Skip to main content
Book

Privacy statement

Please read the following privacy policy carefully before proceeding. By accessing the website www.kronenhof.com, you agree to the following conditions.
AG Grand Hotels Engadinerkulm, Via Veglia 18, 7500 St. Moritz (hereinafter also referred to as “we”) is the operator of the website www.kronenhof.com (hereinafter referred to as “website”) and is therefore responsible for the collection, processing, and use of your personal data. Your trust is important to us, so we take data protection seriously and ensure that appropriate measures are in place. We also train our employees accordingly. Whenever we commission third parties to process personal data, the third party will be carefully selected and must take appropriate security measures to ensure the confidentiality and security of your personal information.

Data protection contact:
AG Grand Hotels Engadinerkulm
Via Veglia 18
7500 St. Moritz
CHE-116.244.146, Commercial Register of the Canton of Grisons
info@kronenhof.com

AG Grand Hotels Engadinerkulm is legally represented by the following partner for data protection matters in the countries of the European Union: 

VGS Datenschutzpartner GmbH
Am Kaiserkai 69
20457 Hamburg
Germany

info@datenschutzpartner.eu
https://datenschutzpartner.eu/

The entire content of the website www.kronenhof.com is protected by copyright. All rights are held by AG Grand Hotels Engadinerkulm or third parties. The content and elements of the website www.kronenhof.com are freely accessible for browsing purposes only. Reproduction of the material or parts thereof in any written or electronic form is only permitted with explicit reference to www.kronenhof.com. Reproducing, transmitting, modifying, linking, or using the website www.kronenhof.com for public or commercial purposes is prohibited without our prior written consent. Please contact us at info@kronenhof.com. The various names and logos on the website www.kronenhof.com are generally registered trademarks. No part of the website www.kronenhof.com grants a licence or right to use any image, registered trademark, or logo. Downloading or copying the website www.kronenhof.com or parts thereof does not transfer any rights to the software or other elements of the website www.kronenhof.com. We reserve all rights to the elements of the website www.kronenhof.com, with the exception of third-party rights.

No warranty

Although we have made every effort to ensure the reliability of the information contained on the website www.kronenhof.com at the time of publication, neither we nor our contractual partners can make any explicit or implicit assurances or warranties (including those with regard to third parties) concerning the accuracy, reliability, or completeness of the information on www.kronenhof.com. Opinions and other information on the website www.kronenhof.com are subject to change without notice. We assume no responsibility and make no guarantee that the functions of the website www.kronenhof.com will not be interrupted or that the website or the respective server is free from viruses or other harmful component

Limitation of liability

If a contractual relationship exists between us and the user of the website www.kronenhof.com or another of our services, we are only liable for damage caused by gross negligence or intent. We exclude any liability for damage caused by an auxiliary. We are not liable for lost profits, data loss, or any other direct, indirect, or consequential damages resulting from accessing or using elements of the website www.kronenhof.com, the inability to access or use them, links to other websites, or technical malfunctions.

The website www.kronenhof.com contains links to third-party websites that may be of interest to you. When clicking on such links, you may leave the website www.kronenhof.com, or you may see excerpts from third-party websites displayed within the website. AG Grand Hotels Engadinerkulm has not reviewed the third-party websites linked to the website www.kronenhof.com and is in no way responsible or liable for the content or functioning of these third-party websites. This applies regardless of whether you leave the website www.kronenhof.com when clicking on a link or whether the content is displayed within the website, even if the provider of the third-party website is not readily apparent. Establishing such a connection or accessing third-party websites is solely at the user’s own risk.

General

All personal data collected during registration or generated during use that is protected under the DSG (Swiss Federal Act on Data Protection) or the GDPR (General Data Protection Regulation of the European Union) will be used exclusively for the purpose of fulfilling the contract, unless you have expressly consented to further use, as described in this privacy policy, or applicable law permits such use. Our employees are required to maintain the confidentiality of personal data.

