Privacy Policy - klewenalp.ch

Important legal information
Please read the following conditions carefully before you continue. Persons who access the website klewenalp.ch agree to the following conditions.

General Terms and Conditions
The general terms and conditions apply and can be found at www.klewenalp.ch/agb

Privacy Policy
Bergbahnen Beckenried-Emmetten AG (Kirchweg 27, 6375 Beckenried, Switzerland), CHE-106.078.484, a public limited company, is the operator of the website klewenalp.ch and is therefore responsible for the collection, processing and use of your personal data and for compliance with Swiss law.

Your trust is important to us. For this reason, we take data protection seriously and ensure appropriate security. Of course, we follow the legal rules of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (OFADP), the Telecommunications Act (TCA) and, where applicable, other data protection regulations, especially the General Data Protection Regulation of the European Union (GDPR).

So that you know which personal data we collect from you and for which purposes we use it, please read the information below.

Customer promise

The public transport companies handle your data with care and trust.

The protection of your personality and your privacy is important to us, the public transport companies. We guarantee that your personal data will be processed in accordance with the applicable data protection laws.

The public transport companies follow these principles to ensure a trustworthy handling of your data:

You decide how your personal data is processed.

Within the legal framework, you can refuse data processing at any time, withdraw your consent or request the deletion of your data. You always have the option to travel anonymously, that is, without your personal data being recorded.

We offer you added value when processing your data.

The public transport companies use your personal data to offer you added value along the mobility chain (e.g. tailored offers and information, support or compensation in case of disruptions). Your data is therefore only used for the development, provision, optimisation and evaluation of our services or for maintaining customer relationships.

Your data will not be sold.

Your data will only be shared with selected third parties listed in this privacy policy and only for the explicitly stated purposes. If we commission third parties to process data, they are contractually obliged to comply with our data protection standards.

We ensure the security and protection of your data.

The public transport companies guarantee careful handling of customer data as well as the security and protection of your data. We ensure the necessary organisational and technical measures.

Below you will find detailed information on how we handle your data.

1. Scope and purpose of the collection, processing and use of personal data

a. when visiting klewenalp.ch
When you visit our website, our servers temporarily store every access in a log file. The following data is collected automatically and stored by us until it is automatically deleted after a maximum of twelve months:

the IP address of the requesting computer
the date and time of access
the name and URL of the accessed file
the website from which access was made
the operating system of your computer and the browser you use
the country from which you accessed the site and the language settings of your browser
the name of your internet service provider

The collection and processing of this data is carried out in order to enable the use of our website (connection setup), to ensure long-term system security and stability, to optimise our website and for internal statistical purposes. This is our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f GDPR. The IP address is used in particular to determine the country of residence of the website visitor and to set the website language accordingly. In addition, the IP address is analysed in the event of attacks on the network infrastructure of klewenalp.ch or in case of suspected unlawful or abusive use of the website, in order to clarify and defend against such actions and, if necessary, used in criminal proceedings to identify and take civil or criminal action against the users concerned.

In addition, when you visit our website, we use so-called pixels and cookies to use web analysis services. Further details can be found in sections 5 and 6 of this privacy policy.

b. when using our contact form
You have the option to use a contact form to get in touch with us. The following personal data must be provided:

First and last name
Address (street, house number, city, postcode (optional))
Telephone number (optional)
Email address
Your request
Anti-spam code

We will mark the mandatory fields in the form with an *. If this information is not provided, this may prevent us from providing our services. Providing other information is optional and has no effect on the use of our website.

We use this data only to answer your enquiry in the best possible and personalised way. Processing your enquiry is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can object to this data processing at any time (contact section 13).

c. Online order of season or annual passes: description, purpose and scope of data processing

Our website contains an online order form for season and annual passes, which can be used for electronic orders. If a user uses this option, the data entered in the input form is transmitted directly to us and stored. This data includes:

Last name
First name
Street
Postcode / City
Telephone number
Email address
Date of birth
Requested season or annual pass
Payment method (no credit card data is collected here, only the type of payment)
Files (photo for season or annual pass; optional)

At the time the message is sent, the following data is also stored:

IP address of the user
Date and time of registration

The processing of personal data from the input form is used only to process the order. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during transmission serves to prevent misuse of the order form and to ensure the security of our IT systems.

