Data protection

The responsible body in the context of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
DER TEUFELHOF BASEL
Carmen Schwarb
Assistent to the director
Leonhardsgraben 47-49
CH-4051 Basel
+41 (0) 61 261 10 10
carmen.schwarb@teufelhof.com
www.teufelhof.com

Confidentiality of personal data

All of our employees who handle personal data in the course of their work are bound to secrecy and the proper handling of data processing systems.

Your rights as a data subject

You can exercise the following rights at any time using the contact details provided by our data protection officer:

Information about your data stored with us and their processing,
Correction of incorrect personal data,
Deletion of your data stored with us,
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
Objection to the processing of your data by us and
Data transferability if you have consented to data processing or have concluded a contract with us.

If you have given us your consent, you can revoke it at any time with effect for the future.
You can contact your local supervisory authority at any time with a complaint. Your competent supervisory authority depends on your federal state of residence, work or the alleged infringement. A list of the supervisory authorities in Germany and their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
We will be happy to help you evaluate the complaints office.

Purposes of data processing by the responsible body and third parties

We process your personal data only for the purposes stated in this privacy statement. Your personal data will not be passed on to third parties for purposes other than those mentioned. We will only pass on your personal data to third parties if:

you have given your express consent,
processing is necessary to process a contract with you,
the processing is necessary to fulfil a legal obligation, the processing is necessary to safeguard legitimate interests and there is no reason to believe that you have an overriding interest worthy of protection in the non-disclosure of your data.

Deletion or blocking of the data

We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as provided for in the various storage periods provided for by law. After the respective purpose or expiry of these periods, the corresponding data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions.
Collection of general information when you visit our website
When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and similar information. This is exclusively information that does not allow any conclusions to be drawn about your person.
This information is technically necessary in order to correctly deliver the content you have requested from websites and is mandatory when using the internet. They are processed in particular for the following purposes:

ensuring a trouble-free connection of the website,
ensuring smooth use of our website,
evaluating system security and stability as well as
for other administrative purposes.

The processing of your personal data is based on our legitimate interest from the aforementioned purposes for data collection. We do not use your data to draw conclusions about you personally. The recipients of the data are only the responsible body and, if applicable, the contract processor.
Anonymous information of this kind may be statistically evaluated by us in order to optimise our internet presence and the technology behind it.

Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system and your connection to the internet.
Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages.
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser’s settings. Please use the help functions of your internet browser to find out how you can change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.

Registration on our website

When registering to use our personalised services, some personal data are collected, such as name, address, contact and communication data such as telephone number and email address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if required. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will be happy to correct or delete them at your request, provided that there are no legal storage obligations to the contrary. To contact us in this context, please use the contact details given at the end of this privacy statement.

Transmission to third parties / obligations of order processors

We may share your personal information with contractors and third parties who are required to provide the services you request, all of whom have agreed to comply with applicable data protection standards. If compliance with European data protection standards is not possible - for example because standard contractual clauses, decisions on appropriateness or certifications are not guaranteed in a specific case - we will inform you in good time and also obtain the necessary consents from you.
In addition, your data (email address) will be processed once by Revinate Inc. for submission to evaluate your stay in one of our hotels. We treat your data confidentially in accordance with the applicable data protection regulations. You can object to this use of personal data at any time.
In this regard, we refer to Revinate’s privacy statements, in particular the information available under the following link: https://www.revinate.com/privacy/
Your personal data will not be passed on to uninvolved third parties unless there is a legal obligation to do so or you have given your prior consent.

Provision of chargeable services

For the provision of chargeable services, we ask for additional data, e.g. payment details, in order to be able to execute your order. We store these data in our systems until the legal retention periods have expired.
SSL encoding
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

On the basis of your explicit consent, we will regularly send you our newsletter or comparable information by email to your specified email address.
To receive the newsletter, it is sufficient to provide your email address and your name. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be notified by email of circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).
For an effective registration we need a valid email address. In order to verify that a registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose we log the order of the newsletter, the sending of a confirmation email and the receipt of the requested answer. Further data will not be collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.
You can revoke your consent to the storage of your personal data and their use for the newsletter dispatch at any time. In each newsletter you will find a corresponding link. In addition, you can unsubscribe at any time via the contact option indicated at the beginning of this data protection information.

