Privacy Policy

Last updated

May 22, 2026

Thank you for visiting our website. The purpose of this Privacy Policy is to inform you about the processing of your personal data collected when you visit our website. Our data protection practices comply with the legal provisions of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). The following privacy policy serves to fulfill the information obligations resulting from the FADP and the GDPR. These can be found, for example, in Art. 8 et seq. FADP and Art. 13 et seq. GDPR.

The owner or data controller within the meaning of Art. 3 lit. i FADP or Art. 4 No. 7 GDPR is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller within the meaning of Art. 4 No. 7 GDPR is also the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR. Any third-party recipients are identified separately.

With regard to our website, the owner or data controller is:

Camp Montana Switzerland

Route de la Moubra 43
3963 Crans-Montana 1

+41 27 486 86 86

info@campmontana.ch

Your Rights as a Data Subject

You can exercise the following rights at any time using the contact details of our data protection officer:

Information about your data stored by us and its processing,
Rectification of inaccurate personal data,
Erasure of your data stored by us,
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
Objection to the processing of your data by us, and
Data portability, provided you have consented to the data processing or have entered into a contract with us.

If you have given us your consent, you can withdraw it at any time with effect for the future.You can lodge a complaint with a supervisory authority at any time, e.g., with the competent supervisory authority in the state/canton of your residence or the authority responsible for us as the controller.

Provision of the Website and Creation of Log Files

Every time you access our website, our system automatically collects data and information from the device (e.g., computer, mobile phone, tablet, etc.) used to access it.

What personal data is collected and to what extent is it processed?

Information about the browser type and version used;
The operating system of the accessing computer;
Hostname of the accessing computer;
The IP address of the accessing computer;
Date and time of access;
Websites and resources (images, files, other page content) accessed on our website;
Websites from which the user's system accessed our website (referrer tracking);
Notification of whether the retrieval was successful;
Amount of data transferred.

This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, meaning individual visitors to the website cannot be identified.

Legal Basis for the Processing of Personal Data

The processing of personal data is carried out in compliance with the principle of legality (Art. 4 FADP) and the principle of good faith (Art. 2 SCC), as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).

Purpose of Data Processing

The temporary (automated) storage of data is necessary for the duration of a website visit to enable the provision of the website. The storage and processing of personal data also take place to maintain the compatibility of our website for as many visitors as possible, to combat abuse, and to resolve technical faults. For this purpose, it is necessary to log the technical data of the accessing computer to react as early as possible to display errors, attacks on our IT systems, and/or functionality errors on our website. Furthermore, we use the data to optimize the website and to generally ensure the security of our information technology systems.

Storage Duration

The aforementioned technical data will be deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Right to Object and Erasure

You can object to the processing at any time in accordance with Article 21 GDPR and request the erasure of data in accordance with Article 17 GDPR. You can find out what rights you have and how to exercise them in the lower section of this Privacy Policy.

Special Functions of the Website

Our website offers you various functions, the use of which involves the collection, processing, and storage of personal data by us. Below we explain what happens to this data:

Contact Form(s)

What personal data is collected and to what extent is it processed?The data you enter into our contact forms, which you have provided in the input mask of the contact form.
Legal basis for the processing of personal data:The processing of personal data is carried out in accordance with the principle of legality (Art. 4 FADP) and the principle of good faith (Art. 2 SCC), as well as Art. 6 para. 1 lit. a GDPR (consent through a clear affirmative action or conduct).
Purpose of data processing:We use the data collected via our contact form(s) exclusively to process the specific contact request received. Please note that to fulfill your contact request, we may also send you emails to the address you provided. This is to ensure you receive confirmation that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory for us and is for your information only.
Storage duration:After your request has been processed, the collected data will be deleted immediately, provided there are no statutory retention periods.
Right to object and erasure:You can object to the processing at any time in accordance with Article 21 GDPR and request the erasure of data in accordance with Article 17 GDPR. You can find out what rights you have and how to exercise them in the lower section of this Privacy Policy.
Necessity of providing personal data:The use of the contact forms is on a voluntary basis. You are not obliged to contact us via the contact form; you can also use the other contact options offered on our website. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the mandatory fields of the contact form, you will either be unable to submit the request, or we will be unable to process your request due to missing information.

