Data protection

Obwalden Tourismus OT AG (Bahnhofplatz 1, 6060 Sarnen, Switzerland) operates the obwalden-tourismus.ch website and is therefore responsible for the collection, processing and use of your personal data and the compliance of data processing with Swiss law.

Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate security. It goes without saying that we comply with the legal provisions of the Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and, where applicable, other data protection regulations, in particular the General Data Protection Regulation of the European Union (GDPR).

So that you know what personal data we collect from you and for what purposes we use it, please take note of the following information.

1. scope and purpose of the collection, processing and use of personal data

a. when visiting obwalden-tourismus.ch

When you visit our website, our servers temporarily store every access in a log file. The following data is recorded without any action on your part and stored by us until it is automatically deleted after twelve months at the latest:

• die IP-Adresse des anfragenden Rechners
• das Datum und die Uhrzeit des Zugriffs
• der Name und die URL der abgerufenen Datei
• die Website, von der aus der Zugriff erfolgte
• das Betriebssystem Ihres Rechners und der von Ihnen verwendete Browser
• das Land von welchem Sie zugegriffen haben und die Spracheinstellungen bei Ihrem Browser
• der Name Ihres Internet-Access-Providers

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability in the long term and enabling the optimization of our website, as well as for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR. The IP address is used in particular to record the country of residence of the website visitor and to preset the language of the website accordingly. Furthermore, in the event of an attack on the network infrastructure of obwalden-tourismus.ch or in the event of suspicion of other unauthorized or abusive website use, the IP address is evaluated for clarification and defense and, if necessary, used in the context of criminal proceedings for identification and for civil and criminal proceedings against the users concerned.

In addition, we use so-called pixels and cookies for the use of web analysis services when you visit our website. You will find more detailed information on this in sections 5 and 6 of this privacy policy.

b. when using our contact form

You have the option of using a contact form to get in touch with us. It is mandatory to enter the following personal data:

• Vor- und Nachname
• Adresse (Strasse, Hausnummer, Ort, Postleitzahl (freiwillig))
• Telefonnummer (freiwillig)
• E-Mail-Adresse
• Ihr Anliegen
• Anti-Spam-Code

We will mark the mandatory entries in the form with an *. If this information is not provided, this may hinder the provision of our services. The provision of other information is optional and has no influence on the use of our website.

We only use this data to answer your contact request in the best possible and personalized way. We have a legitimate interest in processing your contact request within the meaning of Art. 6 para. 1 lit. f GDPR. You can object to this data processing at any time (contact section 13).

c. when registering for our newsletter

You have the option of subscribing to our newsletter on our website. Registration is required for this. The following data must be provided as part of the registration process:

• Vorname
• Nachname
• E-Mail-Adresse

The above data is absolutely necessary for data processing. We process this data exclusively in order to personalize the information and offers sent to you and to better tailor them to your interests.

By registering, you give us your consent to process the data provided for the regular sending of the newsletter to the address you have provided and for the statistical evaluation of user behavior and the optimization of the newsletter. This consent constitutes our legal basis for the processing of your e-mail address within the meaning of Art. 6 para. 1 lit. a GDPR. We are entitled to commission third parties with the technical processing of advertising measures and are entitled to pass on your data for this purpose (see section 2 below).

At the end of each newsletter you will find a link that you can use to unsubscribe from the newsletter at any time. When unsubscribing, you can voluntarily inform us of the reason for unsubscribing. After unsubscribing, your personal data will be deleted. Further processing only takes place in anonymized form to optimize our newsletter.

We expressly refer to the data analyses in the context of sending newsletters (see Section 9.).

d. when using a contact form to participate in an event or a competition as part of thecompetition as part of the "Obwalden Seminarhotels" seminar campaign

You have the option of using a contact form to take part in an event or a competition as part of the "Obwalden Seminarhotels" seminar campaign. The following personal data must be entered:

• Firma
• Vor- und Nachname
• Funktion
• Adresse (Strasse, Hausnummer, Ort, Postleitzahl)
• Telefonnummer
• E-Mail-Adresse
• Anti-Spam-Code

We will mark the mandatory entries in the form with an *. Failure to provide this information may hinder the provision of our services.

