Privacy Policy

Data Privacy Policy

General and mandatory information

Designation of the controller

The controller for the processing of data on this website is:

Valley Hostel

Stefan Abegglen

Fuhren

3822 Lauterbrunnen

The controller determines, alone or jointly with others, the purposes and means of the processing of personal data (e.g. name, contact details and suchlike).

Withdrawing your consent to the processing of data

Some data processing operations are possible only with your explicit consent. You can at any time withdraw the consent that you have already given. All that is required is an informal notification by e-mail of the withdrawal. The lawfulness of any data processing that took place up to the point of withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority

As a data subject, in the case of a data protection-related infringement, you have the right to lodge a complaint with the competent supervisory authority. For data protection-related issues, the competent supervisory authority is the Data Protection Officer for the state in which the registered office of our company is located. The following link provides a list of the Data Protection Officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to be provided with data that we process automatically on the basis of your consent or in performance of a contract, or to have this data provided to a third party. It shall be provided in a machine-readable format. If you require the data to be transferred directly to another controller, this shall be done insofar as it is technically possible.

Rights of access, rectification, blocking, erasure

Within the framework of the applicable legal requirements, you have the right at any time, free of charge, to access your stored personal data as well as information on the origin of the data, recipients of the data and purposes of the data processing and, where applicable, the right to have the data rectified, blocked or erased. You can contact us at any time via the contact information given in our legal information section with regard to this or any other questions related to personal data.

SSL and TLS encryption

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content that you send to us as the site operator. This means that data you transfer over this website cannot be read by third parties. You can recognize an encrypted connection by “https://” or the padlock icon in your browser’s address bar.

Data Protection Officer

We have appointed a Data Protection Officer (DPO).

First name, last name

Street address

12345 Anytown

 

Tel: 01234-56789

E-mail: dpo-e-mail-address@your-company.abc

Server log files

The website provider automatically collects and stores information in server log files and your browser automatically transfers this information to us. It consists of:

• Pages visited in our domain
• Date and time of server request
• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• IP address

This data is not merged with any other data sources. The data processing is based on Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual steps.

Data transfer for conclusion of contracts for purchase and dispatch of goods

Personal data is transferred to third parties only if there is a necessity in the course of contractual procedures. Third parties could be, for example, payment service providers or logistics companies. There is no further transfer of the data unless you have explicitly consented to this.

The data processing is based on Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual steps.

Registration on this website

You can register on our website to use certain functions. The sole purpose served by the data transferred is the use of the particular offering or service. Mandatory information that is requested when you register must be specified in full. Otherwise, we will reject the registration.

We will inform you by e-mail if there are important changes, for technical reasons, for example. We will send the e-mail to the address you gave when you registered.

The data you enter during registration is processed on the basis of your consent (Article 6(1)(a) of the GDPR). You can at any time withdraw the consent that you have already given. All that is required is an informal notification by e-mail of the withdrawal. The lawfulness of any data processing that took place up to the point of withdrawal remains unaffected by the withdrawal.

We store the data that is recorded during registration for the period of time that you are registered on our website. If you deregister, your data is erased. Legal retention periods remain unaffected.

Contact form

We store data that is transferred by means of the contact form, including your contact details, to allow us to process your request or to have it available for follow-up questions. This data is not passed on without your consent.

The data you enter in this contact form is processed solely on the basis of your consent (Article 6 (1)(a) of the GDPR). You can at any time withdraw the consent that you have already given. All that is required is an informal notification by e-mail of the withdrawal. The lawfulness of any data processing operations that took place up to the point of withdrawal remains unaffected by the withdrawal.

Data that is transferred by means of the contact form remains with us until you ask us to erase it, you withdraw your consent to it being stored or it is no longer necessary to store the data. Statutory legal requirements – in particular retention periods – remain unaffected.

Storage period for posts and comments

Posts and comments are stored as well as data related to them, such as IP addresses, for example. The content remains on our website until it has been entirely erased or it has to be erased for legal reasons.

Posts and comments are stored on the basis of your consent (Article 6(1)(a) of the GDPR). You can at any time withdraw the consent that you have already given. All that is required is an informal notification by e-mail of the withdrawal. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

Subscribing to comments

As a user of our website, you can subscribe to comments after you register. We’ll send you a confirmation e-mail to check that you own the e-mail address that was given. You can unsubscribe from comments at any time using a link that you’ll find in the subscription e-mail. If you unsubscribe, data that you entered when you set up the subscription is erased. If this data was transferred to us elsewhere and for other purposes, it remains with us.

