As of September 2026

1. Data Controller
   The entity responsible for processing personal data in connection with this website, reservations, and the lodging services offered is:
   Alpine Held
   Feldhofweg 20
   6038 Gisikon, Switzerland
   info@alpineheld.ch
   
   If you have any questions regarding data protection or the exercise of your rights, you can contact us using the contact information provided above.
   
   
2. Scope and Legal Basis
   This Privacy Policy explains how we process personal data in connection with our website, inquiries, bookings, stays, payments, online check-in, tourist tax processing, and the organization of cleaning services.
   
   This processing is primarily governed by the Swiss Data Protection Act (DSG). To the extent that, in individual cases, the European Union’s General Data Protection Regulation (GDPR) applies, we also comply with its requirements. We process personal data in particular to prepare for and fulfill contracts, to comply with legal obligations, based on overriding legitimate interests, and—where necessary—based on consent.
   
   
3. What Personal Data We Process
   Depending on how you use our website and our services, we process the following categories of personal data in particular:
   • Master data such as first and last name, address, city of residence, date of birth, and, if applicable, nationality or other information required by law;

   • Contact information such as email address and phone number;

   • Booking and stay details such as accommodations, arrival and departure dates, number of guests, booking status, price, and special requests;

   • Data regarding traveling companions, to the extent that such information is required for the booking, online check-in, guest registration, or visitor’s tax;

   • Payment and transaction data such as payment amount, currency, payment status, and transaction references;

   • Communication data from emails, contact forms, booking messages, or other communications with us;

   • Technical data collected when visiting the website, in particular IP address, browser, operating system, time of access, and content accessed.
4. Purposes of Data Processing
   We process personal data in particular for the following purposes:
   • Provision, operation, security, and optimization of our website;

   • Processing inquiries and communicating with prospective guests and guests;

   • Creating, managing, and fulfilling reservations and lodging contracts;

   • Processing payments and refunds;

   • Processing online check-ins and collecting and billing tourist taxes;

   • Compliance with statutory or municipal reporting, record-keeping, and disclosure obligations;

   • Organization and coordination of cleaning, laundry, and guest turnover;

   • Preparing and providing access to accommodations;

   • Handling damage reports, complaints, insurance claims, and legal claims;

   • Preventing misuse and fraud, and ensuring the security of our systems and accommodations.
5. Visiting our website
   When you visit our website, technically necessary data is processed automatically. This may include, in particular, your IP address, the date and time of access, pages visited, browser type, operating system, referrer URL, and other technical connection data. This data is used to deliver the website, ensure its stability and security, detect errors, and prevent misuse.
   Our website is powered by Smoobu’s website and booking system. Technically necessary data may therefore also be processed by Smoobu and by technical service providers engaged by Smoobu.
   
   
6. Cookies and Similar Technologies
    Our website may use cookies and similar technologies that are necessary for technical operation, navigation, and the booking system. To the extent that analytics, marketing, or similar technologies are used beyond this, we will inform you accordingly and, where required by law, obtain your consent.
   You can restrict or delete cookies via your browser settings. This may result in certain features of the website or the booking system no longer being fully available.
   
   
7. Contact and Communication
   When you contact us via email, contact form, phone, booking platform, or through the booking system, we process the information you provide, in particular contact information, the content of your inquiry, and the communication history. This processing is carried out to respond to your inquiry and, if a booking results from it, to prepare for and fulfill the contractual relationship.
   
   
8. Bookings and Accommodation Contracts
   When you make a booking, we process the data necessary for the reservation, payment, preparation of the accommodation, and execution of the stay. This includes, in particular, your name and contact information, the booked accommodation, the duration of your stay, the number of guests, the price, the payment status, and any requests or notes you have provided.
   Bookings can be made directly through our website or through external booking platforms such as Airbnb or Booking.com. When a booking is made through such a platform, we receive the booking and guest data necessary for the execution of the stay from the respective platform. These platforms’ privacy policies apply to their independent data processing.
   
   
9. Smoobu
   We use Smoobu, a service provided by Smoobu GmbH, Pappelallee 78/79, 10437 Berlin, Germany, for our website, the direct booking system, the management and synchronization of bookings, guest communication, and other property management functions.
   When using Smoobu, the following data in particular is processed: guest and contact information, booking periods, booking details, communications, and payment status . Smoobu processes guest data on our behalf as part of the platform services provided and may engage contractually bound subcontractors for this purpose.
   Processing via Smoobu serves, in particular, to manage bookings, synchronize availability, communicate with guests, and provide our direct booking feature.
   
   
10. STRTax – Online Check-in and Visitor’s Tax
    We use STRTax for online check-in, the collection of information required for guest registration, and the calculation and processing of visitor’s taxes.
    STRTax processes the data required for the respective stay and for local registration and visitor tax obligations. This includes, in particular, name, contact information, length of stay, accommodation, details regarding traveling companions, as well as other data required by applicable state or local regulations for guest registration and visitor tax. In addition, the status of registration and payment is processed.
    To the extent that transmission to a municipality, tourism organization, or other competent authority is required by law or necessary for the correct billing of the visitor’s tax, the necessary information is forwarded to that authority.
    
