From Hotel Rössli, where you made your booking directly
_Directly from you during your stay at the hotel

5.3 Basis for processing
It is in the legitimate interest of Hotel Rössli to organize its daily hotel maintenance activities, personalize the services it offers, and/or identify the owner of a lost or forgotten item. Considering the limited personal data that is processed and shared for this purpose, the business interests of Hotel Rössli take precedence over your own.

5.4 Recipients of data
_Hotel staff, including housekeeping, maintenance, reception, and/or other hotel staff
_Other companies involved with Hotel Rössli
_IT service providers

6. Subscription to our newsletters

6. 1 Newsletters and marketing communications
If you have expressly agreed to receive our newsletters or marketing communications, we may contact you from time to time with information about our services and the latest offers and process your personal data for this purpose. If you no longer wish to receive our newsletters or marketing communications, you can unsubscribe from our marketing emails by clicking on the unsubscribe link in the emails sent to you.

6.2 Categories of processed data
Address, date of birth, email address, first name/last name, gender, hobbies and interests, phone number, hotel stay history, country of residence

6.3 Data source
Directly from you when you subscribe to our newsletter or later when you fill out your account details.

6.4 Basis for processing
Ad hoc consent obtained during subscription to our newsletter.

6.5 Recipients of data
_Hotel Rössli
_IT service provider
_Email communication service provider

6.6 Website forms
If you have a specific request or feedback, including exercising any of your rights under the General Data Protection Regulation, you can contact us using the contact forms on our website. In this context, we may process your personal data for the purpose of processing and providing a response to your question or request, or following up on your feedback. We also provide other forms on our websites that can help you request a specific service from us.

6.7 Categories of processed data
Address, email address, first name/last name, stay details, phone number, and any other data you choose to share with us in open comment boxes.

6.8 Data source
_Directly from you via the form
_Basis for processing
_Ad hoc consent obtained via the contact form Recipients of data
_Other companies affiliated with Hotel Rössli
_IT service providers

7.0 Meetings and events

7.1 Organization and feedback on meetings and events
If you would like to organize a meeting or event at Hotel Rössli or if you would like further information, you can contact us by sending us an email. The personal data collected will be processed for the purpose of fulfilling your request to organize a meeting or event. After your meeting or event, we may also send you surveys regarding your satisfaction so that we can measure the performance of our hotel as an event venue.

7.1.2. Categories of processed data
Address, date of meeting or event, email address, first name/last name, profession and occupation, telephone number

7.1.3 Data source
Directly from you via
_an online contact form
_a request submitted by other means

7.1.4 Basis for processing
Depending on whether you enter into contracts directly with us or on behalf of your company:
_Processing is necessary in order to take steps at your request to enter into and perform a contract. It is in the legitimate interest of Hotel Rössli as a company to have a senior contact person in the company who organizes a meeting or event and provides feedback on that event. In this context, the business interests of Hotel Rössli take precedence over your interests.

7.1.5 Recipients of data
_The business of your choice
_Other companies affiliated with Hotel Rössli
_IT service providers
_Providers of satisfaction surveys

7.2 Marketing communications for meetings and events
If you have opted to receive commercial communications in connection with the organization of a meeting or event, we will also process your data to contact you with information about our services and latest offers.

7.2.1 Categories of processed data
Address, email address, first name/last name, profession and occupation, telephone number

7.2.2 Data source
Directly from you via
_an online contact form
_a request submitted by other means

7.2.3 Basis for processing
Ad hoc consent, via an online contact form

7.2.4 Recipients of data
_Other companies involved with Hotel Rössli
_IT service providers
_Email communication service providers

7.3 Marketing communications for meetings and events
In connection with our marketing communications for meetings and events, we may process and collect your personal data, in particular if you have opened and interacted with one of our communications, in order to measure the click-through rate and improve the content of our marketing communications.

7.3.1 Categories of processed data
Email address, email click behavior, email opening behavior, first name/last name, profession, and occupation

7.3.2 Data source
From our email analysis service provider

7.3.3 Basis for processing
It is in Hotel Rössli's legitimate interest to understand the click-through rate of its emails in order to determine whether improvements are necessary. In this context, the business interests of Hotel Rössli take precedence over your interests.

7.3.4 Recipients of data
_Other companies involved with Hotel Rössli
_IT service providers
_Email analysis service providers

8.0 Analytics
We may use any data you provide to us for analytical purposes to optimize your experience, improve our marketing, business, and operational efficiency, create segments of our customers based on their personal data, and tailor our offers and promotions to your preferences and consumption habits.
As part of such analytics, we analyze and combine various data we store about our guests, including (i) responses to customer satisfaction surveys; (ii) communications with guests; (iii) click-through rates for our marketing communications; (iv) our guests' behavior on our websites; (v) bookings. Please also refer to our specific sections on analytics of marketing communications for meetings and events and analytics of newsletters and marketing communications.

8.1 Categories of processed data
Information about the stay, address, bookings (hotel, restaurant, events, theater, etc.), arrival and departure dates, title, first name/last name, first name/last name of accompanying adults, email address, phone number, payment card type, number, and expiration date, redemption history

8.2 Data source
_Directly from you via the online booking form
_Via the online booking channel you used to make your booking
_From your travel advisor
_From our email analytics provider
_Directly from you when you submit your request for additional services/facilities to Hotel Rössli

8.3 Basis for processing
It is in the legitimate interest of Hotel Rössli to understand the preferences and consumption habits of its guests. In this context, the business interests of Hotel Rössli take precedence over your interests.