Disclosure of Information to Third Parties

The processing of personal data is carried out in compliance with the principle of legality (Art. 4 FADP) and the principle of good faith (Art. 2 SCC).The disclosure of information to third parties depends on the scope of the activities or offers of our website or our business model described below.

In principle, we only store your data as long as necessary and treat it confidentially. Exceptions to this include the transfer of personal data to debt collection service providers, public bodies and authorities, as well as private individuals who have a right to it based on legal regulations, judicial decisions, or official orders, as well as the transfer to authorities for the purpose of initiating legal proceedings or for law enforcement if our legally protected rights are violated.

Use of Google Analytics

Type and Purpose of Processing

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: "Google"). Google Analytics uses so-called "cookies", which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.The purpose of the data processing is to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the internet, other related services are then provided.

Legal Basis for the Processing of Personal Data

The legal basis for data processing is your consent to the use of cookies and web tracking in our information banner (consent by clear confirmation of an action or behavior) in accordance with Art. 13 para. 1 FADP and Art. 6 para. 1 lit. a GDPR.

Recipient

The recipient of the data is Google as a data processor. For this purpose, we have concluded the corresponding data processing agreement with Google.

Storage Duration

The data will be deleted as soon as it is no longer required for our recording purposes.

Transfer to a Third Country

Google processes your data in the USA and has submitted to the EU-US Privacy Shield. We have also concluded Standard Contractual Clauses with Google for the use of Google Analytics.

Mandatory or Required Provision

The provision of your personal data is voluntary and is based solely on your consent. Preventing access may lead to functional restrictions on the website.

Withdrawal of Consent

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available under the following link: Browser Add-On to Disable Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on your device. This prevents future collection by Google Analytics for this website and for this browser as long as the cookie remains installed in your browser.

Profiling

With the help of the tracking tool Google Analytics, the behavior of website visitors can be evaluated and their interests analyzed. For this purpose, we create a pseudonymous user profile.

Use of Google Maps

Type and Purpose of Processing

On this website, we use the services of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.Further information about data processing by Google can be found in the Google Privacy Policy. There you can also change your personal privacy settings in the Safety Center.Detailed instructions on managing your own data in connection with Google products can be found here.

Legal Basis

The legal basis for the transfer of personal data is your consent pursuant to Art. 4 para. 5 FADP or Art. 13 para. 2 FADP and according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.

Recipient

By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not wish to be assigned to your profile on Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research, and/or the demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

Storage Duration

We do not collect any personal data through the integration of Google Maps.

Transfer to a Third Country

Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework unterworfen.

Withdrawal of Consent

If you do not want Google to collect, process, or use data about you via our website, you can disable JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.

Mandatory or Required Provision

The provision of your personal data is voluntary and is based solely on your consent. Preventing access may lead to functional restrictions on the website.

Use of Google Tag Manager

What personal data is collected and to what extent is it processed?

We use the Google Tag Manager service provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/ (hereinafter: Google Tag Manager) on our website. Google Tag Manager provides a technical platform for executing and bundling other web services and web tracking programs using so-called "tags". In this context, Google Tag Manager stores cookies on your computer and analyzes your surfing behavior (so-called "tracking") if web tracking tools are executed with Google Tag Manager.

This data sent by the individual tags integrated into Google Tag Manager is combined, stored, and processed under a uniform user interface by Google Tag Manager. All integrated "tags" are listed separately in this Privacy Policy. Further information on the data protection of the tools integrated into Google Tag Manager can be found in the respective section of this Privacy Policy. When using our website with the integrated Google Tag Manager tags activated, data, in particular your IP address and your user activities, will be transmitted to servers of Google Ireland Limited.