Why do we collect personal data?

We understand how important the careful handling of your personal data is to you. All data processing is carried out only for specific purposes. These may result, for example, from technical necessity, contractual requirements, legal regulations, overriding interests, that is legitimate reasons, or from your explicit consent. We collect, store and process personal data as far as necessary, for example for managing customer relationships, selling our products and providing our services, processing orders and contracts, sales and invoicing, answering questions and requests, providing information about our products and services and marketing them, supporting technical matters and evaluating and further developing services and products. For more detailed information on which data is processed for which purposes, please read the following sections.

2. Disclosure of data to third parties

We only share your personal data if you have expressly agreed, if there is a legal obligation to do so, or if this is necessary to enforce our rights, especially claims arising from the relationship between you and Bergbahnen Beckenried-Emmetten AG.

In addition, we share your data with third parties if this is necessary when using the website to provide the services you request and to analyse your user behaviour. If necessary for the purposes mentioned above, the data may also be transferred abroad. If the website contains links to third-party websites, Bergbahnen Beckenried-Emmetten AG has no influence on the collection, processing, storage or use of personal data by the third party after you click these links and accepts no responsibility for this. For further information about the processing of your personal data by linked websites, please consult the respective privacy policies of those websites.

3. Transfer of personal data abroad
Your data is generally stored in databases within Switzerland. Bergbahnen Beckenried-Emmetten AG is entitled to transfer your personal data to third-party companies (contracted service providers) abroad if this is necessary for the data processing described in this privacy policy. These companies are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to that in Switzerland or the EU, we ensure by contract that the protection of your personal data always corresponds to that in Switzerland or the EU.

4. Data security

We use appropriate technical and organisational security measures to protect your personal data stored with us against manipulation, partial or complete loss and unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

You should always treat your payment information confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.

We also take internal company data protection very seriously. Our employees and the service providers we commission are obliged to maintain confidentiality and comply with data protection regulations. In addition, they are granted access to personal data only to the extent necessary.

5. Cookies
Cookies help to make your visit to our website easier, more pleasant and more useful in many ways. Cookies are information files that your web browser automatically stores on your computer’s hard drive when you visit our website. Cookies do not damage your computer’s hard drive and do not transmit personal data of users to us.

We use cookies, for example, to better tailor the information, offers and advertising displayed to you to your individual interests. The use of cookies does not result in us receiving new personal data about you as an online visitor. Most internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations on how to configure cookie processing in the most common browsers:

Disabling cookies may mean that you cannot use all functions of our website.

6. Tracking tools
a. Google Analytics
The website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google Analytics uses methods that allow analysis of the use of the website, such as cookies (cookies section 5). The information generated by the cookie about your use of this website such as

navigation path taken by a visitor on the website,
time spent on the website or subpage,
the subpage from which the website is left,
the country, region or city from which access is made,
end device (type, version, colour depth, resolution, width and height of the browser window) and
returning or new visitor
browser type/version
operating system used
referrer URL (the previously visited page)
hostname of the accessing computer (IP address)
time of server request

is transferred to Google servers in the USA and stored there. The IP address is shortened by activating IP anonymisation (“anonymizeIP”) on this website before transmission within EU member states or other contracting states of the European Economic Area or Switzerland. The anonymised IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In such cases, we ensure through contractual guarantees that Google maintains an adequate level of data protection.

The information is used to evaluate the use of the website, to compile reports on website activities and to provide further services related to website and internet use for market research and needs-based design of the website. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. According to Google, the IP address will not be linked with other data relating to the user.

Users can prevent the collection of data generated by the cookie and related to their use of the website (including the IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, users can click this link to prevent future collection by Google Analytics on this website. An opt-out cookie will be stored on the user’s device. If cookies are deleted (cookies section 5), the link must be clicked again.

Further information can be found in the respective privacy policies & terms of use of Google.

b. DoubleClick

The website uses the targeting technology DoubleClick from Google, a service of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google uses cookies for this purpose, which enable recognition of the browser used by the user when visiting other websites (cookies section 5). The information generated by the cookie about visits to these websites (including the IP address) is transferred to a Google server in the USA and stored there.

