Privacy Policy

Last updated on: 06.06.2025

We place great importance on transparency in handling personal data. This privacy policy provides information about what personal data we collect, for what purpose, and to whom we disclose it. To ensure high transparency, this privacy policy is regularly reviewed and updated.

1. Services We Use

• YouTube
• WordPress

2. Contact Information

If you have questions or concerns about how we protect your data, you can reach us at any time by email at . Responsible for the data processing that takes place via this website is:

Nathalie Imesch
Haus Edelweiss
3925 Grächen
Switzerland

Data Protection Officer:
Nathalie Imesch

+41 79 323 05 63

3. General Principles

3.1 What Data We Collect from You and from whom We Receive this Data

We primarily process personal data that you provide to us or that we collect when operating our website. In some circumstances, we may also receive personal data about you from third parties. These may include the following categories:

• Personal master data (name, address, date of birth, etc.);
• Contact details (mobile number, email address, etc.);
• Financial data (e.g., account details);
• Online identifiers (e.g., cookie ID, IP addresses);
• Location and traffic data;
• Audio and visual recordings;
• Particularly sensitive data (e.g., biometric data or information about your health).

3.2 under What Conditions Do We Process your Data?

We treat your data confidentially and in accordance with the purposes set out in this privacy policy. We ensure transparent and proportionate processing.

If, in exceptional cases, we are unable to follow these principles, the data processing may still be lawful if there is a justification. Possible justifications include:

• Your consent;
• The execution of a contract or pre-contractual measures;
• Our legitimate interests, provided your interests do not prevail.

3.3 how Can You Withdraw your Consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent, unless we have another legal justification.

You have the option to withdraw your consent at any time by sending an email to the address provided in the imprint. Data processing that has already taken place is not affected by this.

3.4 in What Cases Can We Share your Data with Third Parties?

A. Principle

We may need to use the services of third parties or affiliated companies and commission them to process your data (so-called processors). Categories of recipients include:

• Accounting, fiduciary, and auditing companies;
• Consulting companies (legal advice, taxes, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers;
• Providers of tracking, conversion, and advertising services.

We ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially.

Under certain circumstances, we may also be obliged to disclose your personal data to authorities.

B. Visit to our Social Media Channels

We may have embedded links to our social media channels on our website. This is always visible to you (typically via corresponding symbols). If you click on the symbols, you will be redirected to our social media channels.

In this case, the social media providers learn that you are accessing their platform from our website. The social media providers can use the data collected in this way for their own purposes. We point out that we do not have knowledge of the content of the transmitted data or its use by the operators.

C. Transfer Abroad

In some cases, your personal data may be transferred to companies abroad as part of order processing. These companies are obligated to protect data to the same extent as we are. The transfer can take place worldwide.

If the level of data protection does not correspond to that of Switzerland, we carry out a prior risk assessment and ensure contractually that the same protection as in Switzerland is guaranteed (e.g., by means of the new standard contractual clauses of the EU Commission or other legally prescribed measures). Should our risk assessment be negative, we will take additional technical measures to protect your data. You can access the EU Commission’s standard contractual clauses via the following link. https://commission.europa.eu/publications/standard-contractual-clauses-controllers-and-processors-eueea_de

3.5 how Long Do We Keep your Data?

We store personal data only for as long as necessary to fulfill the individual purposes for which the data was collected.

Data that we store during your visit to our website is kept for twelve months. An exception applies to analysis and tracking data, which can be stored for longer.

We store contract data for longer periods as we are obligated to do so by legal regulations. In particular, we must retain business communications, concluded contracts, and booking documents for up to 10 years. If we no longer need such data from you to provide services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 how Do We Protect your Data?

We will keep your data secure and take all reasonable measures to protect your data from loss, access, misuse or changes.

Our contractual partners and employees who have access to your data are obligated to comply with data protection regulations. In some cases, it may be necessary for us to forward your requests to affiliated companies. In these cases, your data will also be treated confidentially.

Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser.

3.7 What Rights Do You Have?

A. Right to Information

You can request information about the data we have stored about you at any time. Please send your information request along with proof of identity to .

You also have the right to receive your data in a common file format if we process your data automatically, and if:

• You have given your consent for the processing of this data; or
• You have disclosed data in connection with the conclusion or processing of a contract.

We may restrict or refuse to provide information or data disclosure if this conflicts with our legal obligations, legitimate own or public interests, or the interests of a third party.

The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to high request volume, for legal or technical reasons, or because we need further information from you. You will be informed about the extension of the deadline in a timely manner, at least in text form.

B. Deletion and Correction

You have the option to request the deletion or correction of your data at any time. We may reject the request if legal regulations require us to retain the data for a longer period or unchanged, or if a legal basis conflicts with your request.

Please note that exercising your rights may conflict with contractual agreements and may have corresponding effects on the execution of the contract (e.g., premature termination of contract or cost consequences).

C. Legal Recourse

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a report with the responsible supervisory authority. The responsible supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch

3.8 Changes to the Privacy Policy

We may change this privacy policy at any time. The changes will be published on www.graechen-ferienwohnung.ch; you will not be separately informed about them.

4. Individual Data Processing Operations

4.1 Providing the Website and Creating Log Files

What Information Do We Receive and how Do We Use it?

By visiting www.graechen-ferienwohnung.ch, certain data is automatically stored on our servers or on servers of services and products that we purchase and/or have installed for system administration purposes, for statistical or backup purposes, or for tracking purposes. This data includes:

• the name of your Internet service provider;
• your IP address (in some circumstances);
• the version of your browser software;
• the operating system of the computer used to access the URL;
• the date and time of access;
• the website from which you visit the URL;
• the search words you used to find the URL.

Why are We Allowed to Process this Data?

This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored to ensure the functionality of the website and to ensure the security of our information technology systems. This constitutes our legitimate interest.

How Can You Prevent Data Collection?

The data is only stored for as long as necessary to achieve the purpose of its collection. Accordingly, the data is deleted after the end of each session. The storage of log files is absolutely necessary for the operation of the website, so you have no possibility to object to this.

4.2 YouTube

Our website includes videos from YouTube, a platform of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When displaying the videos or clicking on the play button, data, including your IP address and information about the browser you are using, is transmitted to Google’s servers and stored there. This data is used to provide the video, monitor performance, and improve the user experience.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

4.3 WordPress

Our website is based on the WordPress platform, a content management system developed by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. WordPress allows us to create, manage, and publish content.

When using our website, which is based on WordPress, various data, including your IP address, date and time of access, as well as information about the browser you are using, may be collected and stored. This data is mainly used for administrative purposes and to ensure smooth operation of the website.

Some WordPress features, such as comments or contact forms, may collect additional personal data when you use them.

BrainBox Generators

BrainBox Generators is a service provided by BrainBox Solutions GmbH to identify all privacy-relevant services on a website and, among other things, to assist in creating the privacy policy. No personal data is collected or processed in this process.