Please note that we will forward the above data relevant to the organization of the event or competition to the service providers and partner companies involved. They will process your data in order to carry out the event or competition. However, we will also include your data in our central database and process it there for marketing purposes (e.g. direct mailings, company visits, e-mail messages, etc.) as part of the "Obwalden Seminar Hotels" seminar campaign. At your request, your data will be deleted at any time (see section 12 of our privacy policy). The legality of the data processing carried out until the revocation remains unaffected by the revocation.

2. disclosure of data to third parties

We will only pass on your personal data if you have expressly consented to this (e.g. as part of our "Obwalden Seminar Hotels" seminar campaign, see section 1d), if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and Obwalden Tourism.

In addition, we pass on your data to third parties insofar as this is necessary in the context of using the website to provide the services you have requested and to analyze your user behavior. If this is necessary for the purposes mentioned in sentence 1, the data may also be transferred abroad. If the website contains links to third-party websites, Obwalden Tourism no longer has any influence on the collection, processing, storage or use of personal data by the third party after you click on these links and accepts no responsibility for this. For further information regarding the processing of your personal data by the linked websites, please consult the respective privacy policies of the websites.

3. transfer of personal data abroad

Obwalden Tourism is also entitled to transfer your personal data to third-party companies (contracted service providers) abroad if this is necessary for the data processing described in this privacy policy. These companies are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.

4. data security

We use suitable technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

You should always keep your payment information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.

We also take data protection within the company very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and to comply with data protection regulations. Furthermore, they are only granted access to personal data to the extent necessary.

5. cookies

Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically saves on your computer's hard disk when you visit our website. Cookies do not damage your computer's hard disk, nor do they transmit personal user data to us.

We use cookies, for example, to better tailor the information, offers and advertising displayed to you to your individual interests. Their use does not result in us receiving any new personal data about you as an online visitor. Most Internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in the most common browsers:

• Microsofts Windows Internet Explorer
• Microsofts Windows Internet Explorer Mobile
• Mozilla Firefox
• Google Chrome für Desktop
• Google Chrome für Mobile
• Apple Safari für Desktop
• Apple Safari für Mobile

If you deactivate cookies, you may not be able to use all the functions of our website.

6. tracking tools

a. Google Analytics

The website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google Analytics uses methods that enable the use of the website to be analyzed, such as cookies (Cookies Section 5). The information generated by the cookie about your use of this website such as

• Navigationspfad, den ein Besucher auf der Website beschreitet,
• Verweildauer auf der Website oder Unterseite,
• die Unterseite, auf welcher die Website verlassen wird,
• das Land, die Region oder die Stadt, von wo ein Zugriff erfolgt,
• Endgerät (Typ, Version, Farbtiefe, Auflösung, Breite und Höhe des Browserfensters) und
• Wiederkehrender oder neuer Besucher
• Browser-Typ/-Version
• Verwendetes Betriebssystem
• Referrer URL (die zuvor besuchte Seite)
• Hostname des zugreifenden Rechners (IP-Adresse)
• Uhrzeit der Serveranfrage

are transferred to servers of Google, a company of the holding company Alphabet Inc, in the USA and stored there (note on data transfers to the USA, Section 10). The IP address is shortened by activating IP anonymization ("anonymizeIP") on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area or Switzerland. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In these cases, we use contractual guarantees to ensure that Google complies with an adequate level of data protection.

The information is used to evaluate the use of the website, to compile reports on the activities on the website and to provide further services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of the website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. According to Google, under no circumstances will the IP address be associated with other data relating to the user.

Users can prevent Google from collecting the data generated by the cookie and relating to the use of the website by the user concerned (including the IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, users can click this link to prevent Google Analytics from collecting data on the website in the future. An opt-out cookie will be stored on the user's device. If the user deletes cookies (cookies section 5), the link must be clicked again.

Further information can be found in the respective Google privacy policies & terms of use.

7. social media plugins

The social media plugins described below are used on the website. The plugins are deactivated on our website by default and therefore do not send any data. You can activate the plugins by clicking on the corresponding social media button.

If these plugins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you visit one of our websites. The content of the plugin is transmitted directly from the social network to your browser, which integrates it into the website. The plugins can be deactivated again with one click.

Further information can be found in the respective privacy policies and terms of use of Facebook and Google.