The regulations in the corresponding section of this Privacy Policy apply to the web services integrated via Google Tag Manager. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager using IP anonymization of the source code before transmission. Google Tag Manager is only capable of collecting IP addresses anonymously (so-called IP masking).

Legal Basis

Purpose of Data Processing

On our behalf, Google will use the information obtained with the help of Google Tag Manager to evaluate your visit to this website, to compile reports on website activity, and to provide us with other services related to website and internet usage.

Storage Duration

Google stores the data relevant for the function of Google Tag Manager for as long as necessary to fulfill the booked web service. Data collection and storage are anonymous. If there is a personal reference, the data will be deleted immediately, unless there are statutory retention obligations. In any case, the data will be deleted after the retention period has expired.

Right to Object and Erasure

You can prevent the collection and transmission of personal data to Google (in particular your IP address) and the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser, or activating your browser's "Do Not Track" setting. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. Google's security and privacy policies can be found at https://policies.google.com/privacy.

Use of Google Fonts

We use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/ on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. You can find the Swiss list of countries at the following link: https://www.edoeb.admin.ch/edoeb/en/home/data-protection/handel-und-wirtschaft/transborder-data-flows.html.

Personal data is also transmitted to the USA. For the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 of the General Data Protection Regulation (hereinafter: DPF - https://commission.europa.eu/document/
fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so the usual level of protection of the GDPR applies to the transmission.

We use the Google Fonts service to integrate attractive fonts on our website in order to show you a visually improved version of our website. The service can also be used on our website if other Google services are reloaded on our website that require Google Fonts to run. This is the case, for example, if our website uses Google services that require Google Fonts to execute.

For the processing itself, the service or we collect the following data: data about fonts, IP address of the page visitor, statistics about the use of fonts, and other data from Google services related to our website.

When the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the necessary data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services offered by Google. For this purpose, data may also be transmitted to the Google services Google APIs, Google Cloud, and Google Ads in accordance with the Google Privacy Policy. You can view the certification according to the EU-US Data Privacy Framework here https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active einsehen.

You can withdraw your consent at any time. Further information on withdrawing your consent can be found either with the consent itself or at the end of this Privacy Policy.Further information on handling the transmitted data can be found in the provider's privacy policy at https://policies.google.com/privacy.The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Use of YouTube

Type and Purpose of Processing

On some of our websites, we embed YouTube videos and Facebook/Instagram links. The operators of the corresponding plugins are YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube") and Facebook Inc., Menlo Park, California. When you visit a page with the YouTube plugin, a connection to the YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behavior.Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's privacy policies, where you will also find further information about your rights and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield.

Legal Basis

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent.

Recipient

Accessing YouTube automatically establishes a connection to Google.

Storage Duration and Withdrawal of Consent

Anyone who has deactivated the storage of cookies for the Google ad program does not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/en/policies/privacy/

Transfer to a Third Country

Google processes your data in the USA and has submitted to the EU-US Privacy Shield.

Mandatory or Required Provision

The provision of your personal data is voluntary and is based solely on your consent. Preventing access may lead to functional restrictions on the website.

Integration of External Web Services and Processing of Data Outside the EU

On our website, we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside Switzerland and the EU. You can prevent this by installing a corresponding browser plugin or deactivating the execution of scripts in your browser. This can lead to functional restrictions on the websites you visit.

Use of Webflow

We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter: Webflow). When you visit our website, Webflow collects various log files including your IP addresses.

Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the display of the page, to provide certain website functions, and to ensure security (necessary cookies).Details can be found in Webflow's privacy policy: [EU & Swiss Privacy Policy | Webflow].

The use of Webflow is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in our website being displayed as reliably as possible. If a corresponding consent has been obtained, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG (German Telecommunications-Telemedia Data Protection Act), provided that the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: [EU & Swiss Privacy Policy | Webflow].