Scope & purpose of the collection, processing, & use of personal data

What personal data we collect
We may collect personal data relating to the services you have received, your payment details, your online preferences, and your customer feedback, including your company name, name, address, e-mail address, and other information. We use this personal information to communicate with you, enter into contracts with you, process transactions, operate the website, handle billing, conduct market research, and carry out marketing activities, e.g., to analyse our customer base or to contact you by post, e-mail, or text message. We may collect personal information about your credit standing to protect us against the risk of payment default.
Furthermore, your browsing and usage data will be collected. This includes, for example, your IP address, the device, browser, and browser version you used to access the website, when you accessed the website, which operating system you used, the website or app from which you accessed our website via a link, and which elements of the website you used. This personal information is stored together with the IP address of your access device. The purpose is to present and optimise our website accurately, protect against attacks or other security breaches, and personalise the website for you.

When visiting www.kronenhof.com
When visiting our website, our servers temporarily record every access in a log file. The following user and device data, as well as personal data, are collected without your intervention and stored by our host (ISP (Internet Service Provider)):

  • The IP address of the requesting computer
  • The date and time of access
  • The name and URL of the retrieved file
  • The website from which you accessed our website
  • The operating system of your computer and the browser you use
  • The country from which you accessed the website and the language settings in your browser

The collection and processing of this data serves to enable the use of our website (connection establishment), ensure the long-term security and stability of the system, optimise our website, and conduct internal statistical analyses. This constitutes our legitimate interest in processing data. The IP address is used in particular to record the country of residence of the website visitor. Furthermore, in the event of attacks on the network infrastructure of www.kronenhof.com, the IP address may be evaluated for statistical purposes. Furthermore, when visiting our website, we use so-called tracking pixels and cookies to display personalised advertising and to use web analytics services.

When using our contact forms
You have the option of contacting us via a contact form. The following personal data must be provided:

  • Title
  • First and Last Name
  • Address (street, house number, city, zip code)
  • Phone number
  • E-mail address

The mandatory entries are marked with an asterisk (*). Failure to provide this information may prevent us from providing our services. Providing personal data in other fields is voluntary. You can inform us at any time that you no longer consent to the processing of this voluntarily provided personal data (see heading “Your rights”). Other information is optional and does not affect the use of our website. We only use this data to respond to your enquiry in the best possible and personalised way.

When registering for our newsletter
You have the option to subscribe to our newsletter on our website. This requires registration. As part of the registration process, the following data must be provided:

  • Title
  • First name
  • Last name
  • E-mail address

This information is necessary to send the newsletter. By registering, you give us your consent to the processing of the specified data for the regular distribution of the newsletter to the e-mail address you provided, as well as for the statistical evaluation of user behaviour and the optimisation of the newsletter. We are entitled to commission third parties to handle the technical aspects of our advertising activities and to pass on your data for this purpose. At the end of each newsletter, you will find a link where you can unsubscribe at any time. After unsubscribing, your personal data will be deleted. We expressly draw your attention to the data analysis conducted in connection with the distribution of the newsletter (see section below “Processing of data resulting from newsletter use”).

Use of your data for advertising purposes

Creation of pseudonymised usage profiles
To enable personalised marketing on social networks, we use so-called remarketing pixels on the website. If you have an account with one of the social networks involved and are logged in when you visit the page, this pixel links your visit to the page with your account. You can adjust your advertising settings in your user profile on the respective social network. We use retargeting technologies. Your user behaviour on our website will be analysed in order to offer you personalised advertisements on partner websites. Your user behaviour is recorded under a pseudonym. Most retargeting technologies use cookies. You can prevent retargeting at any time by rejecting or disabling cookies in your web browser. You can also visit the Digital Advertising Alliance website to opt out of the other advertising and retargeting tools mentioned. The following remarketing pixels are used on our website:

AdWords and DoubleClick
We use Google AdWords Remarketing and DoubleClick services provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (Registration number: 368047), to display advertisements based on your previous visits to websites. Google uses the so-called DoubleClick cookie, which enables Google to recognise your browser when you visit other websites. The information generated by the cookie in connection with your visit to this website (including your IP address) will be transmitted to and stored by Google on a server in the United States (for additional information regarding transfers of personal data to the United States, see “Transfer of personal data abroad” below). Google will use this information to evaluate your use of the website in connection with the advertisements displayed to you, compile reports on website activities and advertisements for website operators, and provide other services related to the use of the website and the internet. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. However, Google will never associate your IP address with other Google data.

Google Tag Manager
We also use Google Tag Manager to manage usage-based advertising services. Google Tag Manager itself operates on a cookieless domain and does not collect any personally identifiable information. Instead, the tool triggers other tags that may collect data (see above). If you have opted out at the domain or cookie level, your opt-out will remain in effect for all tracking tags implemented through Google Tag Manager.

Sharing of your data with third parties

We share your personal data if you have expressly consented, if there is a legal obligation to do so, or if this is necessary for the enforcement of our rights, in particular for the enforcement of claims arising from the relationship between you and AG Grand Hotels Engadinerkulm (e.g., collection agencies, authorities, or lawyers). We may share your data with third parties to the extent necessary for the use of the website and the provision of the requested services (e.g., outsourcing partners, web hosts, and companies through which we provide services using our website, such as booking, rental, or purchasing services), as well as for the analysis of your user behaviour. When sharing your data with third parties, we provide sufficient contractual guarantees that these third parties use the personal data in accordance with legal requirements and exclusively in our interest.
If the website contains links to third-party websites, AG Grand Hotels Engadinerkulm has no influence over the collection, processing, storage, or use of personal data by the third party after you click on these links and assumes no responsibility in this regard.

Transfer of personal data abroad

AG Grand Hotels Engadinerkulm is entitled to transfer your personal data to third parties (contracted service providers) abroad if this is necessary for the data processing described in this privacy policy. They are required to comply with the same data protection requirements as we are. If the level of data protection in a country does not correspond to Swiss or European standards, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.
For the sake of completeness, we would like to inform users domiciled or residing in Switzerland that, in the USA, there are surveillance measures implemented by US authorities that generally require the storage of all personal data of persons whose data is transferred from Switzerland to the USA. This takes place without any differentiation, limitation, or exception based on the objective pursued and without an objective criterion that would limit the US authorities’ access to the data and its subsequent use to very specific, strictly limited purposes, which could justify both access to and the use of the information obtained in this way. Furthermore, we would like to point out that, in the USA, there are no legal remedies available to persons concerned in Switzerland that would allow them to obtain access to the data concerning them and to pursue its rectification or deletion, and no effective judicial protection against the access rights of US authorities. We explicitly inform the persons concerned about this legal and factual situation in order to enable them to make an informed decision regarding consent to the use of their data. For users residing in EU Member States, please note that, from the point of view of the European Union, the USA does not have a sufficient level of data protection due to, among other things, the issues mentioned in this section. To the extent that we have explained in this privacy statement that recipients of data (such as Google, Facebook, or X) are based in the USA, we will either be governed by contractual arrangements with these companies or by securing certification of these companies under the EU-US Privacy Shield to ensure that your data is protected at an appropriate level by our partners.

Data security

We use appropriate technical and organisational security measures to protect your stored personal data against manipulation, partial or total loss, and unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. You should always keep your information confidential and close the browser window when you stop communicating with us, especially if you share the computer with others. We also take corporate privacy very seriously. We have obliged our employees and the service companies commissioned by us to maintain confidentiality and to comply with data protection regulations.

