The purpose of this privacy policy (hereinafter the "Policy") is to set out the rules governing the various personal data processing operations that may be carried out when you use our website, which can be accessed at the following URL address: www.latza.ch (hereinafter the "Site").
The processing of personal data carried out on the Site is the responsibility of two joint data controllers.

The persons responsible for processing your personal data are :

- Seekda GmbH (hereinafter "Kognitiv"), which manages our bookings

and

- Hôtel Aiguille de la Tza (see legal notice page) referred to as the "Establishment"

Kognitiv and the Establishment are hereinafter together referred to as the "Data Controller". The terms "we", "us" and "our" in this privacy policy refer to the Data Controller.

As the Data Controller of your Personal Data, we do our utmost to protect your privacy when you visit the Site.

This Policy enables you to find out more about the origin and use of your Personal Data and your browsing information processed when you visit our Site.

This Policy allows you to find out more about the origin and use of your Personal Data as well as your browsing information processed when consulting our Site.

For the purposes of this Policy, the expression "Personal Data" refers to any data which relates to you alone and enables you to be identified directly or indirectly, regardless of the Terminal you use.

The term "Terminal" refers to the hardware equipment (computer, tablet, smartphone, telephone, etc.) that you use to consult and browse the Site.

The term "Regulation" refers to the regulations relating to personal data, and in particular to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data,
By using our Site, you declare that you accept the terms of this Policy in their entirety.

If you do not agree with any of these terms, you are free to stop using our Site.

This Confidentiality Policy is updated regularly. So that you can be properly informed of any significant changes in advance, we will notify you by means of notices on the relevant services or by e-mail as appropriate.

The Site will always display the most recent version of this confidentiality policy.

1. Protection of your personal data

In accordance with the Regulations, we list all the data we process in a in a data processing register which we make available to the competent authorities.

Any information that you may have provided to us during your visits to the visits to the Site are strictly confidential. This information is necessary for the purposes for which it is processed.

1.1 What Personal Data is collected and processed?

The information likely to be collected and processed is as follows the following:

- Identification and contact data: your first name, surname, gender name, gender, postal address, telephone number, email address, language and address, your language and the country from which you interact with us us;

- Financial and payment data: your bank details (in this respect we inform you that all that all payment transactions are encrypted by the receiving bank. encrypted by the receiving bank or accredited storage centre and that we do not we do not store any bank card numbers), information about your bookings, etc.; and reservations, etc. ;

- Connection, geolocation (only with your consent) and browsing data; and consent) and browsing data; and

- Personal preferences: this includes your preferences with regard to preferences.

It is important that the personal information shared about you is correct and up to date.

We do not process any personal data that could be described as "sensitive" (information concerning racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sex life) within the meaning of the Regulation on personal data.

In this respect, it should be noted that our Site is not intended for children and that we therefore do not process any data relating to children.

We undertake not to transfer your personal data to third parties, with the exceptions listed below in Article 1.3.

1.2. For what purposes is your Personal Data collected and processed?

The Personal Data listed above may be collected and processed for the following purposes:

• Booking management

The processing of your data is necessary to keep you informed of the status of your reservation, the summary of your reservation, accept your payment, etc.

• Access to customer service

We process your Personal Data as part of our customer service in order to respond to your requests, in particular via the contact form.

• Improving our services

We process your browsing and booking data for analysis and statistical purposes. This data enables us to analyse how you use our Site and to improve its ergonomics and quality.

• Marketing information

When you subscribe to our newsletter, we process your data in order to manage your subscription and send you targeted information by email or SMS according to your preferences. We may also contact you via push notifications if you subscribe to this service.

Processing for marketing purposes requires your consent. You may therefore unsubscribe from our communications at any time.

If you have given us your consent to receive our communications, whether via our newsletter or via push notifications, we may use the information you have provided for the following purposes:

- Sharing information about our events, products, services and current offers;
- Recommending certain products or services that may be of interest to you; and
- Customer research in order to better understand your expectations regarding the products and services offered by our Site.

1.3. Who receives your Personal Data?

In the course of using our Site, you may receive information from third parties with whom we collaborate in order to offer you certain services. This may include :

- Accredited financial institutions and storage centres;
- Fraud detection and prevention entities; and
- Marketing, communication and advertising service providers.

