Privacy Policy

Achesa Management AG, including Achesa Lifestyle AG and Achesa Homes AG (hereinafter also referred to as “we”, “us”), collects and processes personal data concerning you or other individuals (so-called “third parties”). We use the term “data” here synonymously with “personal data” or “personal information”. In this Privacy Policy, we describe what we do with your data when you use our websites, one of our project or event websites or other websites of ours (including all sub-sites) (hereinafter collectively referred to as “websites”), purchase or use our services or products, communicate with us as part of the execution of contracts or otherwise have dealings with us. In addition, we may inform you separately about the processing of your data (e.g., in forms, contractual terms or additional data protection declarations). If you provide us with data about other persons (e.g., family members, work colleagues), we assume that you are authorized to do so, and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this privacy policy.

Your trust is important to us, which is why we take the issue of data protection seriously and ensure appropriate security. It goes without saying that we comply with the legal provisions of the Federal Act on Data Protection (DPA), the Ordinance to the Federal Act on Data Protection (DPA), the Telecommunications Act (TCA) and other applicable data protection provisions of Swiss or EU law, in particular the General Data Protection Regulation (GDPR).

So that you know what personal data we collect from you and for what purposes we use it, please take note of the following information:

1. Data processing in connection with our website:

1.1 Accessing our websites:

Achesa Management AG operates the following companies and websites:

Achesa Group – www.a-chesa.ch
Achesa Homes – www.achesahomes.ch
Hotel Allegra Lodge – www.allegra-lodge.ch
Hotel Welcome Inn – www.hotel-welcomeinn.ch
Restaurant & Bar Tschadun – www.tschadun.ch
Ristorante Mercato – www.restaurant-mercato.ch
Pizzeria Giardino – www.pizzeria-giardino.ch
Allegra Living Kloten – www.allegra-living.ch

and therefore, responsible for the collection, processing and use of your personal data and the compliance of data processing with the applicable data protection law.

When you visit one of our websites, our servers temporarily store every access in a log file. The following technical data is recorded, as is generally the case with every connection to a web server, without your intervention and stored by us until automated deletion after 24 months at the latest:

• the IP address of the requesting computer
• the name of the owner of the IP address range (usually your Internet access provider)
• the date and time of access
• the website from which the access was made (referrer URL) possibly with the search term used.
• the name and URL of the retrieved file
• the status code (e.g., error message)
• the operating system of your computer
• the browser you are using (type, version and language)
• the transmission protocol used (e.g., HTTP/1.1) and
• if applicable, your username form, a registration/authentication.

This data is collected and processed for the purpose of enabling the use of our website (connection establishment), ensuring system security and stability in the long term, and enabling the optimization of our website as well as for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR and DPA.

The IP address is also evaluated together with the other data in the event of attacks on the network infrastructure or other unauthorized or abusive website use for clarification and defence and, if necessary, used in the context of criminal proceedings for identification and for civil and criminal proceedings against the users concerned. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR and DPA.

The content of our website has been carefully prepared and checked several times, but we assume no liability for the topicality, correctness and completeness of the information provided. Claims for damages due to the use or non-use of the information or due to the use of incorrect or incomplete information are excluded. All offers are subject to change and non-binding. We reserve the right to change, supplement or delete the offer or parts thereof without prior notice or to cease publication of the website temporarily or permanently.

The content and programming of our website are protected by copyright and ancillary copyright. Any duplication – even in part – and public reproduction, in particular the copying of texts, graphics and photos, is prohibited without our prior written consent.

1.2 Use of our contact form:

You have the option of using a contact form to get in touch with us. To do so, we require the following information (*mandatory):

• First and last name*
• e-mail-Adresse*
• Message incl. subject*

We only use this data and the data you provide voluntarily to answer your contact request in the best possible and personalized way. The processing of this data is therefore necessary within the meaning of Art. 6 para. 1 lit. b GDPR for the implementation of pre-contractual measures or is in our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR and DPA.

