Privacy Policy

1. Who We Are

Bergbahnen Destination Gstaad AG (BDG) is a company that aims to construct, operate, and manage tourist transportation facilities, including ancillary operations. BDG’s service offerings include:

• Passenger transportation
• Management and leasing of ancillary and gastronomic operations
• Experiences in skiing, hiking, and gastronomy

2. Basis of Data Processing

This privacy policy outlines how we process personal data of our partners, suppliers, customers, guests, newsletter recipients, etc., including the type of personal data we collect and the purposes for which we collect it. It also governs data sharing, retention periods, and your rights.

Personal data (also referred to as data) includes any information relating to an identified or identifiable natural person. The term "data processing" is situational and encompasses any handling of personal data, regardless of the means and procedures used, including the acquisition, storage, use, modification, disclosure, archiving, or deletion of data.

We collect and process personal data to fulfill our business tasks within the legally and contractually regulated framework. The collection, processing, and use of personal data are subject to applicable Swiss and, if applicable, European legal regulations.

We collect personal data transparently and in accordance with the principles of proportionality and purpose limitation. Data is processed only to the extent and for as long as necessary to fulfill our tasks and obligations.

In collaboration with our partners, we strive to protect databases as effectively as possible against unauthorized access, loss, misuse, or alteration.

We note that data transmission over the Internet (e.g., communication by email) can have security gaps. Complete protection of data from third-party access is not possible.

3. Purpose of Collection and Processing of Personal Data

We process personal data necessary to ensure our services are provided permanently, securely, and reliably. This includes, in particular:

• Handling and managing contractual relationships with customers, employees, suppliers, etc.;
• Maintaining contact and communication related to service delivery;
• Ensuring security, fulfilling legal obligations, enforcing claims;
• Processing personal data to protect vital interests of the data subject or another natural person;
• Sending invitations and conducting events;
• Marketing activities and sending newsletters;
• Statistical collection/evaluations;
• The website is operated by Gstaad-Saanenland Tourism (GST). GST is responsible for collecting and processing your personal data in connection with the website operation. We refer to the GST privacy policy: GST Privacy Policy
• Online sales and distribution of tickets and season passes are handled by Ticketcorner AG. Ticketcorner AG is responsible for collecting and processing your personal data in this context. We refer to the Ticketcorner privacy policy: Ticketcorner Privacy Policy

4. What Personal Data Do We Process?

4.1. General Contact and Basic Data

Depending on the purpose of data processing and service area, we collect various types of personal data, which may also include particularly sensitive personal data. The processed data may include the following, depending on the business relationship (partner, supplier, customer, guest, newsletter recipient, etc.):

• Name, first name, email address, and if applicable, gender, family relationships, address, phone number, title, date of birth, nationality, occupation, employer information, credit card information;
• Email and written correspondence (mail).

In addition, we collect and process data according to the purpose of data processing, customer segment, and service area as described in the following sections:

4.2. Data for Mailings and Newsletters / Data for Statistics

To send information about skiing operations, events, publications, etc. (for marketing purposes) and newsletters, we process the following personal data:

• General contact and basic data as per section 4.1.

These data are necessary for service delivery, communication, or maintaining our customer base. To improve our services, information related to marketing, mailings, and newsletters is also statistically evaluated. You can object to the use of your personal data for marketing purposes or unsubscribe from receiving the newsletter at any time.

Parts of our newsletters/mailings are conducted with our partner Ticketcorner. We refer to their privacy policy: Ticketcorner Privacy Policy

4.3. Data for the Organization and Conduct of Events

For organizing and conducting events, we process the following personal data:

• General contact and basic data as per section 4.1;
• Information about the event (such as company, address, email address, type of event);
• Payment information;
• Potentially pictures or videos.

These data are processed for conducting the event and for networking and marketing purposes. We need the visual material for internal documentation of the event, embedding in a newsletter or on our website and social media channels, creating reports, and possibly informing our customers/guests about the event. Participants have the option to inform the photographer before or during the shoot that they do not wish to appear in the respective visual material. For private events, the organizer can generally exclude the recording of pictures and videos.

4.4. Data about Personnel

For employee management, the following data are processed:

• General contact and basic data as per section 4.1;
• Social security information/AHV number;
• Information about children;
• Information about the position within our company such as hiring date, function, salary, employment contract;
• Application information such as cover letter, CV, work certificates, diplomas, evaluation of job interviews, assessments, reference information;
• Financial information and bank details;
• For source-taxed employees: religion, foreigner permit, information about other jobs, substitute income, and partner information;
• Information on periodic appraisal interviews;
• Time and vacation records;
• Information about illnesses, accidents, maternity or paternity leave, military or civil service;
• Criminal and/or debt collection register extracts.

Application documents that do not lead to employment are deleted/destroyed after the application process is completed unless we have obtained consent for retention.

The data serve proper personnel management, fulfillment of the contractual relationship (employment contract), and are primarily submitted by employees.

In the online application process, we are supported by the company professional.ch c/o Yousty AG.