Use of Cloudflare

We use the Cloudflare service provided by Cloudflare, Inc., 101 Townsend St, 94107 San Francisco, United States, Email: support@cloudflare.com, Website: https://www.cloudflare.com/ on our website. Your personal data is transferred to so-called unsafe third countries. In doing so, we have bound the participating partners with appropriate foundations to comply with the data protection laws applicable in Switzerland (usually EU Standard Contractual Clauses) pursuant to Art. 6 para. 2 lit. a FADP. You have given your consent to this or there is a direct connection between the state and the conclusion of the contract.

Personal data is also transmitted to the USA. Regarding the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 of the General Data Protection Regulation (hereinafter: DPF). The operator of the service is certified under the DPF, so the usual level of protection of the GDPR applies to the transmission.

The legal basis for the transfer of personal data is our legitimate interest in processing pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.

Cloudflare is a so-called Content Delivery Network, which, in addition to distributing the website over several servers, also offers security functions. Cloudflare also acts as a reverse proxy for our website.You can view the certification according to the EU-US Data Privacy Framework here.

With regard to processing, you have the right to object pursuant to Art. 21 GDPR. Further information can be found at the end of this Privacy Policy.Further information on handling the transmitted data can be found in the provider's privacy policy at https://www.cloudflare.com/privacypolicy/.

Use of Hotjar

We use Hotjar to better understand our users' needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users' experience (e.g., how much time they spend on which pages, which links they click, what users like and don't like, etc.) and enables us to build and maintain our service with user feedback.

Hotjar uses cookies and other technologies to collect data on our users' behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.For further details, please see the 'about Hotjar' section of Hotjar's support site: [About Hotjar].

Use of Vimeo

We use the Vimeo service provided by Vimeo, Inc., 555 West 18th Street, 10011 New York, United States, Email: Privacy@vimeo.com, Website: http://www.vimeo.com/ on our website. Your personal data is transferred to so-called unsafe third countries. In doing so, we have bound the participating partners with appropriate foundations to comply with the data protection laws applicable in Switzerland (usually EU Standard Contractual Clauses) pursuant to Art. 6 para. 2 lit. a FADP. You have given your consent to this or there is a direct connection between the state and the conclusion of the contract.

From the EU's perspective, data processing takes place in a third country for which there is no adequacy decision by the EU Commission. Therefore, the usual level of protection of the GDPR cannot be guaranteed for the transmission, as it cannot be ruled out that authorities in the third country, for example, may access the collected data.

You can withdraw your consent at any time. Further information on withdrawing your consent can be found either with the consent itself or at the end of this Privacy Policy.Further information on handling the transmitted data can be found in the provider's privacy policy at https://vimeo.com/privacy.The provider also offers an opt-out option at https://vimeo.com/privacy.

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

Right to Data Portability

According to Article 20 of the General Data Protection Regulation, you have a right to the transmission of personal data concerning you. We will provide the data in a structured, commonly used, and machine-readable format. The data can be transmitted either to you or to a controller designated by you.

Upon request, we will provide you with the following data:

Data collected on the basis of consent (Art. 13 para. 1 FADP and Art. 6 para. 1 lit. a GDPR);
Data that we received from you in the context of existing contracts (Art. 13 para. 2 lit. a FADP as well as Art. 6 para. 1 lit. b GDPR and Art. 9 para. 2 lit. a GDPR);
Data processed as part of an automated process.

We will transmit the personal data directly to a controller of your choice, as far as this is technically feasible. Please note that we may not transmit data that conflicts with the overriding interests of third parties, or only to a limited extent, in accordance with Article 9 (1) b of the FADP and Article 20 (4) of the GDPR.

Changes to Our Privacy Policy

We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.

Questions to the Data Protection Officer

If you have any questions about data protection, please send us an email: info@campmontana.ch