1.3 Use of the DialogShift chat application on our websites:

Our website uses the chat application of DialogShift GmbH, Rheinsberger Str. 76/77, 10115 Berlin. This application processes and stores data for the purpose of web analysis, operating the chat application and responding to inquiries. To operate the chat function, the chat texts are saved and a cookie with a unique ID is set – this is used to recognize you as a customer. A cookie is a small text file that is stored locally in the cache on your device. With the help of this cookie, our application recognizes the device and can call up past chat logs. This cookie is stored for 90 days since it was last used. You can deactivate the storage of cookies in your browser settings. However, the chat function cannot be executed without the use of cookies. The possible Disclosure of e.g., name, e-mail address or telephone number is voluntary and with the consent to temporarily use and store this data for the purpose of establishing contact until the end of the contact. This personal data will be deleted after 90 days. The legal basis for data processing is Art. 6 para. 1 lit. F GDPR and DPA based on our legitimate interest in effective customer care, for statistical analysis of user behaviour and for optimization purposes of our offers.

DialogShift provides further information on the collection and use of data as well as your rights and options for protecting your privacy at https://www.dialogshift.com/de/dsvgo.

1.4 Subscription to our newsletter:

You have the option of subscribing to our newsletter on our website. Registration is required for this. The following data must be provided as part of the registration process (*mandatory):

• Title*
• First name and surname*
• e-mail-address*

The above data is necessary for data processing. We process this data exclusively in order to personalize the information and offers sent to you and to better tailor them to your interests. By registering, you give us your consent to process the data provided for the regular sending of the newsletter to the address you have provided and for the statistical evaluation of user behaviour and the optimization of the newsletter. This consent constitutes our legal basis for the processing of your e-mail address in accordance with Art. 6 para. 1 lit. a GDPR and DPA. We are entitled to commission third parties with the technical processing of advertising measures and are entitled to pass on your data for this purpose.

At the end of each newsletter, you will find a link that you can use to unsubscribe from the newsletter at any time. After you unsubscribe, your personal data will be deleted. Further processing only takes place in anonymized form to optimize our newsletter.

1.5 Room booking on one of our websites, by correspondence or by telephone call:

If you make bookings either via one of our websites, by correspondence (email, chat or letter post) or by telephone call, we require the following data (*mandatory) to process the contract:

• Title*
• First name and surname*
• Credit card information*
• e-mail address*
• Telephone number*

We will only use this data and other information voluntarily provided by you (e.g., language, postal address, expected arrival time, motor vehicle license plate, preferences, comments) to process the contract, unless otherwise stated in this privacy policy or unless you have given your separate consent. We will process the data by name in order to record your booking as requested, to provide the booked services, to contact you in the event of ambiguities or problems and to ensure correct payment. The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR and DPA.

We use the service Mews System B.V., headquartered in Amsterdam, to process online bookings. Further information on how Mews processes personal data can be found here (https://app.mews.com/Platform/Document/PrivacyPolicy?language=en).

We also use the services of Revinate Solutions, based in Amsterdam. Further information on how Revinate Solutions processes personal data can be found here:

https://www.revinate.com/privacy/.

Our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR and DPA lies in the fulfilment of legal requirements.

If you book a room as part of a company agreement, you agree that your data may be passed on to this company for statistical purposes. This includes the number of overnight stays and prices and is done anonymously.

1.6 Registration for our newsletter in connection with a booking:

In connection with a booking, you have the separate option of subscribing to our newsletter. By registering in connection with a booking, you give us your consent to process the data provided above for the regular sending of the newsletter to the address you have provided and for the statistical evaluation of user behaviour and the optimization of the newsletter.

We process this data exclusively in order to personalize the information and offers sent to you and to better align them with your interests. This consent constitutes our legal basis for processing your e-mail address in accordance with Art. 6 para. 1 lit. a GDPR and DPA. We are entitled to commission third parties with the technical processing of advertising measures and are entitled to, to pass on your data for this purpose (see section 1.4). At the end of each newsletter, you will find a link that you can use to unsubscribe from the newsletter at any time. When unsubscribing, you can voluntarily inform us of the reason for unsubscribing. After unsubscribing, your personal data will be deleted. Further processing only takes place in anonymized form to optimize our newsletter.

1.7 Contacting us via e-mail:

On our website, you have the option of contacting us and sending us an e-mail. We collect your e-mail address for this purpose. We only use your e-mail address and other data you provide voluntarily (e.g., first name and surname) to answer your contact request in the best possible and personalized way.