Cookies

We use cookies on our website. Cookies help in many ways to make your visit to our website more accessible, enjoyable, and meaningful. Cookies are information files that your internet browser automatically saves to your computer’s hard drive when you visit our website. Session cookies are used when accessing our website (e.g., the online shop) to clearly assign information stored on the server side for each access to you or your internet browser (e.g., so that the contents of your shopping cart are not lost). Session cookies are deleted after you close your internet browser. Permanent cookies are used to save your default settings (e.g., preferred language) over several independent visits to our website, e.g., even after closing your internet browser, or to enable automatic login. Permanent cookies are deleted according to the settings of your internet browser (e.g., one month after the last visit). By using our website and the corresponding functions (e.g., language selection or automatic login), you consent to the use of permanent cookies.
Cookies neither damage your computer’s hard drive nor transmit personal data of the user to us. For example, we use cookies to better tailor information, offers, and advertising to your individual interests. Their use does not mean that we receive new personal information about you as an online visitor. Most internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that you are always notified when you receive a new cookie. Deactivating cookies may mean that you cannot use all functions of our website.

Tracking tools

On our website, we use so-called tracking tools. These tracking tools monitor your browsing behaviour on our website. This observation is carried out for the purpose of the needs-based design and continuous optimisation of our website. In this context, pseudonymised usage profiles are created and small text files are stored on your computer (“cookies”). For this purpose, third-party providers can also use permanent cookies, pixel tags, or similar technologies. The third-party provider does not receive any personal data from us but can track your use of our website, combine this information with data from other websites that you have visited and that are also tracked by the third-party provider, and use these findings for their own purposes (e.g., advertising). The processing of your personal data by the third-party provider is then carried out under the responsibility of the service provider in accordance with its data protection regulations. The following tracking tools are used:

Google Analytics
Google Analytics is a service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (Registration number: 368047). We use Google Analytics on our website to create anonymous evaluations of website usage. A cookie is set, and the session log data is sent to Google.

Social media plugins

The website uses the social plugins described below. Whenever possible, the plugins are disabled by default on our website and therefore do not transmit any data. By clicking on the corresponding social media button, you can activate the plugins. If the plugins are activated, your browser establishes a direct connection with the servers of the respective social network as soon as you access one of our websites. The content of the plugin is transmitted directly from the social network to your browser and integrated into the website. The plugins can be deactivated with a single click.

Facebook Social plugins
Facebook social plugins are used on this website to make our website more personal. For this purpose, we use the “LIKE” and “SHARE” buttons. This service is provided by the US company Facebook, 1 Hacker Way, Menlo Park, California 94025, USA, 1-650-308-7300. By integrating the plugins, Facebook receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information, including your IP address, is transmitted directly from your browser to a Facebook server in the US and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking on the “Like” or “Share” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information may also be posted on Facebook and displayed to your Facebook friends. For this purpose, Facebook uses usage, interest, and relationship profiles, e.g., to evaluate your use of our website in relation to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and the settings available to protect your privacy, can be found in the privacy policy of Facebook.

Twitter Social plugins
On our website, plugins of the short message network Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, are integrated. The Twitter plugins (tweet button) can be recognised by the Twitter logo on our website. If you have activated the social plugins, a direct connection is established between your browser and the Twitter server. Twitter receives information that you have visited our website, together with your IP address. If you click on the Twitter “Tweet button” while logged in to your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account.

YouTube
On certain pages, YouTube clips are embedded. YouTube is a product of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (Registration number: 368047). The clips are displayed in an I-frame. This means that a foreign web page is accessed in the area of the web page where the clip is displayed. The data processing in this I-frame is beyond our control. If you are logged in to your YouTube account, YouTube will associate the video you watch with your YouTube account. If you want to prevent this, log out of your YouTube account. YouTube will set a cookie as soon as the page loads. If you wish to prevent this, you can opt-out of the activation of Google cookies for your browser using the links provided under “opt-out/opt-in”.

TrustYou
On our website, we use the social media plugin of TrustYou Munich Center of Technology, Agnes-Pockels-Bogen 1, 80992 Munich. TrustYou is a service that collects reviews from hotels and processes them into reports. We use data from TrustYou to provide our visitors with an independent opinion about the service.