Google will use this information to evaluate the use of the website in relation to the advertisements to be displayed, to compile reports on website activities and advertisements for website operators and to provide further services related to website and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. However, Google will not link the IP address of users with other Google data.

c. OpenX
The website uses tracking technology from OpenX Technologies Inc. (“OpenX”), 888 East Walnut Street, 2nd Fl, 91101 Pasadena/CA, USA. This may include cookies (cookies section 5). OpenX collects and stores usage data in pseudonymous profiles for web analysis or to enable interest-based advertising.

You can object to this data processing at any time with effect for the future by setting an opt-out cookie on your device. Further information about this opt-out option and about data processing by OpenX can be found in the OpenX privacy policy at the following link: https://openx.com/legal/privacy-policy/. You can also prevent the storage of cookies on your hard drive at any time (cookies section 5).

7. Social media plugins
The social media plugins described below are used on the website. The plugins are deactivated by default and do not send any data. By clicking the relevant social media button, you can activate the plugins.

If these plugins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you access one of our web pages. The content of the plugin is transmitted directly to your browser by the social network and integrated into the website. The plugins can be deactivated again with one click.

Further information can be found in the respective privacy policies and terms of use of Facebook and Google.

a. Social plugins from Facebook

This website uses social plugins from Facebook to make our website more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is an offer from the US company Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.

By integrating the plugins, Facebook receives the information that your browser has accessed the relevant page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook account. If you interact with the plugins, for example by clicking the “LIKE” or “SHARE” button, this information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for advertising, market research and needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, for example to evaluate your use of our website in relation to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide further services related to the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and setting options to protect your privacy, please refer to Facebook’s privacy notice.

8. Links to our social media pages

On our website, we have included links to our social media profiles on the following networks:

Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA,
Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA.
LinkedIn Ireland Unlimited Company, Wilton Place, 2 Dublin, Ireland.

If you click on the relevant social network symbols, you will automatically be redirected to our profile on the respective network. To use the functions of the respective network, you may need to log in to your user account on that network.

If you access a link to one of our social media profiles, a direct connection is established between your browser and the server of the respective social network. The network then receives the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while logged in to your account on that network, the content of our site can be linked to your profile on that network, which means that the network can directly assign your visit to our website to your user account. If you want to prevent this, you should log out before clicking on such links. An assignment will in any case take place if you log in to the relevant network after clicking the link.

9. Information on data transfers to the USA
For completeness, we inform users resident in Switzerland or the European Union that US authorities carry out surveillance measures in the USA that generally allow the storage of all personal data of persons whose data has been transferred from Switzerland or the EU to the USA. This takes place without differentiation, limitation or exception based on the objective pursued and without an objective criterion that allows access by US authorities to the data and its subsequent use to be limited to very specific, strictly limited purposes that would justify the interference associated with access to and use of this data. Furthermore, we inform you that in the USA there are no legal remedies available to data subjects from Switzerland or the EU that would allow them to obtain access to the data concerning them or to request its correction or deletion, nor is there effective judicial protection against general access rights of US authorities. We explicitly inform data subjects of this legal and factual situation so that they can make an informed decision about consenting to the use of their data.

We inform users resident in an EU member state that, from the perspective of the European Union – among other reasons due to the issues mentioned in this section – the USA does not provide an adequate level of data protection. Where we have explained in this privacy policy that recipients of data (such as Google, Facebook and Twitter) are based in the USA, we will ensure, either through contractual arrangements with these companies or by ensuring their certification under the EU-US Privacy Shield, that your data is protected at an appropriate level by our partners.

10. Rights regarding personal data

You have the right to receive information free of charge, upon request, about the personal data we store about you. In addition, you have the right to correct inaccurate data and the right to delete or block your personal data, unless there is a legal obligation to retain data or a legal basis that allows us to process the data. In accordance with Articles 18 and 21 GDPR, you also have the right to request restriction of processing and to object to processing. You can also object to the use of your data for marketing purposes.

You also have the right to receive back the data that you have provided to us (right to data portability). Upon request, we will also transfer the data to a third party of your choice. You have the right to receive the data in a commonly used file format.