The processing of this data is therefore necessary within the meaning of Art. 6 para. 1 lit. b GDPR and DPA for the implementation of (pre-)contractual measures or is in our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR and DPA. The use of emails is insecure, and we assume that you are aware of this and consent to it.

1.8 Contacting us by telephone:

On our website, you have the option of contacting us by telephone. We only use your telephone number and other data voluntarily provided by you (e.g., first and last name, email address) to answer your contact request in the best possible and personalized way. The processing of this data is therefore necessary within the meaning of Art. 6 para. 1 lit. b GDPR and DPA for the implementation of (pre-)contractual measures or is in our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR and DPA.

1.9 Ordering and purchasing event tickets and vouchers:

On our website, it is possible to place orders for certain services or vouchers online. The following data is collected in this context (*mandatory):

• Salutation*
• First and last name of the purchaser*
• First and last name of the beneficiary*
• Credit card information*
• e-mail address*

We will only use this data and other information voluntarily provided by you (e.g., postal address, telephone number, personal dedication, video greeting, etc.) to process the contract, unless otherwise stated in this privacy policy or unless you have given your separate consent. With the purchase, the buyer confirms that he/she has given his/her consent to the use of the third party’s data and is responsible for its accuracy. We will process the data by name in order to record your purchase as requested, to provide the services, to contact you in the event of ambiguities or problems and to ensure correct payment. The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR and DPA.

We use the service incert eTourismus, headquartered in Linz, to process online purchases. Further information on how incert eTourismus processes personal data can be found here
https://www.incert.at/en/data-protection/. Buyer data is anonymized after 14 days. The retention period for purchase or invoice data is 10 years.

1.10 Restaurant reservations:

Table reservations received by telephone, in person or in writing are entered in a reservation book (analog or digital). You also have the option of reserving a table online on our website. The following data is collected in this context (* mandatory):

• First name and surname*
• e-mail-address*
• Telephone number*

We use the services of TheFork Swiss SA, Rue Muzy 8, 1207 Geneve, Switzerland, to process table reservations. Further information on how TheFork Swiss SA processes personal data can be found here: https://www.thefork.com/legal#PrivacyPolicy.

This data is collected and processed for the purpose of reserving a table for a certain number of people. The legal basis for data processing for this purpose is the implementation of pre-contractual measures and fulfilment of a contract in accordance with Art. 6 para. 1 lit. b DSGVO and DPA.

If you make a reservation by telephone, we will enter the same data into TheFork’s reservation system for you so that you can receive a confirmation by text message or email. If you do not agree to this, please let us know when you make your reservation, and we will ask you for your consent again.

1.11 Applying for a vacancy:

You have the opportunity to apply for a job vacancy on our website or spontaneously by e-mail. To do so, you must submit a complete application. The following data must be included in the application (* mandatory):

• Salutation*
• First name and surname*
• Postal address*
• Work permit* (if necessary)
• Civil status*
• Date of birth*
• E-Mail address*
• Telephone number*
• Lettter of motivation, complete curriculum vitae*
• Job references*

This data is used to process the application process and possible subsequent employment and its handling. Unless you explicitly consent to further processing, the data will be stored in Outlook for 6 months after completion of the application process and then deleted, unless you have been employed.

The legal basis for data processing is therefore the implementation of pre-contractual measures and our legitimate interest in accordance with Art. 6 para. 1 lit. b and f GDPR and DPA. The legal basis for further data processing is the consent you have given in accordance with Art. 6 para. 1 lit. a GDPR and DPA.

1.12 Cookies:

Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically saves on your computer’s hard disk when you visit our website. We use cookies, for example, to temporarily store your selected services and entries when you fill out a form on the website so that you do not have to repeat the entry when you call up another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website without you having to log in again when you access another subpage. Most Internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in the most common browsers:

• Microsoft Windows Internet Explorer
• Microssoft Windows Internet Explorer Mobile
• Mozilla Firefox
• Google Chrome for desktop
• Google Chrome for Mobile
• Apple Safari for Desktop
• Apple Safari for Mobile

If you deactivate cookies, you may not be able to use all the functions of our website.

1.13 IP anonymization:

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that on this website Google Analytics has been extended by the code “_anonymize Ip ();” to ensure an anonymized collection of IP addresses. As a result, IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded, and the personal data is deleted immediately.

1.14 Recipient:

The recipient of the data is:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.