Newsletter data

To send you our newsletter, we need you to provide us with your e-mail address. This e-mail address has to be verified and you need to consent to receiving the newsletter. Additional data is not collected or it is voluntary. The data is used solely to send the newsletter.

When you subscribe to our newsletter, the data created is processed solely on the basis of your consent (Article 6(1)(a) of the GDPR). You can at any time withdraw the consent that you have already given. All that is required is an informal notification by e-mail of the withdrawal, or else you can use the unsubscribe link in the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

If you unsubscribe, data that you entered when you set up the subscription is erased. If this data was transferred to us elsewhere and for other purposes, it remains with us.

CleverReach

We use CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. This service allows us to organize and analyze the sending of newsletters. The data you enter for subscription to the newsletter, such as your e-mail address, is stored on the CleverReach servers. The servers are located in Germany and Ireland.

Sending our newsletter with CleverReach allows us to analyze the behavior of the newsletter recipient. The analysis shows information such as how many recipients have opened their newsletters and how often they have clicked on links in the newsletters. CleverReach supports conversion tracking to analyze whether a previously defined action (for example, the purchase of a product) is carried out after clicking on a link. You can find details about CleverReach data analysis at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

Data is processed on the basis of your consent (Article 6(1)(a) of the GDPR). You can at any time withdraw the consent that you have already given. All that is required is an informal notification by e-mail of the withdrawal, or else you can use the unsubscribe link in the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

If you do not want any analysis with CleverReach, you have to unsubscribe from the newsletter. To unsubscribe, all you need to do is send us an informal notification by e-mail, or else you can use the unsubscribe link in the newsletter.

If you unsubscribe, data that you entered when you set up the subscription is erased from our servers and from the CleverReach servers. If this data was transferred to us elsewhere and for other purposes, it remains with us.

You can find details about the CleverReach privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Contract data processing

To fully comply with the legal data protection requirements, we have entered into a contract data processing agreement with CleverReach.

YouTube

Our website uses plugins from YouTube to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you access a page with an integrated YouTube plugin, a connection to the YouTube servers is established. From this, YouTube knows which of our pages you have accessed.

YouTube can match your surfing behavior directly to your personal profile if you are signed in to your YouTube account. You can prevent this if you sign out first.

We use YouTube in the interest of presenting our online content in an appealing way. This represents a legitimate interest in the sense of Article 6(1)(f) of the GDPR.

You can find details about the handling of user data in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

Vimeo

Our website uses plugins from Vimeo to integrate and display video content. The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you access a page with an integrated Vimeo plugin, a connection to the Vimeo servers is established. From this, Vimeo knows which of our pages you have accessed. Vimeo can find out your IP address even if you are not signed in to the video portal or do not have an account. The information recorded by Vimeo is transferred to its servers in the USA.

Vimeo can match your surfing behavior directly to your personal profile. You can prevent this if you sign out first.

You can find details about the handling of user data in Vimeo’s privacy policy at: https://vimeo.com/privacy.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our website more user-friendly, more effective and more secure.

Some cookies are “session cookies”. These cookies are automatically deleted after your browser session finishes. Other cookies, however, remain on your device until you delete them yourself. These cookies help us to recognize you when you return to our website.

Modern web browsers allow you to monitor, restrict or prevent the setting of these cookies. Many web browsers can be configured to automatically delete cookies when the program is closed. Deactivating cookies may result in limited functionality of our website.

Cookies that are essential to perform electronic communication processes or to provide certain functions you may want (such as the shopping cart) are set on the basis of Article 6(1)(f) of the GDPR. As operator of this website, we have a legitimate interest in storing cookies to provide our services seamlessly and free of technical faults. If other cookies are set (e.g. for analysis functions), they are dealt with separately in this privacy policy.

Google Analytics

Our website uses functions from the Google Analytics web analytics service. The provider of the web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies”. These are small text files that your web browser stores on your device allowing website use to be analyzed. Data generated by cookies about your use of our website is transferred to a Google server and stored there. As a rule, the server is located in the USA.

 

Google Analytics cookies are set on the basis of Article 6(1)(f) of the GDPR. As the operator of this website, we have a legitimate interest in the analysis of user behavior in order to optimize our website and advertising, where applicable.

IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. This ensures that Google truncates your IP address within the member states of the European Union or in other states party to the Agreement on the European Economic Area before it is transferred to the USA. There may be exceptions where Google transfers the full IP address to a server in the USA and truncates it there. On our account, Google will use this data to analyze your use of the website, to generate reports about website activity and to provide other services for us related to website use and Internet use. The IP address transferred by Google Analytics is not merged with any other Google data.

Browser plugin

You can prevent the setting of cookies by your web browser. However, this may limit some functions on our website. Likewise, you can prevent the recording of data related to your website use, including your IP address, along with subsequent processing by Google. You can do this by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to recording of data

You can prevent Google Analytics from recording your data by clicking on the following link. This will set an opt-out cookie, which prevents your data from being recorded on future visits to our website. It deactivates Google Analytics.

Google’s privacy policy contains details about the handling of user data in Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de.

Contract data processing

To fully comply with the legal data protection requirements, we have entered into a contract data processing agreement with Google.

 

Demographics in Google Analytics

Our website uses the Google Analytics “demographics” function. It can be used to generate reports containing information on the age, gender and interests of website visitors. This data comes from Google’s interest-based advertising as well as visitor data from third party providers. It is not possible to match the data to a specific person. You can deactivate this function at any time. It can be done using the ad settings in your Google account or by generally prohibiting the recording of your data by Google Analytics, as explained in the “Objection to recording of data” section.

Matomo (previously called Piwik)

Our website uses the Matomo web analytics service. Matomo is an open source solution.

Matomo uses “cookies”. These are small text files that your web browser stores on your device allowing website use to be analyzed. Data generated by cookies about the use of our website is stored on our server. Your IP address is anonymized before it is stored.

Matomo cookies remain on your device until you delete them.

 

Matomo cookies are set on the basis of Article 6(1)(f) of the GDPR. As the operator of this website, we have a legitimate interest in the anonymized analysis of user behavior in order to optimize our website and advertising, where applicable.

The data stored in the Matomo cookie about the use of this website is not passed on. You can prevent the setting of cookies by your web browser. However, this may limit some functions on our website.

You can deactivate the storage and use of your data. Your browser sets an opt-out cookie that prevents Matomo usage data from being stored. If you delete your cookies, the Matomo opt-out cookie is also deleted. When you next visit our website, you need to set the opt-out cookie again to prevent your data from being stored and used.

[Insert Matomo iframe code here]

PayPal

Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you pay using PayPal, the payment data you enter is transferred to PayPal.

Your data is transferred to PayPal on the basis of Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing for the performance of a contract). You can at any time withdraw the consent that you have already given. If you withdraw it, data processing operations that took place in the past remain effective.

Klarna

Our website allows payment via Klarna. The payment service provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you pay using Klarna (Klarna checkout solution), Klarna collects various personal data related to you. You can find details in Klarna’s privacy policy at: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies in order to optimize the Klarna checkout solution. This optimization represents a legitimate interest in the sense of Article 6(1)(f) of the GDPR. Cookies are small text files that your web browser stores on your device. Klarna cookies remain on your device until you delete them. You can find details about the use of Klarna cookies at: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Your data is transferred to Klarna on the basis of Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing for the performance of a contract). You can at any time withdraw the consent that you have already given. If you withdraw it, data processing operations that took place in the past remain effective.

Sofortüberweisung

Our website allows payment via “Sofortüberweisung”. The payment service provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.

By means of the “Sofortüberweisung” process, we receive a confirmation of payment in real time from Sofort GmbH and can start fulfilling our obligations without delay.

When you pay using “Sofortüberweisung”, your PIN and TAN are transferred to Sofort GmbH. The payment service provider logs in to your online banking account, automatically checks your balance and makes the transfer. This is followed by an immediate transaction confirmation. After the login, the system also automatically checks your transactions, the credit limit of your overdraft facility and the existence of other accounts as well as their balances.

As well as PIN and TAN, the transfer to Sofort GmbH also includes payment information and personal data related to you. This personal data includes your first and last names, address, telephone number(s), e-mail address, IP address and other data necessary for the payment processing, where applicable. This data transfer is necessary to establish your identity beyond any doubt and prevent attempted fraud.

Your data is transferred to Sofort GmbH on the basis of Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing for the performance of a contract). You can at any time withdraw the consent that you have already given. If you withdraw it, data processing operations that took place in the past remain effective.

You can find details about payment with Sofortüberweisung at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

XING plugin

Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

When a page with integrated Xing functions is accessed, a connection to the Xing servers is established. Personal data is not stored, according to our knowledge. IP addresses are not stored, nor is user behavior analyzed.

