Privacy policy

The controller within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
DER TEUFELHOF BASEL
Raymond Hunziker 
Director 
Leonhardsgraben 47-49
CH-4051 Basel
+41 (0) 61 261 10 10
carmen.schwarb@teufelhof.com
www.teufelhof.com

Confidentiality of personal data

All our employees who handle personal data in the course of their work are obliged to maintain confidentiality and to handle data processing systems properly.

Your data subject rights

You can exercise the following rights at any time using the contact details of our data protection officer provided:

• information about your data stored by us and its processing,
• correction of inaccurate personal data,
• deletion of your data stored by us,
• restriction of data processing, provided that we are not yet permitted to delete your data due to legal obligations,
• objection to the processing of your data by us, and
• data portability, provided that you have consented to data processing or have concluded a contract with us.

If you have given us consent, you may withdraw it at any time with effect for the future.
You may contact the supervisory authority responsible for you at any time with a complaint. The supervisory authority responsible for you depends on the federal state of your place of residence, your place of work, or the alleged infringement. A list of the supervisory authorities in Germany with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
We will be happy to assist you in identifying the appropriate complaints office.

Purposes of data processing by the controller and third parties

We process your personal data only for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those stated. We only pass on your personal data to third parties if:

• you have given your express consent,
• processing is necessary for the performance of a contract with you,
• processing is necessary for compliance with a legal obligation, processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

Deletion or blocking of data

We adhere to the principles of data minimisation and data avoidance. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the various statutory retention periods provided for by the legislator. Once the respective purpose ceases to apply or these periods expire, the corresponding data will be routinely blocked or deleted in accordance with legal requirements.

Collection of general information when visiting our website

When you access our website, general information is automatically collected via a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and similar information. This is exclusively information that does not allow any conclusions to be drawn about your identity.
This information is technically necessary in order to correctly deliver the content of websites requested by you and is inevitably generated when using the Internet. It is processed in particular for the following purposes:

• ensuring a smooth connection to the website,
• ensuring smooth use of our website,
• evaluating system security and stability, and
• for further administrative purposes.

The processing of your personal data is based on our legitimate interest in collecting data for the aforementioned purposes. We do not use your data to draw conclusions about your identity. The recipients of the data are only the controller and, where applicable, processors.
Anonymous information of this kind is analysed by us statistically where necessary in order to optimise our website and the technology behind it.

Cookies

Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard drive. This automatically gives us certain data such as IP address, browser used, operating system and your connection to the Internet.
Cookies cannot be used to start programmes or transmit viruses to a computer. The information contained in cookies helps us make navigation easier for you and enables the correct display of our websites.
In no case will the data collected by us be passed on to third parties or linked to personal data without your consent.
Of course, you can generally view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Registration on our website

When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data such as telephone number and e-mail address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option, if necessary, to change or delete the data provided during registration at any time. Of course, we will also provide you with information at any time about the personal data stored by us about you. We will also be happy to correct or delete this data at your request, provided there are no statutory retention obligations to the contrary. To contact us in this regard, please use the contact details provided at the end of this privacy notice.

Transfer to third parties / obligations of processors

Your personal data may be transferred by us to processors and to third parties who need to be involved in the provision of the services you have requested, all of whom have committed themselves to us to comply with the applicable data protection standards. If compliance with European data protection standards is not possible - for example because standard contractual clauses, adequacy decisions or certifications cannot be guaranteed in the specific case - we will inform you in good time and also obtain the necessary consents from you.
In addition, your data (e-mail address) is processed once via Revinate Inc. for the purpose of submitting a review of your stay in one of our hotels. We treat your information confidentially in accordance with the applicable data protection regulations. You may object to the use of personal data at any time.
In this regard, we refer to the privacy policies of Revinate, in particular the information available at the following link: https://www.revinate.com/privacy/ 
Your personal data will not be passed on to unrelated third parties unless there is a legal obligation to do so or you have previously given your consent.

Provision of chargeable services

To provide chargeable services, we request additional data, such as payment details, in order to process your order. We store this data in our systems until the statutory retention periods have expired.

SSL encryption

To protect the security of your data during transmission, we use encryption methods corresponding to the current state of the art (e.g. SSL) via HTTPS.

Newsletter

Based on your expressly given consent, we will regularly send you our newsletter or similar information by e-mail to the e-mail address you provided.
For receiving the newsletter, it is sufficient to provide your e-mail address and your name. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (for example changes to the newsletter offer or technical circumstances).
For valid registration, we require a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double opt-in" procedure. For this purpose, we record the order of the newsletter, the sending of a confirmation e-mail and the receipt of the response requested by this means. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
You may withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time. Each newsletter contains a corresponding link for this purpose. You can also unsubscribe at any time via the contact options stated at the beginning of this privacy notice.