1.15 Cookie Script:

This website uses Cookie Script, which sets a technically necessary cookie to store your cookie consent. Cookie Script does not process any personal data. The cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.

1.16 Tracking tools and plug-ins:

a. General information:

We use the web analysis service of Google Analytics for the purpose of designing and continuously optimizing our website in line with requirements. In this context, pseudonymized user profiles are created and small text files stored on your computer (“cookies”) are used. The information generated by the cookie about your use of this website is transmitted to the servers of the providers of these services, stored there and processed for us. In addition to the data listed under point 1, we may receive the following information:

• Navigation path that a visitor takes on the site.
• Time spent on the website or subpage.
• the subpage on which the website is left.
• the country, region or city from which access is made.
• end device (type, version, colour depth, resolution, width and height of the browser window) and returning or new visitor.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.

b. Google Analytics and re-marketing:

This website uses Google Analytics and Google Re-Marketing. These are services provided by Google Inc (“Google”). Google uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. The IP address is then shortened by Google by the last three digits, so that it is no longer possible to clearly assign the IP address. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage, services associated with the use of the website and the Internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Third-party providers, including Google, place advertisements on websites on the Internet. Third-party providers, including Google, use stored cookies to place ads based on a user’s previous visits to this website. Google will not associate your IP address with any other data held by Google. You can object to the collection and storage of data at any time with effect for the future. You can deactivate the use of cookies by Google by visiting the page for deactivating Google advertising.

Alternatively, users can deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can object to the collection and storage of data at any time with effect for the future. Further information on Google’s provisions can be found here.

c. Youtube:

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR and DSG. Further information on the handling of user data can be found in YouTube’s privacy policy at:

https://www.google.de/intl/de/policies/privacy.

d. Google Maps:

This website uses Google Maps to display maps and to create directions. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use of the automatically collected data and the data entered by you by Google, one of its representatives or third-party providers. The terms of use for Google Maps can be found under the terms of use for Google Maps.

e. Social networks:

We may operate pages and other online presences (“fan pages”, “channels”, “profiles”, etc.) on social networks and other platforms operated by third parties and process the data about you described in Section 1 and below. We receive this data from you and the platforms when you come into contact with us via our online presence (e.g., when you communicate with us, comment on our content or visit our presence). At the same time, the providers of the platforms can analyse your use of our online presence (e.g., the way you interact with us, how you use our online presence, what you view, comment on or “like”) and use this data together with other data they have about you (e.g., information about your age, age of the person you are visiting, etc.) and your gender and other demographic information). In this way, they create profiles about you and statistics about the use of our online presences. They use this data and profiles to display our or other advertisements and other personalized content on the platform and to manage behaviour on the platform, but also for market and user research and to provide us and other parties with information about you and the use of our online presence. Insofar as we are jointly responsible for certain types of processing with the provider, we will conclude a corresponding contract with the provider. You can find out about the main content of this contract from the provider. They also process this data for their own purposes, in particular for marketing and market research purposes (e.g., to personalize advertising) and to manage their platforms (e.g., to decide what content to show you), and act as separate controllers for this purpose.

We are entitled, but not obliged, to check content before or after it is published on our online presences, to delete content without notice and, if necessary, to report it to the provider of the platform in question. In the event of breaches of the rules of decency and conduct, we may also inform the provider of the platform on which the user account in question is located in order to block or delete it. For further information on processing by the platform operators, please refer to the data protection notices of the respective platforms. There you can also find out in which countries your data is processed, what rights of access and erasure you have and how you can exercise these or obtain further information. We currently use the following platforms:

