The following companies (also referred to as "we" and "us") are responsible for data processing in accordance with this Privacy Policy:

Fam. Jochen Bumann, Haus Helvetia, 3906 Saas-Fee This email address is being protected from spambots. You need JavaScript enabled to view it.

“Personal data" means all information that can be associated with a particular natural person, including for example:

• contact information/details, e.g. name/company ("name"), address, e-mail address;

• further personal information, e.g. gender, date of birth, nationality; passport photo;

• purchasing data, such as information on purchases, shopping carts, preferences regarding certain product categories;

• information about your visits to our websites and the use of our apps;

• possibly information on whether you are the owner of other products (e.g. SwissPass, Skidata KeyCARD, Citizens’ Pass) which can be combined and/or offered in combination with our products.

This Privacy Policy applies to the processing of personal data that have already been collected and will be collected from you in the future.

We generally collect your personal data from you directly, e.g. when you communicate with us, when you visit our website or use an offer online or via an app. However, your personal data may also be collected indirectly, e.g. if you order one of our offers for your whole family and we require personal details for this or if you receive one of our offers as a gift.


By„processing“ we mean any form of handling of your personal data, including for example:

• the collection and storage;

• the organisation and management;

• the adaptation and modification;

• the reading and retrieval;

• the use and application;

• the transfer and disclosure;

• the combination;

• the restriction; and

• the erasure and destruction of personal data.

You decide which personal data you wish to disclose to us. If you benefit from one of our offers and/or use one of our services which we offer on our website, the personal data collected in each case may be different.

As a rule, you are not obliged to provide us with certain information. However, we can often only reply to you or make our services and online offers fully available to you if you provide us with certain personal data and we can process them.


3.1. Visit to our website

When you access our website, technical information (e.g. IP address, date and time of access, country from which you are accessing the website) is automatically forwarded to our server by the browser used on your end device and temporarily stored with us (so-called "log data").

We use these data to provide the website, for reasons of IT security and to improve the user-friendliness of the website.

We also use „Cookies“; these are files that are stored on your end devise when you visit our website. Cookies are often required for the functionality of our website and are automatically deleted after your visit (so-called „sessions cookies“). Other cookies are used to personalise the offer and are stored for a certain period of time (so-called „permanent cookies“). However, you have the option of setting your browser to notify you when your receive a cookie or to refuse it automatically. However, rejeting a cookie may mean that you cannot or can no longer use certain functions on our website.

Furthermore, we use various analysis services (e.g. Google Analytics and similar providers) or social plug-ins (e.g. Facebook) with which detailed information about the behaviour of the users of our website is collected. We can also integrate functions of social media providers, which can lead to the respective provider receiving data about you. In addition, we use other services from similar providers to analyse the behaviour of our website’s users and thus optimise our offer. However, in most cases we do not know the names of website visitors.


3.2. Communication

We will collect personal data when you contact us through one of the following communication channels. We process your personal data in order to handle and answer your concerns and questions. Furthermore, we are at your disposal for questions in connection with other processing purposes.

There are several ways to communicate with us. You can reach us by phone through our customer service (phone no. +41 27 958 66 77) or contact our support by e-mail (This email address is being protected from spambots. You need JavaScript enabled to view it.). Naturally, you can also send us a letter to the following address. If you use our contact form, your message will be sent to a configured e-mail address and your data will be stored temporarily as a backup on the website.

Your details such as name and contact information (e-mail/address) as well as the content and time of your message are usually sufficient for us. We use these data to process your request and to communicate with you for this purpose and to ensure the quality of our communication with you in the future. If your request concerns other involved parties of our business partners or our group, we will forward your details so that your request can be dealt with as quickly as possible and to your satisfaction.

Furthermore, you have the possibility to register for different offers/events via a contact form. In this case, we may collect additional – possibly particularly sensitive – data which are necessary for the safe execution of the corresponding event (e.g. eating habits, date of birth, state of health, etc.).

