1. What is it about?
This present privacy notice sets out the basis on which any personal data Castle of Chillon (« Chillon Castle
» or « We
») collects from you, that you provide Us, or that We may collect from other sources will be processed by Us. This includes the various ways in which you interact with Us, whether personally, via email or by phone, or through the website and/or our mobile application (« Website
»), or interactive terminals.
« Personal data
» means any information relating to an identified or identifiable natural person.
Please read the following carefully to understand our views and practices regarding your Personal data and how We will treat it.2. Who is responsible for your Personal data?
The Chillon Castle is the controller for Personal data concerned by this Privacy Notice. Its headquarters is at Avenue de Chillon 21, 1820 Veytaux (Switzerland) and may be contacted via email at this address aline.mean[at]chillon.ch. The Chillon Castle is in particular responsible of the following website www.chillon.ch.
We may also interact with the users (« Users ») through the various services we provide (“Services”) in our premises, via phone, email or online.
We hope to be able to answer your questions regarding the way We process your Personal data. Should you have any concern about this purpose, your questions are welcomed and should be addressed to in writing or via email to the following address: aline.mean[at]chillon.ch3. Which Personal data do we collect from you?3.1 When you contact Us
When you contact Us or when you communicate with Us (for example via your emails, in writing, via phone calls, online or at our counters), We can collect Personal data you exchange with Us. These Personal data include your full name, your postal and email address, your phone number/s and your reservation informations.
These Personal data are collected in order to provide you the Services and their processing is necessary for the performance of the contract that binds Us to you.3.2 When you subscribe to our newsletter
You have the possibility to subscribe to our newsletter. In that case, we request your email address, your name and surname and optionally additional informations like your gender, your function and your country of residence. We process these Personal data in order to personalise informations and offers that will be sent to you and in order to focus them better according to your interests.
Upon your subscription to our newsletter, you give Us the authorisation to process the aforementioned Personal data in order to send you regularly our newsletter. This authorisation is deemed to be a consent and constitutes the lawful basis for the process of your Personal data in this context. If the applicable law does not require consent, the regular sending of newsletter is necessary for our legitimate interest to keep you informed.
A link is included at the bottom of each newsletter where you may unsubscribe to our newsletter at any time.3.3 When you use our Website
When you use our Website, we may automatically collect the following Personal data:
- your full name, your postal and electronic address and your phone number/s;
- informations regarding the use of our Website, including your user name and your password and information you may share with Us or enter on our Website;
- technical information, including the internet protocol (IP) address used to connect your computer to the internet, type of mobile device you use, a unique device identifier (for example your device’s IMEI number, the MAC address of the device’s wireless network interface or the mobile phone number used by the device),
- informations regarding payment methods that you use on our Website;
- locations data.
These Personal Data are in particular collected through cookies and similar technologies, which use is regulated by article 6 of the present privacy notice.
Technical information collection relies on our legitimate interest to offer you the best experience on our Website and to develop new Services. Your payment method processing is necessary for the for the performance of the contract that binds Us to you. The processing of other Personal Data relies on your consent.3.4 When you use a social media
When you allow a third party social media (like Facebook, Twitter, Google+, YouTube, LinkedIn, Pinterest, Instagram, Tripadvisor, etc.) to share your Personal data with Us, we are entitled to receive any Personal Data that you share publicly on the social media, that is part of your profile or that you allow the social media to share (like your name, email address, gender, profile picture, friend’s list or contact list, preferences, etc..).
These Personal data are collected in order to personalise and improve your experience and in order to inform you of offers and news that might interest you. Their processing relies on your consent.3.5 Personal data We receive from other sources
We may receive your Personal data if you use our partner’s (« Partners », as defined in Exhibit A) websites, services, and applications. Their processing relies on your consent.4. How long do We keep your Personal data for?