Google Maps
On certain pages, you can find maps integrated from Google Maps. Google Maps is a product of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland (Registration number: 368047). The maps are displayed in an I-frame. This means that a foreign website is accessed in the I-frame area of the website. The data processing in this I-frame is beyond our control. Google will associate the access with your Google Account. Google Maps will set a cookie as soon as the page loads. If you wish to prevent this, you can opt-out of the activation of Google cookies for your browser using the links provided under “opt-out/opt-in”.

Evaluation of newsletter usage

For sending our newsletter, we use third-party e-mail marketing services. Our newsletter may therefore contain so-called web beacons (tracking pixels) or similar technical means. A web beacon is a 1 × 1 pixel, non-visible graphic that is associated with the user ID of each newsletter subscriber. This pixel is activated only when you display the images in the newsletter. The use of such services enables us to evaluate whether the newsletter has been opened. Furthermore, the click behaviour of newsletter recipients can also be recorded and evaluated. We use this data for statistical purposes and to optimise the content and structure of the newsletter. This allows us to better align the information and offers in our newsletter with the interests of our readers. The tracking pixel is deleted when you delete the newsletter. To prevent tracking pixels in our newsletter, please configure your e-mail program so that no HTML is displayed in messages.

Room booking

Online, by correspondence or by telephone
If you make a booking via our website, by correspondence (e-mail or letter), or by telephone, we will require the following information to process your booking:

  • Title
  • Name and surname
  • Postal address
  • Date of birth
  • Phone number
  • Language
  • Credit card information
  • E-mail address

We will use this data and any other information voluntarily provided by you (e.g., expected time of arrival, vehicle number plate, preferences, and comments) only to process your booking, unless otherwise stated in this privacy policy or unless you have specifically consented to such use. We will process the data under your name in order to record your booking as requested, provide the services booked, contact you in the event of any queries or problems, and ensure correct payment.

Booking platforms
If you make a booking via a third-party platform, we will receive various personal information from the relevant platform operator. In addition, queries about your booking may be forwarded to us. We will process this data under your name in order to record your booking as requested and provide the services booked. Finally, we may be notified by the platform operators of any disputes relating to a booking. This may sometimes involve data relating to the booking process, which could also include a copy of the booking confirmation as proof that the booking was actually made. We process this data for the purpose of safeguarding and asserting our claims.

Data processing in connection with your stay

Data processing to comply with legal reporting obligations
Upon arrival at our hotel, we may require the following information from you and anyone accompanying you:

  • Name and surname
  • Postal address and canton
  • Date of birth
  • Place of birth
  • Nationality
  • Official identification document and number
  • Arrival and departure dates
  • Room number

We collect this information in order to comply with legal reporting obligations arising in particular from legislation relating to the hospitality industry and the police. Insofar as we are required to do so under the applicable provisions, we will pass on this information to the relevant police authority.

Records of services purchased
If you purchase additional services during your stay (e.g., restaurant visits or spa treatments), we will keep a record of the purchased item or service and the time of purchase for billing purposes.

Automated decision-making/profiling

We (or third parties commissioned by us) generally do not make automated decisions that affect your personal information or unlawfully or otherwise significantly affect you.

The legal basis for the processing of personal data by us is generally laid down in Article 13 (2) (a) of the GDPR (processing directly related to the conclusion or performance of a contract, corresponds to Article 6 (1) (b) EU GDPR) and Article 13 (1) DSG (consent of the data subject or obligation to be processed by law, corresponds to Article 6 (1) (a) EU GDPR). In cases where we wish to refuse to conclude contracts with data subjects in the future due to abuse, default, or similar legitimate reasons, we reserve the right, based on Article 13 (1) of the DSG (corresponding to Article 6 (1) (f) EU GDPR) to keep name, first name, address, and e-mail address of a data subject as well as the personal data on the circumstances for the sake of our own interest. Processing of your personal data by other affiliates is also based on Article 13 (1) of the DSG (corresponding to Article 6 (1) (f) EU GDPR).

