Privacy Policy

1. Controller

Alpine Rose Resort AG
Dorfplatz 1
3954 Leukerbad
Switzerland

Phone: +41 27 472 10 00
E‑mail: info@thermalhotels.ch

Alpine Rose Resort AG is responsible for the processing of personal data on this website.

2. General information on data processing

We treat personal data confidentially and in accordance with the applicable data protection law of Switzerland (Federal Data Protection Act, FADP) and – where applicable – the EU General Data Protection Regulation (GDPR).

We process personal data only to the extent required to provide a functional website and our content and services.

3. Categories of data and purposes of processing

We in particular process the following categories of data:

Master data (name, address, e‑mail address, phone number)
Booking and stay data
Payment information
Communication data (e.g. contact form or e‑mail enquiries)
Technical data (e.g. IP address, browser type, access times)

Data is mainly processed for the following purposes:

Processing bookings and enquiries
Fulfilment of contractual and legal obligations
Improving our offer and website
Marketing and communication (e.g. newsletter, if consent has been given)

4. Cookies and tracking technologies

Our website uses cookies and similar technologies to improve the user experience, compile statistics and optimise marketing activities.

You can disable or delete cookies at any time in your browser settings. Please note that certain functions of the website may then be limited.

If tracking tools such as Google Analytics or Meta Pixel are used, data is processed in an anonymised or pseudonymised form. Data is only transferred to providers in the USA where appropriate data protection safeguards are in place.

5. Disclosure of data to third parties

We only disclose personal data if this is permitted by law or necessary for the performance of a contract, for example to:

IT service providers (e.g. hosting, booking systems)
Payment service providers
Authorities where there is a legal obligation

Transfers to recipients in third countries only take place where adequate safeguards are in place (e.g. standard contractual clauses or an adequacy decision).

Payment processing via Adyen

For payment processing we use the service provider Adyen N.V., Simon Carmiggeltstraat 6‑50, 1011 DJ Amsterdam, Netherlands.

In the course of payment, the data you provide (e.g. name, billing address, credit card details) is transmitted directly to Adyen in order to carry out the transaction.

Data processing is based on Art. 6 para. 1 (b) GDPR and Art. 31 para. 2 (a) FADP (performance of a contract).

Further information on data processing by Adyen can be found at:
https://www.adyen.com/policies-and-disclaimer/privacy-policy

6. Storage period

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention periods (e.g. 10 years for booking and payment data).

7. Rights of data subjects

Under applicable data protection law you have in particular the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability

To exercise these rights, you can contact us at any time at info@thermalhotels.ch.

8. Data security

We take appropriate technical and organisational security measures to protect stored data against unauthorised access, misuse, loss or destruction.

9. Amendments to this privacy policy

We reserve the right to amend this privacy policy at any time. The version published on our website is the one that applies.

Last updated: November 2025