You can contact us for the above purposes at willkommen@klewenalp.ch (contact section 13). To process your requests, we may require proof of identity at our discretion.

You can also inform us what should happen to your data after your death by giving us appropriate instructions.

What does “joint responsibility in public transport” mean?

Bergbahnen Beckenried-Emmetten AG is responsible for processing your data. As a public transport company, we are legally obliged to provide transport services jointly with other transport companies and associations (“Direct Transport”, Art. 16 and 17 Passenger Transport Act). To make this possible, for example, data resulting from contact with you or from services you have purchased is shared within the National Direct Transport (NDT), an association of more than 240 transport companies and public transport associations at national level. The individual transport companies and associations are listed here.

The data is stored in the central NOVA database (nationwide public transport connection), which is managed by SBB on behalf of the NDT and for which we are jointly responsible with the other companies and associations of the NDT. NOVA is a technical platform for selling public transport services. It contains all central elements for the sale of public transport services, such as the customer database. The scope of access to the joint databases by the individual transport companies and associations is regulated by a joint agreement. The transfer of data through central storage and its processing by the transport companies and associations is limited to the following purposes:

Provision of transport services

So that your journey can run smoothly, your travel and purchase data is shared within the NDT.

Contract processing

We process this data for the initiation, management and execution of contractual relationships.

Customer relationship management and support

We process your data for purposes related to communication with you, in particular to answer enquiries and to assert your rights, and to identify you across public transport companies in order to support you in the best possible way with concerns or difficulties, as well as to handle any compensation claims.

Ticket inspection and revenue protection

Customer and subscription data is required and processed for revenue protection (checking the validity of tickets or discount cards, debt collection, combating misuse).

Incidents of travelling without a valid or partially valid ticket can be recorded via the national fare dodger register.

Revenue distribution

The office of Alliance SwissPass, managed by ch-integral, carries out the legal mandate defined in the Swiss Passenger Transport Act to collect travel data for correct revenue distribution. The office acts as a contractor for revenue distribution in the National Direct Transport on behalf of the companies belonging to the NDT.

Identification within the framework of SwissPass login authentication (SSO)

For services that you purchase using the SwissPass login, the data is then stored in the central customer database (NOVA). To enable so-called Single Sign-On (SSO) (one login for all applications that offer their services with the SwissPass login), the above-mentioned login, card, customer and service data is also exchanged between the central SwissPass login infrastructure and us during authentication.

Joint marketing and market research activities

In addition, data collected when purchasing public transport services may in certain cases also be processed for marketing purposes. If your consent is available and processing or contact takes place for this purpose, this is generally carried out only by the transport company or association from which you purchased the relevant public transport service. Processing or contact by the other transport companies and associations involved in the NDT takes place only in exceptional cases and under strict conditions and only if the evaluation of the data shows that a specific public transport offer could provide added value for you as a customer. An exception is processing and contact by SBB. On behalf of the NDT, SBB manages the marketing mandate for NDT services (e.g. GA and Half Fare) and may contact you regularly in this role. We also process your data for market research, to improve our services and for product development.

Further development of public transport systems with anonymous data

We analyse your data anonymously in order to further develop the overall public transport system according to needs.

11. Data retention

We store personal data only as long as necessary,

to use the above-mentioned tracking, advertising and analysis services within our legitimate interest;
to provide services to the extent described above that you have requested or to which you have given your consent (e.g. newsletters according to section 9); and
to comply with our legal obligations.

We retain contract data for a longer period because this is required by legal retention obligations. Retention obligations that require us to retain data result from accounting and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be retained for up to 10 years. If we no longer need this data to provide services to you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes.

12. Contact
If you have questions about data protection on our website, would like information or wish to request deletion of your data, please contact us by sending an email to willkommen@klewenalp.ch.

13. Right to lodge a complaint with a supervisory authority
If you reside in an EU member state, you have the right to lodge a complaint with a data protection supervisory authority at any time.

General
This page was last modified on 10 August 2023. If you have questions or comments about our legal notices or data protection, please contact us at willkommen@klewenalp.ch.

Netiquette
We do not wish to see any unlawful, offensive or criminal statements or discussions on our page. If users, our organisation or third parties are defamed, we reserve the right to delete such posts without comment, as they do not comply with this netiquette.