You can find details about data protection and the XING share button in XING’s privacy policy at: https://www.xing.com/app/share?op=data_protection.

Twitter plugin

Our website uses functions of the Twitter service. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

When you use Twitter and the “retweet” function, websites that you visit are linked to your Twitter account and published in your Twitter feed. Data is transferred to Twitter. We have no knowledge about the content of the data that is transferred or Twitter’s use of this data. You can find details in Twitter’s privacy policy: https://twitter.com/privacy.

You can change your Twitter privacy settings: https://twitter.com/account/settings

 

Pinterest plugin

Our website uses functions of the Pinterest social network. The provider is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA.

When you access a page that has Pinterest functions, your browser establishes a direct connection to the Pinterest servers. Log data is transferred to the Pinterest servers. The servers are located in the USA. The log data may possibly allow inferences regarding your IP address, visited websites, browser type and settings, date and time of the request, the manner in which you use Pinterest and it may also allow cookies.

You can find details about this in Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy.

Amazon Associates Program

As the operator of this website, we participate in the Amazon EU Associates Program. Amazon advertisements and links to Amazon are incorporated into our pages to earn money through advertising fees. Amazon cookies are used, through which Amazon detects that you have clicked on a partner link on our website.

“Amazon cookies” are stored on the basis of Article 6(f) of the GDPR. As the operator of this website, we have a legitimate interest here, since the amount of the advertising fees can only be determined using the cookies.

You can find details about Amazon’s data use in Amazon’s privacy notice: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.

Google AdSense

Our website uses Google AdSense. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google AdSense is used to incorporate advertisements and it sets cookies. Cookies are small text files that your web browser stores on your device in order to analyze use of the website. Google AdSense also uses web beacons. Web beacons are invisible graphics that allow analysis of visitor traffic on our website.

Data generated by cookies and web beacons is transferred to Google servers and stored there. The servers are located in the USA. Google may pass this information on to contractual partners. However, Google will not merge your IP address with any of your other data that is stored.

AdSense cookies are stored on the basis of Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in the analysis of user behavior in order to optimize our website and advertising.

Modern web browsers allow you to monitor, restrict or prevent the setting of these cookies. Deactivating cookies may result in limited functionality of our website. By using our website, you declare your consent to the processing of the data collected about you by Google in the manner previously described and for the previously specified purposes.

Google AdWords and Google conversion tracking

Our website uses Google AdWords. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. Within the online advertising program, we work with conversion tracking. After clicking on an advertisement placed by Google, a conversion tracking cookie is set. Cookies are small text files that your web browser stores on your device. Google AdWords cookies lose their validity after 30 days and are not used for personal identification of users. From the cookie, both we and Google can detect that you have clicked on an advert and been redirected to our website.

Each Google AdWords customer receives a different cookie. Cookies cannot be tracked via websites of AdWords customers. With conversion cookies, conversion statistics are compiled for AdWords customers who use conversion tracking. AdWords customers can find out how many users have clicked on their ad and been redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that would allow personal identification of users. If you do not want to partake in tracking, you can object to its use. In this case, the conversion cookie needs to be deactivated in the user settings for the browser. As a result, nothing will be recorded in the conversion tracking statistics.

“Conversion cookies” are stored on the basis of Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in the analysis of user behavior in order to optimize our website and advertising.

You can find details about Google AdWords and Google conversion tracking in Google’s privacy policy: https://www.google.de/policies/privacy/.

Modern web browsers allow you to monitor, restrict or prevent the setting of these cookies. Deactivating cookies may result in limited functionality of our website.

Google web fonts

Our website uses Google’s web fonts. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The use of these web fonts allows our website to be displayed to you with the presentation that we want, regardless of which fonts are available to you locally. This involves retrieving the Google web fonts from a Google server in the USA and the associated transfer of your data to Google. Your IP address and information on which of our pages you visited is passed on in this process. Google web fonts are used on the basis of Article 6(1)(f) of the GDPR. As operator of this website, we have a legitimate interest in having our web presence presented and rendered optimally.

The company Google is certified for the EU-US “Privacy Shield” framework. This data protection agreement is intended to ensure compliance with the current privacy standards in the EU.

You can find details about Google web fonts at: https://www.google.com/fonts#AboutPlace:about and further information in Google’s privacy policy: https://policies.google.com/privacy/partners?hl=de