We will only retain your Personal data for as long as necessary to fulfil the purposes We collected it for, as described in this present privacy notice or in order to offer our Services. We decide on a case-by case basis in order to determine the appropriate retention period, and therefore the nature, the purposes for which We process your Personal data and the applicable legal and operational requirements are taken into consideration to do so.
In some circumstances We may anonymize your Personal data so that it can no longer be associated with you, in which case We may use such information without further notice to you. Once you no longer have a relationship with Us, We will retain and securely destroy your Personal data in accordance with applicable laws and regulations.5. Who do We share your Personal data with?5.1 With our Partners
We may rely on your consent to share your Personal data with our Partners in order to meet your demands and needs.
5.2 With our data Processors
We may also share your Personal data with our external providers («data Processors») in particular online booking service providers, information and tourist recommendation service, newsletter edition and distribution service, marketing analysis service, advertising service, hosting services, maintenance service, call centre service and credit card payment service.
Cookies are text files containing small amounts of information sent by a web server to a web browser, allowing the server to identify uniquely a browser on each web page. We use other similar technologies to cookies. These may include invisible pixels and tracking URLs. Invisible pixels (also known as transparent GIF or web beacon) are placed on certain pages of our Website and generate a follow-up generic of your use of our Website. If you choose to decline cookies, your visit to our Website will only be saved by our invisible pixels as an anonymous visit. Tracking URL addresses are used to determine from which referenced website you accessed our Website. All these technologies and similar technologies are designated as « Cookies
Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving your user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests.
Cookies in themselves do not identify the individual User, but just the computer or mobile device you are using via a randomly generated identifying tag.
You can find more information about Cookies at www.allaboutcookies.org and www.youronlinechoices.com, where you will also find additional informations about behavioural advertising and online confidentiality.6.2 What type of Cookies do We use?6.2.1 Our Cookies
Type of Cookies (including our data Processors’ Cookies) that We use on our Website and the reason why We use them are described below:
- Category 1: Strictly Necessary Cookies
These Cookies are essential in order to enable you to move around our Website and to use its features. Without these Cookies, some elements of our Website may be blocked or not function correctly.
We use these Cookies in order to let you access our Services. The processing of the Personal data collected by these Cookies rely on our legitimate interest and allow a correct functioning of our Website.
- Category 2: Performance Cookies
These Cookies collect information on the pages visited, for instance which pages you go to more often, and if you get error messages from web pages.
We use these Cookies in order to preserve our Website’s efficiency and ease of use and know the way it is used. Most of the time, these Cookies don’t collect information that identifies the User.
Where Personal data is collected by these Cookies, their processing relies on our legitimate interest to know our Website’s use and optimize it.
- Category 3: Functionality Cookies
These Cookies allow our Website to remember choices you make (such as your User name, language, or the region where you are) and may also be used to provide the Services you have asked for.
We use these Cookies to maintain the Website’s effectiveness, ease of use, and to provide you with a seamless experience.
The processing of Personal data collected by these Cookies rely on our legitimate interest to offer you a User-friendly Website.
- Category 4: Targeting/Advertising Cookies
These Cookies are used to know better our Website’s Users, to adapt its content, to keep statistics about our Website’s use and to deliver more relevant adverts on third parties’ websites, based on your interest that you demonstrated during our Website’s use. In some cases, We use these Cookies to deliver more relevant adverts to you and your interests.
You can at any time refuse these Cookies through your browser’s settings. If required by applicable law, these Cookies are only placed with your consent. We track your consent by using a technical Cookie. Hence, in case you suppress Cookies on your device, We shall again later obtain your consent for the use of such Cookies.
We may include on our Website third party’s computer applications allowing you to share our Website’s content with other people and let them know your opinion or consultation about a content of our Website.
These Cookies use is subject to these third-party privacy notice over which We have no control. Please refer to the privacy notice of the respective social media in order to learn more about the way they use their Cookies.7. Transfer abroad
Your Personal data will mainly be processed in Switzerland, but may also be transferred abroad when appropriate. Applicable rules will be respected and appropriate measures taken prior to any transfer of Personal data abroad. You may obtain a copy of these measures by using the contact details set in article 2 of the present privacy notice. 8. How do We protect the security of your Personal data?