Facebook & Twitter plug-ins

We use Facebook social plug-ins from the social network Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland, and Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons that enable Facebook to measure who accesses our website. If the visitor is also registered and logged in as a user with Facebook, further information is stored by Facebook. Facebook receives your IP address for technical reasons. We have no influence over the use of this data by Facebook. In this regard, we refer to Facebook's privacy policies, in particular the information available at the following link:  https://www.facebook.com/help/568137493302217.

There you will also find information on how you can block Facebook social plug-ins with your browser.
The "Like" plugin from Facebook is not used on our website.
We have integrated the plugins into our website in such a way that no automatic connection is established with the Facebook servers. You can recognise the Facebook button by the white "f" on a blue background. If you wish to use the social plugins, click on the respective button. Only then is a connection to Facebook activated.

We use plugins from the social network twitter.com on our website. This is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. A list of the current plugins can be found on the page http://twitter.com/about/resources/logos.
We have integrated the Twitter plugins into our website in such a way that no automatic connection is established with the Twitter servers. You can recognise the Twitter button by the "flying white bird" on a blue background. If you wish to use the social plugins, click on the respective button. Only then is a connection to Twitter activated.
As soon as you activate the button by clicking it, a connection to the Twitter servers is established. This tells Twitter that you have visited our site. In addition to your IP address, data about the web browser used may also be collected. If you are logged in to Twitter as a member and visit our website, Twitter will assign the above information to your account.
If you want to prevent Twitter from assigning this information to your account, you must log out of Twitter before visiting our website. We would like to point out that, as the provider of the pages, we do not receive any precise knowledge of the content of the data transmitted or its use by Twitter. Further information on this can be found in Twitter's privacy policy at http://twitter.com/privacy

Contact form

If you contact us by e-mail or contact form regarding any questions, you give us your voluntary consent for the purpose of contacting you. A valid e-mail address is required for this purpose. This serves to assign the enquiry and subsequently respond to it. The provision of further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. Once your enquiry has been dealt with, personal data will be automatically deleted.

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). Google Analytics uses so-called "cookies", text files stored on your computer that enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address is first truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
The purposes of data processing lie in evaluating the use of the website and compiling reports on website activity. On the basis of the use of the website and the Internet, further related services are to be provided. The processing is based on the legitimate interest of the website operator.
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website in full. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. This installs an opt-out cookie on your device. This will prevent Google Analytics from collecting data for this website and for this browser in future, as long as the cookie remains installed in your browser.

Use of script libraries (Google Webfonts)

In order to present our content correctly and attractively across browsers, we use script libraries and font libraries on this website, such as Google Webfonts (https://www.google.com/webfonts/). To avoid multiple loading, Google Webfonts are transferred to your browser cache. If the browser does not support Google Webfonts or prevents access, content will be displayed in a standard font.
Calling up script libraries or font libraries automatically establishes a connection to the provider of the library. In theory, it is possible - although it is currently unclear whether and, if so, for what purposes - that the providers of such libraries collect data.
You can find Google's privacy policy for the library provider here: https://www.google.com/policies/privacy/

Use of Google Maps

This website uses the Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about the use of map functions by visitors. Further information about data processing by Google can be found in Google's privacy notices. There you can also change your personal privacy settings in the privacy centre.
You can find detailed instructions on managing your own data in connection with Google products here.

Embedded YouTube videos

We embed YouTube videos on some of our web pages. The operator of the relevant plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection is established to YouTube servers. YouTube is informed which pages you visit. If you are logged in to your YouTube account, YouTube can assign your browsing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
If a YouTube video is started, the provider uses cookies that collect information about user behaviour.
If you have deactivated the storage of cookies for the Google Ad programme, you will not have to expect such cookies when watching YouTube videos either. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at "Youtube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/

Google AdWords

Our website uses Google Conversion Tracking. If you have reached our website via an advert placed by Google, a cookie is set on your computer by Google Adwords. The cookie for conversion tracking is set when a user clicks on an advert placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the advert and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advert and were redirected to a page equipped with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in tracking, you can reject the setting of a cookie required for this purpose - for example by browser settings that generally deactivate the automatic setting of cookies or by configuring your browser so that cookies from the domain "googleleadservices.com" are blocked.
Please note that you must not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all of your cookies in the browser, you must set the respective opt-out cookie again.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. The function serves to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which enables the visitor to be recognised when visiting websites that are part of Google's advertising network. On these pages, the visitor can be shown adverts that relate to content which the visitor has previously viewed on websites that use Google's remarketing function.
According to Google, no personal data is collected in this process. If you nevertheless do not want Google Remarketing, you can generally deactivate it by making the relevant settings under http://www.google.com/settings/ads . Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp .

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the data protection officer
If you have any questions about data protection, please send us an e-mail or contact the person in our organisation responsible for data protection directly:
Raphael Wyniger