4.5. Service Providers, Suppliers, and Other Contract Partners

We process the following personal data from contract partners who provide services or supplies to us:

• General contact and basic data as per section 4.1;
• Financial information such as bank details;
• Information available in the contract (such as data about responsible employees, contact persons, etc.)

We process these data in fulfillment of a contract and in compliance with the statutory retention periods of commercial and tax law. If our contract partners have access to our personal data in fulfilling their order [e.g., IT companies], we enter into a corresponding order processing contract with them.

5. Data Collection, Retention Period, Security Measures

5.1. Data Collection

We generally receive the personal data mentioned in section 4 directly from you or the respective partners (in particular Ticketcorner, Yousty AG, Gstaad-Saanenland Tourism).

We also obtain publicly accessible information from media and the internet, where appropriate (e.g., as part of an application, credit check).

5.2. Retention Period

We retain personal data for as long as necessary for the purpose for which it was collected or for the duration required by applicable laws, regulations, or contractual agreements, and as long as we have a prevailing interest in retention. Afterward, the data are deleted.

5.3. Data Security

We take appropriate technical and organizational security measures to protect personal data from unauthorized access and misuse. These include IT and network security solutions, access restrictions, encryption of data carriers and transmissions, instructions, training, and controls.

The data are stored in the applications and software tools we use. Should the servers be located abroad, the provisions as per section 8 apply.

If third parties have access to our data, we oblige such third parties in order processing contracts to comply with appropriate technical and organizational security measures (see section 8).

6. Social Media Channels

We refer to our respective social media channels via links. These are merely static references to the respective channel. When you connect with our social media channels, we receive information stored in your profile (contact information) and any information about profiles connected with you.

Please refer to the privacy notices of the providers for the purpose and scope of data collection and further processing of your data, as well as your rights and settings options to protect your privacy:

• Facebook Ireland Ltd. or Facebook Inc.: Facebook Privacy Policy
• LinkedIn Corporation: LinkedIn Privacy Policy
• Google Ireland Limited or YouTube: Google Privacy Policy
• Meta Platforms Ireland Ltd or Instagram: Instagram Privacy Policy
• TikTok Technology Limited: TikTok Privacy Policy

7. Tracking Technology and Third-Party IT Tools

7.1. Google Analytics

Our websites use the Google web analytics service "Google Analytics" provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies," text files stored on your computer that enable an analysis of your website usage. The information generated by the cookies about your use of our website is usually transmitted to a Google server in the USA and stored there.

You can prevent the storage of cookies by adjusting your browser software accordingly. However, we point out that in this case, you may not be able to use all the functions of this website fully. You can also prevent the collection of data generated by the cookie and related to your website use (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: Google Tools

For more information about data protection related to Google Analytics, please refer to the Google Analytics help page: Google Analytics Help

7.2. Matomo (formerly Piwik)

This website uses Matomo, an open-source, self-hosted software to collect anonymous usage data for this website. The data on visitor behavior are collected to find out any problems such as pages not found, search engine problems, or unpopular pages. Once the data is processed (number of visitors seeing error pages or only one page, etc.), Matomo generates reports for website owners to react to these issues.

As Matomo is hosted on our own servers within Switzerland, no data is sent to any third party or transferred across borders.

8. Data Transfer

We do not sell personal data. Personal data is only transferred to third parties if it is necessary for contract execution, fulfillment of a legal obligation, or we have a legitimate interest. We obligate our service providers and partners with appropriate data protection measures.

Data is only transmitted abroad if it is ensured that the respective country guarantees an appropriate level of data protection according to applicable regulations (e.g., adequacy decision of the European Commission or recognized certifications) or if other suitable guarantees exist (e.g., binding corporate rules or standard contractual clauses).

9. Rights of Data Subjects

9.1. Right to Information

You have the right to request confirmation from us whether personal data concerning you are being processed and to obtain information about such data, including a copy thereof.

9.2. Right to Rectification

You have the right to request the rectification of inaccurate personal data and to have incomplete personal data completed.

9.3. Right to Erasure

You have the right to request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent (if the processing was based on consent) and there is no other legal basis for processing.

9.4. Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data if the accuracy of the data is contested, the processing is unlawful, or we no longer need the data, but you require it for establishing, exercising, or defending legal claims.

9.5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance from us.

9.6. Right to Object

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, provided that the processing is based on our legitimate interests or carried out for direct marketing purposes.

9.7. Right to Withdraw Consent

You have the right to withdraw your consent to the processing of your personal data at any time with effect for the future.

9.8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates applicable data protection regulations.

10. Amendments to the Privacy Policy

We reserve the right to amend this privacy policy at any time. The version published on our website is valid. If our data processing practices change or new legal requirements come into effect, we will update our privacy policy accordingly.

11. Contact

If you have any questions or concerns about data protection, please contact:

Bergbahnen Destination Gstaad AG

Egglistrasse 43

CH-3780 Gstaad

Phone: +41 33 748 87 37

Email: info@skiwelt-gstaad.ch