The Personal Data collected from the Site is mainly processed by the Data Controller's internal departments.

However, we may share your information with the third parties listed above in particular for the following reasons:

- to process payment in the case of financial institutions and accredited storage centres ;
- to check your credit and identity in the case of fraud detection and prevention entities; and
- to optimise your visit to our Site and improve our services in the case of service providers linked to marketing, communication and advertising.

We ask third parties who receive your personal data to undertake to comply with the Regulations relating to personal data. The third parties listed above may only use your personal information in accordance with our instructions and not for their own use.

Your connection and navigation data may also be transferred to Google Analytics.

We may also disclose your Personal Data in order to comply with an injunction issued by the legal authorities.

1.4. How long will your Personal Data be kept?

We will keep your data for a period of ten (10) years following your last reservation, in order to respond to any questions, complaints or to maintain any data necessary to meet legal, accounting or analysis requirements (article L.123-22 of the French Commercial Code).

We may also retain your data for research or statistical analysis, in which case it will be anonymised.

As part of a subscription to our newsletter, we will no longer contact you if you have not opened our newsletters for more than twelve (12) months.

Any change to this Policy will be made on this page and, in the event of a substantial change, you will be notified by e-mail.

The Data Controller may also retain your data for research or statistical analysis. As this data is then anonymised, no retention period is imposed by the Regulations insofar as it is no longer possible to "re-identify" you at a later date.

1.5. Hosting of your Personal Data

Your Personal Data is hosted by Seekda Hospitality Solutions GmbH
Neubaugasse 10/15, 1070 Wien, Austria.

Your email addresses are hosted by Outlook from Microsoft Corp, USA; and Mailchimp, The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA.

The servers on which your Personal Data and our website are stored are located in Switzerland (Hoststar and Novatrend respectively).

In any event, the Data Controller has implemented appropriate technical measures to maintain the security of your Personal Data.

1.6. What are your rights?

1.6.1. Consent

Your consent must be given clearly and unambiguously. This is why, when you agree to fill in the Site's contact form:

- the use that will be made of your Personal Data is explained to you;
- you must tick a box to confirm your consent; and
- children under the age of 13 cannot give their consent.

1.6.2. Other rights

In accordance with the Regulations, you have the following rights with regard to your Personal Data:

- Right of access to data: this right allows you to receive a copy of the Personal Data that we hold about you;
- Right to rectification: this right allows you to request the correction of inaccurate or incomplete Personal Data concerning you;
- Right to the deletion of your Personal Data: this right gives you the possibility to ask us to delete your Personal Data if one of the legal grounds is fulfilled:

• the Personal Data is no longer necessary for the purposes of the processing;
• you have withdrawn your consent on which the processing is based;
• you have objected to the processing by exercising your right to object;
• the processing of your Personal Data is unlawful; or
• your Personal Data must be deleted by virtue of a legal obligation.

- The right to limit the processing of your Personal Data; this limitation of processing may be carried out when:

• you dispute the accuracy of your Personal Data;
• you do not object to the erasure of your Personal Data in the context of unlawful processing but require that it be limited;
• your Personal Data is no longer used by our services but its retention is only necessary for the establishment, exercise or defence of legal claims; or
• you object to us using your Personal Data by exercising your right to object.

- Right to the portability of your Personal Data: you may contact us so that we can provide you or another controller directly with your Personal Data in a structured, commonly used and machine-readable format;

- Right to object: you may contact us if

• processing is carried out in the public interest or for our legitimate interests; you may object only on grounds relating to your situation; or
• processing is carried out for the purposes of commercial canvassing; you may object at any time and without any explanation being given to us.

- Right to determine the fate of your Personal Data after your death (the e-Testament): one of the specific features of French regulations is that they allow you to send us your instructions concerning the way in which we will process your Personal Data after your death. You can choose to have your Personal Data deleted or passed on to a close relative.

Irrespective of the purpose or legal basis on which we process your data, you may therefore, at any time and at no cost to you, send us an e-mail to exercise your rights at the following address: hotel@latza.ch

Or send us a letter to the following address :

Hôtel Aiguille de la Tza
Route de Tsallion 1 - CH 1986 Arolla

Please note, however, that we are not always able to respond favourably to your request for legal reasons, which we will bring to your attention, where appropriate, after receiving your request.