We have put in place appropriate security measures pursuant to the acknowledged rules of the art. This includes in particular an access limitation and security and organisational measures.
Please note however that We cannot guarantee an absolute security for your Personal data, to the extent that the Personal data retention and electronical transmission involves certain risks.9. What are your rights?
You have a number of rights according to the data protection legislation. These rights can be limited in particular when they affect rights and freedom of others. We will inform you of applicable exceptions in our answer to your potential request.
These rights include:
- right of access: You have the right to know what Personal data We hold about you and to ask, in writing, to see your Personal data. We will provide you with details of the records We hold as soon as possible and at latest within one month, unless the request is complex. We may require proof of identity before We are able to release the Personal data. Please use the contact details set in article 2 of the present privacy notice if you would like to exercise this right.
- right to be informed: You have the right to be informed how your Personal data will be used. This privacy notice as well as any additional information or notice that is provided to you either at the time you provided your details, or otherwise, is intended to provide you with this information.
- right to withdraw consent: Where We process your Personal data on the basis of your consent (for example, to send you marketing texts or e-mails) you can withdraw that consent at any time. To do this, please contact Us using the details set in article 2 of the present privacy notice.
- right to object: You also have a right to object to us processing Personal data where We are relying on it being within our legitimate interests to do so. To do this, please contact Us using the details set in article 2 of the present privacy notice.
- right to restrict processing: In certain situations, you have the right to ask for processing of your Personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
- right of erasure: In some cases, you have the right to have your Personal data to be deleted. Where you have requested that We do not send you marketing materials We will need to keep some limited information in order to ensure that you are not contacted in the future.
- right of rectification: If you believe your Personal data are inaccurate you have the right to ask for their update. To do this, please contact Us using the details set in article 2 of the present privacy notice.
- right to data portability: Where We are processing your Personal data because you have given Us your consent to do so or when their processing is necessary for the performance of the contract that binds Us to you, you have the right to request that the Personal data is transferred from one service provider to another.
- right to file a complaint: If you are unhappy with the way in which We have handled your Personal data, you have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or with the supervisory authority of your country or residency.
We may update this privacy notice from time to time without notice to you, so please check it regularly. We will however aim to bring any significant changes to your attention.11. Jurisdiction and applicable law
This privacy notice and any question deriving from it or linked to it, and to the Website’s and Services’ use are subject to Swiss law, excluding its conflict of law rules.
You accept and submit to the exclusive competence of courts of the headquarters of The Chillon Castle .
Issue Date: 26.11.2018 Annexe A
Our Partners are listed below:
- Office du tourisme du Canton de Vaud (www.region-du-leman.ch, www.myvaudtrip.ch)
- Association Touristique Aigle-Leysin-Col des Mosses (www.aigle-leysin-lesmosses.ch)
- Association Touristique «Porte des Alpes» – Villars, Gryon, Les Diablerets et Bex (www.villars-diablerets.ch)
- Avenches Tourisme (www.avenches.ch)
- Lausanne Tourisme (www.lausanne-tourisme.ch)
- Montreux-Vevey Tourisme (www.montreuxriviera.com)
- Morges Région Tourisme (www.morges-tourisme.ch)
- Nyon Région Tourisme (www.lacote-tourisme.ch)
- Pays-d’Enhaut Tourisme (www.chateau-doex.ch)
- Vallée de Joux Tourisme (www.myvalleedejoux.ch)
- Yverdon-les-Bains Région (ADNV) – Grandson, Orbe, Romainmôtier, Sainte-Croix/Les Rasses, Vallorbe, Yvonand, Yverdon-les-Bains (www.yverdonlesbainsregion.ch)
- Association Vaud Terroirs (www.vaud-terroirs.ch)
- Lausanne Montreux Congress (www.lausanne-montreux-congress.ch)