    
11. Stripe - Payment Processing
    We use Stripe for electronic payments. Stripe processes the data required for payment processing, in particular name, payment amount, currency, transaction data, billing and contact information, as well as the payment information entered by the guest.
    Sensitive payment data, such as full credit card numbers, is always processed directly by Stripe and is not stored in full on our own systems. Depending on the service used, Stripe may act as a data processor and/or assume its own responsibility under data protection law.
    Data processing by Stripe serves to execute payments and refunds, prevent fraud, comply with regulatory requirements, and handle the technical aspects of the transaction. Within the framework of the Stripe infrastructure, data processing may also take place outside of Switzerland. Stripe uses the legal safeguards provided for international data transfers.
    
    
12. Turno - Cleaning and Guest Changes
    We use Turno to plan and coordinate cleaning, laundry, and guest changes. Turno is connected to our accommodation management system, Smoobu, and synchronizes the booking and calendar information required for scheduling.
    This includes, in particular, the relevant accommodation, check-in and check-out dates, and the number of guests. This information is used to automatically assign cleaning tasks to the respective guest changeover, coordinate cleaning staff, and prepare the accommodation for the next stay.
    Cleaning staff and other service providers integrated into Turno receive only the information they need to perform their tasks. Guest contact information is not to be used for the cleaning staff’s own purposes .
    
    
13. PriceLabs – Dynamic Pricing
    For the automated pricing of our accommodations, we use PriceLabs, a service provided by PriceLabs Revenue, Inc., USA.
    We use PriceLabs to dynamically calculate nightly rates and minimum stays and to transmit this information to the respective booking or property management system. To this end, PriceLabs analyzes, in particular, market data, availability, existing bookings, as well as the historical occupancy rates and price trends of our accommodations.
    As part of the integration with our property management system, the following data in particular may be transmitted to PriceLabs or processed by PriceLabs:
    • Identification and Details of the Accommodation

    • Check-in and check-out dates for bookings • Booking and reservation status

    • Booking date

    • Booking channel

    • Length of stay

    • Generated or booked room revenue

    • Total price of a booking

    • Availability and occupancy data

    • Current rates and minimum stay requirements
    This data is processed primarily to analyze occupancy rates and to automatically calculate and optimize our room rates and minimum stay policies.
    According to its own statements, PriceLabs also uses anonymized reservation data to analyze trends and improve its forecasting models. A customer’s reservation data is not made available to other PriceLabs customers and is not used to generate pricing recommendations for other customers.
    Since PriceLabs Revenue, Inc. is headquartered in the United States, data processing may take place outside of Switzerland and the European Economic Area. To the extent necessary, such data transfers are carried out in accordance with appropriate data protection safeguards.
    Further information on data processing by PriceLabs can be found in PriceLabs’ Privacy Policy.
    
    
14.  Recipients of Personal Data
    We only disclose personal data if this is necessary for the performance of our services, to comply with legal obligations, or to safeguard legitimate interests . Recipients may include, in particular:
    • Smoobu for website, booking, and accommodation management;

    • STRTax for online check-in, guest data, and visitor’s tax;

    • Stripe for payment processing;

    • Turno and contracted cleaning staff for organizing cleaning and guest turnover;

    • PriceLabs and other providers for price optimization and revenue management;

    • Airbnb, Booking.com, and other booking platforms, to the extent that a booking is made through them;

    • Municipalities, tourism organizations, government agencies, or other competent authorities, to the extent that there is a legal obligation to report or provide information;

    • Fiduciary, accounting, IT, legal, and insurance service providers, to the extent necessary for the respective task.
    
    
15. Data Processing Abroad
    Some of the service providers we use are based outside Switzerland or use technical infrastructure in other countries. As a result, personal data may be processed, in particular, in countries of the European Union and, where applicable, in other countries.
    When transferring data to countries without an adequate level of data protection recognized under Swiss law, we rely, where necessary, on appropriate safeguards such as recognized standard contractual clauses or on a legally prescribed exception. Providers may also participate in recognized data protection frameworks, provided that these are applicable to transfers from Switzerland.
    
    
16. Retention Period
    We store personal data only for as long as is necessary for the respective processing purpose or as required by statutory retention obligations. Bookkeeping, contractual, payment, and billing records may be retained for several years in accordance with legal requirements.
    In addition, data may be stored for as long as claims can be asserted or as long as storage is necessary to assert, exercise, or defend legal claims, to handle claims for damages, or for security reasons. Upon expiration of the respective periods, the data will be deleted or anonymized, unless there is another permissible basis for further processing.
    
    
17. Data Security
    We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, unauthorized disclosure, or alteration. Depending on the system, these measures include, in particular, access restrictions, secure authentication, encryption, and the careful selection of service providers.
    When transmitting data over the Internet, no completely risk-free protection can be guaranteed despite appropriate security measures.
    
    
18. Rights of Data Subjects
    Under applicable data protection law, you may exercise the following rights in particular:
    • Information regarding whether and what personal data we process about you;

    • Correction of inaccurate or incomplete personal data;

    • Deletion of personal data, provided there are no legal or compelling reasons for further processing;

    • Disclosure or transfer of certain personal data, provided the legal requirements are met;

    • Objection to certain data processing activities;

    • Withdrawal of previously given consent with future effect.
    To exercise your rights, you may contact us using the contact information provided in Section 1. To protect against unauthorized requests for access or deletion, we may require appropriate proof of identity .
    
    
19. Supervisory Authority
    The Federal Data Protection and Information Commissioner (FDPIC) is the competent supervisory authority for data protection in Switzerland. Data subjects may contact the FDPIC within the scope of the statutory provisions.
    
    
20. Changes to This Privacy Policy
    We may update this Privacy Policy if our data processing activities, the service providers we use, or legal requirements change. The current version published on our website applies.