Privacy Policy

Privacy Policy

The protection of your personal data is an important concern for us. Below, we inform you about the data we process when you visit this website and when you use our forms and online booking. We also explain the purpose of this and the rights you have.

1. Responsible authority

Arlenwald Hotel Arosa AG

Pretschlistrasse 62
7050 Arosa, Switzerland
Phone: +41 81 377 18 38
Email: arlenwald@bluewin.ch

For inquiries and reservations at the restaurant Burestübli: burestuebli@bluewin.ch

2. Basics

We process personal data in accordance with the Swiss Data Protection Act (revDSG). As far as guests from the European Economic Area are concerned, the processing is also governed by the General Data Protection Regulation (GDPR). We process personal data only to the extent necessary for the provision of our services, to answer your inquiries, to fulfill legal obligations, or based on your consent.

3. Server log files and hosting

This website is operated by an external hosting service provider that processes the data on our behalf. When the website is accessed, access data is automatically logged, in particular IP address, date and time of access, page accessed, transferred data volume, browser type and operating system. This data is used for the secure and stable operation of the website and for the analysis of technical malfunctions. It is not merged with other data sources.

4. Cookies

This website does not use cookies for advertising or analytics purposes and does not integrate tracking or statistical services. Only technically necessary cookies are used, which are necessary for the error-free display and navigation of the website.

5. Contact form

Through the contact form, we process the first name, last name, email address, phone number, the requested matter, and your message. We use this information exclusively to process and answer your request. The information is transmitted via email to us; in addition, the entries in the database of this website are stored. You will receive an automatic confirmation of receipt to the specified email address.

6th table reservation Restaurant Burestübli

For table reservations, we process the date and desired time, first name, last name, number of people, email address, phone number, and any additional notes. The information is transmitted to the restaurant and is used solely for processing and confirming your reservation.

7. Availability search

The availability search on our website is an embedded form from the booking provider Toubiz. When the page loads, this form is retrieved by the servers of Toubiz; in doing so, your IP address is transmitted to Toubiz. You enter your travel details, number of people and age of children directly into this form – they are transmitted to Toubiz and not stored on this website.

After searching, the Toubiz booking tool opens in a new browser tab, where you can finalize your reservation.

8. Forwarding to booking and payment (Toubiz)

For the actual room booking and payment processing, we will direct you to the external booking tool from Toubiz, which will open in a new browser tab. There, you will enter your booking and payment details (e.g., name, contact details, travel dates, payment method) directly on Toubiz.

Toubiz processes this data to complete the booking and transmits the booking data to us in order to fulfill the accommodation contract. No booking or payment data is stored on the servers of this website. The privacy policy of Toubiz applies, which you can view on the linked booking page.

9. E-mail communication

If you contact us by email or we send you confirmations, the content of these messages will be stored by us together with your contact details. E-mails are transmitted over the Internet in an unencrypted form; complete confidentiality cannot be guaranteed. For particularly sensitive information, we ask you to contact us by phone.

10. Guest reviews

On our website, we display reviews from guests. To do this, we embed the Trustindex widget (trustindex.io), which displays publicly accessible Google reviews about our business. When loading this widget, content from Trustindex servers and profile images from Google servers are retrieved; in the process, your IP address is transmitted to these providers.

11. Google Maps

On the contact page, we embed a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When loading the map, your IP address is transmitted to Google; Google may set cookies. The map is used to make our house easier to find. More information: policies.google.com/privacy.

12. Fonts (Google Fonts)

For a uniform presentation, we use fonts that are loaded when the page is accessed. If these are obtained from Google servers, your IP address is transmitted to Google. According to Google, no user profile is thereby created.

13. Security, intermediate storage and language versions

To protect against attacks and abuse, we employ a security solution that logs security-relevant access – including IP addresses – and blocks suspicious requests. To speed up the website, we use caching; no personal data is evaluated. The multilingual display is achieved through a translation solution that is operated on our own server; the selected language is included in the address bar.

14. Transfer to third parties

We do not share your data with third parties unless you have consented or we are legally obliged to do so. Service providers who process data on our behalf (hosting, email delivery) are contractually bound to confidentiality and compliance with data protection regulations. For bookings and payments via Toubiz, see paragraph 8 of this statement.

15. Storage period

We only retain personal data for as long as is necessary for the stated purposes or required by legal retention obligations. We delete requests via the forms as soon as the processing is complete and there is no legal retention requirement. Booking and billing data are subject to the statutory retention period of ten years.

16. Your rights

You have the right under applicable law to request information about the data processed about you, as well as the right to rectification, deletion or restriction of processing. Furthermore, you may object to the processing and – where applicable – request the disclosure or transfer of your data. You may revoke a given consent at any time with effect for the future.

To exercise your rights, you only need to send a message to arlenwald@bluewin.ch. You also have the right to complain to the competent supervisory authority (in Switzerland: Federal Data Protection and Public Relations Commissioner, EDÖB).

17. Data security

The transmission of data on this website takes place encrypted via HTTPS. We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, and misuse.

18th Amendments

We may modify this privacy policy at any time, especially if our services or the services used change. The version published on this page applies at all times.

Status: October 2026