8.4 Recipients of data
_Other companies involved with Hotel Rössli
_IT service providers
_Analytics service providers

9.0 Social Media and Online Reviews
We may process your personal data that we have obtained via social media platforms (including Facebook, Instagram, LinkedIn, and Twitter) or via online reviews (including TripAdvisor) for the purposes of (i) processing your questions or complaints; (ii) monitoring our online reputation; and (iii) improving our services and identifying areas on which we can focus.

Some of our social media sites allow users to submit their own content. Please remember that any content submitted to one of our social media sites will be visible to the public, and you should be careful about providing certain personal information (such as financial information or address details) via these platforms. We are not responsible for the actions of other people when you post personal information on one of our social media platforms (e.g., Facebook or Instagram). Please also refer to the relevant privacy and cookie policies of the social media platforms you use.

9.1 Categories of processed data
All personal data that you share with us or wish to publish about us on social media or in other online reviews.

9.2 Data source
_Directly from you through publicly accessible social media sites, online booking channels, or other (review) websites
_From our online reputation monitoring service provider

9.3 Basis for processing
It is in the legitimate interest of Hotel Rössli to understand the preferences and consumption habits of its guests. In this context, the business interests of Hotel Rössli take precedence over your interests.

9.4 Recipients of data
_Other companies involved with Hotel Rössli
_Providers of online reputation monitoring services

10. Your rights – under EU data protection law
If you are located in the EU, EU data protection law grants you specific rights, which are summarized below and which you can generally exercise free of charge, subject to legal exceptions. These rights may be restricted, for example, if fulfilling your request would disclose personal data about another person or if you ask us to delete information that we are required to retain by law or for which we have compelling legitimate interests in retaining. To exercise your rights, please contact our data protection officer. If you have unresolved concerns, you have the right to lodge a complaint with a supervisory authority where you live or where you believe a violation has occurred. We recommend that you come to us in the first instance, but if this right applies to you, you have the right to contact the relevant supervisory authority directly.

10.1 Right of withdrawal
If we rely on your consent, you may withdraw this consent at any time and on your own initiative by contacting our data protection officer. The withdrawal of your consent does not affect the lawfulness of the collection and processing of your data based on your consent until the withdrawal of your consent. Please note that we may have other legal bases for processing your data for other purposes as set out in this Privacy Policy.

10.2 Right to access and correct your data
You have the right to access, review, and correct your personal data. You may be entitled to ask us for a copy of your data, review it, or correct it if you wish to correct information such as your name, email address, passwords, and/or other settings by contacting our data protection officer. You may also request a copy of the personal data processed as described in this Privacy Policy.

10.3 Right to erasure (
) Under EU data protection law, you have the right to have your personal data processed in accordance with this Privacy Policy deleted if it is no longer necessary for the purposes for which the personal data was originally collected or processed, or if you have withdrawn your consent or objected to the processing as described in this Privacy Policy and there is no other legal basis for the processing. If you wish to delete your personal data, please send a request to our data protection officer.

10.4 Right to restriction of processing
Under certain circumstances described in EU data protection law, you may request that we restrict the processing of your personal data. This is the case, for example, if you dispute the accuracy of your personal data. In this case, we will restrict processing until we can verify the accuracy of your data.

10.5 Right to object to processing
Under certain circumstances described in EU data protection law, you may object to the processing of your personal data, including when your personal data is processed for direct marketing purposes.

11. Security measures
Appropriate technical and organizational measures are taken to ensure an adequate level of security for your personal data, including, but not limited to, encryption techniques, access control for IT systems, confidentiality obligations, etc. In the event of personal data being compromised due to a data breach, we will make the necessary notifications in accordance with applicable laws.

11.1 How long do we retain your personal data?
We retain your personal data for as long as necessary to fulfill the activities set out in this Privacy Policy, unless otherwise notified to you or as permitted by applicable law. For example, we may retain your personal data if it is reasonably necessary to comply with legal obligations, regulatory requirements, resolve disputes or litigation, or if it is otherwise necessary to enforce this Privacy Policy and prevent fraud and abuse. To determine the appropriate retention period for the data we collect, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process the personal data, and whether we can achieve those purposes through other means and the applicable legal requirements.

11.2 Does this Privacy Policy apply to third-party websites?
When you click on a link to a third-party website, you will be directed to a website that we do not control and to which our Privacy Policy no longer applies. Your browsing behavior and interaction on another website are subject to the terms of use and privacy policies of the third-party website. Please read the privacy policies of other websites carefully. We are not responsible or liable for the information or content on such third-party websites.

11.3 What happens if we make changes to this policy?
We reserve the right to change and update this privacy policy from time to time. We will notify you of these changes if they indicate a fundamental change in the processing or are relevant to the type of processing or to you, and if they affect your privacy rights.

11.4 How to contact us
Questions, comments, remarks, inquiries, or complaints regarding this privacy policy are welcome and should be directed to our managing director.

You can contact our data protection officer at the following address:

Hotel Rössli Zuz GmbH
Rafael Hollenstein
Ausserdorfstrasse 2B
9524 Zuzwil (SG)
Switzerland
rafael.hollenstein@roessli-zuzwil.ch