In any event, we remind you that you have the right to lodge a complaint with the competent administrative authority.

1.7 What are the legal grounds for processing?

We use legal grounds for processing your data, which depend on the way in which you interact with our Site.

When you purchase products from our Site, we collect and process your personal data in order to perform our contract with you. For example, we need your postal address to deliver your order or your bank details to process payment.

We also rely on other legal grounds, such as your legitimate interests. For example, we consider that it is in your interest that your identity cannot be used for fraudulent purposes, that our customer service staff have access to your order information in order to serve you better or that we can better understand your use of our Site in order to improve its ergonomics and the services we offer you.

Finally, in the case of the processing of Personal Data for the purpose of canvassing, the legal basis for such processing is your consent (see Article 1.6.1. above).

2. Security of Internet browsing

2.1 Integrity of your data on the Internet

The Site has appropriate security measures in place to prevent any loss, unauthorised use or access, modification or disclosure of your Personal Data.

All personal data collected is stored on secure servers. The Data Controller has also implemented procedures to manage any violation of personal data.

2.2. Malicious use

We recommend that you only connect to secure networks, preferably private ones. Remain aware of the risks incurred on public wifi networks.

Independently of the Data Controller to whom you have voluntarily transmitted your Personal Data and given the nature of the Internet network, other operators, without any link with the Data Controller, are capable of capturing your Personal Data without your consent, particularly when you are browsing the Internet. We therefore recommend that you install anti-virus and anti-spyware software on your computer and update it regularly.

2.3. Spoofing/ Phishing

The Data Controller will never solicit you by e-mail to obtain personal information.

If you receive an e-mail on behalf of the Data Controller asking you to provide sensitive personal information (bank details, details of your private life, etc.), please do not reply and forward the e-mail to us so that we can take the necessary action.

You should only provide your account information once you have logged on to the Site directly via your browser.

3. Cookie policy

A cookie is a connection indicator, i.e. a text file that may be recorded in a dedicated space on the hard disk of your Terminal when you visit an Internet site. A cookie enables its issuer to identify the Terminal in which it is stored, for the duration of the cookie's validity or storage.

When you visit the Site, information relating to the browsing of your Terminal (computer, tablet, smartphone, etc.) may be recorded via cookies installed on your Terminal, subject to the choices you have made concerning cookies and which you may modify at any time.

What are the cookies used for on our Site?

Only the sender of a cookie is likely to read or modify the information contained in it.

When you connect to the Site, the Data Controller may, subject to your choices, install various cookies on your Terminal, enabling the browser on your Terminal to be recognised for the duration of the validity of the cookie concerned. The cookies we issue are used for the purposes described below.

The cookies we issue enable us to:

• to carry out studies and draw up statistics and volumes of visits to and use of the various elements making up our Site (sections and content visited, routes taken), enabling the Data Controller to improve the interest and ergonomics of its services;
• to adapt the presentation of the Site to the display preferences of your Terminal (language used, display resolution, operating system used, etc.) during your visits to the Site, depending on the hardware and viewing or reading software that your Terminal contains; and
• to implement security measures, for example when you are asked to reconnect to content or a service after a certain period of time.

3.2. Your choices concerning cookies

You have several options for managing cookies. Any settings you make may affect your browsing on the Internet and your conditions of access to certain services requiring the use of cookies.

You can choose at any time to express and modify your wishes with regard to cookies, by the means described below.

In particular, you can configure your browser software so that cookies are stored on your Terminal or, conversely, so that they are rejected, either systematically or depending on the sender.

You can also configure your browser software so that you are offered the option of accepting or refusing cookies from time to time, before a cookie is likely to be stored on your Terminal. For more information, see the section entitled "How to exercise your choices, depending on the browser you use" in Article 4.2.3 below.

3.2.1. Agreement on cookies

The recording of a cookie on a Terminal is essentially subject to the will of the Terminal user, which the latter may express and modify at any time and free of charge through the choices offered to him by his browser software.

If you have accepted the storage of cookies in your Terminal in your browser software, the cookies integrated into the pages and content that you have consulted may be stored temporarily in a dedicated space in your Terminal. They will only be readable there by the sender.