Telephone calls with us may be recorded, of which you will be informed in advance.

If you communicate with us on your own initiative, we understand this as consent to the processing of your personal data. In many cases, the processing of personal data by customer service and the communication by electronic means are also in our legitimate interest as they enable us to communicate with customers and others, improve the quality of our services, avoid errors in our processes and achieve greater customer satisfaction.


3.3. Purchase and use of services

We offer you an extensive range of services. When you make use of such services, we process your personal data mainly in the context of processing contracts or for delivery and invoicing (e.g. contact details, the specific offer which you have booked, the date when you have booked a certain offer). When you book an offer via our website, we will collect personal data in connection with your creditworthiness and payment behaviour. Depending on the offer/service, we may collect additional data which are required for processing (e.g. a passport photo for issuing a ski pass, Swiss ID, etc.). Furthermore, we may collect personal data (e.g. on your purchasing behaviour) in order to inform you in the future about further offers which we can tailor to your needs and your previously observed demand based on your previous information. We may also use your personal data for statistical purposes.


3.4. Online services and applications (apps)

Even if you do not obtain any specific services, when you visit our website we will collect personal data, e.g. information about your registration as a user, information about which offers you have already received via your user account and information about which apps you download and how you use them.


3.5. Information and direct marketing

We will process personal data for sending information and advertising messages. For example, if you register for a newsletter, we will process your personal data in order to get to know you better, to tailor our offers more closely to you and to improve them in the future. To subscribe to our newsletter, you must register by providing us with your e-mail address. You will then receive an e-mail with the message that you should confirm your registration.

You can unsubscribe at any time by clicking on the link at the end of each newsletter.

We understand your registration for an electronic newsletter as consent to the processing of the mentioned personal data for the stated purposes. We also have a legitimate interest in direct marketing and evaluating your response to such advertising. Both are important to us so that we can compete successfully in the market.


3.6. Participation in competitions

From time to time we will hold competitions and contests. If you decide to participate, we will collect your personal data about your participation and your contact details so that we can inform you about the course/results of the competition or contest. Furthermore, we may collect additional personal data – which may also be particularly sensitive – if it is necessary for the execution of the respective competition or contest (e.g. age, state of health). We may also use these data for our own advertising purposes.

More detailed information on the individual events can be found in the corresponding conditions of participation.

If you participate in an event, you agree that we process your personal data for this purpose. The processing also serves legitimate interests. You also agree to the respective conditions of participation. We can thus better and more specifically tailor our services to your needs and interests and expand and improve our offerings. This is important for us so that we can successfully compete in the market.


3.7. Business partners

We work with different companies and business partners in the tourism industry, e.g. with hotels, but also with cooperation partners and other service providers. In the course of preparing and executing contracts we will also process personal data about the contact persons in these companies (e.g. name, function, communication, etc.) for planning and accounting purposes as well as for other purposes related to the respective contract.

This processing is in our legitimate interest because it enables us to use and sell goods and services. We also have a legitimate interest in preventing abuse and ensuring an adequate level of security. Customer care is also in our legitimate interest. If we have a contract with you directly or if you wish to conclude a contract with us directly, we will process your personal data to conclude and process the contract.

If we process particularly sensitive personal data for the purposes mentioned, we usually do so to assert, exercise or defend legal claims or with your express consent.


3.8. Administration

We will process personal data for various administrative purposes, such as the management of orders and online registrations in connection with contract processing, in particular your contact details or information on the specific offer of which you make use. Within the framework of such contract processing, we may also disclose personal data to our partners.

The processing of personal data for the aforementioned purposes may be necessary for the processing of contracts. It is also necessary for the legitimate interest of internal administration.


3.9. Compliance with legal requirements

We will process personal data to comply with legal requirements. This includes, for example, the receipt and processing of complaints and other reports, internal investigations or the disclosure of documents to an authority if we have good reason to do so or are legally obliged to do so.