• Facebook:
  https://www.facebook.com/achesagroup/
  https://www.facebook.com/achesahomes/
  https://www.facebook.com/hotelallegralodge/
  https://www.facebook.com/hotelwelcomeinn/
  https://www.facebook.com/GiardinoPizza/
  https://www.facebook.com/tschadunrestaurantundbar/
  Privacy Policy: https://www.facebook.com/privacy/policy
• Instagram:
  https://www.instagram.com/achesa.group/
  https://www.instagram.com/achesa.gastro/
  https://www.instagram.com/achesa.hotels/
  https://www.instagram.com/achesa.living/
  https://www.instagram.com/ristorantemercato_kloten/
  https://www.instagram.com/pizzeriagiardinokloten/
  https://www.instagram.com/tschadun_restaurantundbar/
  https://www.instagram.com/rooftopbartschadun/
  Privacy Policy: https://privacycenter.instagram.com/policy
• Youtube:
  https://www.youtube.com/@welcomehotelsschweiz
  Privacy Policy: https://policies.google.com/privacy?hl=de
• Twitter / X:
  https://twitter.com/achesagroupCH
  Datenschutzerklärung: https://twitter.com/de/privacy
• LinkedIn:
  https://www.linkedin.com/company/1441202 or
  https://www.linkedin.com/company/achesa-hotels/
  Privacy Policy: https://de.linkedin.com/legal/privacy-policy

2.0 Storage and exchange of data with third parties

2.1 Booking platforms

If you make bookings via a third-party platform, we receive various pieces of personal information from the respective platform operator. This is generally the data listed in section 5 of this privacy policy. In addition, we may receive inquiries about your booking. We will process this data by name in order to record your booking as requested and provide the booked services. The legal basis for data processing for this purpose is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR and DPA.

Finally, we may be informed by the platform operators about disputes in connection with a booking. We may also receive data on the booking process, which may include a copy of the booking confirmation as proof of the actual completion of the booking. We process this data to safeguard and enforce our claims. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR and DPA. Please also note the data protection information of the respective provider.

2.0 Speicherung und Austausch von Daten mit Dritten

2.2 Retention period

We only store personal data for as long as is necessary to use the above-mentioned tracking services and other processing within the scope of our legitimate interest. We store contractual data for longer, as this is required by statutory retention obligations. Retention obligations that oblige us to retain data result from regulations on reporting law, accounting and tax law.

According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be deleted.

2.3 Disclosure of data to third parties:

Your personal data may be transferred by us within the Group, taking into account the permitted purposes of use, to processors (e.g., for our electronic advertising in the form of newsletters) and, to third parties who must be involved in the provision of the services you have requested, all of whom have undertaken to us to comply with the applicable data protection standards. In the event of debt collection and the enforcement of outstanding claims, the personal data will also be passed on to processors (debt collection). We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship.

In addition, we pass on your data to third parties insofar as this is necessary for the use of the website and the processing of contracts (also outside the website), namely the processing of your bookings.

Finally, we forward your credit card information to your credit card issuer and the credit card acquirer when you pay by credit card on the website. If you decide to pay by credit card, you will be asked to enter all mandatory information. The legal basis for passing on the data is the fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR and DPA. With regard to the processing of your credit card information by these third parties, please also read the General Terms and Conditions and the privacy policy of your credit card issuer.

2.4 Transfer of personal data abroad

We are also entitled to transfer your personal data to third-party companies (contracted service providers) abroad for the purposes of the data processing described in this privacy policy. These companies are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we ensure by contract that the protection of your personal data corresponds to that in Switzerland or the EU at all times. We would like to point out that our data is mainly processed in Switzerland and the EU.

3.1 Data processing to fulfil the legal obligation to register:

On arrival at our hotels or serviced apartments, we require the following information from you and your accompanying persons (*mandatory):

• First and last name*
• Postal address and canton*
• Date of birth*
• Place of birth*
• Nationality*
• Official identification card and number*
• Date of arrival and departure

We collect this information to fulfil legal reporting obligations, in particular those arising from hospitality or police law. Insofar as we are obliged to do so under the applicable regulations, we forward this information to the competent police authority.

3.2 Recording of purchased services:

If you make use of additional services during your stay (e.g., visits to the restaurant, hotel bar, private SPA, etc.), we will record the subject matter of the service and the time at which you make use of it. If you make use of additional services during your stay (e.g., visits to the restaurant, hotel bar, private spa, etc.), we will record the subject matter of the service and the time at which it was purchased for billing purposes. The processing of this data is necessary within the meaning of Art. 6 para. 1 lit. b GDPR and DPA for the execution of the contract with us.

3.3 Security of personal data:

During their stay in one of our hotels or restaurants, each guest is responsible for the security of their personal data. Personal data such as passports, ID cards or medication should not be left lying around in plain sight and should ideally be locked to ensure security.