8. links to our social media presences

We have included links to our social media profiles on the following social networks on our website:

• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA,
• YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA, und
• Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you click on the relevant social network icons, you will be automatically redirected to our profile on the relevant network. In order to use the functions of the relevant network there, you must log in to your user account with the relevant network.

When you access a link to one of our social media profiles, a direct connection is established between your browser and the server of the relevant social network. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while you are logged into your account with the relevant network, the content of our site may be linked to your profile on the network, which means that the network can directly associate your visit to our website with your user account. If you wish to prevent this, you should log out before clicking on the relevant links. An assignment will take place in any case if you log in to the relevant network after clicking on the link.

9. evaluation of newsletter usage

If the user wishes to receive the newsletter offered on the website, the operator requires a valid e-mail address as well as information that allows him to verify the ownership of the e-mail address provided. This guarantees that the user agrees to receive the newsletter. Furthermore, the surname and first name are collected. This data is used exclusively for sending the requested information. This data will not be passed on to third parties. The consent given to the storage of the data, the e-mail address and its use for sending the newsletter can be revoked at any time, for example via the "Unsubscribe" link in the newsletter.

10. note on data transfers to the USA

For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland or the European Union that there are surveillance measures by US authorities in the USA that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland or the European Union to the USA. This is done without differentiation, restriction or exception based on the objective pursued and without an objective criterion that makes it possible to restrict the US authorities' access to the data and its subsequent use to very specific, strictly limited purposes that are capable of justifying the interference associated with both access to this data and its use. We would also like to point out that there are no legal remedies available in the USA for data subjects from Switzerland and the European Union that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective legal protection against general access rights of US authorities. We explicitly draw the attention of data subjects to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.

We would like to point out to users residing in a member state of the EU that the USA does not have an adequate level of data protection from the perspective of the European Union - partly due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google, Facebook and Twitter ) are based in the USA, we will ensure that your data is protected at an appropriate level by our partners either through contractual arrangements with these companies or by ensuring that these companies are certified under the EU-US Privacy Shield.

11. right of access, rectification, erasure and restriction of processing; right to data portability

You have the right to receive information about the personal data that we store about you free of charge upon request. In addition, you have the right to rectification of incorrect data and the right to erasure of your personal data, provided that this does not conflict with a statutory retention obligation or a permission that allows us to process the data. In accordance with Articles 18 and 21 GDPR, you also have the right to request the restriction of data processing and to object to data processing.

You also have the right to request that we return the data that you have provided to us (right to data portability). On request, we will also forward the data to a third party of your choice. You have the right to receive the data in a commonly used file format.

You can contact us for the aforementioned purposes via the e-mail address info@kdsb.ch (contact section 13). We may, at our discretion, request proof of identity in order to process your requests.

You can also tell us what you want to happen to your data after your death by giving us appropriate instructions.

12. storage of data

We only store personal data for as long as is necessary,

• um die oben genannten Tracking-, Werbe- und Analysedienste im Rahmen unseres berechtigten Interesses zu verwenden;
• um in dem oben genannten Umfang Dienstleistungen auszuführen, die Sie gewünscht oder zu denen Sie Ihre Einwilligung erteilt haben (z.B. zu Newsletter gem. Ziff. 9 oder der Seminarkampagne gem. Ziff. 1d); und
• um unseren gesetzlichen Verpflichtungen nachzukommen.

Contract data is stored by us for longer as this is required by statutory retention obligations. Retention obligations that oblige us to retain data arise from accounting and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

13. contact

If you have any questions about data protection on our website, would like information or would like to have your data deleted, please get in touch with us by filling in the relevant online contact form or sending an e-mail to info@kdsb.ch.

Please send your request by letter to the following address:

Obwalden Tourism
Bahnhofplatz 1
CH-6060 Sarnen

14. right to lodge a complaint with a data protection supervisory authority

If you are resident in an EU country, you have the right to lodge a complaint with a data protection supervisory authority at any time.

General

This page was last modified on August 21, 2018. If you have any questions or comments about our legal information or data protection, please contact us at info@kdsb.ch.

Netiquette

We do not want to read any infringing, offensive or punishable statements and discussions on our site. If users, our organization or third parties are defamed, we reserve the right to delete these posts without comment, as they do not comply with this netiquette.