The controller within the meaning of the Swiss Data Protection Act (DSG) is Hotel & Eventcenter der Meilenstein GmbH, Lotzwilstrasse 66, 4900 Langenthal, Switzerland. Privacy enquiries should be directed to [email protected] or +41 62 919 18 18.

We process personal data lawfully, in good faith, proportionately and for specific purposes. Purposes include in particular the operation and security of the website, responding to enquiries, initiating and processing reservations and providing hotel, restaurant and event services, fulfilling legal obligations and protecting legitimate business interests.

When the website is accessed, technically necessary data such as IP address, date and time, requested URL, referrer, browser, operating system and device information are recorded in server logs. This serves delivery, stability, error analysis and protection against misuse. The website is hosted on infrastructure of Hetzner Online GmbH in Germany. Web server logs are normally rotated every 14 days; in case of security incidents individual records may be retained longer.

If you use forms or contact us, we process, in particular, your name, email address, telephone number, message, event requirements and any voluntary information for handling, communication, preparing offers and, where applicable, contract fulfilment. Mandatory fields are marked as such.

Hotel, restaurant or voucher bookings may involve external booking services. Once you open them, the respective provider processes data under its own responsibility and in accordance with its privacy policy. Before concluding a contract, the contractual and privacy information shown there also applies.

In the public area we do not currently use our own analytics or marketing cookies. For protected administration sessions a technically necessary, securely configured session cookie is used. Embedded services may use their own technologies. Your browser allows you to delete or block cookies; this may restrict functionality.

The website may load content from third-party providers, in particular the TrustScore from TrustYou and maps or media. In doing so, IP address, browser data and the page you accessed may be transmitted to the provider. HotelsCombined and event venue pages are only loaded when clicked. Third-party providers process data in accordance with their own privacy statements.

Personal data may be disclosed to carefully selected IT, hosting, communications, booking, payment and other service providers where necessary. These include in particular the hosting provider Hetzner, the hotel or restaurant booking systems you access and, for embedded guest reviews, TrustYou. Contracted processors may only handle data for the specified purpose and with appropriate security measures. Disclosure to authorities takes place where required by law.

Individual service providers may process data abroad. For countries without an adequate level of data protection we use a legally recognised safeguard, in particular appropriate standard contractual clauses, or rely on a legal exception. Where possible, we prefer processing in Switzerland or in the European Economic Area.

We retain personal data only for as long as the processing purpose, contractual claims or legal obligations require; thereafter they are deleted or anonymised. We take appropriate technical and organisational measures against unauthorised processing, loss, alteration or disclosure. Absolute security cannot be guaranteed.

Under applicable law you may in particular request access to, rectification, deletion, the handover or transfer of your data, as well as restriction or cessation of certain processing. Consent may be revoked for the future. Statutory retention obligations remain unaffected. You may contact the Federal Data Protection and Information Commissioner.

We will update this statement if processing, service providers or the legal situation change. The version published at any given time is authoritative.