Your rights

Upon request, we provide information to each data subject as to whether and, if so, which personal data is being processed about them (right to confirmation, right to information). At your request:

  • We waive all or part of the processing of personal data (right to revoke your consent to the processing of non-essential personal data, right to be forgotten). Your request to be forgotten will be shared with third parties with whom we have previously shared your personal information.
  • We correct the corresponding personal data (right to rectify incorrect data).
  • We restrict the processing of the relevant personal data (right to restriction of processing, in which case we will only store your personal data or use it to protect our legal rights or the rights of another person).
  • You will receive the relevant personal data in a structured, commonly used, and machine-readable format (right to data portability).

To make such a request or exercise any of the rights described in this section, such as when you no longer wish to receive e-mail newsletters or wish to cancel your account, use the relevant feature on our website or contact our Privacy Officer or point of contact as stated at the beginning of this privacy policy. If we fail to comply with a request, we will inform you of the reasons for doing so. For example, we may, where legally permissible, deny a request for deletion if your personal data is still needed for the original purposes (for example, if you are still receiving a service from us), if the processing is based on a compelling legal basis (for example, legal accounting requirements), or if we have an overriding interest (such as in the case of litigation against the data subject). If we assert an overriding interest in the processing of personal data, you have the right to object to the processing, provided that your particular situation leads to a different balance of interests compared with other data subjects (right to object). For example, this could be the case if you are a person in the public eye or if the processing creates a risk that you may be harmed by a third party. If you are not satisfied with our response to your request, you have the right to lodge a complaint with a competent regulatory authority, for example, in your country of residence or at the registered office of AG Grand Hotels Engadinerkulm (right to complain).

Storage of data

We only process personal data for as long as necessary for the relevant purpose or as required by law. If you have set up an account with us, we will store the specified master data without restriction. However, you can request the deletion of your account at any time (see heading “Your rights”). We will delete the master data unless we are required by law to retain it. In the case of an order without an account, your master data will be deleted after the expiry of the guarantee period or the end of the service, insofar as we are not obliged by law to retain it. This deletion can be carried out immediately or as part of periodic deletion processes.
Contract data, which may also include personal data, will be kept by us until the expiry of the statutory retention period of 10 years. Data retention obligations arise, among other things, from accounting and tax regulations, as well as from the obligation to retain electronic communications. Once we no longer need this data to provide the services to you, the data will be blocked. This means that the data may then only be used for accounting and tax purposes. If we wish to refuse further business contacts with a data subject due to abuse, payment default, or other legitimate reasons, we will retain the corresponding personal data for a period of five years or, in the event of a recurrence, for ten years.

Possibility to Opt-out/Opt-in

If you do not agree that we evaluate your usage data, you can disable it. Switching off the tracking is done by filing a so-called “Opt-out cookie” on your system. If you delete all your cookies, please note that the Opt-out cookie will also be lost and may have to be renewed. Please note that the list below is a list of Opt-out options that sometimes includes trackers used by our partners that are not necessarily used on the website:

A good way to configure a large number of cookies can be found at youronlinechoices.com or optout.aboutads.info or install the browser extension Ghostery, which is available for every popular browser.

Applicable law & jurisdiction

This privacy policy and the agreements that are concluded based on or in connection with this privacy policy are governed by Swiss law unless the law of another state is necessarily applicable. Jurisdiction is at the headquarters of AG Grand Hotels Engadinerkulm unless another jurisdiction is mandatory.

Final provisions

Should individual parts of this privacy policy be ineffective, this does not affect the validity of the remaining privacy policy. Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may be necessary to change this privacy policy. The current privacy policy is published on our website. This page was last changed on 7 March 2023. If you have questions or comments about our legal information or privacy policy, please contact us at info@kronenhof.com.