The processing of personal data for the aforementioned purposes is necessary for compliance with legal obligations and for legitimate interests.


3.10. Protection of rights

We will process personal data in various constellations in order to protect our rights, e.g. to assert claims in court, pre-litigation or out of court and before authorities in Switzerland and abroad or to defend ourselves against claims. For example, we can have the chances of succeeding in court assessed or submit documents to an authority. In doing so, we may process your personal data or disclose them to third parties in Switzerland and abroad, insofar as this is necessary and permissible.

The processing of personal data for the aforementioned purposes may be necessary for the processing of contracts. It is also in our legitimate interest.

You can object to data processing at any time and, as a rule, freely withdraw your consent to data processing. A right to object exists in particular against data processing in connection with direct advertising (e.g. against advertising e-mails).


Right to information

You have the right to be informed transparently, clearly and comprehensively about how we process your personal data and what rights you have in connection with the processing of your personal data. This Privacy Policy fulfils this obligation. If you require further information, please do not hesitate to contact us (see contact details).


Right of access

You have the right to request free access to your personal data stored by us at any time when we process them. This gives you the opportunity to check which personal data we process about you and that we use them in accordance with the applicable data protection regulations. Please contact us.

In individual cases, the right of access may be restricted or excluded, in particular:

• if we have doubts about your identity and you cannot identify yourself;

• for the protection of other persons (e.g. to safeguard confidentiality obligations or the data protection rights of third parties);

• in the case of excessive exercise of the right of access (alternatively, we can charge a fee for access); or

• if full access would generate disproportionate effort.


Right to rectification

You have the right to have inaccurate or incomplete personal data rectified and to be informed of such rectification. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.


Right to erasure

You have the right to have your personal data erased. You can request the erasure of your personal data if:

• the personal data are no longer required for the purposes pursued;

• if you have effectively withdrawn your consent or effectively objected to the processing;

• if the personal data are processed unlawfully.

In this case, we will inform the recipients of the data concerned about the erasure, unless this is impossible or involves disproportionate effort.

In individual cases, the right to erasure may be excluded, in particular if processing is necessary:

• for the exercise of freedom of expression;

• to perform a legal task or if it is in the public interest;

• to exercise legal claims.


Right to restrict processing

Under certain conditions, you have the right to request that the processing of your personal data be restricted. This may mean, for example, that personal data are (provisionally) not processed further or that published personal data are (provisionally) removed from a website. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.


Right to data portability

You have the right to receive the personal data you have provided to us in a readable format free of charge, as long as:

• the specific data processing is based on your consent or is necessary for the fulfilment of a contract; and

• the processing is carried out by automated means.

Depending on the individual case, your personal data may be transferred to you or directly to a third party provider.


Right to lodge a complaint

You have the right to lodge a complaint with a competent supervisory authority against the way in which your personal data are processed.


Right of withdrawal

In principle, you have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.

Our employees have access to your personal data insofar as this is necessary for the purposes described and the activities of the employees concerned. They act in accordance with our instructions and are bound to confidentiality and secrecy when handling your personal data.

We may disclose your personal data to other companies for management, administrative and contract processing purposes in connection with purchases, orders and/or registrations made on the online sales platform. This may be the case in particular in connection with services which you book, for example, via our web shop and which are carried out by one of our business partners (hotels, ski lifts, etc.). Furthermore, we may be contractually obliged to disclose your personal data to this contracting party for the purpose of processing the service you have booked.

Furthermore, we may disclose your personal data to third parties if we wish to make use of their services ("data processor"). In particular, this concerns services in the following areas:

• Administrative work (e.g. accounting);

• Advisory services, e.g. services of tax consultants, lawyers and management consultants;

• IT services, e.g. services with respect to data storage (hosting), cloud services, sending e-mail newsletters, data analysis and data refinement, etc;

• Credit checks, e.g. if you wish to make a purchase via booking platforms, direct reservation systems or on account.