3.4 Video surveillance:

In the public areas of our hotels, restaurants and serviced apartments, video cameras are installed in the interest of protecting people and property, which are marked accordingly. As a rule, the data is deleted from our internal local server after 72 hours at the latest, provided that no significant events have been detected within this period. In the event of incidents affecting the safety or property of a person, the recording is retained and used as evidence. It may be passed on to authorities for the enforcement of rights or for criminal prosecution purposes.

4. Further information

4.1 Right of access, rectification, erasure, and restriction of processing; right to data portability:

You can object to data processing at any time, especially data processing in connection with direct advertising (e.g., against advertising e-mails). You also have the following rights:

Right of access:

You have the right to request access to your personal data stored by us at any time if we are processing it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations. A fee of up to CHF 500.00 may be charged for an inspection if the search is particularly extensive. We will respond to your request within 30 days.

Right to rectification:

You have the right to have incorrect or incomplete personal data corrected and to be informed of the correction. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure:

You have the right to have your personal data erased under certain circumstances. In individual cases, the right to erasure may be excluded, e.g., in the case of statutory retention periods.

Right to restriction of processing:

Under certain circumstances, you have the right to request that the processing of your sensitive personal data be restricted.

Right to data portability:

Under certain circumstances, users outside Switzerland have the right to receive from us the personal data that you have provided to us in a readable format. A fee of up to CHF 500.00 may be charged for this.

Right to lodge a complaint:

You have the right to lodge a complaint with a competent supervisory authority about the way in which we process your personal data. If you do not agree with our handling of your rights or data protection, please inform us or our data protection officer (Section 4.4). In particular, if you are located in the EEA, the United Kingdom or Switzerland, you also have the right to lodge a complaint with the data protection supervisory authority in your country. A list of authorities in the EEA can be found here: https://edpb.europa.eu/about-edpb/board/members_en.

You can contact the UK supervisory authority here: https://ico.org.uk/global/contact-us/. You can also contact the Federal Data Protection and Information Commissioner: https://www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/adresse.html.

Right of withdrawal:

In principle, you have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal. We have the right to refuse further contact with you if we are not permitted to use your data.

4.2 Data security:

We use suitable technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others. We also take data protection within the company very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and to comply with data protection regulations. We will inform you immediately in the event of data leaks or breaches of data security.

4. Weitere Informationen

4.3 Note on data transfers to the USA:

In the case that a transfer to the USA takes place without our knowledge, we will inform you as follows:

For the sake of completeness, we would like to point out to users residing or domiciled in Switzerland that there are surveillance measures in place in the USA by US authorities that generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without differentiation, restriction or exception based on the objective pursued and without an objective criterion that makes it possible to restrict the US authorities’ access to the data and its subsequent use to very specific, strictly limited purposes that justify the interference associated with both access to this data and its use. We would also like to point out that there are no legal remedies available in the USA for data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective legal protection against general access rights of US authorities.

We explicitly draw the attention of the data subject to this legal and factual situation so that they can make an appropriately informed decision to consent to the use of their data.

We would like to point out to users residing in a member state of the EU that the USA does not have an adequate level of data protection from the perspective of the European Union – partly due to the issues mentioned in this section. Insofar as we have explained in this privacy policy that recipients of data (such as Google) are based in the USA, we will either ensure through contractual arrangements with these companies that your data is protected at an appropriate level by our partners.

4.4 Contact person:

Achesa Management AG is responsible under data protection law for the data processing described in this Privacy Policy, unless otherwise communicated in individual cases.

Our address is:

Achesa Management AG
Hamelirainstrasse 5
CH-8302 Kloten

For all questions, information and complaints, please contact us by e-mail:

datenschutz@a-chesa.ch

As an additional point of contact, we have appointed a data protection representative in the EU pursuant to Art. 27 GDPR, whom you may also contact for any data protection inquiries:

Vlantoiu & Asociații
Str. Tipografilor, Nr. 11-15, Et. P
Corp A, Sector 1
București, Romania
andreea.vlantoiu@vlantoiu.ro

4.5 Amendment of the Privacy Policy:

This Privacy Policy does not form part of any contract with you. We may amend this Privacy Policy at any time. The version published on this website is the current version.

This page was last amended on 24.08.2026. If you have any questions or comments about our legal information or data protection, please contact us at datenschutz@a-chesa.ch

Kloten in August 2026