Facebook & Twitter Plug-Ins

We use Facebook social plug-ins from the social network Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square Dublin 2, Ireland, and Facebook Inc, 1601 S. California Avenue, Palo Alto, CA 94303, USA. These plug-ins are buttons that Facebook uses to measure who visits our website. If the visitor is registered and logged in as a user on Facebook at the same time, further information is also stored by Facebook. Facebook receives your IP address for technical reasons. We have no control over the use of this information by Facebook. In this regard, we refer to Facebook’s privacy statements, in particular the information available under the following link: https://www.facebook.com/help/568137493302217.

You will also find information on how to block Facebook Social Plug-Ins with your browser.
The “Like” plug-in from Facebook is not used on our website.
We have integrated the plug-ins into our website in such a way that no automatic connection to the Facebook servers is established. You can recognise the Facebook button by the white “f” on a blue background. If you want to use the social plug-ins, click on the respective button. Only then is a connection to Facebook activated.

We use plug-ins of the social network twitter.com on our website. This is operated by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. A list of the current plug-ins can be found on the page at http://twitter.com/about/resources/logos.
We have integrated the Twitter plug-ins into our website in such a way that no automatic connection to the Twitter servers is established. You can recognize the Twitter button by the “flying white bird” on a blue background. If you want to use the social plug-ins, click on the respective button. Only then is a connection to Twitter activated.
As soon as you activate the button by clicking on it, a connection to the Twitter servers is established. This will tell Twitter that you have visited our site. In addition to your IP address, data may also be collected via the web browser used. If you are logged in to Twitter as a member and visit our website, Twitter will associate the above information with your account.
If you do not want Twitter to associate this information with your account, you must log out of Twitter before visiting our website. We would like to point out that, as the provider of the pages, we do not have precise knowledge of the content of the data transmitted or of how it is used by Twitter. For more information, please see Twitter’s privacy statement at http://twitter.com/privacy

Contact form

If you contact us regarding any questions by email or contact form, please give us your voluntary consent for the purpose of contacting us. A valid email address is required for this purpose. This is used to assign the request and then reply to it. The specification of further data is optional. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions. After your request has been processed, your personal data will be automatically deleted.

Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc: (hereinafter: Google). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will previously be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Other related services will then be provided based on the use of the website and the internet. The processing is based on the legitimate interest of the website operator.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser add-on for the deactivation of Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An opt-out cookie is installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in future as long as the cookie remains installed in your browser.

Use of script libraries (Google Web Fonts)

In order to present our contents correctly and in a graphically appealing way across all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web Fonts are transferred to your browser’s cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
Calling script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is possible - but currently also unclear whether and, if so, for what purposes - for operators of corresponding libraries to collect data.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Use of Google Maps

This website uses Google Maps API to display geographical information visually. When using Google Maps, Google also collects, processes and uses data about the use of map functions by visitors. You can find more information about Google’s data processing in the Google Privacy Policy. There you can also change your personal data protection settings in the Data Protection Centre.
Detailed instructions for managing your own data in connection with Google products can be found here.

Embedded YouTube videos

On some of our websites we embed YouTube videos. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA is the operator of the corresponding plug-ins. When you visit a page with the YouTube plug-in, a connection to YouTube servers is established. YouTube will be informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.
If a YouTube video is started, the provider uses cookies that collect information about user behaviour.
If you have deactivated the storage of cookies for the Google Ad program, you will not have to consider such cookies when viewing YouTube videos. YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the saving of cookies in your browser.
Further information on data protection at “YouTube” can be found in the provider’s privacy statement under: https://www.google.de/intl/de/policies/privacy/

Google AdWords

Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google AdWords will place a cookie on your computer. The conversion tracking cookie is placed when a user clicks on an ad served by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can refuse the placing of a cookie required for this - for example via browser settings that generally deactivate the automatic placing of cookies or set your browser so that cookies are blocked by the “googleleadservices.com” domain.
Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. to present interest-based advertisements to website visitors within the Google advertising network. A “cookie” is stored in the visitor’s browser, which makes it possible to recognise the visitor when he or she visits websites that belong to Google’s advertising network. These pages may contain advertisements that refer to content that the visitor has previously viewed on websites that use Google’s remarketing feature.
According to its own statements, Google does not collect any personal data in this process. However, if you do not wish to use Google’s remarketing function, you can always deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising through the Advertising Network Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
Changes to our data protection regulations
We reserve the right to adapt this privacy statement so that it always complies with current legal requirements or to implement changes to our services in the privacy statement, e.g. when introducing new services. The new privacy statement will then apply for your next visit.

Questions to the data protection officer

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organisation directly: Raphael Wyniger