Through the selection of data processors and suitable contractual agreements, we ensure that data protection is also ensured by third parties during the entire processing of your personal data. Our data processors are obliged to process your personal data exclusively on our behalf and according to our instructions.

It is also possible that we will disclose personal data to these and other companies (also) for their own purposes. In these cases, the recipient of the data is a controller under data protection law that will determine the processing of your personal data in its own data protection regulations. This concerns for example the disclosure of personal data to hotels or other accommodation providers through our webshop.

We may also disclose your personal data to third parties (e.g. Swiss and foreign authorities) if required to do so by law. We also reserve the right to process your personal data in order to comply with a court order or to assert or defend legal claims or if we consider it necessary for other legal reasons.

The recipients of your personal data, to whom we disclose personal data for the purpose of e.g. IT services, may be located abroad – sometimes also in countries outside the EU or the EEA. The countries concerned may not have laws that protect your personal data to the same extent as in Switzerland, the EU or the EEA. If we transfer your personal data to such a country, we are obliged to ensure the protection of your personal data in an appropriate manner. One way of achieving this is to conclude data transfer agreements with the recipients of your personal data in third countries, which ensure the necessary data protection. These include agreements approved, issued or recognised by the European Commission and the European Data Protection Commissioner, so-called standard contractual clauses. The transfer to recipients that are subject to the US Privacy Shield Program is also permitted. According to this program, the companies subject to it also have a corresponding level of data protection.

In exceptional cases, the transfer to countries without adequate protection is also permitted in other cases, e.g. based on express consent, to fulfil a contract with the data subject or to process his or her contract application, to conclude or fulfil a contract with someone else in the interest of the data subject, or to assert, exercise or defend legal claims.

We will store and process your personal data for as long as it is necessary or legally prescribed or permitted to achieve the respective processing purpose of the personal data’s collection. For example, we have a legitimate interest in the storage of your personal data as long as they are subject to a retention obligation or storage is necessary for evidentiary or security reasons. Data which we store when you visit our websites will be deleted after twelve months at the latest. We usually store personal data with respect to contracts at least for the duration of the contractual relationship.

We have a legitimate interest in the storage of personal data in order to safeguard legal claims, for archiving purposes, to guarantee IT security or if limitation periods for contractual or non-contractual claims are in force. A limitation period of e.g. ten years often applies, in some cases a limitation period of five years or one year. Furthermore, we must retain your personal data as long as they are subject to a statutory retention obligation.

After the expiry of these periods, we will erase or make anonymous your personal data so that you can no longer be identified or be identifiable.

We have taken appropriate security measures of a technical nature (e.g. encryption, access restrictions, data backup, etc.) and of an organisational nature (e.g. instructions to our employees, etc.) to protect the security of your personal data, including protection against unauthorised or unlawful processing and to counteract the risk of loss, accidental alteration, unintended disclosure or unauthorised access. However, security risks cannot generally be completely ruled out; certain residual risks cannot be avoided.

We take special care to protect children and their personal data. In the case of data processing of children, which may only be carried out on the basis of consent, we will ask the parents or the child’s legal representatives for their consent. If consent for a child has been given by its parents or legal representative, the adult person is free to withdraw this consent at a later date.

This Privacy Policy may change over time, especially if we change our data processing or if new legislation becomes applicable. We will actively inform persons whose contact details are registered with us of such changes in the event of significant changes, if this is possible without disproportionate effort. In general, however, the Privacy Policy in the current version at the start of the respective processing will apply to data processing.

If you have any questions, concerns, requests for access or other comments, you can contact us any time as follows:

Contact details

Family
Jochen Bumann
Haus Helvetia
Dorfstrasse 27
CH-3906 Saas-Fee
Tel. +41 27 958 66 77
This email address is being protected from spambots. You need JavaScript enabled to view it.